terraform-aws
use 'balcony' to read any/each AWS resource available + generate Terraform code for them
Answer some questions, get a Terraform repository that is secure by default. Refuses to emit open data ports, public databases, or committed credentials. Zero dependencies.