feat(terraform): update metallb version, refactor IAM policies, and enhance security

terraform/aws-iac/config.tf

@@ -1,5 +1,25 @@
 locals {
   billing_alarm_limit  = 20
   billing_alarm_emails = "c.alexandre.pires@alexpires.me"
+  instance_ips = [
+    "${local.vps_1.ip}/32",
+  ]
+
+  vps_1 = {
+    id   = data.terraform_remote_state.contabo.outputs.instances[0].id
+    name = data.terraform_remote_state.contabo.outputs.instances[0].name
+    ip   = data.terraform_remote_state.contabo.outputs.instances[0].ip_config[0].v4[0].ip
+  }
 }
 
+data "terraform_remote_state" "contabo" {
+  backend = "s3"
+  config = {
+    bucket = "a13labs.infra.eu"
+    key    = "contabo.core.infra.tfstate"
+    region = "eu-west-1"
+  }
+}
+
+data "aws_caller_identity" "current" {}
+

terraform/aws-iac/kms.tf

@@ -81,26 +81,3 @@ resource "aws_iam_user_policy" "k8s_secrets_user_policy" {
   policy = data.aws_iam_policy_document.k8s_secrets_user_policy.json
 }
 
-data "aws_caller_identity" "current" {}
-
-locals {
-  instance_ips = [
-    "${local.vps_1.ip}/32",
-  ]
-
-  vps_1 = {
-    id   = data.terraform_remote_state.contabo.outputs.instances[0].id
-    name = data.terraform_remote_state.contabo.outputs.instances[0].name
-    ip   = data.terraform_remote_state.contabo.outputs.instances[0].ip_config[0].v4[0].ip
-  }
-}
-
-data "terraform_remote_state" "contabo" {
-  backend = "s3"
-  config = {
-    bucket = "a13labs.infra.eu"
-    key    = "contabo.core.infra.tfstate"
-    region = "eu-west-1"
-  }
-}
-