Skip to content

ENTERPRISE DIGITAL-SDLC PLATFORM

AWSTerraformAFTMulti-AccountEnterprise

Digital Software Development Lifecycle (SDLC) multi-account infrastructure for a US enterprise pharmaceutical client, managing 40+ AWS accounts across the organization.

Architecture

  • AWS Control Tower + AFT for automated provisioning and governance of 40+ accounts
  • Specialized account topology:
    • Management — organization root and billing
    • Networking — Transit Gateway, VPC peering, DNS
    • Logging — centralized CloudWatch and CloudTrail log aggregation
    • Artifacts — shared container registries and build artifacts
    • Backup — cross-account AWS Backup vaults
    • Audit — Security Hub and compliance findings
  • 20+ reusable Terraform modules covering networking, compute, data, security, observability, and disaster recovery
  • CI/CD via GitHub Actions with OIDC federation — no long-lived AWS credentials, roles assumed per-account via short-lived tokens
  • AWS Backup with cross-account vaulting for centralized backup management and disaster recovery
  • SOC2 compliance controls enforced through SCPs, Config rules, and Security Hub standards
  • Pre-commit hooks for Terraform validation — terraform fmt, terraform validate, tflint, and checkov run before every commit

Key Outcomes

  • Scalable multi-account strategy supporting rapid team onboarding with self-service account provisioning
  • Consistent security and SOC2 compliance posture enforced across all 40+ accounts
  • Reusable module library reducing new infrastructure provisioning to composition of tested building blocks
  • Cross-account backup strategy ensuring disaster recovery readiness
  • Zero long-lived credentials through OIDC federation with GitHub Actions