05. File List and Directory Structure

Directory and file structure of the MILU2 Infrastructure project.

Project Root

milu2_infra-main/
├── Makefile                    # 🎯 Main entry point - all commands here
├── docker-compose.yml          # Dev container definition
├── ecs_exec.sh                 # ECS exec helper script
├── README.md                   # terraform-docs placeholder
├── .docker/                    # Docker build files
├── ecs/                        # Local artifact dump (gitignored)
├── shell/                      # Helper shell scripts
├── tofu/                       # 🏗️ Infrastructure code (main)
└── docs/                       # 📚 Documentation (this folder)

Shell Scripts (`shell/`)

shell/
├── get_thumbprint.sh           # Get GitHub OIDC thumbprint (openssl)
├── get_vars.sh                 # Download env vars from S3
└── plan_with_summary.sh        # Plan with colored diff summary

Script	Usage	Purpose
get_thumbprint.sh	Called during apply	SHA1 OIDC thumbprint
get_vars.sh	sh shell/get_vars.sh <env>	Fetch common_vars.hcl + env_vars.hcl
plan_with_summary.sh	Via make plan-*	Colorized plan output

Tofu Directory Structure

tofu/
├── envs/                       # 🌍 Environment configurations
│   ├── config.hcl              # Global backend + provider config
│   ├── common_vars.hcl         # Shared variables (from S3)
│   │
│   ├── shared/                 # 📦 Shared stacks (env-independent)
│   │   ├── github_provider/    # GitHub OIDC provider
│   │   ├── cicd_infra/         # Infra deploy role
│   │   └── cicd_app_deploy/    # App deploy role
│   │
│   └── test/                   # 🧪 Test environment
│       ├── env_vars.hcl        # Test-specific variables (from S3)
│       └── core/               # Main infrastructure stack
│           └── terragrunt.hcl  # Inputs for core module
│
└── modules/                    # 🧱 Terraform modules
    ├── github_provider/        # OIDC provider module
    ├── cicd/                   # Infra CI/CD role module
    ├── cicd_app_deploy/        # App CI/CD role module
    └── core/                   # 🏗️ Main infrastructure module
        ├── core.tf             # Module composition
        ├── _variables.tf       # Input variables
        ├── _outputs.tf         # Output values
        └── <sub-modules>/      # Individual components

Core Sub-Modules Detail

tofu/modules/core/
├── core.tf                     # 🎯 Orchestrates all sub-modules
├── _variables.tf               # Inputs from terragrunt
├── _outputs.tf                 # Outputs to other modules/stacks
│
├── security/                   # 🔐 KMS + WAF
│   ├── _variables.tf
│   ├── _outputs.tf
│   ├── kms.tf                  # Multi-region KMS keys
│   ├── waf.tf                  # WAFv2 ACLs + rules
│   ├── log_group.tf            # WAF log groups
│   └── provider.tf             # Virginia provider alias
│
├── network/                    # 🌐 VPC + networking
│   ├── _variables.tf
│   ├── _outputs.tf
│   ├── vpc.tf                  # VPC + subnets + IGW
│   ├── nat_gateway.tf          # NAT gateway
│   ├── security_group.tf       # 14 security groups
│   ├── endpoint.tf             # VPC endpoints (9)
│   ├── log_group.tf            # VPC flow logs
│   └── iam.tf                  # Flow log IAM role
│
├── bastion/                    # 🖥️ Bastion host
│   ├── _variable.tf
│   ├── _outputs.tf
│   ├── ec2.tf                  # EC2 instance + EIP
│   └── keypair.tf              # SSH key pair
│
├── lb/                         # ⚖️ Load balancers
│   ├── _variable.tf
│   ├── _outputs.tf
│   ├── alb.tf                  # Internal ALB + target groups
│   ├── nlb.tf                  # Internal NLB for game nodes
│   └── acm.tf                  # ACM certificates (TODO)
│
├── cdn/                        # 🌍 CloudFront
│   ├── _variable.tf
│   ├── _outputs.tf
│   ├── cloudfront.tf           # 4 distributions
│   ├── acm.tf                  # CloudFront ACM (Virginia)
│   ├── log_group.tf            # CDN logs
│   └── provider.tf             # Virginia provider
│
├── storage/                    # 📦 S3 buckets
│   ├── _variable.tf
│   ├── _outputs.tf
│   ├── s3.tf                   # 7 buckets + lifecycle
│   ├── iam.tf                  # Bucket policies
│   └── provider.tf             # Virginia provider
│
├── rds/                        # 🗄️ Aurora MySQL
│   ├── _variable.tf
│   ├── _outputs.tf
│   ├── rds.tf                  # Aurora cluster + instances
│   ├── log_group.tf            # RDS log groups
│   └── iam.tf                  # RDS monitoring role
│
├── elasticache/                # ⚡ ElastiCache Valkey
│   ├── _variable.tf
│   ├── _outputs.tf
│   ├── elasticache.tf          # Replication group
│   └── log_group.tf            # Cache logs
│
├── memorydb/                   # 💾 MemoryDB Valkey
│   ├── _variable.tf
│   ├── _outputs.tf
│   └── memorydb.tf             # Cluster + ACL
│
├── documentdb/                 # 📄 DocumentDB
│   ├── _variable.tf
│   ├── _outputs.tf
│   ├── documentdb.tf           # Cluster + instances
│   └── log_group.tf            # DocDB logs
│
├── global_accelerator/         # 🚀 Global Accelerator
│   ├── _variable.tf
│   ├── _outputs.tf
│   └── accelerator.tf          # Custom routing accelerator
│
├── lambda/                     # λ Lambda functions
│   ├── _variable.tf
│   ├── _outputs.tf
│   ├── lambda_image.tf         # Image/video validators
│   ├── lambda_cache.tf         # Cache invalidator
│   ├── lambda_ga.tf            # GA port resolver
│   ├── lambda_scale.tf         # Node service scaler
│   ├── ecr.tf                  # Lambda ECR repository
│   ├── sqs.tf                  # Lambda trigger queues
│   ├── sns.tf                  # Rekognition topic
│   ├── log_group.tf            # Lambda logs
│   └── iam.tf                  # Lambda execution roles
│
└── app/                        # 📱 ECS applications
    ├── _variable.tf
    ├── _outputs.tf
    ├── ecs_fargate.tf          # Fargate cluster + services
    ├── ecs_fargate_task.tf     # Fargate task definitions
    ├── ecs_fargate_autoscale.tf # Auto scaling policies
    ├── ecs_ec2.tf              # EC2 cluster + capacity
    ├── ecs_ec2_task.tf         # Node task definitions
    ├── ecs_ec2_instance.tf     # ASG + launch template
    ├── ecr.tf                  # Application ECR repos
    ├── codedeploy.tf           # CodeDeploy app + groups
    ├── service_discovery.tf    # Cloud Map namespace
    ├── log_group.tf            # ECS log groups
    └── iam.tf                  # ECS/CodeDeploy IAM roles

File Naming Conventions

Pattern	Purpose	Example
_variables.tf	Input variables	core/_variables.tf
_outputs.tf	Output values	core/_outputs.tf
_variable.tf	Sub-module inputs	rds/_variable.tf
*.tf	Resource definitions	vpc.tf, rds.tf
provider.tf	Provider configuration	security/provider.tf
iam.tf	IAM resources	app/iam.tf
log_group.tf	CloudWatch log groups	rds/log_group.tf

Terragrunt Files

File	Location	Purpose
config.hcl	envs/	Global backend + provider
common_vars.hcl	envs/	Shared app_name, region
env_vars.hcl	envs/<env>/	Environment-specific vars
terragrunt.hcl	envs/<env>/core/	Stack configuration
terragrunt.hcl	envs/shared/*/	Shared stack configs

Docker Files

.docker/
└── aws/
    └── Dockerfile              # Dev container image
        # Base: amazon/aws-cli:2.33.31
        # + OpenTofu 1.11.5
        # + Terragrunt 0.99.4
        # + crane (container tool)
        # + SSM plugin
        # + MariaDB client

Quick File Location Guide

Looking for...	Location
All Make commands	Makefile
Environment variables	envs/<env>/env_vars.hcl
Core module inputs	envs/<env>/core/terragrunt.hcl
Security groups	modules/core/network/security_group.tf
ECS services	modules/core/app/ecs_fargate.tf
RDS configuration	modules/core/rds/rds.tf
Lambda functions	modules/core/lambda/lambda_*.tf
IAM roles	modules/core/app/iam.tf
Backend config	envs/config.hcl

05. File List and Directory Structure

Project Root

Shell Scripts (shell/)

Tofu Directory Structure

Core Sub-Modules Detail

File Naming Conventions

Terragrunt Files

Docker Files

Quick File Location Guide

Shell Scripts (`shell/`)