AWS Secure Foundations

Five small, CI-validated Terraform examples that each teach the why as much as the how: storing secrets and scoping access to a single secret ARN, least-privilege IAM roles with no wildcards, connecting CI/CD to GitHub via CodeConnections with zero long-lived tokens, customer-managed KMS keys with tight key policies, and an account security baseline that turns on GuardDuty, Security Hub, AWS Config, IAM Access Analyzer, and CloudTrail in one apply. No plaintext secrets, no static access keys, no wildcard permissions.