Merge pull request #3 from its-d/automation-module

Automation module

Author: its-d

CHANGELOG.md

@@ -0,0 +1,25 @@
+# Changelog
+
+## [v1.0.0] - 2025-11-19
+### 🎯 Initial Stable Release — Secure Cloud Baseline for AWS
+- Added full AWS security baseline optimized for individuals, startups, and small companies
+- Includes:
+  - Centralized logging (CloudTrail, AWS Config, CloudWatch)
+  - Enforced encryption using KMS-managed keys
+  - AWS Config Rules + Automated Remediation for S3 and CloudTrail
+  - Security Hub foundational, CIS v5, and NIST 800-53 controls enabled by default
+  - Baseline IAM roles and guardrail policies
+  - (Optional) Isolated networking with VPC, public/private subnets, NAT gateways
+- Modular architecture:
+  - **storage** – S3 for CloudTrail, Config, and access logs
+  - **security** – Security Hub, Config recorder, CloudTrail
+  - **kms** – encryption key with required grants
+  - **automation** – managed Config rules + SSM remediation runbooks
+  - **networking (optional)** – VPC with subnets, routes, and security defaults
+- Complete Deployment Flow:
+  - Virtual environment setup
+  - Pre-commit hooks
+  - Terraform backend + tfvars structure
+  - Makefile automation (`init`, `plan`, `apply`, `destroy`)
+- Added architecture diagram reference and cost estimation guidance
+- Verified full apply/destroy lifecycle across environments