infra-as-code

Infra as Code - Cloud Infrastructure Generator

Overview

Generates reproducible, version-controlled cloud infrastructure. "ClickOps is technical debt."

---

1. When to Apply

Trigger	Behavior
New cloud environment setup	Full infrastructure template
"terraform", "IaC"	Provider-specific IaC generation
Scaling beyond PaaS (Vercel/Railway)	Migration-ready templates

---

2. Startup Infrastructure Patterns

Pattern A: Minimal (Pre-PMF)

VPC → Public Subnet → ECS Fargate (single service)
                    → RDS PostgreSQL (single instance)
                    → S3 (static assets)
Cost: ~$50-150/month

Pattern B: Standard (Post-PMF)

VPC → Public Subnet  → ALB → ECS Fargate (auto-scaling)
    → Private Subnet → RDS PostgreSQL (multi-AZ)
                     → ElastiCache Redis
                     → S3 + CloudFront (CDN)
Cost: ~$300-800/month

Pattern C: Scale (Series A+)

VPC → Public  → ALB → ECS/EKS (multi-service)
    → Private → RDS (read replicas)
              → ElastiCache (cluster)
              → OpenSearch
              → SQS/SNS (async)
    → Isolated → Bastion host
Cost: ~$1,000-5,000/month

---

3. Terraform Templates

AWS Minimal Setup

# main.tf
terraform {
  required_providers {
    aws = { source = "hashicorp/aws", version = "~> 5.0" }
  }
  backend "s3" {
    bucket = "myapp-terraform-state"
    key    = "prod/terraform.tfstate"
    region = "ap-northeast-2"
  }
}

provider "aws" {
  region = var.region
}

module "vpc" {
  source  = "terraform-aws-modules/vpc/aws"
  version = "~> 5.0"
  name    = "${var.app_name}-vpc"
  cidr    = "10.0.0.0/16"
  azs             = ["${var.region}a", "${var.region}b"]
  public_subnets  = ["10.0.1.0/24", "10.0.2.0/24"]
  private_subnets = ["10.0.11.0/24", "10.0.12.0/24"]
  enable_nat_gateway = true
  single_nat_gateway = true  # Cost saving for startups
}

Environment Variables

# variables.tf
variable "app_name"    { default = "myapp" }
variable "region"      { default = "ap-northeast-2" }
variable "environment" { default = "production" }
variable "db_password" { sensitive = true }