ARC Infrastructure as Code (IaC)¶
Originally, the primary purpose of ARC IaC was to streamline the process for deploying ARC API in AWS and Kubernetes based environments. Since ARC API is platform agnostic and runs in Docker and Node.js, it means that the IaC we produced supports most of the modern cloud ecosystem.
The reference architectures are abstractions of commonly used patterns that implement cloud best practices. For AWS, this means we aim to achieve compliance with the AWS Well-Architected Framework. ARC IaC is a collection of high level Terraform modules that we use to implement the reference architectures. The ARC Terraform modules offer streamlined and standardized interfaces to manage cross-cutting concerns such as networking, security, and observability. These modules follow opinionated patterns designed to reduce inter-module dependencies and improve composability. By developing and maintaining our own ARC-aligned modules, we retain full control over the infrastructure-as-code (IaC) lifecycle — enabling faster iterations, proactive updates, and uniform infrastructure standards across teams and deployments
The combination of our ARC reference architecture mono repos and ARC IaC modules provides a solid foundation for projects of all sizes. For smaller initiatives and POCs, this setup allows teams to quickly bootstrap a production-grade platform with minimal overhead. All infrastructure code is scanned using Snyk IaC and SonarCloud to ensure alignment with security best practices.
Reference Architectures¶
- AWS Account Baseline
- Control Tower and AFT
- Control Tower and LZA
- ARC IaC and LZA
- MAP Migrations
- Network Baseline
- ECS Platform Baseline
- EKS Platform Baseline
- Lambda Platform Baseline
- Windows Basic Platform Baseline
- Windows Enterprise Platform Baseline
Terraform Modules¶
- AWS
- Control Tower AFT
- Environment Bootstrap
- Network
- RDBMS
- ECS
- EKS
- Tags
- OpenSearch
- TypeScript Lambda Boilerplate
- Cloud Custodian
- CloudFront
- HealthCheck
- Workspaces
- KMS
- WAF
- VPN
- Postgres-Management
- Security
- Billing
- EKS Addon
- GitHub Runner
- DocumentDB
- GitHub IAM
- S3
- Cache
- Synthetic Monitoring
- Backup
- CICD
- EC2
- Security Group
- Rabbit MQ
- Load Balancer
- Observability Stack
- EC2 Autoscale Group
- Bedrock
- DMS
- Transit Gateway
- Kinesis
- Common Data
- Cloud Native