Decentralized IaC Operating Model (OpenTofu/Terraform): A Portable, Audit-Ready Governance Blueprint

Read full text
Authors: W. H. Brueckner
Cited by: 0

Abstract

Description This bundle provides a provider-agnostic operating model for Infrastructure as Code (IaC) based on OpenTofu/Terraform, targeting reproducibility, governance, and auditability across cloud and on-prem environments without dependence on managed IaC SaaS platforms. It formalizes a Git-centric, PR-driven execution model with explicit separation of source, execution, state, policy, and evidence layers. The package includes architecture blueprints, governance and control catalogs, policy-as-code guardrails (OPA/Rego), day-2 operations runbooks, compliance profiles (standard / regulated / high-critical), provider overlay patterns (AWS, Azure, GCP), and CI automation templates. Emphasis is placed on fail-closed controls, evidence generation, and portability without workflow forking. The repository contains design and operational artifacts only and does not provide implementation, managed services, or operational support. Licensing notice The materials are provided for inspection and evaluation.Commercial or internal operational use requires a separate license agreement (exclusive or non-exclusive, scope-defined).

Publication details

Journal / source
Zenodo (CERN European Organization for Nuclear Research)
Publication date
7 January 2026
Language
EN
Document type
Dataset