surshar / claude-code
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.
Built by Anthropic · github.com/anthropics
| 1 | # Copy to terraform.tfvars and edit. terraform.tfvars is gitignored (see .gitignore). |
| 2 | |
| 3 | region = "us-east-1" # a region where Bedrock serves the Claude models you need |
| 4 | |
| 5 | # Prerequisite networking (NOT created by this module): the VPC and two+ private |
| 6 | # subnets in different AZs with outbound internet via a NAT gateway. |
| 7 | vpc_id = "vpc-..." |
| 8 | private_subnet_ids = ["subnet-...a", "subnet-...b"] |
| 9 | |
| 10 | # The only source the ALB admits on 443. Must not overlap the private subnets |
| 11 | # above — hosts in the ALB subnets are trusted_proxies (gateway.yaml) and could |
| 12 | # spoof client IPs via X-Forwarded-For. |
| 13 | corporate_cidr = "10.0.0.0/8" |
| 14 | |
| 15 | # ACM certificate for your internal gateway hostname (the host in gateway.yaml's |
| 16 | # public_url), imported or issued by AWS Private CA. |
| 17 | acm_certificate_arn = "arn:aws:acm:..." |
| 18 | |
| 19 | image_tag = "<version>" # REQUIRED — the tag you build and push as linux/amd64 with |
| 20 | # gateway.yaml baked in (setup.sh tags <version>-cfg<sha8>; |
| 21 | # see README Deploy) |
| 22 | |
| 23 | # Okta OIDC client secret: REQUIRED — uncomment and set it (Terraform creates the |
| 24 | # secret version; the ECS tasks inject `gateway-oidc-client-secret` at start, so |
| 25 | # without a version they fail with ResourceInitializationError). Leave empty only |
| 26 | # if you add the secret version out-of-band. |
| 27 | # oidc_client_secret = "..." |