# lina123-alt/zero-trust-aws architecture

> Architecture diagram of the GitHub repository lina123-alt/zero-trust-aws, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-28). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/lina123-alt/zero-trust-aws
- Repository: https://github.com/lina123-alt/zero-trust-aws

## Overview

This repository describes Zero Trust AWS infrastructure and includes a separate script that exports AWS inventory and audit data to JSON. The README gives no further workflow detail, and Terraform source was not sampled, so infrastructure relationships are limited to what the filenames and description support.

Main entry points: [`export_data.py`](https://github.com/lina123-alt/zero-trust-aws/blob/main/export_data.py) (AWS data exporter), [`main.tf`](https://github.com/lina123-alt/zero-trust-aws/blob/main/main.tf) (Infrastructure config), [`exports`](https://github.com/lina123-alt/zero-trust-aws/tree/main/exports) (JSON exports)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_infra["AWS infrastructure"]
  node_terraform["Infrastructure config<br/>[main.tf]"]
  node_providers["AWS provider<br/>[providers.tf]"]
  node_variables["Configuration inputs<br/>[variables.tf]"]
  node_outputs["Infrastructure outputs<br/>[outputs.tf]"]
end

subgraph group_security["Security configuration"]
  node_iam["IAM configuration<br/>[iam.tf]"]
  node_honeypot["Honeypot<br/>[honeypot.tf]"]
end

subgraph group_export["Data export"]
  node_exporter["AWS data exporter<br/>[export_data.py]"]
  node_ec2["EC2 API"]
  node_rds["RDS API"]
  node_s3["S3 API"]
  node_config["AWS Config API"]
  node_cloudtrail["CloudTrail API"]
  node_autoscaling["Auto Scaling API"]
  node_snapshots["JSON exports"]
end

node_operator(("Operator"))

node_operator -->|"configures"| node_terraform
node_exporter -->|"queries"| node_ec2
node_exporter -->|"queries"| node_rds
node_exporter -->|"queries"| node_s3
node_exporter -->|"queries"| node_config
node_exporter -->|"queries"| node_cloudtrail
node_exporter -->|"queries"| node_autoscaling
node_exporter -->|"writes"| node_snapshots

click node_terraform "https://github.com/lina123-alt/zero-trust-aws/blob/main/main.tf"
click node_providers "https://github.com/lina123-alt/zero-trust-aws/blob/main/providers.tf"
click node_variables "https://github.com/lina123-alt/zero-trust-aws/blob/main/variables.tf"
click node_outputs "https://github.com/lina123-alt/zero-trust-aws/blob/main/outputs.tf"
click node_iam "https://github.com/lina123-alt/zero-trust-aws/blob/main/iam.tf"
click node_honeypot "https://github.com/lina123-alt/zero-trust-aws/blob/main/honeypot.tf"
click node_exporter "https://github.com/lina123-alt/zero-trust-aws/blob/main/export_data.py"
click node_snapshots "https://github.com/lina123-alt/zero-trust-aws/tree/main/exports"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_terraform,node_providers,node_variables,node_outputs toneBlue
class node_iam,node_honeypot toneAmber
class node_exporter,node_ec2,node_rds,node_s3,node_config,node_cloudtrail,node_autoscaling,node_snapshots toneMint
class node_operator toneIndigo
```

## Components

### AWS infrastructure

- [Infrastructure config](https://github.com/lina123-alt/zero-trust-aws/blob/main/main.tf): `main.tf`
- [AWS provider](https://github.com/lina123-alt/zero-trust-aws/blob/main/providers.tf): `providers.tf`
- [Configuration inputs](https://github.com/lina123-alt/zero-trust-aws/blob/main/variables.tf): `variables.tf`
- [Infrastructure outputs](https://github.com/lina123-alt/zero-trust-aws/blob/main/outputs.tf): `outputs.tf`

### Security configuration

- [IAM configuration](https://github.com/lina123-alt/zero-trust-aws/blob/main/iam.tf): `iam.tf`
- [Honeypot](https://github.com/lina123-alt/zero-trust-aws/blob/main/honeypot.tf): `honeypot.tf`

### Data export

- [AWS data exporter](https://github.com/lina123-alt/zero-trust-aws/blob/main/export_data.py): `export_data.py`
- **EC2 API**
- **RDS API**
- **S3 API**
- **AWS Config API**
- **CloudTrail API**
- **Auto Scaling API**
- [JSON exports](https://github.com/lina123-alt/zero-trust-aws/tree/main/exports): `exports`

### Other components

- **Operator**

## Connections

- Operator → Infrastructure config: configures
- AWS data exporter → EC2 API: queries
- AWS data exporter → RDS API: queries
- AWS data exporter → S3 API: queries
- AWS data exporter → AWS Config API: queries
- AWS data exporter → CloudTrail API: queries
- AWS data exporter → Auto Scaling API: queries
- AWS data exporter → JSON exports: writes