docs: remove one-off import runbook from README

Author: ThomasK33

terraform/README.md

@@ -147,126 +147,6 @@ terraform plan
 terraform apply
 ```
 
-## Importing existing AWS resources
-
-Use this flow when your remote state is empty but AWS infrastructure already exists.
-
-- Do **not** run `terraform apply` until imports are complete and `terraform plan` is clean.
-- Ensure Terraform variables match the values used when the infrastructure was originally created.
-
-<details>
-<summary>Discover resource IDs with AWS CLI</summary>
-
-```bash
-REGION=eu-central-1
-CLUSTER=sandbox-eks
-
-# VPC
-aws ec2 describe-vpcs --region "$REGION" \
-  --filters "Name=tag:Name,Values=${CLUSTER}-vpc" \
-  --query 'Vpcs[0].VpcId' --output text
-
-# Internet Gateway
-aws ec2 describe-internet-gateways --region "$REGION" \
-  --filters "Name=tag:Name,Values=${CLUSTER}-igw" \
-  --query 'InternetGateways[0].InternetGatewayId' --output text
-
-# Subnets (public + private)
-aws ec2 describe-subnets --region "$REGION" \
-  --filters "Name=tag:Name,Values=${CLUSTER}-public-*" \
-  --query 'Subnets[].{id:SubnetId,az:AvailabilityZone,name:Tags[?Key==`Name`]|[0].Value}' --output table
-
-aws ec2 describe-subnets --region "$REGION" \
-  --filters "Name=tag:Name,Values=${CLUSTER}-private-*" \
-  --query 'Subnets[].{id:SubnetId,az:AvailabilityZone,name:Tags[?Key==`Name`]|[0].Value}' --output table
-
-# EIP, NAT Gateway, Route Tables
-aws ec2 describe-addresses --region "$REGION" \
-  --filters "Name=tag:Name,Values=${CLUSTER}-nat-eip" \
-  --query 'Addresses[0].AllocationId' --output text
-
-aws ec2 describe-nat-gateways --region "$REGION" \
-  --filter "Name=tag:Name,Values=${CLUSTER}-nat" \
-  --query 'NatGateways[0].NatGatewayId' --output text
-
-aws ec2 describe-route-tables --region "$REGION" \
-  --filters "Name=tag:Name,Values=${CLUSTER}-public-rt" \
-  --query 'RouteTables[0].RouteTableId' --output text
-
-aws ec2 describe-route-tables --region "$REGION" \
-  --filters "Name=tag:Name,Values=${CLUSTER}-private-rt" \
-  --query 'RouteTables[0].RouteTableId' --output text
-
-# EKS cluster, node groups, addons
-aws eks describe-cluster --region "$REGION" --name "$CLUSTER" \
-  --query 'cluster.name' --output text
-
-aws eks list-nodegroups --region "$REGION" --cluster-name "$CLUSTER"
-aws eks list-addons --region "$REGION" --cluster-name "$CLUSTER"
-
-# IAM roles
-aws iam get-role --role-name "${CLUSTER}-cluster-role" --query 'Role.RoleName' --output text
-aws iam get-role --role-name "${CLUSTER}-node-role" --query 'Role.RoleName' --output text
-```
-
-</details>
-
-<details>
-<summary>Import commands by Terraform file</summary>
-
-### Networking (`vpc.tf`)
-
-```bash
-terraform import aws_vpc.this <vpc-id>
-terraform import aws_internet_gateway.this <igw-id>
-terraform import 'aws_subnet.public[0]' <subnet-id>
-terraform import 'aws_subnet.public[1]' <subnet-id>
-terraform import 'aws_subnet.private[0]' <subnet-id>
-terraform import 'aws_subnet.private[1]' <subnet-id>
-terraform import aws_eip.nat <eipalloc-id>
-terraform import aws_nat_gateway.this <nat-id>
-terraform import aws_route_table.public <rtb-id>
-terraform import aws_route_table.private <rtb-id>
-terraform import 'aws_route_table_association.public[0]' <subnet-id>/<rtb-id>
-terraform import 'aws_route_table_association.public[1]' <subnet-id>/<rtb-id>
-terraform import 'aws_route_table_association.private[0]' <subnet-id>/<rtb-id>
-terraform import 'aws_route_table_association.private[1]' <subnet-id>/<rtb-id>
-```
-
-### IAM (`iam.tf`)
-
-```bash
-terraform import aws_iam_role.eks_cluster sandbox-eks-cluster-role
-terraform import aws_iam_role.node_group sandbox-eks-node-role
-terraform import aws_iam_role_policy_attachment.eks_cluster_policy \
-  'sandbox-eks-cluster-role/arn:aws:iam::aws:policy/AmazonEKSClusterPolicy'
-terraform import aws_iam_role_policy_attachment.node_group_worker_policy \
-  'sandbox-eks-node-role/arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy'
-terraform import aws_iam_role_policy_attachment.node_group_cni_policy \
-  'sandbox-eks-node-role/arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy'
-terraform import aws_iam_role_policy_attachment.node_group_ecr_readonly \
-  'sandbox-eks-node-role/arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly'
-```
-
-### EKS (`eks.tf`)
-
-```bash
-terraform import aws_eks_cluster.this sandbox-eks
-terraform import aws_eks_node_group.this sandbox-eks:sandbox-eks-nodes
-terraform import aws_eks_addon.coredns sandbox-eks:coredns
-terraform import aws_eks_addon.kube_proxy sandbox-eks:kube-proxy
-terraform import aws_eks_addon.vpc_cni sandbox-eks:vpc-cni
-```
-
-</details>
-
-After importing, run `terraform plan` and confirm the result is ideally a no-op.
-
-Common post-import issues:
-
-- Subnet index/AZ mismatch can cause Terraform to propose subnet recreation; fix by swapping imported subnet indices (`public[0]`/`public[1]`, `private[0]`/`private[1]`) to match Terraform's AZ ordering.
-- EKS add-on configuration drift may still appear depending on AWS-managed defaults; review and reconcile intentionally.
-
 ## Configure kubectl
 
 After `terraform apply`, run the command from the Terraform output: