AWS Region module

[bpmct]

A discussion dedicated to the AWS Region module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 17	20 / 20	2 / 2	10 / 10	100 / 100

Drilldown

Presentation & Onboarding — 17 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README documents every major mode: default parameter (with count), create_parameter = false (outputs-only), custom names/icons, region exclusion, and default_availability_zone usage. Each example uses sensible defaults and is self-contained.
Visual preview	5	5	Three embedded PNG images (aws-regions.png, aws-custom.png, aws-exclude.png) all verified to exist and show the parameter UI in action.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs exist in this module (it is a region-selector parameter). No inline secrets appear in any README example. Vacuously satisfied.
Non-hardcoded auth path	4	4	README "AWS credentials" section explicitly recommends IAM instance profile/role on the provisioner or environment-injected credentials, with a link to the AWS provider auth docs.

Restricted-Environment Readiness — 2 / 2

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module downloads nothing at runtime; it reads a local regions.json shipped with the module. No download URL to override.
Bring-your-own binary	10	N/A	Module installs no tools or binaries.
Egress transparency	3	N/A	No external endpoints contacted during plan/apply. The .scripts/update.sh is a developer maintenance tool, not part of module execution.
Runs without sudo	2	2	The sole script (.scripts/update.sh) invokes aws CLI and jq with no sudo calls.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All 9 variables have description, type, and sensible default. default and exclude carry regex validation blocks with clear error messages.
Test coverage	4	4	main.tftest.hcl contains 10 runs covering parameter name, order propagation, option count, empty/custom defaults, regions catalog output, exclusion, custom name/icon overrides, create_parameter = false fallback, and the no-parameter/no-default edge case. Business logic is thoroughly exercised.

Overall — 100 / 100

Raw 49 / 49 → round(49 / 49 × 100) = 100

Track: Utility (region-selector parameter; not an agent, IDE, or app)

---

Scored against SCORECARD.md on 2026-10-05 with solstice-1.