Add Terraform infrastructure scaffolding

[Copilot]

Establishes Terraform project structure with GitHub Actions automation, dev environment configuration, and reusable VPC module.

Structure

• .github/ - CI/CD workflow for terraform fmt/validate/plan/apply on PRs and merges, CODEOWNERS, PR template
• environments/dev/ - Complete AWS configuration with S3 backend, VPC module integration, and environment-specific variables (staging/prod dirs reserved)
• modules/vpc/ - Multi-AZ VPC with public/private subnets, NAT gateways, and routing
• Root - Terraform .gitignore and README with backend setup instructions

Configuration

GitHub Actions workflow matrix limited to dev environment only. Staging/prod can be added by:

1. Creating terraform files matching dev structure
2. Updating workflow matrix to include additional environments

S3 backend requires manual bootstrap (documented in README):

aws s3api create-bucket --bucket solvoid-terraform-state-dev --region us-east-1
aws dynamodb create-table --table-name solvoid-terraform-locks-dev ...

Repository secrets needed: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• checkpoint-api.hashicorp.com
  • Triggering command: /usr/local/bin/terraform terraform version (dns block)
  • Triggering command: /usr/local/bin/terraform terraform init -backend=false (dns block)
  • Triggering command: /usr/local/bin/terraform terraform validate (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

terraform-infra/
├── .github/
│ ├── workflows/
│ │ └── terraform.yml
│ ├── CODEOWNERS
│ └── pull_request_template.md
├── environments/
│ ├── dev/
│ │ ├── main.tf
│ │ ├── variables.tf
│ │ ├── outputs.tf
│ │ └── backend.tf
│ ├── staging/
│ └── prod/
├── modules/
│ └── vpc/
├── .gitignore
└── README.md

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[paseka10jaroslav-coder]

Settings → Environments → New environment

[paseka10jaroslav-coder]

Settings → Environments → New environment

Secrets: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY

[paseka10jaroslav-coder]

Secrets: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY

[paseka10jaroslav-coder]

jobs:
plan:
runs-on: ubuntu-latest
permissions:
id-token: write
contents: read
steps:
- uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: arn:aws:iam::123456789:role/github-actions-terraform
aws-region: eu-central-1