# Nuvibit Terraform Collection (NTC) Documentation

> NTC is a collection of production-grade Terraform/OpenTofu modules for building and operating AWS multi-account Landing Zones. Module source code requires an NTC subscription; documentation, usage examples and implementation blueprints are public.

Machine-readable module and release data: https://docs.nuvibit.com/api/modules.json, https://docs.nuvibit.com/api/releases.json

## Getting Started

- [Getting Started](https://docs.nuvibit.com/getting-started.md): Learn how to simplify AWS cloud adoption with the Nuvibit Terraform Collection (NTC), a suite of modular Terraform/OpenTofu building blocks. Discover step-by-step guidance, professional services, and tools designed to help enterprises and startups deploy secure, scalable, and compliant AWS environments with ease.
- [Machine-Readable Docs](https://docs.nuvibit.com/getting-started/machine-readable-docs.md): Plain Markdown copies of every NTC documentation page, llms.txt for AI assistants and coding agents, and JSON endpoints with module and release data for scripts.
- [Module Map](https://docs.nuvibit.com/getting-started/module-map.md): All modules of the Nuvibit Terraform Collection (NTC) on one page, grouped by domain with their current versions, and the order in which a Landing Zone is usually rolled out.
- [Quickstart](https://docs.nuvibit.com/getting-started/quickstart.md): Get started with the Nuvibit Terraform Collection (NTC) by deploying your first building block, NTC Organizations. This Quickstart Guide provides step-by-step instructions to set up AWS Organizations, define OU structures, and apply guardrails efficiently using modular Terraform / OpenTofu building blocks.
- [Support](https://docs.nuvibit.com/getting-started/support.md): Get expert assistance with the Nuvibit Terraform Collection (NTC). Explore our support tiers, from Standard to Enterprise, and Professional Services for tailored help with implementation, troubleshooting, and optimization. Contact us to ensure seamless AWS operations.
- [Versions, Releases and Upgrades](https://docs.nuvibit.com/getting-started/versioning.md): How NTC modules are versioned, how to pin a version in Terraform or OpenTofu, where to read release notes and how to approach minor and major upgrades.

## NTC Building Blocks

- [NTC Building Blocks](https://docs.nuvibit.com/ntc-building-blocks.md): Discover Nuvibit Terraform Collection (NTC), a suite of modular, enterprise-grade Terraform/OpenTofu building blocks designed to simplify AWS cloud management, enhance security, and accelerate deployment. Ideal for creating scalable, compliant, and efficient AWS environments.
- [Connectivity](https://docs.nuvibit.com/ntc-building-blocks/connectivity.md): Explore NTC Connectivity building blocks, designed to enable secure and reliable networking across AWS accounts, regions, and on-premises infrastructure.
- [NTC Core Network](https://docs.nuvibit.com/ntc-building-blocks/connectivity/ntc-core-network.md): Simplify AWS networking with NTC Core Network. Automate Transit Gateway, VPN, and Direct Connect for secure single or multi-region network deployments and hybrid connectivity.
- [NTC IP Address Management](https://docs.nuvibit.com/ntc-building-blocks/connectivity/ntc-ipam.md): Simplify IP address management with NTC IPAM. Automate AWS VPC IP Address Manager setup to centralize CIDR allocations, enforce policies, and optimize IP usage across accounts and regions.
- [NTC Network Firewall](https://docs.nuvibit.com/ntc-building-blocks/connectivity/ntc-network-firewall.md): Deploy and manage AWS Network Firewall with centralized rule groups and firewall policies using NTC Network Firewall.
- [Firewall Policies](https://docs.nuvibit.com/ntc-building-blocks/connectivity/ntc-network-firewall/firewall-policies.md): Learn about AWS Network Firewall policies, rule groups, and processing order. Understand stateless vs stateful rules, domain filtering, Suricata IPS, and the differences between STRICT_ORDER and DEFAULT_ACTION_ORDER.
- [NTC Route53 (DNS)](https://docs.nuvibit.com/ntc-building-blocks/connectivity/ntc-route53.md): Manage Route53 DNS hosted zones, records, and resolver rules across your AWS organization with NTC Route53.
- [NTC VPC](https://docs.nuvibit.com/ntc-building-blocks/connectivity/ntc-vpc.md): Automate VPC deployment with NTC VPC. Create secure, scalable VPCs, subnets, and routing configurations for single or multi-account AWS environments.
- [Cloud Management](https://docs.nuvibit.com/ntc-building-blocks/management.md): Explore NTC Cloud Management building blocks, designed to automate AWS account creation, implement policies, and manage permissions for scalable, compliant, and cost-effective cloud environments.
- [NTC Account Factory](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-account-factory.md): Automate AWS account creation and ensure governance at scale with NTC Account Factory. Customize account lifecycle and apply consistent baselines for secure and compliant multi-account environments.
- [Account Baseline](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-account-factory/account-baseline.md): Learn how to implement consistent baselines across AWS accounts with NTC Account Factory
- [Account Factory List](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-account-factory/account-factory-list.md): Reference for the NTC Account Factory account map - the fields of an account entry and the customer_values it can carry, including per-account baseline overrides.
- [Account Lifecycle](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-account-factory/account-lifecycle.md): Learn how to automate AWS account lifecycle events with NTC Account Factory
- [Moving and Renaming Accounts](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-account-factory/account-moves-and-renames.md): Move an account to another baseline scope or rename it with NTC Account Factory while keeping its baseline state and resources.
- [NTC Identity Center](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-identity-center.md): Simplify identity and access management with NTC Identity Center. Enable centralized user management, seamless SSO, and fine-grained access controls across AWS accounts.
- [Permission Sets](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-identity-center/permission-sets.md): Discover how AWS policies can be implemented through the NTC Identity Center Module. Learn about the relationship between Inline policies, AWS managed policies, Customer managed policies, and Permissions boundaries and how they can be used for effective authorization management in AWS.
- [Prerequisites](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-identity-center/prerequisites.md): Learn the required manual configuration steps before deploying NTC Identity Center, including Identity Center activation, identity store setup, and external provider integration.
- [NTC Organizations](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-organizations.md): Effortlessly manage multi-account AWS environments with NTC Organizations. Define organizational units, enforce SCPs, and automate governance for secure and compliant cloud operations.
- [Centralized Root Access](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-organizations/centralized-root-access.md): Learn how to implement centralized root access management in AWS Organizations to enhance security and compliance across your multi-account environment.
- [CloudTrail Advanced Event Selectors](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-organizations/cloudtrail-advanced-event-selectors.md): Configure advanced event selectors on the organization CloudTrail to log data events, filter management events, and audit resource access across all member accounts.
- [Delegated Administrators](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-organizations/delegated-administrators.md): Learn how to configure and manage delegated administrators for AWS services across your organization to enable centralized security and compliance management.
- [Delegation Policies](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-organizations/delegation-policies.md): Learn how NTC Organizations delegates AWS Organizations' own policy-management APIs to a member account, scoped to specific policy types like BACKUP_POLICY, and how this differs from delegated administrators.
- [Organizational Policies](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-organizations/organizational-policies.md): Learn how to implement and manage AWS Organizations policies including Service Control Policies (SCPs), Resource Control Policies (RCPs), and how to use guardrail templates to secure your AWS organization.
- [Organizational Structure](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-organizations/organizational-structure.md): Learn how to structure your AWS Organization using Organizational Units (OUs) to enhance security, governance, and resource management across multiple AWS accounts.
- [NTC Parameters](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-parameters.md): Store and retrieve Terraform or JSON parameters across multiple AWS accounts and CI/CD pipelines.
- [Cross-Account Parameters](https://docs.nuvibit.com/ntc-building-blocks/management/ntc-parameters/cross-account-parameters.md): Learn how NTC Parameters enable seamless parameter sharing across multi-account AWS environments with simplified access management and enhanced functionality.
- [Operations](https://docs.nuvibit.com/ntc-building-blocks/operations.md): Explore NTC Operations building blocks, designed to enhance the developer experience, enable observability, and ensure operational excellence for AWS environments.
- [NTC Github Administration](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-administration-github.md): A comprehensive GitHub administration module that provides infrastructure-as-code management for GitHub organizations. The module enables configuration of organization settings, rulesets, secrets, variables, members, teams, and repositories.
- [NTC Spacelift Administration](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-administration-spacelift.md): Simplify Spacelift setup with NTC Spacelift Administration. Automate stack creation, RBAC, and OPA policy integration for efficient and secure IaC deployments.
- [NTC Backup](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-backup.md): Centralize AWS Backup across your AWS Organization with a dedicated backup account, per-entry central vaults, tag-driven resource selection, and cross-account copy.
- [Backup Policies](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-backup/backup-policies.md): How NTC Backup attaches AWS Organizations BACKUP_POLICY documents, decides which resources are backed up and where, and copies recovery points into central vaults.
- [Guide to Configure NTC Backup](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-backup/configuration-guide.md): Step-by-step guide to configure centralized AWS Backup with NTC Backup - create the backup account, wire up NTC Organizations delegation, and configure the backup account's own stack.
- [Malware Protection](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-backup/malware-protection.md): How NTC Backup and NTC Account Factory support Amazon GuardDuty Malware Protection for AWS Backup - automatic and on-demand scanning, supported resource types, and current limitations.
- [Member Account Requirements](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-backup/member-account-requirements.md): What individual member accounts and resources need to adjust for NTC Backup to work - opting resources in via resource type and tags, and CMK access for customer-managed keys.
- [Restore](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-backup/restore.md): How to restore a recovery point with NTC Backup - restoring into a new account versus the original account, and per-service restore behavior.
- [Troubleshooting](https://docs.nuvibit.com/ntc-building-blocks/operations/ntc-backup/troubleshooting.md): Known issues and their resolutions when running NTC Backup, by AWS service.
- [Security](https://docs.nuvibit.com/ntc-building-blocks/security.md): Explore NTC Security building blocks, designed to protect your AWS environment with automated solutions for threat detection, compliance, and auditing.
- [NTC Log Archive](https://docs.nuvibit.com/ntc-building-blocks/security/ntc-log-archive.md): Centralize and secure your AWS audit logs with NTC Log Archive. Store CloudTrail logs, GuardDuty findings, and VPC Flow Logs in a dedicated audit account for compliance and monitoring.
- [NTC Security Tooling](https://docs.nuvibit.com/ntc-building-blocks/security/ntc-security-tooling.md): Secure your AWS environment with NTC Security Tooling. Automate Security Hub, GuardDuty, and other tools for centralized threat detection, compliance, and data protection.
- [Automation Rules](https://docs.nuvibit.com/ntc-building-blocks/security/ntc-security-tooling/automation-rules.md): Learn how the Automation Rules feature in NTC Security Tooling enhance AWS Security Hub with custom processing, dynamic finding management, intelligent notification suppression, and advanced automation for your security findings at scale.
- [Central Configuration Policies](https://docs.nuvibit.com/ntc-building-blocks/security/ntc-security-tooling/central-configuration-policies.md): Learn how NTC Central Configuration Policies provide centralized Security Hub management across your entire AWS organization with standardized security controls, compliance frameworks, and custom configurations.
- [Templates](https://docs.nuvibit.com/ntc-building-blocks/templates.md): Explore NTC Templates building blocks, offering pre-built, customizable templates to streamline the deployment of secure and scalable AWS environments.
- [NTC Account Baseline Templates](https://docs.nuvibit.com/ntc-building-blocks/templates/ntc-account-baseline-templates.md): Ensure governance and security at scale with NTC Account Baseline Templates. Automate guardrails, logging, IAM policies, and operational configurations for AWS accounts.
- [NTC Account Lifecycle Templates](https://docs.nuvibit.com/ntc-building-blocks/templates/ntc-account-lifecycle-templates.md): Automate AWS account lifecycle management with NTC Account Lifecycle Templates. Clean up new accounts, delete default VPCs, and isolate decommissioned accounts for compliance and security.
- [NTC Guardrail Templates](https://docs.nuvibit.com/ntc-building-blocks/templates/ntc-guardrail-templates.md): Enforce governance and security with NTC Guardrail Templates. Deploy customizable SCPs via NTC Organizations to ensure compliance and control across AWS accounts.

## Migration Guides

- [Migration Guides](https://docs.nuvibit.com/migration-guides.md): Comprehensive guides for migrating between major versions of NTC modules
- [Upgrade TFState Backend Template](https://docs.nuvibit.com/migration-guides/account-baseline/tfstate-backend-template-v4.md): Migration guide for ntc-account-baseline-templates tfstate backend template from v3.x to v4.x — regional S3 state buckets
- [Migration Troubleshooting](https://docs.nuvibit.com/migration-guides/troubleshooting.md): Common issues and solutions for NTC module migrations
- [v1.x to v2.x Migration Guide](https://docs.nuvibit.com/migration-guides/v1-to-v2.md): Complete guide for migrating NTC modules from v1.x to v2.x
- [NTC Account Factory v1 → v2 Migration](https://docs.nuvibit.com/migration-guides/v1-to-v2/ntc-account-factory.md): Detailed migration guide for ntc-account-factory module from v1.x to v2.x including account baseline template migration
- [NTC Core Network v1 → v2 Migration](https://docs.nuvibit.com/migration-guides/v1-to-v2/ntc-core-network.md): Detailed migration guide for ntc-core-network module from v1.x to v2.x
- [NTC Organizations v1 → v2 Migration](https://docs.nuvibit.com/migration-guides/v1-to-v2/ntc-organizations.md): Detailed migration guide for ntc-organizations module from v1.x to v2.x
- [NTC Route53 v1 → v2 Migration](https://docs.nuvibit.com/migration-guides/v1-to-v2/ntc-route53.md): Detailed migration guide for ntc-route53 module from v1.x to v2.x
- [NTC Security Tooling v1 → v2 Migration](https://docs.nuvibit.com/migration-guides/v1-to-v2/ntc-security-tooling.md): Detailed migration guide for ntc-security-tooling module from v1.x to v2.x

## Whitepapers

- [Whitepapers](https://docs.nuvibit.com/whitepapers.md): Discover technical whitepapers on best practices, advanced architectures, and innovative solutions to enhance your AWS infrastructure with Nuvibit.
- [AWS European Sovereign Cloud: Multi-Partition Strategies & Architecture Patterns](https://docs.nuvibit.com/whitepapers/aws-multi-partition-strategies.md): Comprehensive guide to AWS European Sovereign Cloud (ESC) adoption with proven multi-partition architecture patterns, connectivity blueprints, and compliance strategies for EU sovereignty requirements. Includes decision frameworks and operational models.
- [CI/CD Pipelines for Infrastructure-as-Code Delivery](https://docs.nuvibit.com/whitepapers/cicd-pipelines-iac-delivery.md): Learn how to set up secure and scalable CI/CD pipelines for Infrastructure as Code (IaC) delivery. Explore best practices, authentication strategies like OpenID Connect, and pipeline architectures to optimize AWS deployments.
- [Nuvibit AWS Reference Architecture](https://docs.nuvibit.com/whitepapers/nuvibit-aws-reference-architecture.md): Discover the Nuvibit AWS Reference Architecture (NARA): a secure, scalable, and modular framework designed to accelerate cloud adoption, ensure compliance, and simplify AWS management. Ideal for enterprises seeking reliability and governance.

## FAQ

- [Frequently Asked Questions](https://docs.nuvibit.com/faq.md): Frequently asked questions about the Nuvibit Terraform Collection (NTC).