diff --git a/modules/eks/platform/README.md b/deprecated/eks/platform/README.md
similarity index 100%
rename from modules/eks/platform/README.md
rename to deprecated/eks/platform/README.md
diff --git a/modules/eks/platform/context.tf b/deprecated/eks/platform/context.tf
similarity index 100%
rename from modules/eks/platform/context.tf
rename to deprecated/eks/platform/context.tf
diff --git a/modules/eks/platform/main.tf b/deprecated/eks/platform/main.tf
similarity index 100%
rename from modules/eks/platform/main.tf
rename to deprecated/eks/platform/main.tf
diff --git a/modules/eks/platform/outputs.tf b/deprecated/eks/platform/outputs.tf
similarity index 100%
rename from modules/eks/platform/outputs.tf
rename to deprecated/eks/platform/outputs.tf
diff --git a/modules/eks/platform/providers.tf b/deprecated/eks/platform/providers.tf
similarity index 100%
rename from modules/eks/platform/providers.tf
rename to deprecated/eks/platform/providers.tf
diff --git a/modules/eks/platform/remote-state.tf b/deprecated/eks/platform/remote-state.tf
similarity index 100%
rename from modules/eks/platform/remote-state.tf
rename to deprecated/eks/platform/remote-state.tf
diff --git a/modules/eks/platform/variables.tf b/deprecated/eks/platform/variables.tf
similarity index 100%
rename from modules/eks/platform/variables.tf
rename to deprecated/eks/platform/variables.tf
diff --git a/modules/eks/platform/versions.tf b/deprecated/eks/platform/versions.tf
similarity index 100%
rename from modules/eks/platform/versions.tf
rename to deprecated/eks/platform/versions.tf
diff --git a/modules/gitops/README.md b/deprecated/gitops/README.md
similarity index 100%
rename from modules/gitops/README.md
rename to deprecated/gitops/README.md
diff --git a/modules/gitops/context.tf b/deprecated/gitops/context.tf
similarity index 100%
rename from modules/gitops/context.tf
rename to deprecated/gitops/context.tf
diff --git a/modules/gitops/github-actions-iam-policy.tf b/deprecated/gitops/github-actions-iam-policy.tf
similarity index 100%
rename from modules/gitops/github-actions-iam-policy.tf
rename to deprecated/gitops/github-actions-iam-policy.tf
diff --git a/modules/gitops/github-actions-iam-role.mixin.tf b/deprecated/gitops/github-actions-iam-role.mixin.tf
similarity index 100%
rename from modules/gitops/github-actions-iam-role.mixin.tf
rename to deprecated/gitops/github-actions-iam-role.mixin.tf
diff --git a/modules/gitops/providers.tf b/deprecated/gitops/providers.tf
similarity index 100%
rename from modules/gitops/providers.tf
rename to deprecated/gitops/providers.tf
diff --git a/modules/gitops/remote-state.tf b/deprecated/gitops/remote-state.tf
similarity index 100%
rename from modules/gitops/remote-state.tf
rename to deprecated/gitops/remote-state.tf
diff --git a/modules/gitops/variables.tf b/deprecated/gitops/variables.tf
similarity index 100%
rename from modules/gitops/variables.tf
rename to deprecated/gitops/variables.tf
diff --git a/modules/gitops/versions.tf b/deprecated/gitops/versions.tf
similarity index 100%
rename from modules/gitops/versions.tf
rename to deprecated/gitops/versions.tf
diff --git a/modules/account-map/README.md b/modules/account-map/README.md
index 893586de3..f8ce68877 100644
--- a/modules/account-map/README.md
+++ b/modules/account-map/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/account-map
+ - layer/accounts
+ - provider/aws
+ - privileged
+---
+
# Component: `account-map`
This component is responsible for provisioning information only: it simply populates Terraform state with data (account
diff --git a/modules/account-quotas/README.md b/modules/account-quotas/README.md
index a442dddac..92db56f36 100644
--- a/modules/account-quotas/README.md
+++ b/modules/account-quotas/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/account-quotas
+ - layer/foundation
+ - provider/aws
+---
+
# Component: `account-quotas`
This component is responsible for requesting service quota increases. We recommend making requests here rather than in
diff --git a/modules/account-settings/README.md b/modules/account-settings/README.md
index a7e6a0d5e..e5fee8198 100644
--- a/modules/account-settings/README.md
+++ b/modules/account-settings/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/account-settings
+ - layer/accounts
+ - provider/aws
+ - privileged
+---
+
# Component: `account-settings`
This component is responsible for provisioning account level settings: IAM password policy, AWS Account Alias, EBS
diff --git a/modules/account/README.md b/modules/account/README.md
index a22e3c1be..446bac0b1 100644
--- a/modules/account/README.md
+++ b/modules/account/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/account
+ - layer/accounts
+ - provider/aws
+ - privileged
+---
+
# Component: `account`
This component is responsible for provisioning the full account hierarchy along with Organizational Units (OUs). It
diff --git a/modules/acm/README.md b/modules/acm/README.md
index bdd7d25a0..47891fc0b 100644
--- a/modules/acm/README.md
+++ b/modules/acm/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/acm
+ - layer/network
+ - provider/aws
+---
+
# Component: `acm`
This component is responsible for requesting an ACM certificate for a domain and adding a CNAME record to the DNS zone
diff --git a/modules/alb/README.md b/modules/alb/README.md
index 25e47e977..cedac8a82 100644
--- a/modules/alb/README.md
+++ b/modules/alb/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/alb
+ - layer/ecs
+ - provider/aws
+---
+
# Component: `alb`
This component is responsible for provisioning a generic Application Load Balancer. It depends on the `vpc` and
diff --git a/modules/amplify/README.md b/modules/amplify/README.md
index b64597941..c53819b76 100644
--- a/modules/amplify/README.md
+++ b/modules/amplify/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/amplify
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `amplify`
This component is responsible for provisioning AWS Amplify apps, backend environments, branches, domain associations,
diff --git a/modules/api-gateway-account-settings/README.md b/modules/api-gateway-account-settings/README.md
index 70a4a008b..8e5bd4b07 100644
--- a/modules/api-gateway-account-settings/README.md
+++ b/modules/api-gateway-account-settings/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/api-gateway-account-settings
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `api-gateway-account-settings`
This component is responsible for setting the global, regional settings required to allow API Gateway to write to
diff --git a/modules/api-gateway-rest-api/README.md b/modules/api-gateway-rest-api/README.md
index 7f347f130..0e7e44e72 100644
--- a/modules/api-gateway-rest-api/README.md
+++ b/modules/api-gateway-rest-api/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/api-gateway-rest-api
+ - layer/addons
+ - provider/aws
+---
+
# Component: `api-gateway-rest-api`
This component is responsible for deploying an API Gateway REST API.
diff --git a/modules/argocd-repo/README.md b/modules/argocd-repo/README.md
index 2e5638192..b3c8073c7 100644
--- a/modules/argocd-repo/README.md
+++ b/modules/argocd-repo/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/argocd-repo
+ - layer/software-delivery
+ - provider/aws
+ - provider/github
+---
+
# Component: `argocd-repo`
This component is responsible for creating and managing an ArgoCD desired state repository.
diff --git a/modules/athena/README.md b/modules/athena/README.md
index 3e6ee7ed9..1575f7234 100644
--- a/modules/athena/README.md
+++ b/modules/athena/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/athena
+ - layer/data
+ - provider/aws
+---
+
# Component: `athena`
This component is responsible for provisioning an Amazon Athena workgroup, databases, and related resources.
diff --git a/modules/aurora-mysql-resources/README.md b/modules/aurora-mysql-resources/README.md
index c8e8c5ad1..7c4b848cd 100644
--- a/modules/aurora-mysql-resources/README.md
+++ b/modules/aurora-mysql-resources/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aurora-mysql-resources
+ - layer/data
+ - provider/aws
+---
+
# Component: `aurora-mysql-resources`
This component is responsible for provisioning Aurora MySQL resources: additional databases, users, permissions, grants,
diff --git a/modules/aurora-mysql/README.md b/modules/aurora-mysql/README.md
index ff8ad6570..08688cffd 100644
--- a/modules/aurora-mysql/README.md
+++ b/modules/aurora-mysql/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aurora-mysql
+ - layer/data
+ - provider/aws
+---
+
# Component: `aurora-mysql`
This component is responsible for provisioning Aurora MySQL RDS clusters. It seeds relevant database information
diff --git a/modules/aurora-postgres-resources/README.md b/modules/aurora-postgres-resources/README.md
index 1c6bc4a95..8c6bef69b 100644
--- a/modules/aurora-postgres-resources/README.md
+++ b/modules/aurora-postgres-resources/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aurora-postgres-resources
+ - layer/data
+ - provider/aws
+---
+
# Component: `aurora-postgres-resources`
This component is responsible for provisioning Aurora Postgres resources: additional databases, users, permissions,
diff --git a/modules/aurora-postgres/README.md b/modules/aurora-postgres/README.md
index 7d6205c60..fb524bfee 100644
--- a/modules/aurora-postgres/README.md
+++ b/modules/aurora-postgres/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aurora-postgres
+ - layer/data
+ - provider/aws
+---
+
# Component: `aurora-postgres`
This component is responsible for provisioning Aurora Postgres RDS clusters. It seeds relevant database information
@@ -302,10 +309,12 @@ components:
| [autoscaling\_scale\_out\_cooldown](#input\_autoscaling\_scale\_out\_cooldown) | The amount of time, in seconds, after a scaling activity completes and before the next scaling up activity can start. Default is 300s | `number` | `300` | no |
| [autoscaling\_target\_metrics](#input\_autoscaling\_target\_metrics) | The metrics type to use. If this value isn't provided the default is CPU utilization | `string` | `"RDSReaderAverageCPUUtilization"` | no |
| [autoscaling\_target\_value](#input\_autoscaling\_target\_value) | The target value to scale with respect to target metrics | `number` | `75` | no |
+| [backup\_window](#input\_backup\_window) | Daily time range during which the backups happen, UTC | `string` | `"07:00-09:00"` | no |
| [ca\_cert\_identifier](#input\_ca\_cert\_identifier) | The identifier of the CA certificate for the DB instance | `string` | `null` | no |
| [cluster\_dns\_name\_part](#input\_cluster\_dns\_name\_part) | Part of DNS name added to module and cluster name for DNS for cluster endpoint | `string` | `"writer"` | no |
| [cluster\_family](#input\_cluster\_family) | Family of the DB parameter group. Valid values for Aurora PostgreSQL: `aurora-postgresql9.6`, `aurora-postgresql10`, `aurora-postgresql11`, `aurora-postgresql12` | `string` | `"aurora-postgresql13"` | no |
| [cluster\_name](#input\_cluster\_name) | Short name for this cluster | `string` | n/a | yes |
+| [cluster\_parameters](#input\_cluster\_parameters) | List of DB cluster parameters to apply |
list(object({
apply_method = string
name = string
value = string
}))
| `[]` | no |
| [cluster\_size](#input\_cluster\_size) | Postgres cluster size | `number` | n/a | yes |
| [context](#input\_context) | Single object for setting entire context at once.
See description of individual variables for details.
Leave string and numeric variables as `null` to use default value.
Individual variable settings (non-null) override settings in context object,
except for attributes, tags, and additional\_tag\_map, which are merged. | `any` | {
"additional_tag_map": {},
"attributes": [],
"delimiter": null,
"descriptor_formats": {},
"enabled": true,
"environment": null,
"id_length_limit": null,
"label_key_case": null,
"label_order": [],
"label_value_case": null,
"labels_as_tags": [
"unset"
],
"name": null,
"namespace": null,
"regex_replace_chars": null,
"stage": null,
"tags": {},
"tenant": null
}
| no |
| [database\_name](#input\_database\_name) | Name for an automatically created database on cluster creation. An empty name will generate a db name. | `string` | `""` | no |
@@ -341,6 +350,7 @@ components:
| [reader\_dns\_name\_part](#input\_reader\_dns\_name\_part) | Part of DNS name added to module and cluster name for DNS for cluster reader | `string` | `"reader"` | no |
| [regex\_replace\_chars](#input\_regex\_replace\_chars) | Terraform regular expression (regex) string.
Characters matching the regex will be removed from the ID elements.
If not set, `"/[^a-zA-Z0-9-]/"` is used to remove all characters other than hyphens, letters and digits. | `string` | `null` | no |
| [region](#input\_region) | AWS Region | `string` | n/a | yes |
+| [retention\_period](#input\_retention\_period) | Number of days to retain backups for | `number` | `5` | no |
| [scaling\_configuration](#input\_scaling\_configuration) | List of nested attributes with scaling properties. Only valid when `engine_mode` is set to `serverless`. This is required for Serverless v1 | list(object({
auto_pause = bool
max_capacity = number
min_capacity = number
seconds_until_auto_pause = number
timeout_action = string
}))
| `[]` | no |
| [serverlessv2\_scaling\_configuration](#input\_serverlessv2\_scaling\_configuration) | Nested attribute with scaling properties for ServerlessV2. Only valid when `engine_mode` is set to `provisioned.` This is required for Serverless v2 | object({
min_capacity = number
max_capacity = number
})
| `null` | no |
| [skip\_final\_snapshot](#input\_skip\_final\_snapshot) | Normally AWS makes a snapshot of the database before deleting it. Set this to `true` in order to skip this.
NOTE: The final snapshot has a name derived from the cluster name. If you delete a cluster, get a final snapshot,
then create a cluster of the same name, its final snapshot will fail with a name collision unless you delete
the previous final snapshot first. | `bool` | `false` | no |
@@ -351,9 +361,6 @@ components:
| [tags](#input\_tags) | Additional tags (e.g. `{'BusinessUnit': 'XYZ'}`).
Neither the tag keys nor the tag values will be modified by this module. | `map(string)` | `{}` | no |
| [tenant](#input\_tenant) | ID element \_(Rarely used, not included by default)\_. A customer identifier, indicating who this instance of a resource is for | `string` | `null` | no |
| [vpc\_component\_name](#input\_vpc\_component\_name) | The name of the VPC component | `string` | `"vpc"` | no |
-| [retention\_period](#input\_retention\_period) | Number of days to retain backups for | `number` | `5` | no |
-| [backup\_window](#input\_backup\_window) | Daily time range during which the backups happen, UTC | `string` | `"07:00-09:00"` | no |
-
## Outputs
diff --git a/modules/aws-backup/README.md b/modules/aws-backup/README.md
index 75d4ebfcc..3eed64d8c 100644
--- a/modules/aws-backup/README.md
+++ b/modules/aws-backup/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aws-backup
+ - layer/data
+ - provider/aws
+---
+
# Component: `aws-backup`
This component is responsible for provisioning an AWS Backup Plan. It creates a schedule for backing up given ARNs.
diff --git a/modules/aws-config/README.md b/modules/aws-config/README.md
index c280c627b..20fbd35f3 100644
--- a/modules/aws-config/README.md
+++ b/modules/aws-config/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aws-config
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `aws-config`
This component is responsible for configuring AWS Config.
diff --git a/modules/aws-inspector/README.md b/modules/aws-inspector/README.md
index 679d122d5..ec1bc6084 100644
--- a/modules/aws-inspector/README.md
+++ b/modules/aws-inspector/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aws-inspector
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `aws-inspector`
This component is responsible for provisioning an
diff --git a/modules/aws-inspector2/README.md b/modules/aws-inspector2/README.md
index e40a45838..280f363ce 100644
--- a/modules/aws-inspector2/README.md
+++ b/modules/aws-inspector2/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aws-inspector2
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `aws-inspector2`
This component is responsible for configuring Inspector V2 within an AWS Organization.
diff --git a/modules/aws-saml/README.md b/modules/aws-saml/README.md
index 94f2ccece..94733ace7 100644
--- a/modules/aws-saml/README.md
+++ b/modules/aws-saml/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/aws-saml
+ - layer/identity
+ - provider/aws
+ - priviliged
+---
+
# Component: `aws-saml`
This component is responsible for provisioning SAML metadata into AWS IAM as new SAML providers. Additionally, for an
diff --git a/modules/aws-shield/README.md b/modules/aws-shield/README.md
index 500f9785b..e3114ef40 100644
--- a/modules/aws-shield/README.md
+++ b/modules/aws-shield/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aws-shield
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `aws-shield`
This component is responsible for enabling AWS Shield Advanced Protection for the following resources:
diff --git a/modules/aws-sso/README.md b/modules/aws-sso/README.md
index d51fa0db4..dc29fcd7c 100644
--- a/modules/aws-sso/README.md
+++ b/modules/aws-sso/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/aws-sso
+ - layer/identity
+ - provider/aws
+ - privileged
+---
+
# Component: `aws-sso`
This component is responsible for creating [AWS SSO Permission Sets][1] and creating AWS SSO Account Assignments, that
diff --git a/modules/aws-ssosync/README.md b/modules/aws-ssosync/README.md
index d4bc7384a..c31ab93ce 100644
--- a/modules/aws-ssosync/README.md
+++ b/modules/aws-ssosync/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/aws-ssosync
+ - layer/identity
+ - provider/aws
+---
+
# Component: `aws-ssosync`
Deploys [AWS ssosync](https://github.com/awslabs/ssosync) to sync Google Groups with AWS SSO.
diff --git a/modules/aws-team-roles/README.md b/modules/aws-team-roles/README.md
index 4e9feda9a..0109b2307 100644
--- a/modules/aws-team-roles/README.md
+++ b/modules/aws-team-roles/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/aws-team-roles
+ - layer/identity
+ - provider/aws
+ - privileged
+---
+
# Component: `aws-team-roles`
This component is responsible for provisioning user and system IAM roles outside the `identity` account. It sets them up
diff --git a/modules/aws-teams/README.md b/modules/aws-teams/README.md
index 38b71abf1..fb99606a9 100644
--- a/modules/aws-teams/README.md
+++ b/modules/aws-teams/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/aws-teams
+ - layer/identity
+ - provider/aws
+ - privileged
+---
+
# Component: `aws-teams`
This component is responsible for provisioning all primary user and system roles into the centralized identity account.
diff --git a/modules/bastion/README.md b/modules/bastion/README.md
index 4af775ebf..529d84dfe 100644
--- a/modules/bastion/README.md
+++ b/modules/bastion/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/bastion
+ - layer/network
+ - provider/aws
+---
+
# Component: `bastion`
This component is responsible for provisioning a generic Bastion host within an ASG with parameterized `user_data` and
diff --git a/modules/cloudtrail-bucket/README.md b/modules/cloudtrail-bucket/README.md
index a38604932..817b955b1 100644
--- a/modules/cloudtrail-bucket/README.md
+++ b/modules/cloudtrail-bucket/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/cloudtrail-bucket
+ - layer/foundation
+ - provider/aws
+---
+
# Component: `cloudtrail-bucket`
This component is responsible for provisioning a bucket for storing cloudtrail logs for auditing purposes. It's expected
diff --git a/modules/cloudtrail/README.md b/modules/cloudtrail/README.md
index 715cdc696..b42770ebf 100644
--- a/modules/cloudtrail/README.md
+++ b/modules/cloudtrail/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/cloudtrail
+ - layer/foundation
+ - provider/aws
+---
+
# Component: `cloudtrail`
This component is responsible for provisioning cloudtrail auditing in an individual account. It's expected to be used
diff --git a/modules/cloudwatch-logs/README.md b/modules/cloudwatch-logs/README.md
index 9a78855af..e1244f1b9 100644
--- a/modules/cloudwatch-logs/README.md
+++ b/modules/cloudwatch-logs/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/cloudwatch-logs
+ - layer/baseline
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `cloudwatch-logs`
This component is responsible for creation of CloudWatch Log Streams and Log Groups.
diff --git a/modules/cognito/README.md b/modules/cognito/README.md
index a9219970b..0b29c148b 100644
--- a/modules/cognito/README.md
+++ b/modules/cognito/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/cognito
+ - layer/addons
+ - provider/aws
+---
+
# Component: `cognito`
This component is responsible for provisioning and managing AWS Cognito resources.
diff --git a/modules/config-bucket/README.md b/modules/config-bucket/README.md
index 72f36c015..0c3371a86 100644
--- a/modules/config-bucket/README.md
+++ b/modules/config-bucket/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/config-bucket
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `config-bucket`
This module creates an S3 bucket suitable for storing `AWS Config` data.
diff --git a/modules/datadog-configuration/README.md b/modules/datadog-configuration/README.md
index 90736c474..a9673333b 100644
--- a/modules/datadog-configuration/README.md
+++ b/modules/datadog-configuration/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/datadog-configuration
+ - layer/datadog
+ - provider/datadog
+ - provider/aws
+---
+
# Component: `datadog-configuration`
This component is responsible for provisioning SSM or ASM entries for Datadog API keys.
diff --git a/modules/datadog-configuration/modules/datadog_keys/README.md b/modules/datadog-configuration/modules/datadog_keys/README.md
index 56325b4e0..4ffc16018 100644
--- a/modules/datadog-configuration/modules/datadog_keys/README.md
+++ b/modules/datadog-configuration/modules/datadog_keys/README.md
@@ -1,4 +1,12 @@
-# Submodule `datadog_keys`
+---
+tags:
+ - component/datadog_keys
+ - layer/datadog
+ - provider/datadog
+ - provider/aws
+---
+
+# Component: `datadog_keys`
Useful submodule for other modules to quickly configure the datadog provider
diff --git a/modules/datadog-integration/README.md b/modules/datadog-integration/README.md
index d27d078ae..e182591e3 100644
--- a/modules/datadog-integration/README.md
+++ b/modules/datadog-integration/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/datadog-integration
+ - layer/datadog
+ - provider/aws
+ - provider/datadog
+---
+
# Component: `datadog-integration`
This component is responsible for provisioning Datadog AWS integrations. It depends on the `datadog-configuration`
diff --git a/modules/datadog-lambda-forwarder/README.md b/modules/datadog-lambda-forwarder/README.md
index a80caa4c8..75251a11f 100644
--- a/modules/datadog-lambda-forwarder/README.md
+++ b/modules/datadog-lambda-forwarder/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/datadog-lambda-forwarder
+ - layer/datadog
+ - provider/aws
+ - provider/datadog
+---
+
# Component: `datadog-lambda-forwarder`
This component is responsible for provision all the necessary infrastructure to deploy
diff --git a/modules/datadog-logs-archive/README.md b/modules/datadog-logs-archive/README.md
index 8eb8ffcdb..cf2a92e6b 100644
--- a/modules/datadog-logs-archive/README.md
+++ b/modules/datadog-logs-archive/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/datadog-logs-archive
+ - layer/datadog
+ - provider/aws
+ - provider/datadog
+---
+
# Component: `datadog-logs-archive`
This component is responsible for provisioning Datadog Log Archives. It creates a single log archive pipeline for each
diff --git a/modules/datadog-monitor/README.md b/modules/datadog-monitor/README.md
index 7caa2b21c..2a0543abe 100644
--- a/modules/datadog-monitor/README.md
+++ b/modules/datadog-monitor/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/datadog-monitor
+ - layer/datadog
+ - provider/aws
+ - provider/datadog
+---
+
# Component: `datadog-monitor`
This component is responsible for provisioning Datadog monitors and assigning Datadog roles to the monitors.
diff --git a/modules/datadog-private-location-ecs/README.md b/modules/datadog-private-location-ecs/README.md
index 3d75f2286..4970e455f 100644
--- a/modules/datadog-private-location-ecs/README.md
+++ b/modules/datadog-private-location-ecs/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/datadog-private-location-ecs
+ - layer/datadog
+ - provider/aws
+ - provider/datadog
+---
+
# Component: `datadog-private-location-ecs`
This component is responsible for creating a datadog private location and deploying it to ECS (EC2 / Fargate)
diff --git a/modules/datadog-synthetics-private-location/README.md b/modules/datadog-synthetics-private-location/README.md
index 54209576a..0d78ced6f 100644
--- a/modules/datadog-synthetics-private-location/README.md
+++ b/modules/datadog-synthetics-private-location/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/datadog-synthetics-private-location
+ - layer/datadog
+ - provider/aws
+ - provider/datadog
+---
+
# Component: `datadog-synthetics-private-location`
This component provisions a Datadog synthetics private location on Datadog and a private location agent on EKS cluster.
diff --git a/modules/datadog-synthetics/README.md b/modules/datadog-synthetics/README.md
index a18461c1e..aba1801e7 100644
--- a/modules/datadog-synthetics/README.md
+++ b/modules/datadog-synthetics/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/datadog-synthetics
+ - layer/datadog
+ - provider/aws
+ - provider/datadog
+---
+
# Component: `datadog-synthetics`
This component provides the ability to implement
diff --git a/modules/dms/endpoint/README.md b/modules/dms/endpoint/README.md
index b65dfc542..a395212ff 100644
--- a/modules/dms/endpoint/README.md
+++ b/modules/dms/endpoint/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/dms/endpoint
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `dms/endpoint`
This component provisions DMS endpoints.
diff --git a/modules/dms/iam/README.md b/modules/dms/iam/README.md
index 021da144d..b1d5ec321 100644
--- a/modules/dms/iam/README.md
+++ b/modules/dms/iam/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/dms/iam
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `dms/iam`
This component provisions IAM roles required for DMS.
diff --git a/modules/dms/replication-instance/README.md b/modules/dms/replication-instance/README.md
index fade7e38c..b48146975 100644
--- a/modules/dms/replication-instance/README.md
+++ b/modules/dms/replication-instance/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/dms/replication-instance
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `dms/replication-instance`
This component provisions DMS replication instances.
diff --git a/modules/dms/replication-task/README.md b/modules/dms/replication-task/README.md
index 4732e9072..294345780 100644
--- a/modules/dms/replication-task/README.md
+++ b/modules/dms/replication-task/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/dms/replication-task
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `dms/replication-task`
This component provisions DMS replication tasks.
diff --git a/modules/dns-delegated/README.md b/modules/dns-delegated/README.md
index ed73c60a6..dedfa2577 100644
--- a/modules/dns-delegated/README.md
+++ b/modules/dns-delegated/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/dns-delegated
+ - layer/network
+ - provider/aws
+---
+
# Component: `dns-delegated`
This component is responsible for provisioning a DNS zone which delegates nameservers to the DNS zone in the primary DNS
diff --git a/modules/dns-primary/README.md b/modules/dns-primary/README.md
index b53c42776..d8b64a66b 100644
--- a/modules/dns-primary/README.md
+++ b/modules/dns-primary/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/dns-primary
+ - layer/network
+ - provider/aws
+---
+
# Component: `dns-primary`
This component is responsible for provisioning the primary DNS zones into an AWS account. By convention, we typically
diff --git a/modules/documentdb/README.md b/modules/documentdb/README.md
index cdea391ee..ebc5ee1ed 100644
--- a/modules/documentdb/README.md
+++ b/modules/documentdb/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/documentdb
+ - layer/data
+ - provider/aws
+---
+
# Component: `documentdb`
This component is responsible for provisioning DocumentDB clusters.
diff --git a/modules/dynamodb/README.md b/modules/dynamodb/README.md
index efef2584b..ff68e2682 100644
--- a/modules/dynamodb/README.md
+++ b/modules/dynamodb/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/dynamodb
+ - layer/data
+ - layer/gitops
+ - provider/aws
+---
+
# Component: `dynamodb`
This component is responsible for provisioning a DynamoDB table.
diff --git a/modules/ec2-client-vpn/README.md b/modules/ec2-client-vpn/README.md
index 04b6de797..c4ac715b9 100644
--- a/modules/ec2-client-vpn/README.md
+++ b/modules/ec2-client-vpn/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/ec2-client-vpn
+ - layer/network
+ - provider/aws
+---
+
# Component: `ec2-client-vpn`
This component is responsible for provisioning VPN Client Endpoints.
diff --git a/modules/ec2-instance/README.md b/modules/ec2-instance/README.md
index 6959a329f..26502b724 100644
--- a/modules/ec2-instance/README.md
+++ b/modules/ec2-instance/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/ec2-instance
+ - layer/addons
+ - provider/aws
+---
+
# Component: `ec2-instance`
This component is responsible for provisioning a single EC2 instance.
diff --git a/modules/ecr/README.md b/modules/ecr/README.md
index e31b4a8ff..78d9ae4e4 100644
--- a/modules/ecr/README.md
+++ b/modules/ecr/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/ecr
+ - layer/baseline
+ - provider/aws
+---
+
# Component: `ecr`
This component is responsible for provisioning repositories, lifecycle rules, and permissions for streamlined ECR usage.
diff --git a/modules/ecs-service/README.md b/modules/ecs-service/README.md
index 0df29a8a9..eb65e229e 100644
--- a/modules/ecs-service/README.md
+++ b/modules/ecs-service/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/ecs-service
+ - layer/ecs
+ - provider/aws
+---
+
# Component: `ecs-service`
This component is responsible for creating an ECS service.
diff --git a/modules/ecs/README.md b/modules/ecs/README.md
index aeb446def..751d7bb83 100644
--- a/modules/ecs/README.md
+++ b/modules/ecs/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/ecs
+ - layer/ecs
+ - provider/aws
+---
+
# Component: `ecs`
This component is responsible for provisioning an ECS Cluster and associated load balancer.
diff --git a/modules/efs/README.md b/modules/efs/README.md
index 34981e144..72d289bb6 100644
--- a/modules/efs/README.md
+++ b/modules/efs/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/efs
+ - layer/data
+ - layer/eks
+ - provider/aws
+---
+
# Component: `efs`
This component is responsible for provisioning an [EFS](https://aws.amazon.com/efs/) Network File System with KMS
diff --git a/modules/eks/actions-runner-controller/README.md b/modules/eks/actions-runner-controller/README.md
index 29543a965..31a64319f 100644
--- a/modules/eks/actions-runner-controller/README.md
+++ b/modules/eks/actions-runner-controller/README.md
@@ -1,4 +1,12 @@
-# Component: `actions-runner-controller`
+---
+tags:
+ - component/eks/actions-runner-controller
+ - layer/github
+ - provider/aws
+ - provider/helm
+---
+
+# Component: `eks/actions-runner-controller`
This component creates a Helm release for
[actions-runner-controller](https://github.com/actions-runner-controller/actions-runner-controller) on an EKS cluster.
diff --git a/modules/eks/alb-controller-ingress-class/README.md b/modules/eks/alb-controller-ingress-class/README.md
index cb821739e..d7856b6d2 100644
--- a/modules/eks/alb-controller-ingress-class/README.md
+++ b/modules/eks/alb-controller-ingress-class/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/alb-controller-ingress-class
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/alb-controller-ingress-class`
This component deploys a Kubernetes `IngressClass` resource for the AWS Load Balancer Controller. This is not often
diff --git a/modules/eks/alb-controller-ingress-group/README.md b/modules/eks/alb-controller-ingress-group/README.md
index 80066889c..cee06ff06 100644
--- a/modules/eks/alb-controller-ingress-group/README.md
+++ b/modules/eks/alb-controller-ingress-group/README.md
@@ -1,4 +1,12 @@
-# Component `eks/alb-controller-ingress-group`
+---
+tags:
+ - component/eks/alb-controller-ingress-group
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
+# Component: `eks/alb-controller-ingress-group`
This component provisions a Kubernetes Service that creates an ALB for a specific [IngressGroup].
diff --git a/modules/eks/alb-controller/README.md b/modules/eks/alb-controller/README.md
index 6887162d5..ccf4e616b 100644
--- a/modules/eks/alb-controller/README.md
+++ b/modules/eks/alb-controller/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/alb-controller
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/alb-controller`
This component creates a Helm release for
diff --git a/modules/eks/argocd/README.md b/modules/eks/argocd/README.md
index 6013062b3..26b28cbd0 100644
--- a/modules/eks/argocd/README.md
+++ b/modules/eks/argocd/README.md
@@ -1,4 +1,12 @@
-# Component: `argocd`
+---
+tags:
+ - component/eks/argocd
+ - layer/software-delivery
+ - provider/aws
+ - provider/helm
+---
+
+# Component: `eks/argocd`
This component is responsible for provisioning [Argo CD](https://argoproj.github.io/cd/).
diff --git a/modules/eks/aws-node-termination-handler/README.md b/modules/eks/aws-node-termination-handler/README.md
index 11acd350a..d6505fb97 100644
--- a/modules/eks/aws-node-termination-handler/README.md
+++ b/modules/eks/aws-node-termination-handler/README.md
@@ -1,4 +1,12 @@
-# Component: `aws-node-termination-handler`
+---
+tags:
+ - component/eks/aws-node-termination-handler
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
+# Component: `eks/aws-node-termination-handler`
This component creates a Helm release for
[aws-node-termination-handler](https://github.com/aws/aws-node-termination-handler) on a Kubernetes cluster.
diff --git a/modules/eks/cert-manager/README.md b/modules/eks/cert-manager/README.md
index 0fab762d9..6d1bf2f87 100644
--- a/modules/eks/cert-manager/README.md
+++ b/modules/eks/cert-manager/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/cert-manager
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/cert-manager`
This component creates a Helm release for [cert-manager](https://github.com/jetstack/cert-manager) on a Kubernetes
diff --git a/modules/eks/cluster/README.md b/modules/eks/cluster/README.md
index dcf8c48e0..b4c723e2d 100644
--- a/modules/eks/cluster/README.md
+++ b/modules/eks/cluster/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/eks/cluster
+ - layer/eks
+ - provider/aws
+---
+
# Component: `eks/cluster`
This component is responsible for provisioning an end-to-end EKS Cluster, including managed node groups and Fargate
diff --git a/modules/eks/datadog-agent/README.md b/modules/eks/datadog-agent/README.md
index 58791fa45..23a4d2419 100644
--- a/modules/eks/datadog-agent/README.md
+++ b/modules/eks/datadog-agent/README.md
@@ -1,4 +1,13 @@
-# Component: `datadog-agent`
+---
+tags:
+ - component/eks/datadog-agent
+ - layer/datadog
+ - provider/aws
+ - provider/helm
+ - provider/datadog
+---
+
+# Component: `eks/datadog-agent`
This component installs the `datadog-agent` for EKS clusters.
diff --git a/modules/eks/echo-server/README.md b/modules/eks/echo-server/README.md
index 15867e75d..8ad731f57 100644
--- a/modules/eks/echo-server/README.md
+++ b/modules/eks/echo-server/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/echo-server
+ - layer/eks
+ - provider/aws
+ - provider/echo-server
+---
+
# Component: `eks/echo-server`
This is copied from
diff --git a/modules/eks/external-dns/README.md b/modules/eks/external-dns/README.md
index 0949dfc99..77433eee3 100644
--- a/modules/eks/external-dns/README.md
+++ b/modules/eks/external-dns/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/external-dns
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/external-dns`
This component creates a Helm deployment for [external-dns](https://github.com/bitnami/bitnami-docker-external-dns) on a
diff --git a/modules/eks/external-secrets-operator/README.md b/modules/eks/external-secrets-operator/README.md
index ad75b70aa..a2c82edd4 100644
--- a/modules/eks/external-secrets-operator/README.md
+++ b/modules/eks/external-secrets-operator/README.md
@@ -1,4 +1,12 @@
-# Component: `external-secrets-operator`
+---
+tags:
+ - component/eks/external-secrets-operator
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
+# Component: `eks/external-secrets-operator`
This component (ESO) is used to create an external `SecretStore` configured to synchronize secrets from AWS SSM
Parameter store as Kubernetes Secrets within the cluster. Per the operator pattern, the `external-secret-operator` pods
diff --git a/modules/eks/github-actions-runner/README.md b/modules/eks/github-actions-runner/README.md
index ab149c1e8..0c511f62d 100644
--- a/modules/eks/github-actions-runner/README.md
+++ b/modules/eks/github-actions-runner/README.md
@@ -1,4 +1,12 @@
-# Component: `github-actions-runner`
+---
+tags:
+ - component/eks/github-actions-runner
+ - layer/github
+ - provider/aws
+ - provider/helm
+---
+
+# Component: `eks/github-actions-runner`
This component deploys self-hosted GitHub Actions Runners and a
[Controller](https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners-with-actions-runner-controller/quickstart-for-actions-runner-controller#introduction)
diff --git a/modules/eks/idp-roles/README.md b/modules/eks/idp-roles/README.md
index a5cf79006..6eff24902 100644
--- a/modules/eks/idp-roles/README.md
+++ b/modules/eks/idp-roles/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/idp-roles
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/idp-roles`
This component installs the `idp-roles` for EKS clusters. These identity provider roles specify severl pre-determined
diff --git a/modules/eks/karpenter-node-pool/README.md b/modules/eks/karpenter-node-pool/README.md
index 449fb589d..8bfefb308 100644
--- a/modules/eks/karpenter-node-pool/README.md
+++ b/modules/eks/karpenter-node-pool/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/karpenter-node-pool
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/karpenter-node-pool`
This component deploys [Karpenter NodePools](https://karpenter.sh/docs/concepts/nodepools/) to an EKS cluster.
diff --git a/modules/eks/karpenter/README.md b/modules/eks/karpenter/README.md
index f13cbcfaa..4234e3cff 100644
--- a/modules/eks/karpenter/README.md
+++ b/modules/eks/karpenter/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/karpenter
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/karpenter`
This component provisions [Karpenter](https://karpenter.sh) on an EKS cluster. It requires at least version 0.32.0 of
diff --git a/modules/eks/keda/README.md b/modules/eks/keda/README.md
index 1546853ca..eb5b207ad 100644
--- a/modules/eks/keda/README.md
+++ b/modules/eks/keda/README.md
@@ -1,4 +1,12 @@
-# Component: `keda`
+---
+tags:
+ - component/eks/keda
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
+# Component: `eks/keda`
This component is used to install the KEDA operator.
diff --git a/modules/eks/loki/README.md b/modules/eks/loki/README.md
index 60f7fef1d..3b96994cf 100644
--- a/modules/eks/loki/README.md
+++ b/modules/eks/loki/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/loki
+ - layer/grafana
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/loki`
Grafana Loki is a set of resources that can be combined into a fully featured logging stack. Unlike other logging
diff --git a/modules/eks/metrics-server/README.md b/modules/eks/metrics-server/README.md
index 90c4d4f31..743edc51e 100644
--- a/modules/eks/metrics-server/README.md
+++ b/modules/eks/metrics-server/README.md
@@ -1,4 +1,12 @@
-# Component: `metrics-server`
+---
+tags:
+ - component/eks/metrics-server
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
+# Component: `eks/metrics-server`
This component creates a Helm release for [metrics-server](https://github.com/kubernetes-sigs/metrics-server) is a
Kubernetes addon that provides resource usage metrics used in particular by other addons such Horizontal Pod Autoscaler.
@@ -54,7 +62,6 @@ components:
| Name | Version |
|------|---------|
| [aws](#provider\_aws) | >= 4.9.0 |
-| [kubernetes](#provider\_kubernetes) | >= 2.14.0, != 2.21.0 |
## Modules
diff --git a/modules/eks/prometheus-scraper/README.md b/modules/eks/prometheus-scraper/README.md
index 20c7ce7b8..fc6754aa8 100644
--- a/modules/eks/prometheus-scraper/README.md
+++ b/modules/eks/prometheus-scraper/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/prometheus-scraper
+ - layer/grafana
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/prometheus-scraper`
This component provisions the an Amazon Managed collector or scraper to connect Amazon Managed Prometheus (AMP) with an
diff --git a/modules/eks/promtail/README.md b/modules/eks/promtail/README.md
index 5ecafa3b4..ecefac8bd 100644
--- a/modules/eks/promtail/README.md
+++ b/modules/eks/promtail/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/promtail
+ - layer/grafana
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/promtail`
Promtail is an agent which ships the contents of local logs to a Loki instance.
diff --git a/modules/eks/redis-operator/README.md b/modules/eks/redis-operator/README.md
index a2e51ed93..0504d982b 100644
--- a/modules/eks/redis-operator/README.md
+++ b/modules/eks/redis-operator/README.md
@@ -1,3 +1,12 @@
+---
+tags:
+ - component/eks/redis-operator
+ - layer/eks
+ - layer/data
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/redis-operator`
This component installs `redis-operator` for EKS clusters. Redis Operator creates/configures/manages high availability
diff --git a/modules/eks/redis/README.md b/modules/eks/redis/README.md
index d488ba944..6bf7feac3 100644
--- a/modules/eks/redis/README.md
+++ b/modules/eks/redis/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/redis
+ - layer/data
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/redis`
This component installs `redis` for EKS clusters. This is a Self Hosted Redis Cluster installed on EKS.
diff --git a/modules/eks/reloader/README.md b/modules/eks/reloader/README.md
index 3119f1f3b..9e720e55f 100644
--- a/modules/eks/reloader/README.md
+++ b/modules/eks/reloader/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/eks/reloader
+ - layer/eks
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/reloader`
This component installs the [Stakater Reloader](https://github.com/stakater/Reloader) for EKS clusters. `reloader` can
diff --git a/modules/eks/storage-class/README.md b/modules/eks/storage-class/README.md
index 4ada75221..a9c64d06e 100644
--- a/modules/eks/storage-class/README.md
+++ b/modules/eks/storage-class/README.md
@@ -1,3 +1,12 @@
+---
+tags:
+ - component/eks
+ - layer/eks
+ - layer/data
+ - provider/aws
+ - provider/helm
+---
+
# Component: `eks/storage-class`
This component is responsible for provisioning `StorageClasses` in an EKS cluster. See the list of guides and references
diff --git a/modules/elasticache-redis/README.md b/modules/elasticache-redis/README.md
index 0088fa0e8..eaec1c2ae 100644
--- a/modules/elasticache-redis/README.md
+++ b/modules/elasticache-redis/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/elasticache-redis
+ - layer/data
+ - provider/aws
+---
+
# Component: `elasticache-redis`
This component is responsible for provisioning [ElastiCache Redis](https://aws.amazon.com/elasticache/redis/) clusters.
diff --git a/modules/elasticsearch/README.md b/modules/elasticsearch/README.md
index 0458a7433..710e244eb 100644
--- a/modules/elasticsearch/README.md
+++ b/modules/elasticsearch/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/elasticsearch
+ - layer/data
+ - provider/aws
+---
+
# Component: `elasticsearch`
This component is responsible for provisioning an Elasticsearch cluster with built-in integrations with Kibana and
diff --git a/modules/eventbridge/README.md b/modules/eventbridge/README.md
index bbd1c0a95..a406e4d7e 100644
--- a/modules/eventbridge/README.md
+++ b/modules/eventbridge/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/eventbridge
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `eventbridge`
The `eventbridge` component is a Terraform module that defines a CloudWatch EventBridge rule. The rule is pointed at
diff --git a/modules/github-action-token-rotator/README.md b/modules/github-action-token-rotator/README.md
index cdff9ec74..dd566a83c 100644
--- a/modules/github-action-token-rotator/README.md
+++ b/modules/github-action-token-rotator/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/github-action-token-rotator
+ - layer/github
+ - provider/aws
+---
+
# Component: `github-action-token-rotator`
This component is responsible for provisioning
diff --git a/modules/github-oidc-provider/README.md b/modules/github-oidc-provider/README.md
index 59c17f515..e2d38fa7a 100644
--- a/modules/github-oidc-provider/README.md
+++ b/modules/github-oidc-provider/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/github-oidc-provider
+ - layer/github
+ - provider/aws
+ - privileged
+---
+
# Component: `github-oidc-provider`
This component is responsible for authorizing the GitHub OIDC provider as an Identity provider for an AWS account. It is
diff --git a/modules/github-oidc-role/README.md b/modules/github-oidc-role/README.md
index 4c003e77d..e4bce3939 100644
--- a/modules/github-oidc-role/README.md
+++ b/modules/github-oidc-role/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/github-oidc-role
+ - layer/github
+ - provider/aws
+ - privileged
+---
+
# Component: `github-oidc-role`
This component is responsible for creating IAM roles for GitHub Actions to assume.
diff --git a/modules/github-runners/README.md b/modules/github-runners/README.md
index e36a78b29..0cadce033 100644
--- a/modules/github-runners/README.md
+++ b/modules/github-runners/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/github-runners
+ - layer/github
+ - provider/aws
+---
+
# Component: `github-runners`
This component is responsible for provisioning EC2 instances for GitHub runners.
diff --git a/modules/github-webhook/README.md b/modules/github-webhook/README.md
index 74b5e13f1..578ae47e9 100644
--- a/modules/github-webhook/README.md
+++ b/modules/github-webhook/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/github-webhook
+ - layer/software-delivery
+ - provider/aws
+---
+
# Component: `github-webhook`
This component provisions a GitHub webhook for a single GitHub repository.
diff --git a/modules/global-accelerator-endpoint-group/README.md b/modules/global-accelerator-endpoint-group/README.md
index fcbedd063..8e434bfcd 100644
--- a/modules/global-accelerator-endpoint-group/README.md
+++ b/modules/global-accelerator-endpoint-group/README.md
@@ -1,4 +1,11 @@
-# Component: `global-accelerator`
+---
+tags:
+ - component/global-accelerator-endpoint-group
+ - layer/unassigned
+ - provider/aws
+---
+
+# Component: `global-accelerator-endpoint-group`
This component is responsible for provisioning a Global Accelerator Endpoint Group.
diff --git a/modules/global-accelerator/README.md b/modules/global-accelerator/README.md
index f76093e40..7fd22f2f7 100644
--- a/modules/global-accelerator/README.md
+++ b/modules/global-accelerator/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/global-accelerator
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `global-accelerator`
This component is responsible for provisioning AWS Global Accelerator and its listeners.
diff --git a/modules/glue/catalog-database/README.md b/modules/glue/catalog-database/README.md
index 9ed139442..1d5230a51 100644
--- a/modules/glue/catalog-database/README.md
+++ b/modules/glue/catalog-database/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/catalog-database
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/catalog-database`
This component provisions Glue catalog databases.
diff --git a/modules/glue/catalog-table/README.md b/modules/glue/catalog-table/README.md
index 2dbff5cf5..8c7407714 100644
--- a/modules/glue/catalog-table/README.md
+++ b/modules/glue/catalog-table/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/catalog-table
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/catalog-table`
This component provisions Glue catalog tables.
diff --git a/modules/glue/connection/README.md b/modules/glue/connection/README.md
index 082197fd3..d6015a422 100644
--- a/modules/glue/connection/README.md
+++ b/modules/glue/connection/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/connection
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/connection`
This component provisions Glue connections.
diff --git a/modules/glue/crawler/README.md b/modules/glue/crawler/README.md
index 9395b5eb1..a06fd003c 100644
--- a/modules/glue/crawler/README.md
+++ b/modules/glue/crawler/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/crawler
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/crawler`
This component provisions Glue crawlers.
diff --git a/modules/glue/iam/README.md b/modules/glue/iam/README.md
index 6de843fc5..ce4020405 100644
--- a/modules/glue/iam/README.md
+++ b/modules/glue/iam/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/iam
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/iam`
This component provisions IAM roles for AWS Glue.
diff --git a/modules/glue/job/README.md b/modules/glue/job/README.md
index edfe7f946..5d0a2081c 100644
--- a/modules/glue/job/README.md
+++ b/modules/glue/job/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/job
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/job`
This component provisions Glue jobs.
diff --git a/modules/glue/registry/README.md b/modules/glue/registry/README.md
index 0fa49a243..0ad49a19d 100644
--- a/modules/glue/registry/README.md
+++ b/modules/glue/registry/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/registry
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/registry`
This component provisions Glue registries.
diff --git a/modules/glue/schema/README.md b/modules/glue/schema/README.md
index 82a58c1fe..d0bdb857e 100644
--- a/modules/glue/schema/README.md
+++ b/modules/glue/schema/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/schema
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/schema`
This component provisions Glue schemas.
diff --git a/modules/glue/trigger/README.md b/modules/glue/trigger/README.md
index e692e2aa5..c9ba1b6ee 100644
--- a/modules/glue/trigger/README.md
+++ b/modules/glue/trigger/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/trigger
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/trigger`
This component provisions Glue triggers.
diff --git a/modules/glue/workflow/README.md b/modules/glue/workflow/README.md
index d6adadd7a..576ed5c3b 100644
--- a/modules/glue/workflow/README.md
+++ b/modules/glue/workflow/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/glue/workflow
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `glue/workflow`
This component provisions Glue workflows.
diff --git a/modules/guardduty/README.md b/modules/guardduty/README.md
index 199691f33..ce4e3163d 100644
--- a/modules/guardduty/README.md
+++ b/modules/guardduty/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/guardduty
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `guardduty`
This component is responsible for configuring GuardDuty within an AWS Organization.
diff --git a/modules/iam-role/README.md b/modules/iam-role/README.md
index 9976affcf..ea332bd17 100644
--- a/modules/iam-role/README.md
+++ b/modules/iam-role/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/iam-role
+ - layer/addons
+ - provider/aws
+---
+
# Component: `iam-role`
This component is responsible for provisioning simple IAM roles. If a more complicated IAM role and policy are desired
diff --git a/modules/iam-service-linked-roles/README.md b/modules/iam-service-linked-roles/README.md
index b36f0f4f0..5d7f38029 100644
--- a/modules/iam-service-linked-roles/README.md
+++ b/modules/iam-service-linked-roles/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/iam-service-linked-roles
+ - layer/eks
+ - provider/aws
+---
+
# Component: `iam-service-linked-roles`
This component is responsible for provisioning
diff --git a/modules/ipam/README.md b/modules/ipam/README.md
index a9b590df5..b185706df 100644
--- a/modules/ipam/README.md
+++ b/modules/ipam/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/ipam
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `ipam`
This component is responsible for provisioning IPAM per region in a centralized account.
diff --git a/modules/kinesis-stream/README.md b/modules/kinesis-stream/README.md
index 495403606..98d5758b4 100644
--- a/modules/kinesis-stream/README.md
+++ b/modules/kinesis-stream/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/kinesis-stream
+ - layer/addons
+ - provider/aws
+---
+
# Component: `kinesis-stream`
This component is responsible for provisioning an Amazon Kinesis data stream.
diff --git a/modules/kms/README.md b/modules/kms/README.md
index 4be480599..0d754d9fe 100644
--- a/modules/kms/README.md
+++ b/modules/kms/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/kms
+ - layer/addons
+ - provider/aws
+---
+
# Component: `kms`
This component is responsible for provisioning a KMS Key.
diff --git a/modules/lakeformation/README.md b/modules/lakeformation/README.md
index 2c43b8d5a..83807cb20 100644
--- a/modules/lakeformation/README.md
+++ b/modules/lakeformation/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/lakeformation
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `lakeformation`
This component is responsible for provisioning Amazon Lake Formation resources.
diff --git a/modules/lambda/README.md b/modules/lambda/README.md
index 34eaf24cf..c8adb2505 100644
--- a/modules/lambda/README.md
+++ b/modules/lambda/README.md
@@ -1,4 +1,11 @@
-# Component: `lambda`
+---
+tags:
+ - component/sso-saml-provider
+ - layer/software-delivery
+ - provider/aws
+---
+
+# Component: `sso-saml-provider`
This component is responsible for provisioning Lambda functions.
diff --git a/modules/macie/README.md b/modules/macie/README.md
index e5ab09ff9..497e14d7e 100644
--- a/modules/macie/README.md
+++ b/modules/macie/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/macie
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `macie`
This component is responsible for configuring Macie within an AWS Organization.
diff --git a/modules/managed-grafana/api-key/README.md b/modules/managed-grafana/api-key/README.md
index fbbad996c..612ddcaac 100644
--- a/modules/managed-grafana/api-key/README.md
+++ b/modules/managed-grafana/api-key/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/managed-grafana/api-key
+ - layer/grafana
+ - provider/aws
+ - provider/grafana
+---
+
# Component: `managed-grafana/api-key`
This component is responsible for provisioning an API Key for an Amazon Managed Grafana workspace.
diff --git a/modules/managed-grafana/dashboard/README.md b/modules/managed-grafana/dashboard/README.md
index 834b81f35..170b5941a 100644
--- a/modules/managed-grafana/dashboard/README.md
+++ b/modules/managed-grafana/dashboard/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/managed-grafana/dashboard
+ - layer/grafana
+ - provider/aws
+ - provider/grafana
+---
+
# Component: `managed-grafana/dashboard`
This component is responsible for provisioning a dashboard an Amazon Managed Grafana workspace.
diff --git a/modules/managed-grafana/data-source/loki/README.md b/modules/managed-grafana/data-source/loki/README.md
index 52816afe6..248b9239d 100644
--- a/modules/managed-grafana/data-source/loki/README.md
+++ b/modules/managed-grafana/data-source/loki/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/managed-grafana/data-source/loki
+ - layer/grafana
+ - provider/aws
+ - provider/grafana
+---
+
# Component: `managed-grafana/data-source/loki`
This component is responsible for provisioning a Loki data source for an Amazon Managed Grafana workspace.
diff --git a/modules/managed-grafana/data-source/managed-prometheus/README.md b/modules/managed-grafana/data-source/managed-prometheus/README.md
index f261ef614..2f3ae9bd9 100644
--- a/modules/managed-grafana/data-source/managed-prometheus/README.md
+++ b/modules/managed-grafana/data-source/managed-prometheus/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/managed-grafana/data-source/managed-prometheus
+ - layer/grafana
+ - provider/aws
+ - provider/grafana
+---
+
# Component: `managed-grafana/data-source/managed-prometheus`
This component is responsible for provisioning an Amazon Managed Prometheus data source for an Amazon Managed Grafana
diff --git a/modules/managed-grafana/workspace/README.md b/modules/managed-grafana/workspace/README.md
index 27e92e1c0..3c2a31de1 100644
--- a/modules/managed-grafana/workspace/README.md
+++ b/modules/managed-grafana/workspace/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/managed-grafana/workspace
+ - layer/grafana
+ - provider/aws
+ - provider/grafana
+---
+
# Component: `managed-grafana/workspace`
This component is responsible for provisioning an Amazon Managed Grafana workspace.
@@ -36,7 +44,7 @@ components:
stage: dev
```
-> [!NOTE]
+> [!NOTE]
>
> We would prefer to have a custom URL for the provisioned Grafana workspace, but at the moment it's not supported
> natively and implementation would be non-trivial. We will continue to monitor that Issue and consider alternatives,
diff --git a/modules/managed-prometheus/workspace/README.md b/modules/managed-prometheus/workspace/README.md
index 9f270b9ae..44f391d12 100644
--- a/modules/managed-prometheus/workspace/README.md
+++ b/modules/managed-prometheus/workspace/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/managed-prometheus/workspace
+ - layer/grafana
+ - provider/aws
+---
+
# Component: `managed-prometheus/workspace`
This component is responsible for provisioning a workspace for Amazon Managed Service for Prometheus, also known as
diff --git a/modules/mq-broker/README.md b/modules/mq-broker/README.md
index bd763ca48..56466728b 100644
--- a/modules/mq-broker/README.md
+++ b/modules/mq-broker/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/mq-broker
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `mq-broker`
This component is responsible for provisioning an AmazonMQ broker and corresponding security group.
diff --git a/modules/msk/README.md b/modules/msk/README.md
index 6c4d8424a..e18148bd9 100644
--- a/modules/msk/README.md
+++ b/modules/msk/README.md
@@ -1,4 +1,11 @@
-# Component: `msk/cluster`
+---
+tags:
+ - component/msk
+ - layer/unassigned
+ - provider/aws
+---
+
+# Component: `msk`
This component is responsible for provisioning [Amazon Managed Streaming](https://aws.amazon.com/msk/) clusters for
[Apache Kafka](https://aws.amazon.com/msk/what-is-kafka/).
diff --git a/modules/mwaa/README.md b/modules/mwaa/README.md
index e8c816d16..2c3d90e8d 100644
--- a/modules/mwaa/README.md
+++ b/modules/mwaa/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/mwaa
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `mwaa`
This component provisions Amazon managed workflows for Apache Airflow.
diff --git a/modules/network-firewall/README.md b/modules/network-firewall/README.md
index 4d2b122a8..b95a0e63e 100644
--- a/modules/network-firewall/README.md
+++ b/modules/network-firewall/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/network-firewall
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `network-firewall`
This component is responsible for provisioning [AWS Network Firewall](https://aws.amazon.com/network-firewal) resources,
diff --git a/modules/opsgenie-team/README.md b/modules/opsgenie-team/README.md
index 4b3c38e96..74bd1dc15 100644
--- a/modules/opsgenie-team/README.md
+++ b/modules/opsgenie-team/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/opsgenie-team
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `opsgenie-team`
This component is responsible for provisioning Opsgenie teams and related services, rules, schedules.
@@ -389,8 +396,6 @@ Track the issue: https://github.com/opsgenie/terraform-provider-opsgenie/issues/
[See OpsGenie in the Reference Architecture](https://docs.cloudposse.com/layers/alerting/opsgenie/)
-
-
## References
- [cloudposse/terraform-aws-components](https://github.com/cloudposse/terraform-aws-components/tree/main/modules/opsgenie-team) -
diff --git a/modules/philips-labs-github-runners/README.md b/modules/philips-labs-github-runners/README.md
index a1c4e7bce..9a13c7806 100644
--- a/modules/philips-labs-github-runners/README.md
+++ b/modules/philips-labs-github-runners/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/philips-labs-github-runners
+ - layer/github
+ - provider/aws
+---
+
# Component: `philips-labs-github-runners`
This component is responsible for provisioning the surrounding infrastructure for the github runners.
diff --git a/modules/rds/README.md b/modules/rds/README.md
index 69341a92b..841a441c4 100644
--- a/modules/rds/README.md
+++ b/modules/rds/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/rds
+ - layer/data
+ - provider/aws
+---
+
# Component: `rds`
This component is responsible for provisioning an RDS instance. It seeds relevant database information (hostnames,
diff --git a/modules/redshift/README.md b/modules/redshift/README.md
index 52d0fd6a0..7e5445b11 100644
--- a/modules/redshift/README.md
+++ b/modules/redshift/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/redshift
+ - layer/data
+ - provider/aws
+---
+
# Component: `redshift`
This component is responsible for provisioning a RedShift instance. It seeds relevant database information (hostnames,
diff --git a/modules/route53-resolver-dns-firewall/README.md b/modules/route53-resolver-dns-firewall/README.md
index 63519378f..8b8ba8a58 100644
--- a/modules/route53-resolver-dns-firewall/README.md
+++ b/modules/route53-resolver-dns-firewall/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/route53-resolver-dns-firewall
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `route53-resolver-dns-firewall`
This component is responsible for provisioning
diff --git a/modules/s3-bucket/README.md b/modules/s3-bucket/README.md
index 7e35bf2ed..218d3b4a2 100644
--- a/modules/s3-bucket/README.md
+++ b/modules/s3-bucket/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/s3-bucket
+ - layer/addons
+ - layer/gitops
+ - provider/aws
+---
+
# Component: `s3-bucket`
This component is responsible for provisioning S3 buckets.
diff --git a/modules/security-hub/README.md b/modules/security-hub/README.md
index 43bf853ca..e962f3118 100644
--- a/modules/security-hub/README.md
+++ b/modules/security-hub/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/security-hub
+ - layer/security-and-compliance
+ - provider/aws
+---
+
# Component: `security-hub`
This component is responsible for configuring Security Hub within an AWS Organization.
diff --git a/modules/ses/README.md b/modules/ses/README.md
index 5d99a0c07..0bbfdf52b 100644
--- a/modules/ses/README.md
+++ b/modules/ses/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/ses
+ - layer/addons
+ - provider/aws
+---
+
# Component: `ses`
This component is responsible for provisioning SES to act as an SMTP gateway. The credentials used for sending email can
diff --git a/modules/sftp/README.md b/modules/sftp/README.md
index 7aad36556..460ba8f2c 100644
--- a/modules/sftp/README.md
+++ b/modules/sftp/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/sftp
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `sftp`
This component is responsible for provisioning SFTP Endpoints.
diff --git a/modules/snowflake-account/README.md b/modules/snowflake-account/README.md
index 3ad2093f1..e290c5231 100644
--- a/modules/snowflake-account/README.md
+++ b/modules/snowflake-account/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/snowflake-account
+ - layer/unassigned
+ - provider/aws
+ - provider/snowflake
+---
+
# Component: `snowflake-account`
This component sets up the requirements for all other Snowflake components, including creating the Terraform service
diff --git a/modules/snowflake-database/README.md b/modules/snowflake-database/README.md
index 70e340027..a96776606 100644
--- a/modules/snowflake-database/README.md
+++ b/modules/snowflake-database/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/snowflake-database
+ - layer/unassigned
+ - provider/aws
+ - provider/snowflake
+---
+
# Component: `snowflake-database`
All data in Snowflake is stored in database tables, logically structured as collections of columns and rows. This
diff --git a/modules/sns-topic/README.md b/modules/sns-topic/README.md
index 1c5eee12d..97fdb4665 100644
--- a/modules/sns-topic/README.md
+++ b/modules/sns-topic/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/sns-topic
+ - layer/addons
+ - provider/aws
+---
+
# Component: `sns-topic`
This component is responsible for provisioning an SNS topic.
diff --git a/modules/spa-s3-cloudfront/README.md b/modules/spa-s3-cloudfront/README.md
index 2a8f8e034..173f9a2b7 100644
--- a/modules/spa-s3-cloudfront/README.md
+++ b/modules/spa-s3-cloudfront/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/spa-s3-cloudfront
+ - layer/addons
+ - provider/aws
+---
+
# Component: `spa-s3-cloudfront`
This component is responsible for provisioning:
diff --git a/modules/spacelift/README.md b/modules/spacelift/README.md
index 864cdbbb7..1dedcf8ed 100644
--- a/modules/spacelift/README.md
+++ b/modules/spacelift/README.md
@@ -1,4 +1,11 @@
-# Spacelift
+---
+tags:
+ - layer/spacelift
+ - provider/aws
+ - provider/spacelift
+---
+
+# Component: `spacelift`
These components are responsible for setting up Spacelift and include three components: `spacelift/admin-stack`,
`spacelift/spaces`, and `spacelift/worker-pool`.
diff --git a/modules/spacelift/admin-stack/README.md b/modules/spacelift/admin-stack/README.md
index ce23def69..e48e910b3 100644
--- a/modules/spacelift/admin-stack/README.md
+++ b/modules/spacelift/admin-stack/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/spacelift/admin-stack
+ - layer/spacelift
+ - provider/aws
+ - provider/spacelift
+---
+
# Component: `spacelift/admin-stack`
This component is responsible for creating an administrative [stack](https://docs.spacelift.io/concepts/stack/) and its
diff --git a/modules/spacelift/spaces/README.md b/modules/spacelift/spaces/README.md
index 17e110d86..37f43cb73 100644
--- a/modules/spacelift/spaces/README.md
+++ b/modules/spacelift/spaces/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/spacelift/spaces
+ - layer/spacelift
+ - provider/aws
+ - provider/spacelift
+---
+
# Component: `spacelift/spaces`
This component is responsible for creating and managing the [spaces](https://docs.spacelift.io/concepts/spaces/) in the
diff --git a/modules/spacelift/worker-pool/README.md b/modules/spacelift/worker-pool/README.md
index bf2ad4acc..073e41011 100644
--- a/modules/spacelift/worker-pool/README.md
+++ b/modules/spacelift/worker-pool/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/spacelift/worker-pool
+ - layer/spacelift
+ - provider/aws
+ - provider/spacelift
+---
+
# Component: `spacelift/worker-pool`
This component is responsible for provisioning Spacelift worker pools.
diff --git a/modules/sqs-queue/README.md b/modules/sqs-queue/README.md
index 4c0f1b786..ee5b7a583 100644
--- a/modules/sqs-queue/README.md
+++ b/modules/sqs-queue/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/sqs-queue
+ - layer/addons
+ - provider/aws
+---
+
# Component: `sqs-queue`
This component is responsible for creating an SQS queue.
diff --git a/modules/ssm-parameters/README.md b/modules/ssm-parameters/README.md
index 911755472..3c5c374bf 100644
--- a/modules/ssm-parameters/README.md
+++ b/modules/ssm-parameters/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/ssm-parameters
+ - layer/addons
+ - provider/aws
+---
+
# Component: `ssm-parameters`
This component is responsible for provisioning Parameter Store resources against AWS SSM. It supports normal parameter
diff --git a/modules/sso-saml-provider/README.md b/modules/sso-saml-provider/README.md
index 008892277..cf3b076a7 100644
--- a/modules/sso-saml-provider/README.md
+++ b/modules/sso-saml-provider/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/sso-saml-provider
+ - layer/software-delivery
+ - provider/aws
+---
+
# Component: `sso-saml-provider`
This component reads sso credentials from SSM Parameter store and provides them as outputs
diff --git a/modules/strongdm/README.md b/modules/strongdm/README.md
index 20aa20f0d..91f0a6941 100644
--- a/modules/strongdm/README.md
+++ b/modules/strongdm/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/strongdm
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `strongdm`
This component provisions [strongDM](https://www.strongdm.com/) gateway, relay and roles
diff --git a/modules/tfstate-backend/README.md b/modules/tfstate-backend/README.md
index 870561472..cdd0e2a5a 100644
--- a/modules/tfstate-backend/README.md
+++ b/modules/tfstate-backend/README.md
@@ -1,3 +1,11 @@
+---
+tags:
+ - component/tfstate-backend
+ - layer/foundation
+ - provider/aws
+ - privileged
+---
+
# Component: `tfstate-backend`
This component is responsible for provisioning an S3 Bucket and DynamoDB table that follow security best practices for
@@ -12,12 +20,19 @@ security configuration information, so careful planning is required when archite
## Prerequisites
+> [!TIP]
+>
+> Part of cold start, so it has to initially be run with `SuperAdmin`, multiple times: to create the S3 bucket and then
+> to move the state into it. Follow the guide
+> **[here](https://docs.cloudposse.com/layers/accounts/tutorials/manual-configuration/#provision-tfstate-backend-component)**
+> to get started.
+
- This component assumes you are using the `aws-teams` and `aws-team-roles` components.
-- Before the `account` and `account-map` components are deployed for the first time, you'll want to run this component with `access_roles_enabled` set to `false` to
- prevent errors due to missing IAM Role ARNs.
- This will enable only enough access to the Terraform state for you to finish provisioning accounts and roles.
- After those components have been deployed, you will want to
- run this component again with `access_roles_enabled` set to `true` to provide the complete access as configured in the stacks.
+- Before the `account` and `account-map` components are deployed for the first time, you'll want to run this component
+ with `access_roles_enabled` set to `false` to prevent errors due to missing IAM Role ARNs. This will enable only
+ enough access to the Terraform state for you to finish provisioning accounts and roles. After those components have
+ been deployed, you will want to run this component again with `access_roles_enabled` set to `true` to provide the
+ complete access as configured in the stacks.
### Access Control
diff --git a/modules/tgw/README.md b/modules/tgw/README.md
index 8d191c74d..386a1f4ed 100644
--- a/modules/tgw/README.md
+++ b/modules/tgw/README.md
@@ -1,4 +1,11 @@
-# Transit Gateway: `tgw`
+---
+tags:
+ - component/tgw
+ - layer/network
+ - provider/aws
+---
+
+# Component: `tgw`
AWS Transit Gateway connects your Amazon Virtual Private Clouds (VPCs) and on-premises networks through a central hub.
This connection simplifies your network and puts an end to complex peering relationships. Transit Gateway acts as a
diff --git a/modules/tgw/cross-region-hub-connector/README.md b/modules/tgw/cross-region-hub-connector/README.md
index 1de5a593a..8d2d7af97 100644
--- a/modules/tgw/cross-region-hub-connector/README.md
+++ b/modules/tgw/cross-region-hub-connector/README.md
@@ -1,4 +1,11 @@
-# Component: `cross-region-hub-connector`
+---
+tags:
+ - component/tgw/cross-region-hub-connector
+ - layer/network
+ - provider/aws
+---
+
+# Component: `tgw/cross-region-hub-connector`
This component is responsible for provisioning an
[AWS Transit Gateway Peering Connection](https://aws.amazon.com/transit-gateway) to connect TGWs from different accounts
diff --git a/modules/tgw/hub/README.md b/modules/tgw/hub/README.md
index 1ada2debe..08a17a0fd 100644
--- a/modules/tgw/hub/README.md
+++ b/modules/tgw/hub/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/tgw/hub
+ - layer/network
+ - provider/aws
+---
+
# Component: `tgw/hub`
This component is responsible for provisioning an [AWS Transit Gateway](https://aws.amazon.com/transit-gateway) `hub`
diff --git a/modules/tgw/spoke/README.md b/modules/tgw/spoke/README.md
index acc6ce0ba..816339c22 100644
--- a/modules/tgw/spoke/README.md
+++ b/modules/tgw/spoke/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/tgw/spoke
+ - layer/network
+ - provider/aws
+---
+
# Component: `tgw/spoke`
This component is responsible for provisioning [AWS Transit Gateway](https://aws.amazon.com/transit-gateway) attachments
diff --git a/modules/vpc-flow-logs-bucket/README.md b/modules/vpc-flow-logs-bucket/README.md
index 143e0d10c..f831f858c 100644
--- a/modules/vpc-flow-logs-bucket/README.md
+++ b/modules/vpc-flow-logs-bucket/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/vpc-flow-logs-bucket
+ - layer/network
+ - provider/aws
+---
+
# Component: `vpc-flow-logs-bucket`
This component is responsible for provisioning an encrypted S3 bucket which is configured to receive VPC Flow Logs.
diff --git a/modules/vpc-peering/README.md b/modules/vpc-peering/README.md
index c4a2eadfc..53c9d6f18 100644
--- a/modules/vpc-peering/README.md
+++ b/modules/vpc-peering/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/vpc-peering
+ - layer/network
+ - provider/aws
+---
+
# Component: `vpc-peering`
This component is responsible for creating a peering connection between two VPCs existing in different AWS accounts.
diff --git a/modules/vpc/README.md b/modules/vpc/README.md
index 2d0030d9b..cc9d93b7a 100644
--- a/modules/vpc/README.md
+++ b/modules/vpc/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/vpc
+ - layer/network
+ - provider/aws
+---
+
# Component: `vpc`
This component is responsible for provisioning a VPC and corresponding Subnets. Additionally, VPC Flow Logs can
@@ -75,7 +82,7 @@ components:
|------|--------|---------|
| [endpoint\_security\_groups](#module\_endpoint\_security\_groups) | cloudposse/security-group/aws | 2.2.0 |
| [iam\_roles](#module\_iam\_roles) | ../account-map/modules/iam-roles | n/a |
-| [subnets](#module\_subnets) | cloudposse/dynamic-subnets/aws | 2.3.0 |
+| [subnets](#module\_subnets) | cloudposse/dynamic-subnets/aws | 2.4.2 |
| [this](#module\_this) | cloudposse/label/null | 0.25.0 |
| [utils](#module\_utils) | cloudposse/utils/aws | 1.3.0 |
| [vpc](#module\_vpc) | cloudposse/vpc/aws | 2.1.0 |
diff --git a/modules/waf/README.md b/modules/waf/README.md
index 3538f19fc..9b41f4367 100644
--- a/modules/waf/README.md
+++ b/modules/waf/README.md
@@ -1,4 +1,11 @@
-# Component: `aws-waf-acl`
+---
+tags:
+ - component/waf
+ - layer/addons
+ - provider/aws
+---
+
+# Component: `waf`
This component is responsible for provisioning an AWS Web Application Firewall (WAF) with an associated managed rule
group.
diff --git a/modules/zscaler/README.md b/modules/zscaler/README.md
index c736f0109..4cd5bf6fd 100644
--- a/modules/zscaler/README.md
+++ b/modules/zscaler/README.md
@@ -1,3 +1,10 @@
+---
+tags:
+ - component/zscaler
+ - layer/unassigned
+ - provider/aws
+---
+
# Component: `zscaler`
This component is responsible for provisioning ZScaler Private Access Connector instances on Amazon Linux 2 AMIs.