Infrastructure that was clicked together in the console cannot be reviewed, cannot be rebuilt, and cannot be explained to an auditor or a new hire. Every change is a small act of faith.

I build the Terraform foundation everything else sits on. Networking, IAM, remote state with locking, and a clean separation between environments, laid out as a module library your team can extend instead of a single file nobody wants to touch.

The structure is the deliverable. I use a layout that separates reusable modules from per environment configuration, so adding a fourth environment later is a directory and a variables file rather than a rewrite. Plan runs on pull request, apply runs on merge, and nobody applies from a laptop.

WHAT YOU RECEIVE The Terraform repository with modules and environments, remote state configured with locking, a CI workflow for plan and apply, an architecture diagram, and a README that explains how to add a resource without breaking anything.

SCOPE LEVELS - Base: $2,500, 8 days. One account, one environment, VPC and networking, IAM, remote state with locking, documentation and diagrams. - Extended: $3,500, 12 days. Three environments, a reusable module library, and Terraform plan and apply in CI. - Full: $4,800, 18 days. Multi account with AWS Organizations, shared services, Service Control Policies, and centralized logging with an audit trail.

Commonly added: importing existing infrastructure into state, Terragrunt or workspace restructure of existing code, Atlantis or Spacelift automation, a 90 minute Terraform onboarding session for your team.

We agree the account structure, network layout and environment strategy in writing before any code exists. Changing that later is expensive, so it gets the time. I apply to non production first, and we run the production apply together.

Five years of Terraform and Ansible in production, including regulated financial infrastructure where every change had to be reviewable.

TO GET STARTED message me with your starting point (greenfield, console built and needs importing, or existing Terraform that has gone messy), how many accounts and environments you need, and any data residency constraints.