Infrastructure Overview

infra/
├── environments/          # Environment-specific configs
│   ├── dev/              # Development environment
│   ├── qa/               # QA environment
│   └── prod/             # Production environment
├── modules/              # Reusable Terraform modules
│   ├── networking/       # VNet, subnets, VPN
│   ├── backend/          # App Service for API (prod only)
│   ├── database/         # PostgreSQL
│   ├── frontend/         # Static Web App
│   ├── platform/         # Container Registry, Key Vault
│   ├── security/         # RBAC, managed identities
│   └── monitoring/       # Observability
└── state/                # State backend setup

1. Create feature branch from dev
2. Make infrastructure changes
3. Open PR → dev
   └── Workflow runs: plan only
   └── Review plan output
4. Merge PR → dev
   └── Workflow runs: apply to Dev
5. Open PR: dev → qa
   └── Workflow runs: plan only
6. Merge PR → qa
   └── Workflow runs: apply to QA
7. Open PR: qa → main
   └── Requires approval
8. Merge PR → main
   └── Workflow runs: apply to Production