{"id":50521191,"url":"https://github.com/dryvist/tf-splunk-aws","last_synced_at":"2026-06-03T04:03:23.792Z","repository":{"id":296533345,"uuid":"993706845","full_name":"dryvist/tf-splunk-aws","owner":"dryvist","description":"Cost-optimized Terraform/Terragrunt infrastructure deploying Splunk on AWS. Features VPC isolation, encrypted storage, least-privilege IAM policies, and comprehensive documentation. Manages ~22 AWS resources with minimal monthly cost (~.80). Modular DRY configuration patterns.","archived":false,"fork":false,"pushed_at":"2026-05-29T02:50:50.000Z","size":542,"stargazers_count":0,"open_issues_count":12,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-29T04:22:40.448Z","etag":null,"topics":["aws","cloud-infrastructure","cost-optimization","devops","documentation","ebs","ec2","encryption","iac","iam","infrastructure-as-code","modular-architecture","security","splunk","terraform","terragrunt","vpc"],"latest_commit_sha":null,"homepage":null,"language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dryvist.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2025-05-31T10:49:28.000Z","updated_at":"2026-05-29T02:50:53.000Z","dependencies_parsed_at":"2026-01-04T17:09:18.396Z","dependency_job_id":null,"html_url":"https://github.com/dryvist/tf-splunk-aws","commit_stats":null,"previous_names":["jacobpevans/tf-splunk-aws","dryvist/tf-splunk-aws"],"tags_count":22,"template":false,"template_full_name":null,"purl":"pkg:github/dryvist/tf-splunk-aws","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dryvist%2Ftf-splunk-aws","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dryvist%2Ftf-splunk-aws/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dryvist%2Ftf-splunk-aws/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dryvist%2Ftf-splunk-aws/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dryvist","download_url":"https://codeload.github.com/dryvist/tf-splunk-aws/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dryvist%2Ftf-splunk-aws/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33847265,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-03T02:00:06.370Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","cloud-infrastructure","cost-optimization","devops","documentation","ebs","ec2","encryption","iac","iam","infrastructure-as-code","modular-architecture","security","splunk","terraform","terragrunt","vpc"],"created_at":"2026-06-03T04:03:22.004Z","updated_at":"2026-06-03T04:03:23.779Z","avatar_url":"https://github.com/dryvist.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# TF-Splunk-AWS\n\n[![CI](https://github.com/JacobPEvans/tf-splunk-aws/actions/workflows/terraform.yml/badge.svg)](https://github.com/JacobPEvans/tf-splunk-aws/actions/workflows/terraform.yml)\n[![License](https://img.shields.io/github/license/JacobPEvans/tf-splunk-aws)](LICENSE)\n\nCost-optimized Splunk infrastructure on AWS using OpenTofu and Terragrunt.\n**~$8.54–$17.67/month** (optional auto-lifecycle). Long-term archive is handled\nby Cribl writing directly to S3 outside this module.\n\n## What \u0026 Why\n\n**What**: Production-ready Splunk deployment on AWS with modular Terraform architecture\n**Why**: Demonstrates cost optimization, infrastructure-as-code best practices, and security-first design\n\n## Quick Facts\n\n- **Cost**: ~$17.67/month always-on; ~$8.54/month with `enable_auto_lifecycle = true`\n- **Architecture**: 4 modules (network, security, compute, splunk)\n- **Deployment**: Terragrunt-managed with remote state\n- **Security**: Encrypted storage, IAM least privilege, VPC isolation\n\n## Cost Breakdown\n\n| Resource | Always-On | Auto-Lifecycle |\n| -------- | --------- | -------------- |\n| NAT Instance (t4g.nano) | $2.52 | $2.52 |\n| Splunk Instance (t4g.small) | $12.18 | ~$3.05 (25% utilization) |\n| EBS Storage (70GB GP3) | $2.97 | $2.97 |\n| **Total** | **~$17.67** | **~$8.54** |\n\nIndex data lives on the local EBS volume. Cribl handles long-term archive to S3\nout-of-band, so this module no longer manages a SmartStore bucket.\nAuto-lifecycle (`enable_auto_lifecycle = true`) starts Splunk every 4 hours for 60 minutes.\n\n## Quick Start\n\n```bash\ncd terragrunt/dev\nterragrunt plan    # Review 22 resources\nterragrunt apply   # Deploy infrastructure\n```\n\n## Documentation\n\n| Document | Purpose | Read Time |\n| -------- | ------- | --------- |\n| **[Project Scope](.copilot/PROJECT.md)** | Business context, constraints | 2 min |\n| **[Architecture](.copilot/ARCHITECTURE.md)** | Technical decisions, current state | 5 min |\n| **[Implementation](modules/README.md)** | Module details, developer guide | 10 min |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdryvist%2Ftf-splunk-aws","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdryvist%2Ftf-splunk-aws","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdryvist%2Ftf-splunk-aws/lists"}