Revise README for TCS Cloud Foundations details#24
Merged
Conversation
Updated README to provide detailed information about TCS Cloud Foundations Reference Architecture, including design principles, components, and getting started instructions.
There was a problem hiding this comment.
Pull request overview
Updates the repository’s root documentation to describe the TCS Cloud Foundations Reference Architecture, positioning this repo as the entry point for the AWS account baseline and pointing to the implementation details in tcs-cloud-foundations.
Changes:
- Replaces the minimal root README with a detailed architecture overview and design principles.
- Adds a Mermaid diagram illustrating governance, baseline layers, and GitOps/workload provisioning flow.
- Adds a components table and “Getting Started” pointers to the
tcs-cloud-foundationsrepository.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+13
to
+27
| subgraph AccountBaseline["Per-Account Baseline"] | ||
| SB["Security Baseline\n(CloudTrail, GuardDuty,\nConfig, Security Hub)"] | ||
| NF["Network Foundation\n(Hub-Spoke VPC, TGW,\nFlow Logs)"] | ||
| IAM["IAM Baseline\n(Roles, OIDC,\nBreakGlass)"] | ||
| end | ||
|
|
||
| AV -->|"provisions"| AccountBaseline | ||
|
|
||
| subgraph GitOps["GitOps / Provisioning"] | ||
| TF["Terraform Modules\n(Account-Level IaC)"] | ||
| ARGO["ArgoCD\n(GitOps Controller)"] | ||
| XP["Crossplane\n(Workload Resources)"] | ||
| TF -->|"manages"| AccountBaseline | ||
| ARGO -->|"drives"| XP | ||
| end |
| | AWS VPC Module | Network foundation: public/private subnets, NAT, flow logs, TCS tagging | [tcs-cloud-foundations](https://github.com/tata-consulting/tcs-cloud-foundations/tree/main/modules/vpc) | Available | | ||
| | IAM Baseline Module | Identity and access: ReadOnly, Developer, PlatformEngineer, CICD, BreakGlass roles with MFA and OIDC | [tcs-cloud-foundations](https://github.com/tata-consulting/tcs-cloud-foundations/tree/main/modules/iam-baseline) | Available | | ||
| | Crossplane PostgresDatabase | Managed RDS provisioning via Kubernetes claim interface | [tcs-cloud-foundations](https://github.com/tata-consulting/tcs-cloud-foundations/tree/main/compositions/postgresql) | In Review | | ||
| | Security Baseline | CloudTrail, GuardDuty, AWS Config CIS rules, Security Hub aggregation | tcs-cloud-foundations | Planned | |
|
|
||
| This document describes the repeatable AWS account baseline that TCS deploys as the foundation for all client cloud engagements. It covers account governance, network topology, identity and access, security controls, and the provisioning layer that ties them together. | ||
|
|
||
| The architecture is designed to be modular - clients with existing VPC setups or an established IAM structure can adopt individual layers without requiring the full stack. Each component is independently deployable and documented in the [tcs-cloud-foundations](https://github.com/tata-consulting/tcs-cloud-foundations) repository. |
Comment on lines
+1
to
+5
| # TCS Cloud Foundations Reference Architecture | ||
|
|
||
| This document describes the repeatable AWS account baseline that TCS deploys as the foundation for all client cloud engagements. It covers account governance, network topology, identity and access, security controls, and the provisioning layer that ties them together. | ||
|
|
||
| The architecture is designed to be modular - clients with existing VPC setups or an established IAM structure can adopt individual layers without requiring the full stack. Each component is independently deployable and documented in the [tcs-cloud-foundations](https://github.com/tata-consulting/tcs-cloud-foundations) repository. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated README to provide detailed information about TCS Cloud Foundations Reference Architecture, including design principles, components, and getting started instructions.