Terraform Module: VPC for AWS — Multi-AZ Landing-Zone Baseline (3 subnet tiers, Flow Logs, VPC Endpoints, EKS & RDS ready)

An opinionated AWS VPC module: 3 subnet tiers across N AZs, optional NAT (per-AZ or single), Gateway + Interface VPC endpoints, VPC Flow Logs to CloudWatch or S3 with a least-privilege IAM role, an emptied default security group, and governance tags enforced by type.

Inputs

• name
• cidr_block
• az_count
• subnet_newbits
• enable_public_subnets
• map_public_ip_on_launch
• enable_database_subnets
• database_route_to_nat
• enable_nat_gateway
• single_nat_gateway
• enable_dns_hostnames
• instance_tenancy
• enable_network_address_usage_metrics
• lock_default_security_group
• enable_flow_logs
• flow_log_destination_type
• flow_log_s3_bucket_arn
• flow_log_traffic_type
• flow_log_retention_days
• flow_log_kms_key_arn

Use

module "x" {
  source = "./terraform-module-vpc-aws-landing-zone"
}