DevSecOps Pipeline — Completion Runbook

All code is written and pushed to GitHub. This runbook covers the remaining

operational steps: Terraform applies, GitOps ARN updates, and ArgoCD deployment.

Prerequisites

Install these tools if not already present:

# AWS CLI v2 winget install Amazon.AWSCLI

# Terraform 1.6+ winget install HashiCorp.Terraform

# Terragrunt # Download from https://github.com/gruntwork-io/terragrunt/releases # Place in C:\Windows\System32\ or add to PATH

# kubectl winget install Kubernetes.kubectl

# ArgoCD CLI winget install argoproj.argocd

Enter fullscreen mode

Exit fullscreen mode

AWS Profile Setup

The root terragrunt.hcl uses profiles named myapp-{env}-{region_alias} .

Configure them in ~/.aws/config :

[profile myapp-production-use1] region = us-east-1 role_arn = arn:aws:iam::591120834781:role/AdministratorAccess source_profile = default

[profile myapp-production-usw2] region = us-west-2 role_arn = arn:aws:iam::591120834781:role/AdministratorAccess source_profile =…