# My infrastructure project

Never record account IDs, IP addresses, private keys, state, plans, or real DNS names in a public portfolio.

## Explain the architecture
What Terraform owns; what Ansible owns; why SSM replaces inbound SSH.

## Cost estimate
Region, session duration, compute, root disk, public IPv4, S3, CI, and DNS costs.

## Evidence
Redacted plan summary; passing configuration checks; trusted HTTPS result if completed; second-run change count.

## Recovery exercise
Failure introduced on my own disposable server; symptoms; fix; verification.

## Cleanup
Resources deleted; bootstrap resources retained or separately removed; DNS record removed; delayed billing checked.

## Limitations
One public-subnet server, not HA; manual certificate renewal; no alerting service or production security guarantee.