Skip to content

Add 001-eks-secure staging environment with CMMC/CIS/GDPR-compliant VPC #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
Copilot wants to merge 3 commits into
base: main
Choose a base branch
from
Draft

Add 001-eks-secure staging environment with CMMC/CIS/GDPR-compliant VPC #5

Copilot wants to merge 3 commits into from

Conversation

Copy link
Contributor

Copilot AI commented Dec 10, 2025 •
edited
Loading

Creates secure VPC infrastructure for single-region EKS cluster meeting CMMC, CIS, and GDPR compliance requirements.

Network Architecture

  • VPC: 10.100.0.0/16 in us-east-1
  • 3 AZs: High availability across us-east-1a/b/c
  • Public subnets: 10.100.1-3.0/24 for load balancers
  • Private subnets: 10.100.11-13.0/24 for EKS worker nodes
  • NAT Gateways: One per AZ for controlled outbound access

Compliance Implementation

CMMC/CIS: Network segmentation, controlled internet access via NAT, multi-AZ resilience, DNS support enabled

GDPR: Data classification tagging (gdpr-capable), single-region deployment for data residency, private subnet isolation for data processing

Structure

pulumi/environments/aws/staging/001-eks-secure/
├── Pulumi.yaml              # VPC config with compliance tags
├── Pulumi.staging.yaml      # Stack config
├── README.md                # Architecture and compliance docs
└── sdks/vpc/vpc-0.0.0.yaml  # Local component reference

Configuration uses existing VPC component at pulumi/components/aws/vpc@0.0.0 for local development. README includes future recommendations: VPC Flow Logs, VPC Endpoints, Network Firewall, KMS encryption.

Original prompt

On staging, create a new folder structure under staging calling it "001-eks-secure" and leverage the code in "components" to create the VPCs for a single region EKS that meets CMMC and CIS standards that can provide for GDPR data

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Copilot AI and others added 2 commits December 10, 2025 05:08
@j-monroe
Create 001-eks-secure staging environment with secure VPC configuration
9eb4a91 
Co-authored-by: j-monroe <576087+j-monroe@users.noreply.github.com>
@j-monroe
Add comprehensive README for 001-eks-secure environment
e909a98 
Co-authored-by: j-monroe <576087+j-monroe@users.noreply.github.com>
Copilot AI changed the title [WIP] Create folder structure for EKS secure VPCs Add 001-eks-secure staging environment with CMMC/CIS/GDPR-compliant VPC Dec 10, 2025
Copilot AI requested a review from j-monroe December 10, 2025 05:12
@github-actions
Copy link

github-actions bot commented Dec 10, 2025 •
edited
Loading

🍹 preview on eks-secure-vpc/organization/eks-secure-vpc/staging

Pulumi report 
Previewing update (staging):
+ pulumi:pulumi:Stack: (create)
[urn=urn:pulumi:staging::eks-secure-vpc::pulumi:pulumi:Stack::eks-secure-vpc-staging]
+ pulumi:providers:aws: (create)
    [urn=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::aws-provider]
    region                   : "us-east-1"
    skipCredentialsValidation: "false"
    skipRegionValidation     : "true"
    version                  : "7.9.1"
+ vpc:index:Vpc: (create)
    [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc::eks-secure-vpc]
@ previewing update....
    + aws:ec2/eip:Eip: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/eip:Eip::eks-secure-vpc-nat-eip-1]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        domain    : "vpc"
        region    : ""
        tags      : {
            Name                  : "eks-secure-vpc-nat-eip-1"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll   : {
            Name                  : "eks-secure-vpc-nat-eip-1"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
    + aws:ec2/vpc:Vpc: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/vpc:Vpc::eks-secure-vpc-vpc]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        cidrBlock         : "10.100.0.0/16"
        enableDnsHostnames: true
        enableDnsSupport  : true
        region            : ""
        tags              : {
            Name                  : "eks-secure-vpc"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll           : {
            Name                  : "eks-secure-vpc"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
    + aws:ec2/eip:Eip: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/eip:Eip::eks-secure-vpc-nat-eip-2]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        domain    : "vpc"
        region    : ""
        tags      : {
            Name                  : "eks-secure-vpc-nat-eip-2"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll   : {
            Name                  : "eks-secure-vpc-nat-eip-2"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
    + aws:ec2/eip:Eip: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/eip:Eip::eks-secure-vpc-nat-eip-3]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        domain    : "vpc"
        region    : ""
        tags      : {
            Name                  : "eks-secure-vpc-nat-eip-3"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll   : {
            Name                  : "eks-secure-vpc-nat-eip-3"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
    + aws:ec2/internetGateway:InternetGateway: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/internetGateway:InternetGateway::eks-secure-vpc-igw]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region    : ""
        tags      : {
            Name                  : "eks-secure-vpc-igw"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll   : {
            Name                  : "eks-secure-vpc-igw"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId     : [unknown]
    + aws:ec2/routeTable:RouteTable: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTable:RouteTable::eks-secure-vpc-public-rt]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region    : ""
        tags      : {
            Name                  : "eks-secure-vpc-public-rt"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll   : {
            Name                  : "eks-secure-vpc-public-rt"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId     : [unknown]
    + aws:ec2/routeTable:RouteTable: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTable:RouteTable::eks-secure-vpc-private-rt-2]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region    : ""
        tags      : {
            Name                  : "eks-secure-vpc-private-rt-2"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll   : {
            Name                  : "eks-secure-vpc-private-rt-2"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId     : [unknown]
    + aws:ec2/routeTable:RouteTable: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTable:RouteTable::eks-secure-vpc-private-rt-1]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region    : ""
        tags      : {
            Name                  : "eks-secure-vpc-private-rt-1"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll   : {
            Name                  : "eks-secure-vpc-private-rt-1"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId     : [unknown]
    + aws:ec2/securityGroup:SecurityGroup: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/securityGroup:SecurityGroup::eks-secure-vpc-default-sg]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        description        : "Default security group allowing all inbound and outbound traffic"
        egress             : [
            [0]: {
                cidrBlocks : [
                    [0]: "0.0.0.0/0"
                ]
                description: "Allow all outbound traffic"
                fromPort   : 0
                protocol   : "-1"
                self       : false
                toPort     : 0
            }
        ]
        ingress            : [
            [0]: {
                cidrBlocks : [
                    [0]: "0.0.0.0/0"
                ]
                description: "Allow all inbound traffic"
                fromPort   : 0
                protocol   : "-1"
                self       : false
                toPort     : 0
            }
        ]
        name               : "eks-secure-vpc-default-sg-e37c538"
        region             : ""
        revokeRulesOnDelete: false
        tags               : {
            Name                  : "eks-secure-vpc-default-sg"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll            : {
            Name                  : "eks-secure-vpc-default-sg"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId              : [unknown]
    + aws:ec2/subnet:Subnet: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/subnet:Subnet::eks-secure-vpc-public-subnet-2]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        assignIpv6AddressOnCreation            : false
        availabilityZone                       : "us-east-1b"
        cidrBlock                              : "10.100.2.0/24"
        enableDns64                            : false
        enableResourceNameDnsARecordOnLaunch   : false
        enableResourceNameDnsAaaaRecordOnLaunch: false
        ipv6Native                             : false
        mapPublicIpOnLaunch                    : true
        region                                 : ""
        tags                                   : {
            Name                  : "eks-secure-vpc-public-subnet-2"
            Type                  : "public"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll                                : {
            Name                  : "eks-secure-vpc-public-subnet-2"
            Type                  : "public"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId                                  : [unknown]
    + aws:ec2/routeTable:RouteTable: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTable:RouteTable::eks-secure-vpc-private-rt-3]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region    : ""
        tags      : {
            Name                  : "eks-secure-vpc-private-rt-3"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll   : {
            Name                  : "eks-secure-vpc-private-rt-3"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId     : [unknown]
    + aws:ec2/subnet:Subnet: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/subnet:Subnet::eks-secure-vpc-public-subnet-1]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        assignIpv6AddressOnCreation            : false
        availabilityZone                       : "us-east-1a"
        cidrBlock                              : "10.100.1.0/24"
        enableDns64                            : false
        enableResourceNameDnsARecordOnLaunch   : false
        enableResourceNameDnsAaaaRecordOnLaunch: false
        ipv6Native                             : false
        mapPublicIpOnLaunch                    : true
        region                                 : ""
        tags                                   : {
            Name                  : "eks-secure-vpc-public-subnet-1"
            Type                  : "public"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll                                : {
            Name                  : "eks-secure-vpc-public-subnet-1"
            Type                  : "public"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId                                  : [unknown]
    + aws:ec2/subnet:Subnet: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/subnet:Subnet::eks-secure-vpc-public-subnet-3]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        assignIpv6AddressOnCreation            : false
        availabilityZone                       : "us-east-1c"
        cidrBlock                              : "10.100.3.0/24"
        enableDns64                            : false
        enableResourceNameDnsARecordOnLaunch   : false
        enableResourceNameDnsAaaaRecordOnLaunch: false
        ipv6Native                             : false
        mapPublicIpOnLaunch                    : true
        region                                 : ""
        tags                                   : {
            Name                  : "eks-secure-vpc-public-subnet-3"
            Type                  : "public"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll                                : {
            Name                  : "eks-secure-vpc-public-subnet-3"
            Type                  : "public"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId                                  : [unknown]
    + aws:ec2/subnet:Subnet: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/subnet:Subnet::eks-secure-vpc-private-subnet-3]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        assignIpv6AddressOnCreation            : false
        availabilityZone                       : "us-east-1c"
        cidrBlock                              : "10.100.13.0/24"
        enableDns64                            : false
        enableResourceNameDnsARecordOnLaunch   : false
        enableResourceNameDnsAaaaRecordOnLaunch: false
        ipv6Native                             : false
        mapPublicIpOnLaunch                    : false
        region                                 : ""
        tags                                   : {
            Name                  : "eks-secure-vpc-private-subnet-3"
            Type                  : "private"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll                                : {
            Name                  : "eks-secure-vpc-private-subnet-3"
            Type                  : "private"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId                                  : [unknown]
    + aws:ec2/subnet:Subnet: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/subnet:Subnet::eks-secure-vpc-private-subnet-1]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        assignIpv6AddressOnCreation            : false
        availabilityZone                       : "us-east-1a"
        cidrBlock                              : "10.100.11.0/24"
        enableDns64                            : false
        enableResourceNameDnsARecordOnLaunch   : false
        enableResourceNameDnsAaaaRecordOnLaunch: false
        ipv6Native                             : false
        mapPublicIpOnLaunch                    : false
        region                                 : ""
        tags                                   : {
            Name                  : "eks-secure-vpc-private-subnet-1"
            Type                  : "private"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll                                : {
            Name                  : "eks-secure-vpc-private-subnet-1"
            Type                  : "private"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId                                  : [unknown]
    + aws:ec2/subnet:Subnet: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/subnet:Subnet::eks-secure-vpc-private-subnet-2]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        assignIpv6AddressOnCreation            : false
        availabilityZone                       : "us-east-1b"
        cidrBlock                              : "10.100.12.0/24"
        enableDns64                            : false
        enableResourceNameDnsARecordOnLaunch   : false
        enableResourceNameDnsAaaaRecordOnLaunch: false
        ipv6Native                             : false
        mapPublicIpOnLaunch                    : false
        region                                 : ""
        tags                                   : {
            Name                  : "eks-secure-vpc-private-subnet-2"
            Type                  : "private"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll                                : {
            Name                  : "eks-secure-vpc-private-subnet-2"
            Type                  : "private"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        vpcId                                  : [unknown]
    + aws:ec2/routeTableAssociation:RouteTableAssociation: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTableAssociation:RouteTableAssociation::eks-secure-vpc-public-rta-2]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region      : ""
        routeTableId: [unknown]
        subnetId    : [unknown]
    + aws:ec2/route:Route: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/route:Route::eks-secure-vpc-public-route]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        destinationCidrBlock: "0.0.0.0/0"
        gatewayId           : [unknown]
        region              : ""
        routeTableId        : [unknown]
    + aws:ec2/natGateway:NatGateway: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/natGateway:NatGateway::eks-secure-vpc-nat-gw-2]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        allocationId    : [unknown]
        connectivityType: "public"
        region          : ""
        subnetId        : [unknown]
        tags            : {
            Name                  : "eks-secure-vpc-nat-gw-2"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll         : {
            Name                  : "eks-secure-vpc-nat-gw-2"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
    + aws:ec2/natGateway:NatGateway: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/natGateway:NatGateway::eks-secure-vpc-nat-gw-1]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        allocationId    : [unknown]
        connectivityType: "public"
        region          : ""
        subnetId        : [unknown]
        tags            : {
            Name                  : "eks-secure-vpc-nat-gw-1"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll         : {
            Name                  : "eks-secure-vpc-nat-gw-1"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
    + aws:ec2/routeTableAssociation:RouteTableAssociation: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTableAssociation:RouteTableAssociation::eks-secure-vpc-public-rta-3]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region      : ""
        routeTableId: [unknown]
        subnetId    : [unknown]
    + aws:ec2/routeTableAssociation:RouteTableAssociation: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTableAssociation:RouteTableAssociation::eks-secure-vpc-public-rta-1]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region      : ""
        routeTableId: [unknown]
        subnetId    : [unknown]
    + aws:ec2/natGateway:NatGateway: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/natGateway:NatGateway::eks-secure-vpc-nat-gw-3]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        allocationId    : [unknown]
        connectivityType: "public"
        region          : ""
        subnetId        : [unknown]
        tags            : {
            Name                  : "eks-secure-vpc-nat-gw-3"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
        tagsAll         : {
            Name                  : "eks-secure-vpc-nat-gw-3"
            compliance            : "CMMC,CIS,GDPR"
            created_by            : "pulumi"
            data-classification   : "gdpr-capable"
            environment           : "staging"
            github_repository     : "devops-with-ai"
            github_repository_path: "pulumi/environments/aws/staging/001-eks-secure"
            purpose               : "eks-cluster"
        }
    + aws:ec2/routeTableAssociation:RouteTableAssociation: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTableAssociation:RouteTableAssociation::eks-secure-vpc-private-rta-1]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region      : ""
        routeTableId: [unknown]
        subnetId    : [unknown]
    + aws:ec2/routeTableAssociation:RouteTableAssociation: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTableAssociation:RouteTableAssociation::eks-secure-vpc-private-rta-3]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region      : ""
        routeTableId: [unknown]
        subnetId    : [unknown]
    + aws:ec2/routeTableAssociation:RouteTableAssociation: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/routeTableAssociation:RouteTableAssociation::eks-secure-vpc-private-rta-2]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        region      : ""
        routeTableId: [unknown]
        subnetId    : [unknown]
    + aws:ec2/route:Route: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/route:Route::eks-secure-vpc-private-route-2]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        destinationCidrBlock: "0.0.0.0/0"
        natGatewayId        : [unknown]
        region              : ""
        routeTableId        : [unknown]
    + aws:ec2/route:Route: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/route:Route::eks-secure-vpc-private-route-1]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        destinationCidrBlock: "0.0.0.0/0"
        natGatewayId        : [unknown]
        region              : ""
        routeTableId        : [unknown]
    + aws:ec2/route:Route: (create)
        [urn=urn:pulumi:staging::eks-secure-vpc::vpc:index:Vpc$aws:ec2/route:Route::eks-secure-vpc-private-route-3]
        [provider=urn:pulumi:staging::eks-secure-vpc::pulumi:providers:aws::default_7_13_0::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        destinationCidrBlock: "0.0.0.0/0"
        natGatewayId        : [unknown]
        region              : ""
        routeTableId        : [unknown]
--outputs:--
default_security_group_id: [unknown]
internet_gateway_id      : [unknown]
nat_gateway_ids          : [unknown]
private_subnet_ids       : [unknown]
public_subnet_ids        : [unknown]
vpc_arn                  : [unknown]
vpc_id                   : [unknown]
Resources:
+ 32 to create

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@j-monroe j-monroe Awaiting requested review from j-monroe

Assignees

@j-monroe j-monroe

Copilot code review Copilot

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@j-monroe