This directory creates and maintains organisational units, their accounts, and their relationships with the Modernisation Platform. It needs to be run at the MoJ root account level, with a user that has access to assume a role in the Modernisation Platform.
The subdirectory bootstrap enables bootstrapping resources in all accounts that are part of the Modernisation Platform, such as an IAM role for cross-account access and security implementations. It utilises terraform workspaces and has a new-environment.yml workflow to create accounts and bootstrap them as part of our CI/CD pipeline.
The Terraform state is stored in the modernisation-platform-terraform-state bucket alongside other states creates in this repository. The user that this configuration should be run as needs access.