terraform and ansible scripts for provision PSI-DSS Compliant Infrastructure

Requirements

terraform >= 0.12
terragrunt >= 0.12
ansible
aws_access_key_id & aws_secret_access_key

Infrastructure Components

EC2 Instances:

bastion for ssh access to other components
public-nginx frontend server
app backend application server

RDS:

RDS DataBase for application pci

AWS Elasticsearch Service

Elasticsearch Domain for Log Collecting

AWS GuardDuty

AWS GuardDuty as IPS/IDS

terragrunt example

cd terraform/10-common/
terragrunt apply

ansible example

ansible-playbook -i inventory/ playbook.yml  -D --key-file ~/.ssh/private_key.pem