Skip to main content
Archived devops

ClipCrunch Infrastructure

12-module Terraform IaC for a full AWS SaaS deployment — CloudFront, Cognito, S3, OIDC CI/CD, budget alerts, and multi-environment support.

Terraform AWS CloudFront Cognito S3 Route53 IAM OIDC GitHub Actions

Links

Source Code

Timeline

Started
Apr 2026
Completed
Jul 2026
12
Terraform Modules
10+
AWS Services
Cognito + OIDC
Auth
$100/mo alerts
Budget

Overview

Complete Infrastructure as Code for deploying ClipCrunch as a SaaS product on AWS:

Terraform Modules:

  1. VPC + Networking
  2. EC2 (application server)
  3. S3 (static assets + processed videos)
  4. CloudFront (CDN distribution)
  5. Route53 (DNS + hosted zone)
  6. ACM (TLS certificates)
  7. Cognito (user authentication + Google OAuth)
  8. IAM (roles, policies, OIDC provider)
  9. SES (transactional email)
  10. CloudWatch (logs + monitoring)
  11. Budget (cost alerts at $100/mo)
  12. GitHub OIDC (CI/CD role assumption — no static credentials)

Demonstrates enterprise-level AWS architecture with security best practices: least-privilege IAM, OIDC federation for CI/CD (zero static credentials), cost management, and full reproducibility via Terraform state.