diff --git a/.gitignore b/.gitignore
index 9937fe16..a99aef6d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,5 @@
-venv/
 *.pyc
+venv/
 .DS_Store
 infrastructure/.DS_Store
 ./playbook/.DS_Storevenv/
diff --git a/iac_modules/LICENSE b/iac_modules/LICENSE
deleted file mode 100644
index f288702d..00000000
--- a/iac_modules/LICENSE
+++ /dev/null
@@ -1,674 +0,0 @@
-                    GNU GENERAL PUBLIC LICENSE
-                       Version 3, 29 June 2007
-
- Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
-                            Preamble
-
-  The GNU General Public License is a free, copyleft license for
-software and other kinds of works.
-
-  The licenses for most software and other practical works are designed
-to take away your freedom to share and change the works.  By contrast,
-the GNU General Public License is intended to guarantee your freedom to
-share and change all versions of a program--to make sure it remains free
-software for all its users.  We, the Free Software Foundation, use the
-GNU General Public License for most of our software; it applies also to
-any other work released this way by its authors.  You can apply it to
-your programs, too.
-
-  When we speak of free software, we are referring to freedom, not
-price.  Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-them if you wish), that you receive source code or can get it if you
-want it, that you can change the software or use pieces of it in new
-free programs, and that you know you can do these things.
-
-  To protect your rights, we need to prevent others from denying you
-these rights or asking you to surrender the rights.  Therefore, you have
-certain responsibilities if you distribute copies of the software, or if
-you modify it: responsibilities to respect the freedom of others.
-
-  For example, if you distribute copies of such a program, whether
-gratis or for a fee, you must pass on to the recipients the same
-freedoms that you received.  You must make sure that they, too, receive
-or can get the source code.  And you must show them these terms so they
-know their rights.
-
-  Developers that use the GNU GPL protect your rights with two steps:
-(1) assert copyright on the software, and (2) offer you this License
-giving you legal permission to copy, distribute and/or modify it.
-
-  For the developers' and authors' protection, the GPL clearly explains
-that there is no warranty for this free software.  For both users' and
-authors' sake, the GPL requires that modified versions be marked as
-changed, so that their problems will not be attributed erroneously to
-authors of previous versions.
-
-  Some devices are designed to deny users access to install or run
-modified versions of the software inside them, although the manufacturer
-can do so.  This is fundamentally incompatible with the aim of
-protecting users' freedom to change the software.  The systematic
-pattern of such abuse occurs in the area of products for individuals to
-use, which is precisely where it is most unacceptable.  Therefore, we
-have designed this version of the GPL to prohibit the practice for those
-products.  If such problems arise substantially in other domains, we
-stand ready to extend this provision to those domains in future versions
-of the GPL, as needed to protect the freedom of users.
-
-  Finally, every program is threatened constantly by software patents.
-States should not allow patents to restrict development and use of
-software on general-purpose computers, but in those that do, we wish to
-avoid the special danger that patents applied to a free program could
-make it effectively proprietary.  To prevent this, the GPL assures that
-patents cannot be used to render the program non-free.
-
-  The precise terms and conditions for copying, distribution and
-modification follow.
-
-                       TERMS AND CONDITIONS
-
-  0. Definitions.
-
-  "This License" refers to version 3 of the GNU General Public License.
-
-  "Copyright" also means copyright-like laws that apply to other kinds of
-works, such as semiconductor masks.
-
-  "The Program" refers to any copyrightable work licensed under this
-License.  Each licensee is addressed as "you".  "Licensees" and
-"recipients" may be individuals or organizations.
-
-  To "modify" a work means to copy from or adapt all or part of the work
-in a fashion requiring copyright permission, other than the making of an
-exact copy.  The resulting work is called a "modified version" of the
-earlier work or a work "based on" the earlier work.
-
-  A "covered work" means either the unmodified Program or a work based
-on the Program.
-
-  To "propagate" a work means to do anything with it that, without
-permission, would make you directly or secondarily liable for
-infringement under applicable copyright law, except executing it on a
-computer or modifying a private copy.  Propagation includes copying,
-distribution (with or without modification), making available to the
-public, and in some countries other activities as well.
-
-  To "convey" a work means any kind of propagation that enables other
-parties to make or receive copies.  Mere interaction with a user through
-a computer network, with no transfer of a copy, is not conveying.
-
-  An interactive user interface displays "Appropriate Legal Notices"
-to the extent that it includes a convenient and prominently visible
-feature that (1) displays an appropriate copyright notice, and (2)
-tells the user that there is no warranty for the work (except to the
-extent that warranties are provided), that licensees may convey the
-work under this License, and how to view a copy of this License.  If
-the interface presents a list of user commands or options, such as a
-menu, a prominent item in the list meets this criterion.
-
-  1. Source Code.
-
-  The "source code" for a work means the preferred form of the work
-for making modifications to it.  "Object code" means any non-source
-form of a work.
-
-  A "Standard Interface" means an interface that either is an official
-standard defined by a recognized standards body, or, in the case of
-interfaces specified for a particular programming language, one that
-is widely used among developers working in that language.
-
-  The "System Libraries" of an executable work include anything, other
-than the work as a whole, that (a) is included in the normal form of
-packaging a Major Component, but which is not part of that Major
-Component, and (b) serves only to enable use of the work with that
-Major Component, or to implement a Standard Interface for which an
-implementation is available to the public in source code form.  A
-"Major Component", in this context, means a major essential component
-(kernel, window system, and so on) of the specific operating system
-(if any) on which the executable work runs, or a compiler used to
-produce the work, or an object code interpreter used to run it.
-
-  The "Corresponding Source" for a work in object code form means all
-the source code needed to generate, install, and (for an executable
-work) run the object code and to modify the work, including scripts to
-control those activities.  However, it does not include the work's
-System Libraries, or general-purpose tools or generally available free
-programs which are used unmodified in performing those activities but
-which are not part of the work.  For example, Corresponding Source
-includes interface definition files associated with source files for
-the work, and the source code for shared libraries and dynamically
-linked subprograms that the work is specifically designed to require,
-such as by intimate data communication or control flow between those
-subprograms and other parts of the work.
-
-  The Corresponding Source need not include anything that users
-can regenerate automatically from other parts of the Corresponding
-Source.
-
-  The Corresponding Source for a work in source code form is that
-same work.
-
-  2. Basic Permissions.
-
-  All rights granted under this License are granted for the term of
-copyright on the Program, and are irrevocable provided the stated
-conditions are met.  This License explicitly affirms your unlimited
-permission to run the unmodified Program.  The output from running a
-covered work is covered by this License only if the output, given its
-content, constitutes a covered work.  This License acknowledges your
-rights of fair use or other equivalent, as provided by copyright law.
-
-  You may make, run and propagate covered works that you do not
-convey, without conditions so long as your license otherwise remains
-in force.  You may convey covered works to others for the sole purpose
-of having them make modifications exclusively for you, or provide you
-with facilities for running those works, provided that you comply with
-the terms of this License in conveying all material for which you do
-not control copyright.  Those thus making or running the covered works
-for you must do so exclusively on your behalf, under your direction
-and control, on terms that prohibit them from making any copies of
-your copyrighted material outside their relationship with you.
-
-  Conveying under any other circumstances is permitted solely under
-the conditions stated below.  Sublicensing is not allowed; section 10
-makes it unnecessary.
-
-  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
-
-  No covered work shall be deemed part of an effective technological
-measure under any applicable law fulfilling obligations under article
-11 of the WIPO copyright treaty adopted on 20 December 1996, or
-similar laws prohibiting or restricting circumvention of such
-measures.
-
-  When you convey a covered work, you waive any legal power to forbid
-circumvention of technological measures to the extent such circumvention
-is effected by exercising rights under this License with respect to
-the covered work, and you disclaim any intention to limit operation or
-modification of the work as a means of enforcing, against the work's
-users, your or third parties' legal rights to forbid circumvention of
-technological measures.
-
-  4. Conveying Verbatim Copies.
-
-  You may convey verbatim copies of the Program's source code as you
-receive it, in any medium, provided that you conspicuously and
-appropriately publish on each copy an appropriate copyright notice;
-keep intact all notices stating that this License and any
-non-permissive terms added in accord with section 7 apply to the code;
-keep intact all notices of the absence of any warranty; and give all
-recipients a copy of this License along with the Program.
-
-  You may charge any price or no price for each copy that you convey,
-and you may offer support or warranty protection for a fee.
-
-  5. Conveying Modified Source Versions.
-
-  You may convey a work based on the Program, or the modifications to
-produce it from the Program, in the form of source code under the
-terms of section 4, provided that you also meet all of these conditions:
-
-    a) The work must carry prominent notices stating that you modified
-    it, and giving a relevant date.
-
-    b) The work must carry prominent notices stating that it is
-    released under this License and any conditions added under section
-    7.  This requirement modifies the requirement in section 4 to
-    "keep intact all notices".
-
-    c) You must license the entire work, as a whole, under this
-    License to anyone who comes into possession of a copy.  This
-    License will therefore apply, along with any applicable section 7
-    additional terms, to the whole of the work, and all its parts,
-    regardless of how they are packaged.  This License gives no
-    permission to license the work in any other way, but it does not
-    invalidate such permission if you have separately received it.
-
-    d) If the work has interactive user interfaces, each must display
-    Appropriate Legal Notices; however, if the Program has interactive
-    interfaces that do not display Appropriate Legal Notices, your
-    work need not make them do so.
-
-  A compilation of a covered work with other separate and independent
-works, which are not by their nature extensions of the covered work,
-and which are not combined with it such as to form a larger program,
-in or on a volume of a storage or distribution medium, is called an
-"aggregate" if the compilation and its resulting copyright are not
-used to limit the access or legal rights of the compilation's users
-beyond what the individual works permit.  Inclusion of a covered work
-in an aggregate does not cause this License to apply to the other
-parts of the aggregate.
-
-  6. Conveying Non-Source Forms.
-
-  You may convey a covered work in object code form under the terms
-of sections 4 and 5, provided that you also convey the
-machine-readable Corresponding Source under the terms of this License,
-in one of these ways:
-
-    a) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by the
-    Corresponding Source fixed on a durable physical medium
-    customarily used for software interchange.
-
-    b) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by a
-    written offer, valid for at least three years and valid for as
-    long as you offer spare parts or customer support for that product
-    model, to give anyone who possesses the object code either (1) a
-    copy of the Corresponding Source for all the software in the
-    product that is covered by this License, on a durable physical
-    medium customarily used for software interchange, for a price no
-    more than your reasonable cost of physically performing this
-    conveying of source, or (2) access to copy the
-    Corresponding Source from a network server at no charge.
-
-    c) Convey individual copies of the object code with a copy of the
-    written offer to provide the Corresponding Source.  This
-    alternative is allowed only occasionally and noncommercially, and
-    only if you received the object code with such an offer, in accord
-    with subsection 6b.
-
-    d) Convey the object code by offering access from a designated
-    place (gratis or for a charge), and offer equivalent access to the
-    Corresponding Source in the same way through the same place at no
-    further charge.  You need not require recipients to copy the
-    Corresponding Source along with the object code.  If the place to
-    copy the object code is a network server, the Corresponding Source
-    may be on a different server (operated by you or a third party)
-    that supports equivalent copying facilities, provided you maintain
-    clear directions next to the object code saying where to find the
-    Corresponding Source.  Regardless of what server hosts the
-    Corresponding Source, you remain obligated to ensure that it is
-    available for as long as needed to satisfy these requirements.
-
-    e) Convey the object code using peer-to-peer transmission, provided
-    you inform other peers where the object code and Corresponding
-    Source of the work are being offered to the general public at no
-    charge under subsection 6d.
-
-  A separable portion of the object code, whose source code is excluded
-from the Corresponding Source as a System Library, need not be
-included in conveying the object code work.
-
-  A "User Product" is either (1) a "consumer product", which means any
-tangible personal property which is normally used for personal, family,
-or household purposes, or (2) anything designed or sold for incorporation
-into a dwelling.  In determining whether a product is a consumer product,
-doubtful cases shall be resolved in favor of coverage.  For a particular
-product received by a particular user, "normally used" refers to a
-typical or common use of that class of product, regardless of the status
-of the particular user or of the way in which the particular user
-actually uses, or expects or is expected to use, the product.  A product
-is a consumer product regardless of whether the product has substantial
-commercial, industrial or non-consumer uses, unless such uses represent
-the only significant mode of use of the product.
-
-  "Installation Information" for a User Product means any methods,
-procedures, authorization keys, or other information required to install
-and execute modified versions of a covered work in that User Product from
-a modified version of its Corresponding Source.  The information must
-suffice to ensure that the continued functioning of the modified object
-code is in no case prevented or interfered with solely because
-modification has been made.
-
-  If you convey an object code work under this section in, or with, or
-specifically for use in, a User Product, and the conveying occurs as
-part of a transaction in which the right of possession and use of the
-User Product is transferred to the recipient in perpetuity or for a
-fixed term (regardless of how the transaction is characterized), the
-Corresponding Source conveyed under this section must be accompanied
-by the Installation Information.  But this requirement does not apply
-if neither you nor any third party retains the ability to install
-modified object code on the User Product (for example, the work has
-been installed in ROM).
-
-  The requirement to provide Installation Information does not include a
-requirement to continue to provide support service, warranty, or updates
-for a work that has been modified or installed by the recipient, or for
-the User Product in which it has been modified or installed.  Access to a
-network may be denied when the modification itself materially and
-adversely affects the operation of the network or violates the rules and
-protocols for communication across the network.
-
-  Corresponding Source conveyed, and Installation Information provided,
-in accord with this section must be in a format that is publicly
-documented (and with an implementation available to the public in
-source code form), and must require no special password or key for
-unpacking, reading or copying.
-
-  7. Additional Terms.
-
-  "Additional permissions" are terms that supplement the terms of this
-License by making exceptions from one or more of its conditions.
-Additional permissions that are applicable to the entire Program shall
-be treated as though they were included in this License, to the extent
-that they are valid under applicable law.  If additional permissions
-apply only to part of the Program, that part may be used separately
-under those permissions, but the entire Program remains governed by
-this License without regard to the additional permissions.
-
-  When you convey a copy of a covered work, you may at your option
-remove any additional permissions from that copy, or from any part of
-it.  (Additional permissions may be written to require their own
-removal in certain cases when you modify the work.)  You may place
-additional permissions on material, added by you to a covered work,
-for which you have or can give appropriate copyright permission.
-
-  Notwithstanding any other provision of this License, for material you
-add to a covered work, you may (if authorized by the copyright holders of
-that material) supplement the terms of this License with terms:
-
-    a) Disclaiming warranty or limiting liability differently from the
-    terms of sections 15 and 16 of this License; or
-
-    b) Requiring preservation of specified reasonable legal notices or
-    author attributions in that material or in the Appropriate Legal
-    Notices displayed by works containing it; or
-
-    c) Prohibiting misrepresentation of the origin of that material, or
-    requiring that modified versions of such material be marked in
-    reasonable ways as different from the original version; or
-
-    d) Limiting the use for publicity purposes of names of licensors or
-    authors of the material; or
-
-    e) Declining to grant rights under trademark law for use of some
-    trade names, trademarks, or service marks; or
-
-    f) Requiring indemnification of licensors and authors of that
-    material by anyone who conveys the material (or modified versions of
-    it) with contractual assumptions of liability to the recipient, for
-    any liability that these contractual assumptions directly impose on
-    those licensors and authors.
-
-  All other non-permissive additional terms are considered "further
-restrictions" within the meaning of section 10.  If the Program as you
-received it, or any part of it, contains a notice stating that it is
-governed by this License along with a term that is a further
-restriction, you may remove that term.  If a license document contains
-a further restriction but permits relicensing or conveying under this
-License, you may add to a covered work material governed by the terms
-of that license document, provided that the further restriction does
-not survive such relicensing or conveying.
-
-  If you add terms to a covered work in accord with this section, you
-must place, in the relevant source files, a statement of the
-additional terms that apply to those files, or a notice indicating
-where to find the applicable terms.
-
-  Additional terms, permissive or non-permissive, may be stated in the
-form of a separately written license, or stated as exceptions;
-the above requirements apply either way.
-
-  8. Termination.
-
-  You may not propagate or modify a covered work except as expressly
-provided under this License.  Any attempt otherwise to propagate or
-modify it is void, and will automatically terminate your rights under
-this License (including any patent licenses granted under the third
-paragraph of section 11).
-
-  However, if you cease all violation of this License, then your
-license from a particular copyright holder is reinstated (a)
-provisionally, unless and until the copyright holder explicitly and
-finally terminates your license, and (b) permanently, if the copyright
-holder fails to notify you of the violation by some reasonable means
-prior to 60 days after the cessation.
-
-  Moreover, your license from a particular copyright holder is
-reinstated permanently if the copyright holder notifies you of the
-violation by some reasonable means, this is the first time you have
-received notice of violation of this License (for any work) from that
-copyright holder, and you cure the violation prior to 30 days after
-your receipt of the notice.
-
-  Termination of your rights under this section does not terminate the
-licenses of parties who have received copies or rights from you under
-this License.  If your rights have been terminated and not permanently
-reinstated, you do not qualify to receive new licenses for the same
-material under section 10.
-
-  9. Acceptance Not Required for Having Copies.
-
-  You are not required to accept this License in order to receive or
-run a copy of the Program.  Ancillary propagation of a covered work
-occurring solely as a consequence of using peer-to-peer transmission
-to receive a copy likewise does not require acceptance.  However,
-nothing other than this License grants you permission to propagate or
-modify any covered work.  These actions infringe copyright if you do
-not accept this License.  Therefore, by modifying or propagating a
-covered work, you indicate your acceptance of this License to do so.
-
-  10. Automatic Licensing of Downstream Recipients.
-
-  Each time you convey a covered work, the recipient automatically
-receives a license from the original licensors, to run, modify and
-propagate that work, subject to this License.  You are not responsible
-for enforcing compliance by third parties with this License.
-
-  An "entity transaction" is a transaction transferring control of an
-organization, or substantially all assets of one, or subdividing an
-organization, or merging organizations.  If propagation of a covered
-work results from an entity transaction, each party to that
-transaction who receives a copy of the work also receives whatever
-licenses to the work the party's predecessor in interest had or could
-give under the previous paragraph, plus a right to possession of the
-Corresponding Source of the work from the predecessor in interest, if
-the predecessor has it or can get it with reasonable efforts.
-
-  You may not impose any further restrictions on the exercise of the
-rights granted or affirmed under this License.  For example, you may
-not impose a license fee, royalty, or other charge for exercise of
-rights granted under this License, and you may not initiate litigation
-(including a cross-claim or counterclaim in a lawsuit) alleging that
-any patent claim is infringed by making, using, selling, offering for
-sale, or importing the Program or any portion of it.
-
-  11. Patents.
-
-  A "contributor" is a copyright holder who authorizes use under this
-License of the Program or a work on which the Program is based.  The
-work thus licensed is called the contributor's "contributor version".
-
-  A contributor's "essential patent claims" are all patent claims
-owned or controlled by the contributor, whether already acquired or
-hereafter acquired, that would be infringed by some manner, permitted
-by this License, of making, using, or selling its contributor version,
-but do not include claims that would be infringed only as a
-consequence of further modification of the contributor version.  For
-purposes of this definition, "control" includes the right to grant
-patent sublicenses in a manner consistent with the requirements of
-this License.
-
-  Each contributor grants you a non-exclusive, worldwide, royalty-free
-patent license under the contributor's essential patent claims, to
-make, use, sell, offer for sale, import and otherwise run, modify and
-propagate the contents of its contributor version.
-
-  In the following three paragraphs, a "patent license" is any express
-agreement or commitment, however denominated, not to enforce a patent
-(such as an express permission to practice a patent or covenant not to
-sue for patent infringement).  To "grant" such a patent license to a
-party means to make such an agreement or commitment not to enforce a
-patent against the party.
-
-  If you convey a covered work, knowingly relying on a patent license,
-and the Corresponding Source of the work is not available for anyone
-to copy, free of charge and under the terms of this License, through a
-publicly available network server or other readily accessible means,
-then you must either (1) cause the Corresponding Source to be so
-available, or (2) arrange to deprive yourself of the benefit of the
-patent license for this particular work, or (3) arrange, in a manner
-consistent with the requirements of this License, to extend the patent
-license to downstream recipients.  "Knowingly relying" means you have
-actual knowledge that, but for the patent license, your conveying the
-covered work in a country, or your recipient's use of the covered work
-in a country, would infringe one or more identifiable patents in that
-country that you have reason to believe are valid.
-
-  If, pursuant to or in connection with a single transaction or
-arrangement, you convey, or propagate by procuring conveyance of, a
-covered work, and grant a patent license to some of the parties
-receiving the covered work authorizing them to use, propagate, modify
-or convey a specific copy of the covered work, then the patent license
-you grant is automatically extended to all recipients of the covered
-work and works based on it.
-
-  A patent license is "discriminatory" if it does not include within
-the scope of its coverage, prohibits the exercise of, or is
-conditioned on the non-exercise of one or more of the rights that are
-specifically granted under this License.  You may not convey a covered
-work if you are a party to an arrangement with a third party that is
-in the business of distributing software, under which you make payment
-to the third party based on the extent of your activity of conveying
-the work, and under which the third party grants, to any of the
-parties who would receive the covered work from you, a discriminatory
-patent license (a) in connection with copies of the covered work
-conveyed by you (or copies made from those copies), or (b) primarily
-for and in connection with specific products or compilations that
-contain the covered work, unless you entered into that arrangement,
-or that patent license was granted, prior to 28 March 2007.
-
-  Nothing in this License shall be construed as excluding or limiting
-any implied license or other defenses to infringement that may
-otherwise be available to you under applicable patent law.
-
-  12. No Surrender of Others' Freedom.
-
-  If conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License.  If you cannot convey a
-covered work so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you may
-not convey it at all.  For example, if you agree to terms that obligate you
-to collect a royalty for further conveying from those to whom you convey
-the Program, the only way you could satisfy both those terms and this
-License would be to refrain entirely from conveying the Program.
-
-  13. Use with the GNU Affero General Public License.
-
-  Notwithstanding any other provision of this License, you have
-permission to link or combine any covered work with a work licensed
-under version 3 of the GNU Affero General Public License into a single
-combined work, and to convey the resulting work.  The terms of this
-License will continue to apply to the part which is the covered work,
-but the special requirements of the GNU Affero General Public License,
-section 13, concerning interaction through a network will apply to the
-combination as such.
-
-  14. Revised Versions of this License.
-
-  The Free Software Foundation may publish revised and/or new versions of
-the GNU General Public License from time to time.  Such new versions will
-be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-  Each version is given a distinguishing version number.  If the
-Program specifies that a certain numbered version of the GNU General
-Public License "or any later version" applies to it, you have the
-option of following the terms and conditions either of that numbered
-version or of any later version published by the Free Software
-Foundation.  If the Program does not specify a version number of the
-GNU General Public License, you may choose any version ever published
-by the Free Software Foundation.
-
-  If the Program specifies that a proxy can decide which future
-versions of the GNU General Public License can be used, that proxy's
-public statement of acceptance of a version permanently authorizes you
-to choose that version for the Program.
-
-  Later license versions may give you additional or different
-permissions.  However, no additional obligations are imposed on any
-author or copyright holder as a result of your choosing to follow a
-later version.
-
-  15. Disclaimer of Warranty.
-
-  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-
-  16. Limitation of Liability.
-
-  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGES.
-
-  17. Interpretation of Sections 15 and 16.
-
-  If the disclaimer of warranty and limitation of liability provided
-above cannot be given local legal effect according to their terms,
-reviewing courts shall apply local law that most closely approximates
-an absolute waiver of all civil liability in connection with the
-Program, unless a warranty or assumption of liability accompanies a
-copy of the Program in return for a fee.
-
-                     END OF TERMS AND CONDITIONS
-
-            How to Apply These Terms to Your New Programs
-
-  If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
-  To do so, attach the following notices to the program.  It is safest
-to attach them to the start of each source file to most effectively
-state the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
-    <one line to give the program's name and a brief idea of what it does.>
-    Copyright (C) <year>  <name of author>
-
-    This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU General Public License as published by
-    the Free Software Foundation, either version 3 of the License, or
-    (at your option) any later version.
-
-    This program is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU General Public License for more details.
-
-    You should have received a copy of the GNU General Public License
-    along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-Also add information on how to contact you by electronic and paper mail.
-
-  If the program does terminal interaction, make it output a short
-notice like this when it starts in an interactive mode:
-
-    <program>  Copyright (C) <year>  <name of author>
-    This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
-    This is free software, and you are welcome to redistribute it
-    under certain conditions; type `show c' for details.
-
-The hypothetical commands `show w' and `show c' should show the appropriate
-parts of the General Public License.  Of course, your program's commands
-might be different; for a GUI interface, you would use an "about box".
-
-  You should also get your employer (if you work as a programmer) or school,
-if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU GPL, see
-<https://www.gnu.org/licenses/>.
-
-  The GNU General Public License does not permit incorporating your program
-into proprietary programs.  If your program is a subroutine library, you
-may consider it more useful to permit linking proprietary applications with
-the library.  If this is what you want to do, use the GNU Lesser General
-Public License instead of this License.  But first, please read
-<https://www.gnu.org/licenses/why-not-lgpl.html>.
diff --git a/iac_modules/terraform/aws/ec2/Dockerfile b/iac_modules/terraform/aws/ec2/Dockerfile
deleted file mode 100644
index e6dcc678..00000000
--- a/iac_modules/terraform/aws/ec2/Dockerfile
+++ /dev/null
@@ -1,57 +0,0 @@
-FROM hashicorp/terraform:1.2.1 
-LABEL maintainer="Haitao Pan <xz@onwalk.net>"
-
-ARG GLIBC_VERSION=2.34-r0
-ARG AWSCLI_VERSION=2.6.1
-
-RUN apk add --update --no-cache bash wget make curl jq py3-pip unzip zip && mkdir -pv /root/.terraform.d/plugin-cache && pip3 install jinja2 hvac python-hcl2
-RUN wget https://mirrors.onwalk.net/tools/linux-amd64/gauth.tar.gz && tar -xvpf gauth.tar.gz -C /usr/bin/ && chmod 755 /usr/bin/gauth
-RUN wget https://mirrors.onwalk.net/tools/linux-amd64/gitleaks_8.8.5_linux_x64.tar.gz && tar -xvpf gitleaks_8.8.5_linux_x64.tar.gz && cp gitleaks /usr/bin/ && chmod 755 /usr/bin/gitleaks
-
-
-# install glibc compatibility for alpine
-RUN apk --no-cache add \
-        binutils \
-        curl \
-    && curl -sL https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub -o /etc/apk/keys/sgerrand.rsa.pub \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-${GLIBC_VERSION}.apk \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-bin-${GLIBC_VERSION}.apk \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-i18n-${GLIBC_VERSION}.apk \
-    && apk add --no-cache \
-        glibc-${GLIBC_VERSION}.apk \
-        glibc-bin-${GLIBC_VERSION}.apk \
-        glibc-i18n-${GLIBC_VERSION}.apk \
-    && /usr/glibc-compat/bin/localedef -i en_US -f UTF-8 en_US.UTF-8 \
-    && curl -sL https://awscli.amazonaws.com/awscli-exe-linux-x86_64-${AWSCLI_VERSION}.zip -o awscliv2.zip \
-    && unzip awscliv2.zip \
-    && aws/install \
-    && rm -rf \
-        awscliv2.zip \
-        aws \
-        /usr/local/aws-cli/v2/current/dist/aws_completer \
-        /usr/local/aws-cli/v2/current/dist/awscli/data/ac.index \
-        /usr/local/aws-cli/v2/current/dist/awscli/examples \
-        glibc-*.apk \
-    && find /usr/local/aws-cli/v2/current/dist/awscli/botocore/data -name examples-1.json -delete \
-    && apk --no-cache del \
-        binutils \
-        curl \
-    && rm -rf /var/cache/apk/*
-
-#ENV region
-#ENV az
-#ENV ak
-#ENV sk
-#ENV tf_key
-#ENV tf_s3
-#ENV ec2_type
-#ENV image_id
-#ENV sg_id
-#ENV subnet_web
-#ENV devops_key
-
-COPY .terraformrc /root/
-RUN terraform init
-COPY ./* ./
-
-ENTRYPOINT ["terraform"]
diff --git a/iac_modules/terraform/aws/ec2/Makefile b/iac_modules/terraform/aws/ec2/Makefile
deleted file mode 100644
index ea702a07..00000000
--- a/iac_modules/terraform/aws/ec2/Makefile
+++ /dev/null
@@ -1,20 +0,0 @@
-config:
-	bash -c 'python3 scripts/init.py ./'
-init: config
-	bash -c 'source `pwd`/tmp-env.sh ; terraform init -migrate-state'
-plan: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform plan'
-	bash -c 'source `pwd`/tmp-env.sh ; terraform plan -out tfplan.binary'
-	bash -c 'source `pwd`/tmp-env.sh ; terraform show -json tfplan.binary > plan.json'
-pre-cost: plan
-	bash -c 'source `pwd`/tmp-env.sh ; infracost breakdown --path plan.json'
-apply: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform apply -auto-approve -lock=false'
-destroy: init
-	bash -c 'source `pwd`/tmp-env.sh && terraform destroy -auto-approve -lock=false'
-output: init
-	@bash -c 'source `pwd`/tmp-env.sh ; terraform refresh'
-	@bash -c 'python3 scripts/output.py'
-clean:
-	@rm -vf /scripts/tmp-env.sh
-	@rm -rvf .terraform*
diff --git a/iac_modules/terraform/aws/ec2/README.md b/iac_modules/terraform/aws/ec2/README.md
deleted file mode 100644
index d88c1732..00000000
--- a/iac_modules/terraform/aws/ec2/README.md
+++ /dev/null
@@ -1,50 +0,0 @@
-# Module Prep
-
-1. create terraform backend s3
-create dir: ec2, vpc, key, sg 
-2. create dynamodb_table
-```
-name = "LockID"
-type = "S"
-```
-
-# Module Dev
-
-cat >> variables.tf <<EOF 
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
-EOF
-
-# Module Test
-
-## input env vars
-
-example:
-
-```
-export region=ap-east-1
-export az=ap-east-1a
-export ak=<ak-token-xxxxx>
-export sk=<sk-token-xxxxx>
-export tf_key='dir/<key_name>/terraform-state'
-export tf_s3=<s3-name>
-
-export vpc_cidr='10.0.0.0/16'
-```
-
-# run command
-
-```
-make apply
-make output
-make destroy
-```
-
-# ouput file
-
-filename: build.env
-
-example:
-```
-```
diff --git a/iac_modules/terraform/aws/ec2/input-variables.yaml b/iac_modules/terraform/aws/ec2/input-variables.yaml
deleted file mode 100644
index 6338d816..00000000
--- a/iac_modules/terraform/aws/ec2/input-variables.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-sg_id: ["sg-0a2f69bf892992826"]
-ec2_type: "t3.medium"
-image_id: "ami-0d11fee2d69126ec1"
-subnet_id: subnet-00e97c682059dcbe5
-key_name: devops
\ No newline at end of file
diff --git a/iac_modules/terraform/aws/ec2/main.tf b/iac_modules/terraform/aws/ec2/main.tf
deleted file mode 100644
index 7536bc39..00000000
--- a/iac_modules/terraform/aws/ec2/main.tf
+++ /dev/null
@@ -1,13 +0,0 @@
-resource "aws_instance" "devops" {
-  ami                    = "${local.data.image_id}"
-  instance_type          = "${local.data.ec2_type}"
-  vpc_security_group_ids = "${local.data.sg_id}"
-  subnet_id              = "${local.data.subnet_id}"
-  key_name               = "${local.data.key_name}"
-
-  tags = {
-    Name = "devops"
-  }
-}
-
-
diff --git a/iac_modules/terraform/aws/ec2/outputs.tf b/iac_modules/terraform/aws/ec2/outputs.tf
deleted file mode 100644
index 893db191..00000000
--- a/iac_modules/terraform/aws/ec2/outputs.tf
+++ /dev/null
@@ -1,7 +0,0 @@
-output "public_ip" {
-  value = aws_instance.devops.public_ip
-}
-
-output "private_ip" {
-  value = aws_instance.devops.private_ip
-}
diff --git a/iac_modules/terraform/aws/ec2/provider.tf b/iac_modules/terraform/aws/ec2/provider.tf
deleted file mode 100644
index 411aed5e..00000000
--- a/iac_modules/terraform/aws/ec2/provider.tf
+++ /dev/null
@@ -1,22 +0,0 @@
-provider "aws" {
-  region     = "ap-east-1"
-}
-
-terraform {
-  backend "s3" {
-    bucket     = "msp-db"
-    key        = "ec2/ec2/test/terraform-state/terraform-state"
-    region     = "ap-east-1"
-    dynamodb_table = "terraform"
-  }
-  required_providers {
-    local = {
-      source = "hashicorp/local"
-    }
-    aws = {
-      source  = "hashicorp/aws"
-      version = "= 4.14.0"
-    }
-  }
-  required_version = ">= 0.14.9"
-}
\ No newline at end of file
diff --git a/iac_modules/terraform/aws/ec2/scripts/init.py b/iac_modules/terraform/aws/ec2/scripts/init.py
deleted file mode 100644
index eeb4df0e..00000000
--- a/iac_modules/terraform/aws/ec2/scripts/init.py
+++ /dev/null
@@ -1,94 +0,0 @@
-import os
-import sys
-import hvac
-import subprocess
-from pathlib import Path
-from jinja2 import Environment, FileSystemLoader
-
-app_dir = sys.argv[1]
-home_dir = str(Path.home())
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-
-def run_cmd(cmd):
-    retcode, output = subprocess.getstatusoutput( cmd )
-    assert retcode == 0
-    return output
-
-def read_vault_vars(vault_url, vault_token, vault_path, vault_secret):
-    client = hvac.Client(url=vault_url,token=vault_token)
-    client.is_authenticated()
-
-    client.secrets.kv.v2.configure(
-      max_versions=20,
-      mount_point=vault_path,
-    )
-
-    request = client.secrets.kv.v2.read_secret_version(mount_point=vault_path, path=vault_secret)
-    return request
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-
-if __name__ == '__main__':
-
-    ak                      = os.environ['ak']
-    sk                      = os.environ['sk']
-    region                  = os.environ['region']
-    az                      = os.environ['az']
-    iac_state_s3            = os.environ['tf_s3']
-    iac_state_key           = os.environ['tf_key']
-
-    ec2_type                = os.environ['ec2_type']
-    image_id                = os.environ['image_id']
-    sg_id                   = os.environ['sg_id']
-    subnet_id               = os.environ['subnet_web']
-    key_name                = os.environ['devops_key']
-
-    vars = {}
-
-    vars.update( { 
-    'count': { 
-         'ak': ak, 
-         'sk': sk, 
-         'region': region,
-         'az': az
-         },
-    'iac_state': {
-          's3': iac_state_s3,
-          'key': iac_state_key 
-        },
-    'sg_id': sg_id,
-    'ec2_type': ec2_type,
-    'image_id': image_id,
-    'subnet_id': subnet_id,
-    'key_name': key_name
-    } )
-  
-    print("set input-variables")
-    render_template('templates/temp-input-variables', 'input-variables.yaml', vars)
-
-    print("set iac provider configure")
-    render_template('templates/temp-provider.tf', 'provider.tf', vars)
-    
-    print("set aws-cli: region")
-    set_aws_region="aws configure set region {region}".format(region=vars['count']['region'])
-    print(set_aws_region)
-    run_cmd(set_aws_region)
-
-    print("set aws-cli: ak")
-    set_aws_ak="aws configure set aws_access_key_id {ak}".format(ak=vars['count']['ak'])
-    run_cmd(set_aws_ak)
-
-    print("set aws-cli: sk")
-    set_aws_sk="aws configure set aws_secret_access_key {sk}".format(sk=vars['count']['sk'])
-    run_cmd(set_aws_sk)
-
-    assume_role="bash scripts/sts.sh {iac_dir}".format(iac_dir=app_dir)
-    subprocess.run(args=assume_role, input='4', shell=True, encoding='utf-8')
diff --git a/iac_modules/terraform/aws/ec2/scripts/init.sh b/iac_modules/terraform/aws/ec2/scripts/init.sh
deleted file mode 100644
index 1f58aae8..00000000
--- a/iac_modules/terraform/aws/ec2/scripts/init.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/bash
-# 代码本地测试
-
-sudo yum install python3-pip -y || echo true
-sudo apt install python3-pip -y || echo true
-pip3 install hvac python-hcl2 Jinja2
-sudo wget https://mirrors.onwalk.net/tools/linux-amd64/gauth.tar.gz && sudo tar -xvpf gauth.tar.gz -C /usr/local/bin/
-sudo chmod 755 /usr/local/bin/gauth
diff --git a/iac_modules/terraform/aws/ec2/scripts/output.py b/iac_modules/terraform/aws/ec2/scripts/output.py
deleted file mode 100644
index 89f1872b..00000000
--- a/iac_modules/terraform/aws/ec2/scripts/output.py
+++ /dev/null
@@ -1,41 +0,0 @@
-import os
-import sys
-import hcl2
-import subprocess
-from jinja2 import Environment, FileSystemLoader
-
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-def parse_hcl2(contents: str) -> dict:
-    try:
-        return hcl2.loads(contents)
-    except Exception as error:
-        print(file=sys.stderr)
-        log.bad("Error parsing:")
-        print(contents, file=sys.stderr)
-        log.bad(f"Raising: {error.__class__.__name__}")
-        raise
-
-if __name__ == '__main__':
-
-
-    cmd='bash -c "source tmp-env.sh && terraform output"'
-    data=subprocess.getoutput(cmd)
-
-    if not (data is None):
-        dict=parse_hcl2(data)
-        vars = {}
-        for k, v in dict.items():
-            vars[k] = v
-
-        render_template('templates/temp-build.env', 'build.env', vars)
-    else:
-        print("terraform output return empty vaule")
diff --git a/iac_modules/terraform/aws/ec2/scripts/sts.sh b/iac_modules/terraform/aws/ec2/scripts/sts.sh
deleted file mode 100644
index 90e10f2e..00000000
--- a/iac_modules/terraform/aws/ec2/scripts/sts.sh
+++ /dev/null
@@ -1,13 +0,0 @@
-#!/bin/bash
-
-iac_dir=$1
-
-aws sts get-session-token > /tmp/tmp-token
-
-cat > ${iac_dir}/tmp-env.sh << EOF
-export AWS_ACCESS_KEY_ID=$(cat /tmp/tmp-token | jq '.Credentials.AccessKeyId')
-export AWS_SECRET_ACCESS_KEY=$(cat /tmp/tmp-token | jq '.Credentials.SecretAccessKey')
-export AWS_SESSION_TOKEN=$(cat /tmp/tmp-token | jq '.Credentials.SessionToken')
-EOF
-
-chmod 755 ${iac_dir}/tmp-env.sh
diff --git a/iac_modules/terraform/aws/ec2/scripts/templates/temp-build.env b/iac_modules/terraform/aws/ec2/scripts/templates/temp-build.env
deleted file mode 100644
index dd5f9703..00000000
--- a/iac_modules/terraform/aws/ec2/scripts/templates/temp-build.env
+++ /dev/null
@@ -1,3 +0,0 @@
-{% for k,v in vars.items() %}
-{{ k }}={{ v }}
-{% endfor %}
diff --git a/iac_modules/terraform/aws/ec2/scripts/templates/temp-input-variables b/iac_modules/terraform/aws/ec2/scripts/templates/temp-input-variables
deleted file mode 100644
index de29afa1..00000000
--- a/iac_modules/terraform/aws/ec2/scripts/templates/temp-input-variables
+++ /dev/null
@@ -1,5 +0,0 @@
-sg_id: ["{{ vars.sg_id }}"]
-ec2_type: "{{ vars.ec2_type }}"
-image_id: "{{ vars.image_id }}"
-subnet_id: {{ vars.subnet_id }}
-key_name: {{ vars.key_name }}
diff --git a/iac_modules/terraform/aws/ec2/scripts/templates/temp-provider.tf b/iac_modules/terraform/aws/ec2/scripts/templates/temp-provider.tf
deleted file mode 100644
index c415e453..00000000
--- a/iac_modules/terraform/aws/ec2/scripts/templates/temp-provider.tf
+++ /dev/null
@@ -1,20 +0,0 @@
-provider "aws" {
-  region     = "{{ vars.count.region }}"
-}
-
-terraform {
-  backend "s3" {
-    bucket     = "{{ vars.iac_state.s3 }}"
-    key        = "ec2/{{ vars.iac_state.key }}/terraform-state"
-    region     = "{{ vars.count.region }}"
-    dynamodb_table = "terraform"
-  }
-  required_providers {
-    local = {
-      source = "hashicorp/local"
-    }
-    aws = {
-      source  = "hashicorp/aws"
-    }
-  }
-}
diff --git a/iac_modules/terraform/aws/ec2/variables.tf b/iac_modules/terraform/aws/ec2/variables.tf
deleted file mode 100644
index 01d3bbbd..00000000
--- a/iac_modules/terraform/aws/ec2/variables.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
diff --git a/iac_modules/terraform/aws/example/README.md b/iac_modules/terraform/aws/example/README.md
deleted file mode 100644
index f417c0ad..00000000
--- a/iac_modules/terraform/aws/example/README.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# Examples
-
-Please note - the examples provided serve two primary means:
-
-1. Show users working examples of the various ways in which the module can be configured and features supported
-2. A means of testing/validating module changes
-
-Please do not mistake the examples provided as "best practices". It is up to users to consult the AWS service documentation for best practices, usage recommendations, etc.
diff --git a/iac_modules/terraform/aws/example/complete/README.md b/iac_modules/terraform/aws/example/complete/README.md
deleted file mode 100644
index c25ef9b0..00000000
--- a/iac_modules/terraform/aws/example/complete/README.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# AWS EC2 key pair
-
-Configuration in this directory creates EC2 key pair
-
-- One key pair with a module created private key (private/public key pair)
-- One key pair with external provided public key material
-
-## Usage
-
-To run this example you need to execute:
-
-```bash
-$ terraform init
-$ terraform plan
-$ terraform apply
-```
-
-Note that this example may create resources which cost money. Run `terraform destroy` when you don't need these resources.
-
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
-## Requirements
-
-| Name | Version |
-|------|---------|
-| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 4.21 |
-| <a name="requirement_tls"></a> [tls](#requirement\_tls) | >= 3.4 |
-
-## Providers
-
-| Name | Version |
-|------|---------|
-| <a name="provider_tls"></a> [tls](#provider\_tls) | >= 3.4 |
-
-## Modules
-
-| Name | Source | Version |
-|------|--------|---------|
-| <a name="module_key_pair"></a> [key\_pair](#module\_key\_pair) | ../../ | n/a |
-| <a name="module_key_pair_disabled"></a> [key\_pair\_disabled](#module\_key\_pair\_disabled) | ../../ | n/a |
-| <a name="module_key_pair_external"></a> [key\_pair\_external](#module\_key\_pair\_external) | ../../ | n/a |
-
-## Resources
-
-| Name | Type |
-|------|------|
-| [tls_private_key.this](https://registry.terraform.io/providers/hashicorp/tls/latest/docs/resources/private_key) | resource |
-
-## Inputs
-
-No inputs.
-
-## Outputs
-
-| Name | Description |
-|------|-------------|
-| <a name="output_external_key_pair_arn"></a> [external\_key\_pair\_arn](#output\_external\_key\_pair\_arn) | The key pair ARN |
-| <a name="output_external_key_pair_fingerprint"></a> [external\_key\_pair\_fingerprint](#output\_external\_key\_pair\_fingerprint) | The MD5 public key fingerprint as specified in section 4 of RFC 4716 |
-| <a name="output_external_key_pair_id"></a> [external\_key\_pair\_id](#output\_external\_key\_pair\_id) | The key pair ID |
-| <a name="output_external_key_pair_name"></a> [external\_key\_pair\_name](#output\_external\_key\_pair\_name) | The key pair name |
-| <a name="output_external_private_key_id"></a> [external\_private\_key\_id](#output\_external\_private\_key\_id) | Unique identifier for this resource: hexadecimal representation of the SHA1 checksum of the resource |
-| <a name="output_external_private_key_openssh"></a> [external\_private\_key\_openssh](#output\_external\_private\_key\_openssh) | Private key data in OpenSSH PEM (RFC 4716) format |
-| <a name="output_external_private_key_pem"></a> [external\_private\_key\_pem](#output\_external\_private\_key\_pem) | Private key data in PEM (RFC 1421) format |
-| <a name="output_external_public_key_fingerprint_md5"></a> [external\_public\_key\_fingerprint\_md5](#output\_external\_public\_key\_fingerprint\_md5) | The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations |
-| <a name="output_external_public_key_fingerprint_sha256"></a> [external\_public\_key\_fingerprint\_sha256](#output\_external\_public\_key\_fingerprint\_sha256) | The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations |
-| <a name="output_external_public_key_openssh"></a> [external\_public\_key\_openssh](#output\_external\_public\_key\_openssh) | The public key data in "Authorized Keys" format. This is populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys |
-| <a name="output_external_public_key_pem"></a> [external\_public\_key\_pem](#output\_external\_public\_key\_pem) | Public key data in PEM (RFC 1421) format |
-| <a name="output_key_pair_arn"></a> [key\_pair\_arn](#output\_key\_pair\_arn) | The key pair ARN |
-| <a name="output_key_pair_fingerprint"></a> [key\_pair\_fingerprint](#output\_key\_pair\_fingerprint) | The MD5 public key fingerprint as specified in section 4 of RFC 4716 |
-| <a name="output_key_pair_id"></a> [key\_pair\_id](#output\_key\_pair\_id) | The key pair ID |
-| <a name="output_key_pair_name"></a> [key\_pair\_name](#output\_key\_pair\_name) | The key pair name |
-| <a name="output_private_key_id"></a> [private\_key\_id](#output\_private\_key\_id) | Unique identifier for this resource: hexadecimal representation of the SHA1 checksum of the resource |
-| <a name="output_private_key_openssh"></a> [private\_key\_openssh](#output\_private\_key\_openssh) | Private key data in OpenSSH PEM (RFC 4716) format |
-| <a name="output_private_key_pem"></a> [private\_key\_pem](#output\_private\_key\_pem) | Private key data in PEM (RFC 1421) format |
-| <a name="output_public_key_fingerprint_md5"></a> [public\_key\_fingerprint\_md5](#output\_public\_key\_fingerprint\_md5) | The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations |
-| <a name="output_public_key_fingerprint_sha256"></a> [public\_key\_fingerprint\_sha256](#output\_public\_key\_fingerprint\_sha256) | The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations |
-| <a name="output_public_key_openssh"></a> [public\_key\_openssh](#output\_public\_key\_openssh) | The public key data in "Authorized Keys" format. This is populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys |
-| <a name="output_public_key_pem"></a> [public\_key\_pem](#output\_public\_key\_pem) | Public key data in PEM (RFC 1421) format |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
diff --git a/iac_modules/terraform/aws/example/complete/main.tf b/iac_modules/terraform/aws/example/complete/main.tf
deleted file mode 100644
index 4bf40410..00000000
--- a/iac_modules/terraform/aws/example/complete/main.tf
+++ /dev/null
@@ -1,50 +0,0 @@
-provider "aws" {
-  region = local.region
-}
-
-locals {
-  name   = "ex-${replace(basename(path.cwd), "_", "-")}"
-  region = "eu-west-1"
-
-  tags = {
-    Example    = local.name
-    GithubRepo = "terraform-aws-key-pair"
-    GithubOrg  = "terraform-aws-modules"
-  }
-}
-
-################################################################################
-# Key Pair Module
-################################################################################
-
-module "key_pair" {
-  source = "../../"
-
-  key_name           = local.name
-  create_private_key = true
-
-  tags = local.tags
-}
-
-module "key_pair_external" {
-  source = "../../"
-
-  key_name   = "${local.name}-external"
-  public_key = trimspace(tls_private_key.this.public_key_openssh)
-
-  tags = local.tags
-}
-
-module "key_pair_disabled" {
-  source = "../../"
-
-  create = false
-}
-
-################################################################################
-# Supporting Resources
-################################################################################
-
-resource "tls_private_key" "this" {
-  algorithm = "RSA"
-}
diff --git a/iac_modules/terraform/aws/example/complete/outputs.tf b/iac_modules/terraform/aws/example/complete/outputs.tf
deleted file mode 100644
index ad471842..00000000
--- a/iac_modules/terraform/aws/example/complete/outputs.tf
+++ /dev/null
@@ -1,121 +0,0 @@
-################################################################################
-# Key Pair
-################################################################################
-
-output "key_pair_id" {
-  description = "The key pair ID"
-  value       = module.key_pair.key_pair_id
-}
-
-output "key_pair_arn" {
-  description = "The key pair ARN"
-  value       = module.key_pair.key_pair_arn
-}
-
-output "key_pair_name" {
-  description = "The key pair name"
-  value       = module.key_pair.key_pair_name
-}
-
-output "key_pair_fingerprint" {
-  description = "The MD5 public key fingerprint as specified in section 4 of RFC 4716"
-  value       = module.key_pair.key_pair_fingerprint
-}
-
-output "private_key_id" {
-  description = "Unique identifier for this resource: hexadecimal representation of the SHA1 checksum of the resource"
-  value       = module.key_pair.private_key_id
-}
-
-output "private_key_openssh" {
-  description = "Private key data in OpenSSH PEM (RFC 4716) format"
-  value       = module.key_pair.private_key_openssh
-  sensitive   = true
-}
-
-output "private_key_pem" {
-  description = "Private key data in PEM (RFC 1421) format"
-  value       = module.key_pair.private_key_pem
-  sensitive   = true
-}
-
-output "public_key_fingerprint_md5" {
-  description = "The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations"
-  value       = module.key_pair.public_key_fingerprint_md5
-}
-
-output "public_key_fingerprint_sha256" {
-  description = "The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations"
-  value       = module.key_pair.public_key_fingerprint_sha256
-}
-
-output "public_key_openssh" {
-  description = "The public key data in \"Authorized Keys\" format. This is populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys"
-  value       = module.key_pair.public_key_openssh
-}
-
-output "public_key_pem" {
-  description = "Public key data in PEM (RFC 1421) format"
-  value       = module.key_pair.public_key_pem
-}
-
-################################################################################
-# Key Pair - External
-################################################################################
-
-output "external_key_pair_id" {
-  description = "The key pair ID"
-  value       = module.key_pair_external.key_pair_id
-}
-
-output "external_key_pair_arn" {
-  description = "The key pair ARN"
-  value       = module.key_pair_external.key_pair_arn
-}
-
-output "external_key_pair_name" {
-  description = "The key pair name"
-  value       = module.key_pair_external.key_pair_name
-}
-
-output "external_key_pair_fingerprint" {
-  description = "The MD5 public key fingerprint as specified in section 4 of RFC 4716"
-  value       = module.key_pair_external.key_pair_fingerprint
-}
-
-output "external_private_key_id" {
-  description = "Unique identifier for this resource: hexadecimal representation of the SHA1 checksum of the resource"
-  value       = module.key_pair_external.private_key_id
-}
-
-output "external_private_key_openssh" {
-  description = "Private key data in OpenSSH PEM (RFC 4716) format"
-  value       = module.key_pair_external.private_key_openssh
-  sensitive   = true
-}
-
-output "external_private_key_pem" {
-  description = "Private key data in PEM (RFC 1421) format"
-  value       = module.key_pair_external.private_key_pem
-  sensitive   = true
-}
-
-output "external_public_key_fingerprint_md5" {
-  description = "The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations"
-  value       = module.key_pair_external.public_key_fingerprint_md5
-}
-
-output "external_public_key_fingerprint_sha256" {
-  description = "The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations"
-  value       = module.key_pair_external.public_key_fingerprint_sha256
-}
-
-output "external_public_key_openssh" {
-  description = "The public key data in \"Authorized Keys\" format. This is populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys"
-  value       = module.key_pair_external.public_key_openssh
-}
-
-output "external_public_key_pem" {
-  description = "Public key data in PEM (RFC 1421) format"
-  value       = module.key_pair_external.public_key_pem
-}
diff --git a/iac_modules/terraform/aws/example/complete/variables.tf b/iac_modules/terraform/aws/example/complete/variables.tf
deleted file mode 100644
index e69de29b..00000000
diff --git a/iac_modules/terraform/aws/example/complete/versions.tf b/iac_modules/terraform/aws/example/complete/versions.tf
deleted file mode 100644
index c2da4bc4..00000000
--- a/iac_modules/terraform/aws/example/complete/versions.tf
+++ /dev/null
@@ -1,14 +0,0 @@
-terraform {
-  required_version = ">= 1.0"
-
-  required_providers {
-    aws = {
-      source  = "hashicorp/aws"
-      version = ">= 4.21"
-    }
-    tls = {
-      source  = "hashicorp/tls"
-      version = ">= 3.4"
-    }
-  }
-}
diff --git a/iac_modules/terraform/aws/example/template/.gitignore b/iac_modules/terraform/aws/example/template/.gitignore
deleted file mode 100644
index 6edac0eb..00000000
--- a/iac_modules/terraform/aws/example/template/.gitignore
+++ /dev/null
@@ -1,11 +0,0 @@
-.aws
-.DS_Store
-.DS_Store
-.test*.sh
-.terraform
-.terraform.lock.hcl
-build.env
-tmp-env.sh
-provider.tf
-errored.tfstate
-modules/config/.DS_Store
diff --git a/iac_modules/terraform/aws/example/template/Makefile b/iac_modules/terraform/aws/example/template/Makefile
deleted file mode 100644
index 73fa6a55..00000000
--- a/iac_modules/terraform/aws/example/template/Makefile
+++ /dev/null
@@ -1,17 +0,0 @@
-config:
-	bash -c 'mkdir -pv ~/.config/'
-	bash -c 'python3 scripts/init.py ./'
-init: config
-	bash -c 'source `pwd`/tmp-env.sh ; terraform init -migrate-state'
-plan: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform plan'
-apply: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform apply -auto-approve -lock=false'
-destroy: init
-	bash -c 'source `pwd`/tmp-env.sh && terraform destroy -auto-approve -lock=false'
-output: init
-	@bash -c 'source `pwd`/tmp-env.sh ; terraform refresh'
-	@bash -c 'python3 scripts/output.py'
-clean:
-	@rm -vf /scripts/tmp-env.sh
-	@rm -rvf .terraform*
diff --git a/iac_modules/terraform/aws/example/template/README.md b/iac_modules/terraform/aws/example/template/README.md
deleted file mode 100644
index 41209cd1..00000000
--- a/iac_modules/terraform/aws/example/template/README.md
+++ /dev/null
@@ -1,74 +0,0 @@
-# Module Prep
-
-1. create terraform backend s3
-create dir: ec2, vpc, key, sg 
-2. create dynamodb_table
-```
-name = "LockID"
-type = "S"
-```
-
-3. setup aws-cli and terraform
-```
-sudo apt install -y jq python3-pip
-pip3 install python-hcl2
-curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64-2.0.30.zip" -o "awscliv2.zip"
-unzip awscliv2.zip
-sudo ./aws/install
-
-sudo apt-get update && sudo apt-get install -y gnupg software-properties-common
-wget -O- https://apt.releases.hashicorp.com/gpg | gpg --dearmor | sudo tee /usr/share/keyrings/hashicorp-archive-keyring.gpg
-echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] \
-https://apt.releases.hashicorp.com $(lsb_release -cs) main" | \
-sudo tee /etc/apt/sources.list.d/hashicorp.list
-sudo apt update && sudo apt-get install terraform -y
-```
-
-4. cat > ~/.terraformrc << EOF
-plugin_cache_dir   = /root/.terraform.d/plugin-cache"
-disable_checkpoint = true
-disable_checkpoint_signature = true
-host "registry.terraform.io" {
-    services = {
-      "providers.v1" = "https://mirrors.onwalk.net/terraform/v1/providers/"
-    }
-  }
-EOF
-
-# Module Dev
-
-cat >> variables.tf <<EOF 
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
-EOF
-
-# Module Test
-
-## input env vars
-
-example:
-
-```
-export region=cn-northwest-1
-export ak=<ak-token-xxxxx>
-export sk=<sk-token-xxxxx>
-export tf_key='dir/<key_name>/terraform-state'
-export tf_s3=<s3-name>
-```
-
-# run command
-
-```
-make apply
-make output
-make destroy
-```
-
-# ouput file
-
-filename: build.env
-
-example:
-```
-```
diff --git a/iac_modules/terraform/aws/example/template/input-variables.yaml b/iac_modules/terraform/aws/example/template/input-variables.yaml
deleted file mode 100644
index e69de29b..00000000
diff --git a/iac_modules/terraform/aws/example/template/scripts/init.py b/iac_modules/terraform/aws/example/template/scripts/init.py
deleted file mode 100644
index 36068781..00000000
--- a/iac_modules/terraform/aws/example/template/scripts/init.py
+++ /dev/null
@@ -1,79 +0,0 @@
-import os
-import sys
-import hvac
-import subprocess
-from pathlib import Path
-from jinja2 import Environment, FileSystemLoader
-
-app_dir = sys.argv[1]
-home_dir = str(Path.home())
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-
-def run_cmd(cmd):
-    retcode, output = subprocess.getstatusoutput( cmd )
-    assert retcode == 0
-    return output
-
-def read_vault_vars(vault_url, vault_token, vault_path, vault_secret):
-    client = hvac.Client(url=vault_url,token=vault_token)
-    client.is_authenticated()
-
-    client.secrets.kv.v2.configure(
-      max_versions=20,
-      mount_point=vault_path,
-    )
-
-    request = client.secrets.kv.v2.read_secret_version(mount_point=vault_path, path=vault_secret)
-    return request
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-
-if __name__ == '__main__':
-
-    AK                      = os.environ['ak']
-    SK                      = os.environ['sk']
-    region                  = os.environ['region']
-    az                      = os.environ['az']
-    iac_state_s3            = os.environ['tf_s3']
-    iac_state_key           = os.environ['tf_key']
-
-    vars = {}
-
-    vars.update( { 
-    'count': { 
-         'ak': ak, 
-         'sk': sk, 
-         'region': region,
-         'az': az
-         },
-    'iac_state': {
-          's3': iac_state_s3,
-          'key': iac_state_key 
-        }
-    } )
-  
-    render_template('templates/temp-input-variables', 'input-variables.yaml', vars)
-    print("set input-variables")
-
-    render_template('templates/temp-provider.tf', 'provider.tf', vars)
-    print("set iac provider configure")
-    
-    set_aws_region="aws configure set region {region}".format(region=vars['count']['region'])
-    run_cmd(set_aws_region)
-
-    set_aws_ak="aws configure set aws_access_key_id {ak}".format(ak=vars['count']['ak'])
-    run_cmd(set_aws_ak)
-
-    set_aws_sk="aws configure set aws_secret_access_key {sk}".format(sk=vars['count']['sk'])
-    run_cmd(set_aws_sk)
-
-    assume_role="bash sts.sh {iac_dir}".format(iac_dir=app_dir)
-    subprocess.run(args=assume_role, input='4', shell=True, encoding='utf-8')
diff --git a/iac_modules/terraform/aws/example/template/scripts/init.sh b/iac_modules/terraform/aws/example/template/scripts/init.sh
deleted file mode 100644
index 1f58aae8..00000000
--- a/iac_modules/terraform/aws/example/template/scripts/init.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/bash
-# 代码本地测试
-
-sudo yum install python3-pip -y || echo true
-sudo apt install python3-pip -y || echo true
-pip3 install hvac python-hcl2 Jinja2
-sudo wget https://mirrors.onwalk.net/tools/linux-amd64/gauth.tar.gz && sudo tar -xvpf gauth.tar.gz -C /usr/local/bin/
-sudo chmod 755 /usr/local/bin/gauth
diff --git a/iac_modules/terraform/aws/example/template/scripts/output.py b/iac_modules/terraform/aws/example/template/scripts/output.py
deleted file mode 100644
index 89f1872b..00000000
--- a/iac_modules/terraform/aws/example/template/scripts/output.py
+++ /dev/null
@@ -1,41 +0,0 @@
-import os
-import sys
-import hcl2
-import subprocess
-from jinja2 import Environment, FileSystemLoader
-
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-def parse_hcl2(contents: str) -> dict:
-    try:
-        return hcl2.loads(contents)
-    except Exception as error:
-        print(file=sys.stderr)
-        log.bad("Error parsing:")
-        print(contents, file=sys.stderr)
-        log.bad(f"Raising: {error.__class__.__name__}")
-        raise
-
-if __name__ == '__main__':
-
-
-    cmd='bash -c "source tmp-env.sh && terraform output"'
-    data=subprocess.getoutput(cmd)
-
-    if not (data is None):
-        dict=parse_hcl2(data)
-        vars = {}
-        for k, v in dict.items():
-            vars[k] = v
-
-        render_template('templates/temp-build.env', 'build.env', vars)
-    else:
-        print("terraform output return empty vaule")
diff --git a/iac_modules/terraform/aws/example/template/scripts/sts.sh b/iac_modules/terraform/aws/example/template/scripts/sts.sh
deleted file mode 100644
index 90e10f2e..00000000
--- a/iac_modules/terraform/aws/example/template/scripts/sts.sh
+++ /dev/null
@@ -1,13 +0,0 @@
-#!/bin/bash
-
-iac_dir=$1
-
-aws sts get-session-token > /tmp/tmp-token
-
-cat > ${iac_dir}/tmp-env.sh << EOF
-export AWS_ACCESS_KEY_ID=$(cat /tmp/tmp-token | jq '.Credentials.AccessKeyId')
-export AWS_SECRET_ACCESS_KEY=$(cat /tmp/tmp-token | jq '.Credentials.SecretAccessKey')
-export AWS_SESSION_TOKEN=$(cat /tmp/tmp-token | jq '.Credentials.SessionToken')
-EOF
-
-chmod 755 ${iac_dir}/tmp-env.sh
diff --git a/iac_modules/terraform/aws/example/template/scripts/templates/temp-build.env b/iac_modules/terraform/aws/example/template/scripts/templates/temp-build.env
deleted file mode 100644
index dd5f9703..00000000
--- a/iac_modules/terraform/aws/example/template/scripts/templates/temp-build.env
+++ /dev/null
@@ -1,3 +0,0 @@
-{% for k,v in vars.items() %}
-{{ k }}={{ v }}
-{% endfor %}
diff --git a/iac_modules/terraform/aws/example/template/scripts/templates/temp-input-variables b/iac_modules/terraform/aws/example/template/scripts/templates/temp-input-variables
deleted file mode 100644
index a0e4e14a..00000000
--- a/iac_modules/terraform/aws/example/template/scripts/templates/temp-input-variables
+++ /dev/null
@@ -1,7 +0,0 @@
-global:
-  env: "{{ vars.global.env }}"
-  email: "{{ vars.global.email }}"
-  region: "{{ vars.global.region }}"
-  appowner: "{{ vars.global.appowner }}"
-  application: "{{ vars.global.application }}"
-  businessunit: "{{ vars.global.businessunit }}"
diff --git a/iac_modules/terraform/aws/example/template/scripts/templates/temp-provider.tf b/iac_modules/terraform/aws/example/template/scripts/templates/temp-provider.tf
deleted file mode 100644
index 67cec09e..00000000
--- a/iac_modules/terraform/aws/example/template/scripts/templates/temp-provider.tf
+++ /dev/null
@@ -1,22 +0,0 @@
-provider "aws" {
-  region  = "cn-northwest-1"  
-}
-
-terraform {
-  backend "s3" {
-    bucket     = "{{ vars.iac_state.s3 }}"
-    key        = "{{ vars.iac_state.key }}"
-    region     = "{{ vars.count.region }}"
-    dynamodb_table = "terraform"
-  }
-  required_providers {
-    local = {
-      source = "hashicorp/local"
-    }
-    aws = {
-      source  = "hashicorp/aws"
-      version = "= 4.14.0"
-    }
-  }
-  required_version = ">= 0.14.9"
-}
diff --git a/iac_modules/terraform/aws/key_pair/.editorconfig b/iac_modules/terraform/aws/key_pair/.editorconfig
deleted file mode 100644
index 88cb2519..00000000
--- a/iac_modules/terraform/aws/key_pair/.editorconfig
+++ /dev/null
@@ -1,30 +0,0 @@
-# EditorConfig is awesome: http://EditorConfig.org
-# Uses editorconfig to maintain consistent coding styles
-
-# top-most EditorConfig file
-root = true
-
-# Unix-style newlines with a newline ending every file
-[*]
-charset = utf-8
-end_of_line = lf
-indent_size = 2
-indent_style = space
-insert_final_newline = true
-max_line_length = 80
-trim_trailing_whitespace = true
-
-[*.{tf,tfvars}]
-indent_size = 2
-indent_style = space
-
-[*.md]
-max_line_length = 0
-trim_trailing_whitespace = false
-
-[Makefile]
-tab_width = 2
-indent_style = tab
-
-[COMMIT_EDITMSG]
-max_line_length = 0
diff --git a/iac_modules/terraform/aws/key_pair/.gitignore b/iac_modules/terraform/aws/key_pair/.gitignore
deleted file mode 100644
index ab1cf1bc..00000000
--- a/iac_modules/terraform/aws/key_pair/.gitignore
+++ /dev/null
@@ -1,8 +0,0 @@
-build.env
-provider.tf
-.test*.sh
-.DS_Store
-examples/.DS_Store
-examples/complete/.DS_Store
-scripts/.DS_Store
-scripts/templates/.DS_Store
diff --git a/iac_modules/terraform/aws/key_pair/Makefile b/iac_modules/terraform/aws/key_pair/Makefile
deleted file mode 100644
index e90c71e4..00000000
--- a/iac_modules/terraform/aws/key_pair/Makefile
+++ /dev/null
@@ -1,20 +0,0 @@
-config:
-	bash -c 'python3 scripts/init.py ./'
-init: config
-	bash -c 'source `pwd`/tmp-env.sh ; terraform init -migrate-state'
-plan: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform plan -out tfplan.binary'
-	bash -c 'source `pwd`/tmp-env.sh ; terraform show -json tfplan.binary > plan.json'
-	bash -c 'cat plan.json'
-pre-cost: plan
-	bash -c 'source `pwd`/tmp-env.sh ; infracost breakdown --path plan.json'
-apply: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform apply -auto-approve -lock=false'
-destroy: init
-	bash -c 'source `pwd`/tmp-env.sh && terraform destroy -auto-approve -lock=false'
-output: init
-	@bash -c 'source `pwd`/tmp-env.sh ; terraform refresh'
-	@bash -c 'python3 scripts/output.py'
-clean:
-	@rm -vf /scripts/tmp-env.sh
-	@rm -rvf .terraform*
diff --git a/iac_modules/terraform/aws/key_pair/README.md b/iac_modules/terraform/aws/key_pair/README.md
deleted file mode 100644
index d88c1732..00000000
--- a/iac_modules/terraform/aws/key_pair/README.md
+++ /dev/null
@@ -1,50 +0,0 @@
-# Module Prep
-
-1. create terraform backend s3
-create dir: ec2, vpc, key, sg 
-2. create dynamodb_table
-```
-name = "LockID"
-type = "S"
-```
-
-# Module Dev
-
-cat >> variables.tf <<EOF 
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
-EOF
-
-# Module Test
-
-## input env vars
-
-example:
-
-```
-export region=ap-east-1
-export az=ap-east-1a
-export ak=<ak-token-xxxxx>
-export sk=<sk-token-xxxxx>
-export tf_key='dir/<key_name>/terraform-state'
-export tf_s3=<s3-name>
-
-export vpc_cidr='10.0.0.0/16'
-```
-
-# run command
-
-```
-make apply
-make output
-make destroy
-```
-
-# ouput file
-
-filename: build.env
-
-example:
-```
-```
diff --git a/iac_modules/terraform/aws/key_pair/input-variables.yaml b/iac_modules/terraform/aws/key_pair/input-variables.yaml
deleted file mode 100644
index c3116680..00000000
--- a/iac_modules/terraform/aws/key_pair/input-variables.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-devops:
-  name: devops
-  pubkey: 'ssh-rsa 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 shenlan@shenlandeMacBook-Air-2.local' 
\ No newline at end of file
diff --git a/iac_modules/terraform/aws/key_pair/main.tf b/iac_modules/terraform/aws/key_pair/main.tf
deleted file mode 100644
index e2b1a138..00000000
--- a/iac_modules/terraform/aws/key_pair/main.tf
+++ /dev/null
@@ -1,4 +0,0 @@
-resource "aws_key_pair" "devops" {
-  key_name   = "${local.data.devops.name}"
-  public_key = "${local.data.devops.pubkey}"
-}
diff --git a/iac_modules/terraform/aws/key_pair/outputs.tf b/iac_modules/terraform/aws/key_pair/outputs.tf
deleted file mode 100644
index f8c17cdb..00000000
--- a/iac_modules/terraform/aws/key_pair/outputs.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-output "devops_key" {
-  value = aws_key_pair.devops.key_name
-}
diff --git a/iac_modules/terraform/aws/key_pair/scripts/init.py b/iac_modules/terraform/aws/key_pair/scripts/init.py
deleted file mode 100644
index 55dac0a4..00000000
--- a/iac_modules/terraform/aws/key_pair/scripts/init.py
+++ /dev/null
@@ -1,86 +0,0 @@
-import os
-import sys
-import hvac
-import subprocess
-from pathlib import Path
-from jinja2 import Environment, FileSystemLoader
-
-app_dir = sys.argv[1]
-home_dir = str(Path.home())
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-
-def run_cmd(cmd):
-    retcode, output = subprocess.getstatusoutput( cmd )
-    assert retcode == 0
-    return output
-
-def read_vault_vars(vault_url, vault_token, vault_path, vault_secret):
-    client = hvac.Client(url=vault_url,token=vault_token)
-    client.is_authenticated()
-
-    client.secrets.kv.v2.configure(
-      max_versions=20,
-      mount_point=vault_path,
-    )
-
-    request = client.secrets.kv.v2.read_secret_version(mount_point=vault_path, path=vault_secret)
-    return request
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-
-if __name__ == '__main__':
-
-    ak                      = os.environ['ak']
-    sk                      = os.environ['sk']
-    region                  = os.environ['region']
-    az                      = os.environ['az']
-    iac_state_s3            = os.environ['tf_s3']
-    iac_state_key           = os.environ['tf_key']
-
-    key_name                = os.environ['key_name']
-
-    vars = {}
-
-    vars.update( { 
-    'count': { 
-         'ak': ak, 
-         'sk': sk, 
-         'region': region,
-         'az': az
-         },
-    'iac_state': {
-          's3': iac_state_s3,
-          'key': iac_state_key 
-        },
-    'key_name': key_name
-    } )
-  
-    print("set input-variables")
-    render_template('templates/temp-input-variables', 'input-variables.yaml', vars)
-
-    print("set iac provider configure")
-    render_template('templates/temp-provider.tf', 'provider.tf', vars)
-    
-    print("set aws-cli: region")
-    set_aws_region="aws configure set region {region}".format(region=vars['count']['region'])
-    print(set_aws_region)
-    run_cmd(set_aws_region)
-
-    print("set aws-cli: ak")
-    set_aws_ak="aws configure set aws_access_key_id {ak}".format(ak=vars['count']['ak'])
-    run_cmd(set_aws_ak)
-
-    print("set aws-cli: sk")
-    set_aws_sk="aws configure set aws_secret_access_key {sk}".format(sk=vars['count']['sk'])
-    run_cmd(set_aws_sk)
-
-    assume_role="bash scripts/sts.sh {iac_dir}".format(iac_dir=app_dir)
-    subprocess.run(args=assume_role, input='4', shell=True, encoding='utf-8')
diff --git a/iac_modules/terraform/aws/key_pair/scripts/init.sh b/iac_modules/terraform/aws/key_pair/scripts/init.sh
deleted file mode 100644
index 1f58aae8..00000000
--- a/iac_modules/terraform/aws/key_pair/scripts/init.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/bash
-# 代码本地测试
-
-sudo yum install python3-pip -y || echo true
-sudo apt install python3-pip -y || echo true
-pip3 install hvac python-hcl2 Jinja2
-sudo wget https://mirrors.onwalk.net/tools/linux-amd64/gauth.tar.gz && sudo tar -xvpf gauth.tar.gz -C /usr/local/bin/
-sudo chmod 755 /usr/local/bin/gauth
diff --git a/iac_modules/terraform/aws/key_pair/scripts/output.py b/iac_modules/terraform/aws/key_pair/scripts/output.py
deleted file mode 100644
index 89f1872b..00000000
--- a/iac_modules/terraform/aws/key_pair/scripts/output.py
+++ /dev/null
@@ -1,41 +0,0 @@
-import os
-import sys
-import hcl2
-import subprocess
-from jinja2 import Environment, FileSystemLoader
-
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-def parse_hcl2(contents: str) -> dict:
-    try:
-        return hcl2.loads(contents)
-    except Exception as error:
-        print(file=sys.stderr)
-        log.bad("Error parsing:")
-        print(contents, file=sys.stderr)
-        log.bad(f"Raising: {error.__class__.__name__}")
-        raise
-
-if __name__ == '__main__':
-
-
-    cmd='bash -c "source tmp-env.sh && terraform output"'
-    data=subprocess.getoutput(cmd)
-
-    if not (data is None):
-        dict=parse_hcl2(data)
-        vars = {}
-        for k, v in dict.items():
-            vars[k] = v
-
-        render_template('templates/temp-build.env', 'build.env', vars)
-    else:
-        print("terraform output return empty vaule")
diff --git a/iac_modules/terraform/aws/key_pair/scripts/sts.sh b/iac_modules/terraform/aws/key_pair/scripts/sts.sh
deleted file mode 100644
index 90e10f2e..00000000
--- a/iac_modules/terraform/aws/key_pair/scripts/sts.sh
+++ /dev/null
@@ -1,13 +0,0 @@
-#!/bin/bash
-
-iac_dir=$1
-
-aws sts get-session-token > /tmp/tmp-token
-
-cat > ${iac_dir}/tmp-env.sh << EOF
-export AWS_ACCESS_KEY_ID=$(cat /tmp/tmp-token | jq '.Credentials.AccessKeyId')
-export AWS_SECRET_ACCESS_KEY=$(cat /tmp/tmp-token | jq '.Credentials.SecretAccessKey')
-export AWS_SESSION_TOKEN=$(cat /tmp/tmp-token | jq '.Credentials.SessionToken')
-EOF
-
-chmod 755 ${iac_dir}/tmp-env.sh
diff --git a/iac_modules/terraform/aws/key_pair/scripts/templates/temp-build.env b/iac_modules/terraform/aws/key_pair/scripts/templates/temp-build.env
deleted file mode 100644
index dd5f9703..00000000
--- a/iac_modules/terraform/aws/key_pair/scripts/templates/temp-build.env
+++ /dev/null
@@ -1,3 +0,0 @@
-{% for k,v in vars.items() %}
-{{ k }}={{ v }}
-{% endfor %}
diff --git a/iac_modules/terraform/aws/key_pair/scripts/templates/temp-input-variables b/iac_modules/terraform/aws/key_pair/scripts/templates/temp-input-variables
deleted file mode 100644
index 35e012ab..00000000
--- a/iac_modules/terraform/aws/key_pair/scripts/templates/temp-input-variables
+++ /dev/null
@@ -1,3 +0,0 @@
-devops:
-  name: {{ vars.key_name }}
-  pubkey: 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDEsuS135lzjVvlH2iNrKz23lDFr7b686xs4d2HINP2glFPmgkgx1D6Dqwisb1UbhWHZmUUzRxXeNlE8fiaO0TXN/C0dsdUxgopnQRyakcA+gfJqqb38Syx8eqdC7mQy9ygOf763dWm6d/SYZ8WgNWLldk4QF9DiZOW9K22DMtY4/1Cqe/YE/WGpOMVr9T9BwvmOjarjWp2OPbx6RVlSOd735Mze5X+cJ9QqdLaisCiSoJ3j9S6dulcxm+7ghPfATvxlJyZWSrRrVqnmV45lPbeuUHlIEyuK1PK2MS6NtUP03ZhdRYJQKZLECpR5xAO/BliOtDdRornvHV1gutYD8/n3IS8sRVzYPvN9DuOhzBnBQUgciu2++R8zMfdVoH7mSbsE8u++vMcBk3UJ1Op0Ct+trl2bsnue96cAnoiII08JKwAaczD5uZIGhdkGV8zKnChNCjzCxP0i4PV/MYW04eWmH+E8G81zq4ZsvrvPYmilBbRrkwHvvbPba3SSb2F2As= shenlan@shenlandeMacBook-Air-2.local' 
diff --git a/iac_modules/terraform/aws/key_pair/scripts/templates/temp-provider.tf b/iac_modules/terraform/aws/key_pair/scripts/templates/temp-provider.tf
deleted file mode 100644
index 239e11c7..00000000
--- a/iac_modules/terraform/aws/key_pair/scripts/templates/temp-provider.tf
+++ /dev/null
@@ -1,22 +0,0 @@
-provider "aws" {
-  region     = "{{ vars.count.region }}"
-}
-
-terraform {
-  backend "s3" {
-    bucket     = "{{ vars.iac_state.s3 }}"
-    key        = "key/{{ vars.iac_state.key }}/terraform-state"
-    region     = "{{ vars.count.region }}"
-    dynamodb_table = "terraform"
-  }
-  required_providers {
-    local = {
-      source = "hashicorp/local"
-    }
-    aws = {
-      source  = "hashicorp/aws"
-      version = "= 4.14.0"
-    }
-  }
-  required_version = ">= 0.14.9"
-}
diff --git a/iac_modules/terraform/aws/key_pair/variables.tf b/iac_modules/terraform/aws/key_pair/variables.tf
deleted file mode 100644
index 01d3bbbd..00000000
--- a/iac_modules/terraform/aws/key_pair/variables.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
diff --git a/iac_modules/terraform/aws/security_group/.gitignore b/iac_modules/terraform/aws/security_group/.gitignore
deleted file mode 100644
index 08d6d1fe..00000000
--- a/iac_modules/terraform/aws/security_group/.gitignore
+++ /dev/null
@@ -1,3 +0,0 @@
-build.env
-provider.tf
-.test*.sh
diff --git a/iac_modules/terraform/aws/security_group/LICENSE b/iac_modules/terraform/aws/security_group/LICENSE
deleted file mode 100644
index d9a10c0d..00000000
--- a/iac_modules/terraform/aws/security_group/LICENSE
+++ /dev/null
@@ -1,176 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
diff --git a/iac_modules/terraform/aws/security_group/Makefile b/iac_modules/terraform/aws/security_group/Makefile
deleted file mode 100644
index e90c71e4..00000000
--- a/iac_modules/terraform/aws/security_group/Makefile
+++ /dev/null
@@ -1,20 +0,0 @@
-config:
-	bash -c 'python3 scripts/init.py ./'
-init: config
-	bash -c 'source `pwd`/tmp-env.sh ; terraform init -migrate-state'
-plan: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform plan -out tfplan.binary'
-	bash -c 'source `pwd`/tmp-env.sh ; terraform show -json tfplan.binary > plan.json'
-	bash -c 'cat plan.json'
-pre-cost: plan
-	bash -c 'source `pwd`/tmp-env.sh ; infracost breakdown --path plan.json'
-apply: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform apply -auto-approve -lock=false'
-destroy: init
-	bash -c 'source `pwd`/tmp-env.sh && terraform destroy -auto-approve -lock=false'
-output: init
-	@bash -c 'source `pwd`/tmp-env.sh ; terraform refresh'
-	@bash -c 'python3 scripts/output.py'
-clean:
-	@rm -vf /scripts/tmp-env.sh
-	@rm -rvf .terraform*
diff --git a/iac_modules/terraform/aws/security_group/README.md b/iac_modules/terraform/aws/security_group/README.md
deleted file mode 100644
index d88c1732..00000000
--- a/iac_modules/terraform/aws/security_group/README.md
+++ /dev/null
@@ -1,50 +0,0 @@
-# Module Prep
-
-1. create terraform backend s3
-create dir: ec2, vpc, key, sg 
-2. create dynamodb_table
-```
-name = "LockID"
-type = "S"
-```
-
-# Module Dev
-
-cat >> variables.tf <<EOF 
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
-EOF
-
-# Module Test
-
-## input env vars
-
-example:
-
-```
-export region=ap-east-1
-export az=ap-east-1a
-export ak=<ak-token-xxxxx>
-export sk=<sk-token-xxxxx>
-export tf_key='dir/<key_name>/terraform-state'
-export tf_s3=<s3-name>
-
-export vpc_cidr='10.0.0.0/16'
-```
-
-# run command
-
-```
-make apply
-make output
-make destroy
-```
-
-# ouput file
-
-filename: build.env
-
-example:
-```
-```
diff --git a/iac_modules/terraform/aws/security_group/input-variables.yaml b/iac_modules/terraform/aws/security_group/input-variables.yaml
deleted file mode 100644
index 06a35dfc..00000000
--- a/iac_modules/terraform/aws/security_group/input-variables.yaml
+++ /dev/null
@@ -1,2 +0,0 @@
-vpc_id: 'vpc-0115381d8d7cb0842'
-az: 'ap-east-1a'
\ No newline at end of file
diff --git a/iac_modules/terraform/aws/security_group/main.tf b/iac_modules/terraform/aws/security_group/main.tf
deleted file mode 100644
index b37cd3f8..00000000
--- a/iac_modules/terraform/aws/security_group/main.tf
+++ /dev/null
@@ -1,41 +0,0 @@
-resource "aws_security_group" "allow_https" {
-  name   = "allow_https"
-  vpc_id = "${local.data.vpc_id}"
-
-  ingress {
-    cidr_blocks = [
-      "0.0.0.0/0"
-    ]
-
-    from_port = 0
-    to_port   = 0
-    protocol  = "-1"
-  }
-
-  ingress {
-    cidr_blocks = [
-      "0.0.0.0/0"
-    ]
-
-    from_port = 22
-    to_port   = 22
-    protocol  = "tcp"
-  }
-
-  ingress {
-    cidr_blocks = [
-      "0.0.0.0/0"
-    ]
-
-    from_port = 443
-    to_port   = 443
-    protocol  = "tcp"
-  }
-
-  egress {
-    from_port   = 0
-    to_port     = 0
-    protocol    = "-1"
-    cidr_blocks = ["0.0.0.0/0"]
-  }
-}
diff --git a/iac_modules/terraform/aws/security_group/outputs.tf b/iac_modules/terraform/aws/security_group/outputs.tf
deleted file mode 100644
index 56e4f6fa..00000000
--- a/iac_modules/terraform/aws/security_group/outputs.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-output "sg_id" {
-  value = aws_security_group.allow_https.id
-}
diff --git a/iac_modules/terraform/aws/security_group/scripts/init.py b/iac_modules/terraform/aws/security_group/scripts/init.py
deleted file mode 100644
index bd8c3339..00000000
--- a/iac_modules/terraform/aws/security_group/scripts/init.py
+++ /dev/null
@@ -1,86 +0,0 @@
-import os
-import sys
-import hvac
-import subprocess
-from pathlib import Path
-from jinja2 import Environment, FileSystemLoader
-
-app_dir = sys.argv[1]
-home_dir = str(Path.home())
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-
-def run_cmd(cmd):
-    retcode, output = subprocess.getstatusoutput( cmd )
-    assert retcode == 0
-    return output
-
-def read_vault_vars(vault_url, vault_token, vault_path, vault_secret):
-    client = hvac.Client(url=vault_url,token=vault_token)
-    client.is_authenticated()
-
-    client.secrets.kv.v2.configure(
-      max_versions=20,
-      mount_point=vault_path,
-    )
-
-    request = client.secrets.kv.v2.read_secret_version(mount_point=vault_path, path=vault_secret)
-    return request
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-
-if __name__ == '__main__':
-
-    ak                      = os.environ['ak']
-    sk                      = os.environ['sk']
-    region                  = os.environ['region']
-    az                      = os.environ['az']
-    iac_state_s3            = os.environ['tf_s3']
-    iac_state_key           = os.environ['tf_key']
-
-    vpc_id                  = os.environ['vpc_id']
-
-    vars = {}
-
-    vars.update( { 
-    'count': { 
-         'ak': ak, 
-         'sk': sk, 
-         'region': region,
-         'az': az
-         },
-    'iac_state': {
-          's3': iac_state_s3,
-          'key': iac_state_key 
-        },
-    'vpc_id': vpc_id
-    } )
-  
-    print("set input-variables")
-    render_template('templates/temp-input-variables', 'input-variables.yaml', vars)
-
-    print("set iac provider configure")
-    render_template('templates/temp-provider.tf', 'provider.tf', vars)
-    
-    print("set aws-cli: region")
-    set_aws_region="aws configure set region {region}".format(region=vars['count']['region'])
-    print(set_aws_region)
-    run_cmd(set_aws_region)
-
-    print("set aws-cli: ak")
-    set_aws_ak="aws configure set aws_access_key_id {ak}".format(ak=vars['count']['ak'])
-    run_cmd(set_aws_ak)
-
-    print("set aws-cli: sk")
-    set_aws_sk="aws configure set aws_secret_access_key {sk}".format(sk=vars['count']['sk'])
-    run_cmd(set_aws_sk)
-
-    assume_role="bash scripts/sts.sh {iac_dir}".format(iac_dir=app_dir)
-    subprocess.run(args=assume_role, input='4', shell=True, encoding='utf-8')
diff --git a/iac_modules/terraform/aws/security_group/scripts/init.sh b/iac_modules/terraform/aws/security_group/scripts/init.sh
deleted file mode 100644
index 1f58aae8..00000000
--- a/iac_modules/terraform/aws/security_group/scripts/init.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/bash
-# 代码本地测试
-
-sudo yum install python3-pip -y || echo true
-sudo apt install python3-pip -y || echo true
-pip3 install hvac python-hcl2 Jinja2
-sudo wget https://mirrors.onwalk.net/tools/linux-amd64/gauth.tar.gz && sudo tar -xvpf gauth.tar.gz -C /usr/local/bin/
-sudo chmod 755 /usr/local/bin/gauth
diff --git a/iac_modules/terraform/aws/security_group/scripts/output.py b/iac_modules/terraform/aws/security_group/scripts/output.py
deleted file mode 100644
index 89f1872b..00000000
--- a/iac_modules/terraform/aws/security_group/scripts/output.py
+++ /dev/null
@@ -1,41 +0,0 @@
-import os
-import sys
-import hcl2
-import subprocess
-from jinja2 import Environment, FileSystemLoader
-
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-def parse_hcl2(contents: str) -> dict:
-    try:
-        return hcl2.loads(contents)
-    except Exception as error:
-        print(file=sys.stderr)
-        log.bad("Error parsing:")
-        print(contents, file=sys.stderr)
-        log.bad(f"Raising: {error.__class__.__name__}")
-        raise
-
-if __name__ == '__main__':
-
-
-    cmd='bash -c "source tmp-env.sh && terraform output"'
-    data=subprocess.getoutput(cmd)
-
-    if not (data is None):
-        dict=parse_hcl2(data)
-        vars = {}
-        for k, v in dict.items():
-            vars[k] = v
-
-        render_template('templates/temp-build.env', 'build.env', vars)
-    else:
-        print("terraform output return empty vaule")
diff --git a/iac_modules/terraform/aws/security_group/scripts/sts.sh b/iac_modules/terraform/aws/security_group/scripts/sts.sh
deleted file mode 100644
index 90e10f2e..00000000
--- a/iac_modules/terraform/aws/security_group/scripts/sts.sh
+++ /dev/null
@@ -1,13 +0,0 @@
-#!/bin/bash
-
-iac_dir=$1
-
-aws sts get-session-token > /tmp/tmp-token
-
-cat > ${iac_dir}/tmp-env.sh << EOF
-export AWS_ACCESS_KEY_ID=$(cat /tmp/tmp-token | jq '.Credentials.AccessKeyId')
-export AWS_SECRET_ACCESS_KEY=$(cat /tmp/tmp-token | jq '.Credentials.SecretAccessKey')
-export AWS_SESSION_TOKEN=$(cat /tmp/tmp-token | jq '.Credentials.SessionToken')
-EOF
-
-chmod 755 ${iac_dir}/tmp-env.sh
diff --git a/iac_modules/terraform/aws/security_group/scripts/templates/temp-build.env b/iac_modules/terraform/aws/security_group/scripts/templates/temp-build.env
deleted file mode 100644
index dd5f9703..00000000
--- a/iac_modules/terraform/aws/security_group/scripts/templates/temp-build.env
+++ /dev/null
@@ -1,3 +0,0 @@
-{% for k,v in vars.items() %}
-{{ k }}={{ v }}
-{% endfor %}
diff --git a/iac_modules/terraform/aws/security_group/scripts/templates/temp-input-variables b/iac_modules/terraform/aws/security_group/scripts/templates/temp-input-variables
deleted file mode 100644
index f364482f..00000000
--- a/iac_modules/terraform/aws/security_group/scripts/templates/temp-input-variables
+++ /dev/null
@@ -1,2 +0,0 @@
-vpc_id: '{{ vars.vpc_id }}'
-az: '{{ vars.count.az }}'
diff --git a/iac_modules/terraform/aws/security_group/scripts/templates/temp-provider.tf b/iac_modules/terraform/aws/security_group/scripts/templates/temp-provider.tf
deleted file mode 100644
index 0e4d7f1d..00000000
--- a/iac_modules/terraform/aws/security_group/scripts/templates/temp-provider.tf
+++ /dev/null
@@ -1,22 +0,0 @@
-provider "aws" {
-  region     = "{{ vars.count.region }}"
-}
-
-terraform {
-  backend "s3" {
-    bucket     = "{{ vars.iac_state.s3 }}"
-    key        = "sg/{{ vars.iac_state.key }}/terraform-state"
-    region     = "{{ vars.count.region }}"
-    dynamodb_table = "terraform"
-  }
-  required_providers {
-    local = {
-      source = "hashicorp/local"
-    }
-    aws = {
-      source  = "hashicorp/aws"
-      version = "= 4.14.0"
-    }
-  }
-  required_version = ">= 0.14.9"
-}
diff --git a/iac_modules/terraform/aws/security_group/variables.tf b/iac_modules/terraform/aws/security_group/variables.tf
deleted file mode 100644
index 01d3bbbd..00000000
--- a/iac_modules/terraform/aws/security_group/variables.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
diff --git a/iac_modules/terraform/aws/vpc/.gitignore b/iac_modules/terraform/aws/vpc/.gitignore
deleted file mode 100644
index 08d6d1fe..00000000
--- a/iac_modules/terraform/aws/vpc/.gitignore
+++ /dev/null
@@ -1,3 +0,0 @@
-build.env
-provider.tf
-.test*.sh
diff --git a/iac_modules/terraform/aws/vpc/.gitlab-ci.yml b/iac_modules/terraform/aws/vpc/.gitlab-ci.yml
deleted file mode 100644
index 223e19e2..00000000
--- a/iac_modules/terraform/aws/vpc/.gitlab-ci.yml
+++ /dev/null
@@ -1,16 +0,0 @@
-stages:
-  - build
-
-build-image-job:
-  stage: build
-  image:
-    name: artifact.onwalk.net/k8s/kaniko-executor:debug
-    entrypoint: [""]
-  script:
-    - mkdir -p /kaniko/.docker
-    - echo "{\"auths\":{\"artifact.onwalk.net/k8s\":{\"auth\":\"$(printf "%s:%s" "admin" "${PASSWORD}" | base64 | tr -d '\n')\"}}}" > /kaniko/.docker/config.json
-    - >-
-      /kaniko/executor
-      --context "${CI_PROJECT_DIR}"
-      --dockerfile "${CI_PROJECT_DIR}/Dockerfile"
-      --destination "artifact.onwalk.net/k8s/iac-module-vpc:latest"
diff --git a/iac_modules/terraform/aws/vpc/Dockerfile b/iac_modules/terraform/aws/vpc/Dockerfile
deleted file mode 100644
index f94620a9..00000000
--- a/iac_modules/terraform/aws/vpc/Dockerfile
+++ /dev/null
@@ -1,44 +0,0 @@
-FROM hashicorp/terraform:1.2.1 
-LABEL maintainer="Haitao Pan <xz@onwalk.net>"
-
-ARG GLIBC_VERSION=2.34-r0
-ARG AWSCLI_VERSION=2.6.1
-
-RUN apk add --update --no-cache bash wget make curl jq py3-pip unzip zip && mkdir -pv /root/.terraform.d/plugin-cache && pip3 install jinja2 hvac python-hcl2
-RUN wget https://mirrors.onwalk.net/tools/linux-amd64/gauth.tar.gz && tar -xvpf gauth.tar.gz -C /usr/bin/ && chmod 755 /usr/bin/gauth
-RUN wget https://mirrors.onwalk.net/tools/linux-amd64/gitleaks_8.8.5_linux_x64.tar.gz && tar -xvpf gitleaks_8.8.5_linux_x64.tar.gz && cp gitleaks /usr/bin/ && chmod 755 /usr/bin/gitleaks
-
-# install glibc compatibility for alpine
-RUN apk --no-cache add \
-        binutils \
-        curl \
-    && curl -sL https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub -o /etc/apk/keys/sgerrand.rsa.pub \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-${GLIBC_VERSION}.apk \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-bin-${GLIBC_VERSION}.apk \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-i18n-${GLIBC_VERSION}.apk \
-    && apk add --no-cache \
-        glibc-${GLIBC_VERSION}.apk \
-        glibc-bin-${GLIBC_VERSION}.apk \
-        glibc-i18n-${GLIBC_VERSION}.apk \
-    && /usr/glibc-compat/bin/localedef -i en_US -f UTF-8 en_US.UTF-8 \
-    && curl -sL https://awscli.amazonaws.com/awscli-exe-linux-x86_64-${AWSCLI_VERSION}.zip -o awscliv2.zip \
-    && unzip awscliv2.zip \
-    && aws/install \
-    && rm -rf \
-        awscliv2.zip \
-        aws \
-        /usr/local/aws-cli/v2/current/dist/aws_completer \
-        /usr/local/aws-cli/v2/current/dist/awscli/data/ac.index \
-        /usr/local/aws-cli/v2/current/dist/awscli/examples \
-        glibc-*.apk \
-    && find /usr/local/aws-cli/v2/current/dist/awscli/botocore/data -name examples-1.json -delete \
-    && apk --no-cache del \
-        binutils \
-        curl \
-    && rm -rf /var/cache/apk/*
-
-COPY .terraformrc /root/
-COPY ./ .
-RUN terraform init
-
-ENTRYPOINT ["terraform"]
diff --git a/iac_modules/terraform/aws/vpc/LICENSE b/iac_modules/terraform/aws/vpc/LICENSE
deleted file mode 100644
index d9a10c0d..00000000
--- a/iac_modules/terraform/aws/vpc/LICENSE
+++ /dev/null
@@ -1,176 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
diff --git a/iac_modules/terraform/aws/vpc/Makefile b/iac_modules/terraform/aws/vpc/Makefile
deleted file mode 100644
index 38e8d188..00000000
--- a/iac_modules/terraform/aws/vpc/Makefile
+++ /dev/null
@@ -1,20 +0,0 @@
-config:
-	bash -c 'python3 scripts/init.py ./'
-init: config
-	bash -c 'source `pwd`/tmp-env.sh ; terraform init -migrate-state -lock=false'
-plan: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform plan -out tfplan.binary -lock=false'
-	bash -c 'source `pwd`/tmp-env.sh ; terraform show -json tfplan.binary > plan.json'
-	bash -c 'cat plan.json'
-pre-cost: plan
-	bash -c 'source `pwd`/tmp-env.sh ; infracost breakdown --path plan.json'
-apply: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform apply -auto-approve -lock=false'
-destroy: init
-	bash -c 'source `pwd`/tmp-env.sh && terraform destroy -auto-approve -lock=false'
-output: 
-	@bash -c 'source `pwd`/tmp-env.sh ; terraform refresh'
-	@bash -c 'python3 scripts/output.py'
-clean:
-	@rm -vf /scripts/tmp-env.sh
-	@rm -rvf .terraform*
diff --git a/iac_modules/terraform/aws/vpc/README.md b/iac_modules/terraform/aws/vpc/README.md
deleted file mode 100644
index d88c1732..00000000
--- a/iac_modules/terraform/aws/vpc/README.md
+++ /dev/null
@@ -1,50 +0,0 @@
-# Module Prep
-
-1. create terraform backend s3
-create dir: ec2, vpc, key, sg 
-2. create dynamodb_table
-```
-name = "LockID"
-type = "S"
-```
-
-# Module Dev
-
-cat >> variables.tf <<EOF 
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
-EOF
-
-# Module Test
-
-## input env vars
-
-example:
-
-```
-export region=ap-east-1
-export az=ap-east-1a
-export ak=<ak-token-xxxxx>
-export sk=<sk-token-xxxxx>
-export tf_key='dir/<key_name>/terraform-state'
-export tf_s3=<s3-name>
-
-export vpc_cidr='10.0.0.0/16'
-```
-
-# run command
-
-```
-make apply
-make output
-make destroy
-```
-
-# ouput file
-
-filename: build.env
-
-example:
-```
-```
diff --git a/iac_modules/terraform/aws/vpc/input-variables.yaml b/iac_modules/terraform/aws/vpc/input-variables.yaml
deleted file mode 100644
index dab33cd1..00000000
--- a/iac_modules/terraform/aws/vpc/input-variables.yaml
+++ /dev/null
@@ -1,2 +0,0 @@
-vpc_cidr: '10.0.0.0/16'
-az: 'ap-east-1a'
\ No newline at end of file
diff --git a/iac_modules/terraform/aws/vpc/main.tf b/iac_modules/terraform/aws/vpc/main.tf
deleted file mode 100644
index d1c29f80..00000000
--- a/iac_modules/terraform/aws/vpc/main.tf
+++ /dev/null
@@ -1,39 +0,0 @@
-resource "aws_vpc" "devops" {
-  cidr_block           = "${local.data.vpc_cidr}"
-  enable_dns_hostnames = true
-  enable_dns_support   = true
-}
-
-resource "aws_subnet" "subnet_web" {
-  # creates a subnet
-  cidr_block        = "${cidrsubnet(aws_vpc.devops.cidr_block, 8, 0)}"
-  vpc_id            = "${aws_vpc.devops.id}"
-  availability_zone = "${local.data.az}"
-  map_public_ip_on_launch = true
-}
-
-resource "aws_subnet" "subnet_db" {
-  # creates a subnet
-  cidr_block        = "${cidrsubnet(aws_vpc.devops.cidr_block, 8, 1)}"
-  vpc_id            = "${aws_vpc.devops.id}"
-  availability_zone = "${local.data.az}"
-}
-
-resource "aws_internet_gateway" "devops" {
-  vpc_id = "${aws_vpc.devops.id}"
-}
-
-resource "aws_route_table" "devops" {
-  vpc_id = "${aws_vpc.devops.id}"
-
-  route {
-    cidr_block = "0.0.0.0/0"
-    gateway_id = "${aws_internet_gateway.devops.id}"
-  }
-}
-
-resource "aws_route_table_association" "subnet-association-devops" {
-  subnet_id      = "${aws_subnet.subnet_web.id}"
-  route_table_id = "${aws_route_table.devops.id}"
-}
-
diff --git a/iac_modules/terraform/aws/vpc/outputs.tf b/iac_modules/terraform/aws/vpc/outputs.tf
deleted file mode 100644
index b47a8899..00000000
--- a/iac_modules/terraform/aws/vpc/outputs.tf
+++ /dev/null
@@ -1,11 +0,0 @@
-output "vpc_id" {
-  value = aws_vpc.devops.id
-}
-
-output "subnet_web" {
-  value = aws_subnet.subnet_web.id
-}
-
-output "subnet_db" {
-  value = aws_subnet.subnet_db.id
-}
diff --git a/iac_modules/terraform/aws/vpc/scripts/init.py b/iac_modules/terraform/aws/vpc/scripts/init.py
deleted file mode 100644
index 81fd27c2..00000000
--- a/iac_modules/terraform/aws/vpc/scripts/init.py
+++ /dev/null
@@ -1,86 +0,0 @@
-import os
-import sys
-import hvac
-import subprocess
-from pathlib import Path
-from jinja2 import Environment, FileSystemLoader
-
-app_dir = sys.argv[1]
-home_dir = str(Path.home())
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-
-def run_cmd(cmd):
-    retcode, output = subprocess.getstatusoutput( cmd )
-    assert retcode == 0
-    return output
-
-def read_vault_vars(vault_url, vault_token, vault_path, vault_secret):
-    client = hvac.Client(url=vault_url,token=vault_token)
-    client.is_authenticated()
-
-    client.secrets.kv.v2.configure(
-      max_versions=20,
-      mount_point=vault_path,
-    )
-
-    request = client.secrets.kv.v2.read_secret_version(mount_point=vault_path, path=vault_secret)
-    return request
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-
-if __name__ == '__main__':
-
-    ak                      = os.environ['ak']
-    sk                      = os.environ['sk']
-    region                  = os.environ['region']
-    az                      = os.environ['az']
-    iac_state_s3            = os.environ['tf_s3']
-    iac_state_key           = os.environ['tf_key']
-
-    vpc_cidr                = os.environ['vpc_cidr']
-
-    vars = {}
-
-    vars.update( { 
-    'count': { 
-         'ak': ak, 
-         'sk': sk, 
-         'region': region,
-         'az': az
-         },
-    'iac_state': {
-          's3': iac_state_s3,
-          'key': iac_state_key 
-        },
-    'vpc_cidr': vpc_cidr
-    } )
-  
-    print("set input-variables")
-    render_template('templates/temp-input-variables', 'input-variables.yaml', vars)
-
-    print("set iac provider configure")
-    render_template('templates/temp-provider.tf', 'provider.tf', vars)
-    
-    print("set aws-cli: region")
-    set_aws_region="aws configure set region {region}".format(region=vars['count']['region'])
-    print(set_aws_region)
-    run_cmd(set_aws_region)
-
-    print("set aws-cli: ak")
-    set_aws_ak="aws configure set aws_access_key_id {ak}".format(ak=vars['count']['ak'])
-    run_cmd(set_aws_ak)
-
-    print("set aws-cli: sk")
-    set_aws_sk="aws configure set aws_secret_access_key {sk}".format(sk=vars['count']['sk'])
-    run_cmd(set_aws_sk)
-
-    assume_role="bash scripts/sts.sh {iac_dir}".format(iac_dir=app_dir)
-    subprocess.run(args=assume_role, input='4', shell=True, encoding='utf-8')
diff --git a/iac_modules/terraform/aws/vpc/scripts/init.sh b/iac_modules/terraform/aws/vpc/scripts/init.sh
deleted file mode 100644
index 1f58aae8..00000000
--- a/iac_modules/terraform/aws/vpc/scripts/init.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/bash
-# 代码本地测试
-
-sudo yum install python3-pip -y || echo true
-sudo apt install python3-pip -y || echo true
-pip3 install hvac python-hcl2 Jinja2
-sudo wget https://mirrors.onwalk.net/tools/linux-amd64/gauth.tar.gz && sudo tar -xvpf gauth.tar.gz -C /usr/local/bin/
-sudo chmod 755 /usr/local/bin/gauth
diff --git a/iac_modules/terraform/aws/vpc/scripts/output.py b/iac_modules/terraform/aws/vpc/scripts/output.py
deleted file mode 100644
index 89f1872b..00000000
--- a/iac_modules/terraform/aws/vpc/scripts/output.py
+++ /dev/null
@@ -1,41 +0,0 @@
-import os
-import sys
-import hcl2
-import subprocess
-from jinja2 import Environment, FileSystemLoader
-
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-def parse_hcl2(contents: str) -> dict:
-    try:
-        return hcl2.loads(contents)
-    except Exception as error:
-        print(file=sys.stderr)
-        log.bad("Error parsing:")
-        print(contents, file=sys.stderr)
-        log.bad(f"Raising: {error.__class__.__name__}")
-        raise
-
-if __name__ == '__main__':
-
-
-    cmd='bash -c "source tmp-env.sh && terraform output"'
-    data=subprocess.getoutput(cmd)
-
-    if not (data is None):
-        dict=parse_hcl2(data)
-        vars = {}
-        for k, v in dict.items():
-            vars[k] = v
-
-        render_template('templates/temp-build.env', 'build.env', vars)
-    else:
-        print("terraform output return empty vaule")
diff --git a/iac_modules/terraform/aws/vpc/scripts/sts.sh b/iac_modules/terraform/aws/vpc/scripts/sts.sh
deleted file mode 100644
index 90e10f2e..00000000
--- a/iac_modules/terraform/aws/vpc/scripts/sts.sh
+++ /dev/null
@@ -1,13 +0,0 @@
-#!/bin/bash
-
-iac_dir=$1
-
-aws sts get-session-token > /tmp/tmp-token
-
-cat > ${iac_dir}/tmp-env.sh << EOF
-export AWS_ACCESS_KEY_ID=$(cat /tmp/tmp-token | jq '.Credentials.AccessKeyId')
-export AWS_SECRET_ACCESS_KEY=$(cat /tmp/tmp-token | jq '.Credentials.SecretAccessKey')
-export AWS_SESSION_TOKEN=$(cat /tmp/tmp-token | jq '.Credentials.SessionToken')
-EOF
-
-chmod 755 ${iac_dir}/tmp-env.sh
diff --git a/iac_modules/terraform/aws/vpc/scripts/templates/temp-build.env b/iac_modules/terraform/aws/vpc/scripts/templates/temp-build.env
deleted file mode 100644
index dd5f9703..00000000
--- a/iac_modules/terraform/aws/vpc/scripts/templates/temp-build.env
+++ /dev/null
@@ -1,3 +0,0 @@
-{% for k,v in vars.items() %}
-{{ k }}={{ v }}
-{% endfor %}
diff --git a/iac_modules/terraform/aws/vpc/scripts/templates/temp-input-variables b/iac_modules/terraform/aws/vpc/scripts/templates/temp-input-variables
deleted file mode 100644
index 7850db69..00000000
--- a/iac_modules/terraform/aws/vpc/scripts/templates/temp-input-variables
+++ /dev/null
@@ -1,2 +0,0 @@
-vpc_cidr: '{{ vars.vpc_cidr }}'
-az: '{{ vars.count.az }}'
diff --git a/iac_modules/terraform/aws/vpc/scripts/templates/temp-provider.tf b/iac_modules/terraform/aws/vpc/scripts/templates/temp-provider.tf
deleted file mode 100644
index 9c2303ab..00000000
--- a/iac_modules/terraform/aws/vpc/scripts/templates/temp-provider.tf
+++ /dev/null
@@ -1,22 +0,0 @@
-provider "aws" {
-  region     = "{{ vars.count.region }}"
-}
-
-terraform {
-  backend "s3" {
-    bucket     = "{{ vars.iac_state.s3 }}"
-    key        = "vpc/{{ vars.iac_state.key }}/terraform-state"
-    region     = "{{ vars.count.region }}"
-    dynamodb_table = "terraform"
-  }
-  required_providers {
-    local = {
-      source = "hashicorp/local"
-    }
-    aws = {
-      source  = "hashicorp/aws"
-      version = "= 4.14.0"
-    }
-  }
-  required_version = ">= 0.14.9"
-}
diff --git a/iac_modules/terraform/aws/vpc/variables.tf b/iac_modules/terraform/aws/vpc/variables.tf
deleted file mode 100644
index 01d3bbbd..00000000
--- a/iac_modules/terraform/aws/vpc/variables.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-locals {
-  data = yamldecode(file("./input-variables.yaml"))
-}
diff --git a/iac_modules/terraform/azure/example/README.md b/iac_modules/terraform/azure/example/README.md
deleted file mode 100644
index f417c0ad..00000000
--- a/iac_modules/terraform/azure/example/README.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# Examples
-
-Please note - the examples provided serve two primary means:
-
-1. Show users working examples of the various ways in which the module can be configured and features supported
-2. A means of testing/validating module changes
-
-Please do not mistake the examples provided as "best practices". It is up to users to consult the AWS service documentation for best practices, usage recommendations, etc.
diff --git a/iac_modules/terraform/azure/example/complete/README.md b/iac_modules/terraform/azure/example/complete/README.md
deleted file mode 100644
index c25ef9b0..00000000
--- a/iac_modules/terraform/azure/example/complete/README.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# AWS EC2 key pair
-
-Configuration in this directory creates EC2 key pair
-
-- One key pair with a module created private key (private/public key pair)
-- One key pair with external provided public key material
-
-## Usage
-
-To run this example you need to execute:
-
-```bash
-$ terraform init
-$ terraform plan
-$ terraform apply
-```
-
-Note that this example may create resources which cost money. Run `terraform destroy` when you don't need these resources.
-
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
-## Requirements
-
-| Name | Version |
-|------|---------|
-| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 4.21 |
-| <a name="requirement_tls"></a> [tls](#requirement\_tls) | >= 3.4 |
-
-## Providers
-
-| Name | Version |
-|------|---------|
-| <a name="provider_tls"></a> [tls](#provider\_tls) | >= 3.4 |
-
-## Modules
-
-| Name | Source | Version |
-|------|--------|---------|
-| <a name="module_key_pair"></a> [key\_pair](#module\_key\_pair) | ../../ | n/a |
-| <a name="module_key_pair_disabled"></a> [key\_pair\_disabled](#module\_key\_pair\_disabled) | ../../ | n/a |
-| <a name="module_key_pair_external"></a> [key\_pair\_external](#module\_key\_pair\_external) | ../../ | n/a |
-
-## Resources
-
-| Name | Type |
-|------|------|
-| [tls_private_key.this](https://registry.terraform.io/providers/hashicorp/tls/latest/docs/resources/private_key) | resource |
-
-## Inputs
-
-No inputs.
-
-## Outputs
-
-| Name | Description |
-|------|-------------|
-| <a name="output_external_key_pair_arn"></a> [external\_key\_pair\_arn](#output\_external\_key\_pair\_arn) | The key pair ARN |
-| <a name="output_external_key_pair_fingerprint"></a> [external\_key\_pair\_fingerprint](#output\_external\_key\_pair\_fingerprint) | The MD5 public key fingerprint as specified in section 4 of RFC 4716 |
-| <a name="output_external_key_pair_id"></a> [external\_key\_pair\_id](#output\_external\_key\_pair\_id) | The key pair ID |
-| <a name="output_external_key_pair_name"></a> [external\_key\_pair\_name](#output\_external\_key\_pair\_name) | The key pair name |
-| <a name="output_external_private_key_id"></a> [external\_private\_key\_id](#output\_external\_private\_key\_id) | Unique identifier for this resource: hexadecimal representation of the SHA1 checksum of the resource |
-| <a name="output_external_private_key_openssh"></a> [external\_private\_key\_openssh](#output\_external\_private\_key\_openssh) | Private key data in OpenSSH PEM (RFC 4716) format |
-| <a name="output_external_private_key_pem"></a> [external\_private\_key\_pem](#output\_external\_private\_key\_pem) | Private key data in PEM (RFC 1421) format |
-| <a name="output_external_public_key_fingerprint_md5"></a> [external\_public\_key\_fingerprint\_md5](#output\_external\_public\_key\_fingerprint\_md5) | The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations |
-| <a name="output_external_public_key_fingerprint_sha256"></a> [external\_public\_key\_fingerprint\_sha256](#output\_external\_public\_key\_fingerprint\_sha256) | The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations |
-| <a name="output_external_public_key_openssh"></a> [external\_public\_key\_openssh](#output\_external\_public\_key\_openssh) | The public key data in "Authorized Keys" format. This is populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys |
-| <a name="output_external_public_key_pem"></a> [external\_public\_key\_pem](#output\_external\_public\_key\_pem) | Public key data in PEM (RFC 1421) format |
-| <a name="output_key_pair_arn"></a> [key\_pair\_arn](#output\_key\_pair\_arn) | The key pair ARN |
-| <a name="output_key_pair_fingerprint"></a> [key\_pair\_fingerprint](#output\_key\_pair\_fingerprint) | The MD5 public key fingerprint as specified in section 4 of RFC 4716 |
-| <a name="output_key_pair_id"></a> [key\_pair\_id](#output\_key\_pair\_id) | The key pair ID |
-| <a name="output_key_pair_name"></a> [key\_pair\_name](#output\_key\_pair\_name) | The key pair name |
-| <a name="output_private_key_id"></a> [private\_key\_id](#output\_private\_key\_id) | Unique identifier for this resource: hexadecimal representation of the SHA1 checksum of the resource |
-| <a name="output_private_key_openssh"></a> [private\_key\_openssh](#output\_private\_key\_openssh) | Private key data in OpenSSH PEM (RFC 4716) format |
-| <a name="output_private_key_pem"></a> [private\_key\_pem](#output\_private\_key\_pem) | Private key data in PEM (RFC 1421) format |
-| <a name="output_public_key_fingerprint_md5"></a> [public\_key\_fingerprint\_md5](#output\_public\_key\_fingerprint\_md5) | The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations |
-| <a name="output_public_key_fingerprint_sha256"></a> [public\_key\_fingerprint\_sha256](#output\_public\_key\_fingerprint\_sha256) | The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations |
-| <a name="output_public_key_openssh"></a> [public\_key\_openssh](#output\_public\_key\_openssh) | The public key data in "Authorized Keys" format. This is populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys |
-| <a name="output_public_key_pem"></a> [public\_key\_pem](#output\_public\_key\_pem) | Public key data in PEM (RFC 1421) format |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
diff --git a/iac_modules/terraform/azure/example/complete/main.tf b/iac_modules/terraform/azure/example/complete/main.tf
deleted file mode 100644
index 4bf40410..00000000
--- a/iac_modules/terraform/azure/example/complete/main.tf
+++ /dev/null
@@ -1,50 +0,0 @@
-provider "aws" {
-  region = local.region
-}
-
-locals {
-  name   = "ex-${replace(basename(path.cwd), "_", "-")}"
-  region = "eu-west-1"
-
-  tags = {
-    Example    = local.name
-    GithubRepo = "terraform-aws-key-pair"
-    GithubOrg  = "terraform-aws-modules"
-  }
-}
-
-################################################################################
-# Key Pair Module
-################################################################################
-
-module "key_pair" {
-  source = "../../"
-
-  key_name           = local.name
-  create_private_key = true
-
-  tags = local.tags
-}
-
-module "key_pair_external" {
-  source = "../../"
-
-  key_name   = "${local.name}-external"
-  public_key = trimspace(tls_private_key.this.public_key_openssh)
-
-  tags = local.tags
-}
-
-module "key_pair_disabled" {
-  source = "../../"
-
-  create = false
-}
-
-################################################################################
-# Supporting Resources
-################################################################################
-
-resource "tls_private_key" "this" {
-  algorithm = "RSA"
-}
diff --git a/iac_modules/terraform/azure/example/complete/outputs.tf b/iac_modules/terraform/azure/example/complete/outputs.tf
deleted file mode 100644
index ad471842..00000000
--- a/iac_modules/terraform/azure/example/complete/outputs.tf
+++ /dev/null
@@ -1,121 +0,0 @@
-################################################################################
-# Key Pair
-################################################################################
-
-output "key_pair_id" {
-  description = "The key pair ID"
-  value       = module.key_pair.key_pair_id
-}
-
-output "key_pair_arn" {
-  description = "The key pair ARN"
-  value       = module.key_pair.key_pair_arn
-}
-
-output "key_pair_name" {
-  description = "The key pair name"
-  value       = module.key_pair.key_pair_name
-}
-
-output "key_pair_fingerprint" {
-  description = "The MD5 public key fingerprint as specified in section 4 of RFC 4716"
-  value       = module.key_pair.key_pair_fingerprint
-}
-
-output "private_key_id" {
-  description = "Unique identifier for this resource: hexadecimal representation of the SHA1 checksum of the resource"
-  value       = module.key_pair.private_key_id
-}
-
-output "private_key_openssh" {
-  description = "Private key data in OpenSSH PEM (RFC 4716) format"
-  value       = module.key_pair.private_key_openssh
-  sensitive   = true
-}
-
-output "private_key_pem" {
-  description = "Private key data in PEM (RFC 1421) format"
-  value       = module.key_pair.private_key_pem
-  sensitive   = true
-}
-
-output "public_key_fingerprint_md5" {
-  description = "The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations"
-  value       = module.key_pair.public_key_fingerprint_md5
-}
-
-output "public_key_fingerprint_sha256" {
-  description = "The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations"
-  value       = module.key_pair.public_key_fingerprint_sha256
-}
-
-output "public_key_openssh" {
-  description = "The public key data in \"Authorized Keys\" format. This is populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys"
-  value       = module.key_pair.public_key_openssh
-}
-
-output "public_key_pem" {
-  description = "Public key data in PEM (RFC 1421) format"
-  value       = module.key_pair.public_key_pem
-}
-
-################################################################################
-# Key Pair - External
-################################################################################
-
-output "external_key_pair_id" {
-  description = "The key pair ID"
-  value       = module.key_pair_external.key_pair_id
-}
-
-output "external_key_pair_arn" {
-  description = "The key pair ARN"
-  value       = module.key_pair_external.key_pair_arn
-}
-
-output "external_key_pair_name" {
-  description = "The key pair name"
-  value       = module.key_pair_external.key_pair_name
-}
-
-output "external_key_pair_fingerprint" {
-  description = "The MD5 public key fingerprint as specified in section 4 of RFC 4716"
-  value       = module.key_pair_external.key_pair_fingerprint
-}
-
-output "external_private_key_id" {
-  description = "Unique identifier for this resource: hexadecimal representation of the SHA1 checksum of the resource"
-  value       = module.key_pair_external.private_key_id
-}
-
-output "external_private_key_openssh" {
-  description = "Private key data in OpenSSH PEM (RFC 4716) format"
-  value       = module.key_pair_external.private_key_openssh
-  sensitive   = true
-}
-
-output "external_private_key_pem" {
-  description = "Private key data in PEM (RFC 1421) format"
-  value       = module.key_pair_external.private_key_pem
-  sensitive   = true
-}
-
-output "external_public_key_fingerprint_md5" {
-  description = "The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations"
-  value       = module.key_pair_external.public_key_fingerprint_md5
-}
-
-output "external_public_key_fingerprint_sha256" {
-  description = "The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:....` Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations"
-  value       = module.key_pair_external.public_key_fingerprint_sha256
-}
-
-output "external_public_key_openssh" {
-  description = "The public key data in \"Authorized Keys\" format. This is populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys"
-  value       = module.key_pair_external.public_key_openssh
-}
-
-output "external_public_key_pem" {
-  description = "Public key data in PEM (RFC 1421) format"
-  value       = module.key_pair_external.public_key_pem
-}
diff --git a/iac_modules/terraform/azure/example/complete/variables.tf b/iac_modules/terraform/azure/example/complete/variables.tf
deleted file mode 100644
index e69de29b..00000000
diff --git a/iac_modules/terraform/azure/example/complete/versions.tf b/iac_modules/terraform/azure/example/complete/versions.tf
deleted file mode 100644
index c2da4bc4..00000000
--- a/iac_modules/terraform/azure/example/complete/versions.tf
+++ /dev/null
@@ -1,14 +0,0 @@
-terraform {
-  required_version = ">= 1.0"
-
-  required_providers {
-    aws = {
-      source  = "hashicorp/aws"
-      version = ">= 4.21"
-    }
-    tls = {
-      source  = "hashicorp/tls"
-      version = ">= 3.4"
-    }
-  }
-}
diff --git a/iac_modules/terraform/gcp/firewall/Makefile b/iac_modules/terraform/gcp/firewall/Makefile
deleted file mode 100644
index ea702a07..00000000
--- a/iac_modules/terraform/gcp/firewall/Makefile
+++ /dev/null
@@ -1,20 +0,0 @@
-config:
-	bash -c 'python3 scripts/init.py ./'
-init: config
-	bash -c 'source `pwd`/tmp-env.sh ; terraform init -migrate-state'
-plan: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform plan'
-	bash -c 'source `pwd`/tmp-env.sh ; terraform plan -out tfplan.binary'
-	bash -c 'source `pwd`/tmp-env.sh ; terraform show -json tfplan.binary > plan.json'
-pre-cost: plan
-	bash -c 'source `pwd`/tmp-env.sh ; infracost breakdown --path plan.json'
-apply: init
-	bash -c 'source `pwd`/tmp-env.sh ; terraform apply -auto-approve -lock=false'
-destroy: init
-	bash -c 'source `pwd`/tmp-env.sh && terraform destroy -auto-approve -lock=false'
-output: init
-	@bash -c 'source `pwd`/tmp-env.sh ; terraform refresh'
-	@bash -c 'python3 scripts/output.py'
-clean:
-	@rm -vf /scripts/tmp-env.sh
-	@rm -rvf .terraform*
diff --git a/iac_modules/terraform/gcp/firewall/config.yaml b/iac_modules/terraform/gcp/firewall/config.yaml
deleted file mode 100644
index 7ef1244c..00000000
--- a/iac_modules/terraform/gcp/firewall/config.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-project_id: "cloudsvcworkspace"
-region: "asia-northeast1"
-bucket_name: "iac_status_terraform_gcp"
-firewall_rules:
-  - name: allow-ingress
-    network: "dev"
-    allow:
-      - protocol: tcp
-        ports: [ "22", "8022", "80", "443" ]
-    source_ranges: [ "0.0.0.0/0" ]
diff --git a/iac_modules/terraform/gcp/firewall/provider.tf b/iac_modules/terraform/gcp/firewall/provider.tf
deleted file mode 100644
index a4e9d8ca..00000000
--- a/iac_modules/terraform/gcp/firewall/provider.tf
+++ /dev/null
@@ -1,18 +0,0 @@
-provider "google" {
- project     = local.config.project_id
- region      = local.config.region
-}
-
-terraform {
-  backend "gcs" {
-    bucket = "iac_status_terraform_gcp"  # 替换为你的 GCS 存储桶名称
-    prefix = "firewall/"                # 根据需要调整前缀
-  }
-  required_providers {
-    google = {
-      source  = "hashicorp/google"
-      version = ">= 3.74.0"  # 使用适当的版本号
-    }
-  }
-  required_version = ">= 0.14.9"
-}
diff --git a/iac_modules/terraform/gcp/firewall/scripts/init.py b/iac_modules/terraform/gcp/firewall/scripts/init.py
deleted file mode 100644
index f9b729a2..00000000
--- a/iac_modules/terraform/gcp/firewall/scripts/init.py
+++ /dev/null
@@ -1,32 +0,0 @@
-import os
-import sys
-import yaml
-from pathlib import Path
-from jinja2 import Environment, FileSystemLoader
-
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-def load_config():
-    with open('config.yaml', 'r') as config_file:
-        config = yaml.safe_load(config_file)
-    return config
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-if __name__ == '__main__':
-
-    config = load_config()
-    print("Loaded config:", config)
-
-    vars = {
-        'firewall_rules': config.get('firewall_rules', []),
-    }
-
-    print("templated main.tf")
-    render_template('templates/main.tf', 'main.tf', vars)
diff --git a/iac_modules/terraform/gcp/firewall/scripts/run_terraform.sh b/iac_modules/terraform/gcp/firewall/scripts/run_terraform.sh
deleted file mode 100644
index b765f7b4..00000000
--- a/iac_modules/terraform/gcp/firewall/scripts/run_terraform.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-
-terraform init
-if [ "$STATE" == "create" ]; then
-    terraform apply -auto-approve
-elif [ "$STATE" == "destroy" ]; then
-    terraform destroy -auto-approve
-# Add handling for other states as needed
-else
-    echo "Invalid environment state"
-    exit 1
-fi
diff --git a/iac_modules/terraform/gcp/firewall/scripts/templates/main.tf b/iac_modules/terraform/gcp/firewall/scripts/templates/main.tf
deleted file mode 100644
index ae296b29..00000000
--- a/iac_modules/terraform/gcp/firewall/scripts/templates/main.tf
+++ /dev/null
@@ -1,11 +0,0 @@
-{% for rule in vars.firewall_rules %}
-resource "google_compute_firewall" "{{ rule.name }}" {
-  name        = "{{ rule.name }}"
-  network     = "{{ rule.network }}"
-  allow {
-    protocol = "{{ rule.allow[0].protocol }}"
-    ports    = [{{ '"' + '", "'.join(rule.allow[0].ports) + '"' }}]
-  }
-  source_ranges = [{{ '"' + '", "'.join(rule.source_ranges) + '"' }}]
-}
-{% endfor %}
diff --git a/iac_modules/terraform/gcp/firewall/variables.tf b/iac_modules/terraform/gcp/firewall/variables.tf
deleted file mode 100644
index 325705a5..00000000
--- a/iac_modules/terraform/gcp/firewall/variables.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-locals {
-  config = yamldecode(file("config.yaml"))
-}
diff --git a/iac_modules/terraform/gcp/gcs/Dockerfile b/iac_modules/terraform/gcp/gcs/Dockerfile
deleted file mode 100644
index f94620a9..00000000
--- a/iac_modules/terraform/gcp/gcs/Dockerfile
+++ /dev/null
@@ -1,44 +0,0 @@
-FROM hashicorp/terraform:1.2.1 
-LABEL maintainer="Haitao Pan <xz@onwalk.net>"
-
-ARG GLIBC_VERSION=2.34-r0
-ARG AWSCLI_VERSION=2.6.1
-
-RUN apk add --update --no-cache bash wget make curl jq py3-pip unzip zip && mkdir -pv /root/.terraform.d/plugin-cache && pip3 install jinja2 hvac python-hcl2
-RUN wget https://mirrors.onwalk.net/tools/linux-amd64/gauth.tar.gz && tar -xvpf gauth.tar.gz -C /usr/bin/ && chmod 755 /usr/bin/gauth
-RUN wget https://mirrors.onwalk.net/tools/linux-amd64/gitleaks_8.8.5_linux_x64.tar.gz && tar -xvpf gitleaks_8.8.5_linux_x64.tar.gz && cp gitleaks /usr/bin/ && chmod 755 /usr/bin/gitleaks
-
-# install glibc compatibility for alpine
-RUN apk --no-cache add \
-        binutils \
-        curl \
-    && curl -sL https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub -o /etc/apk/keys/sgerrand.rsa.pub \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-${GLIBC_VERSION}.apk \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-bin-${GLIBC_VERSION}.apk \
-    && curl -sLO https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-i18n-${GLIBC_VERSION}.apk \
-    && apk add --no-cache \
-        glibc-${GLIBC_VERSION}.apk \
-        glibc-bin-${GLIBC_VERSION}.apk \
-        glibc-i18n-${GLIBC_VERSION}.apk \
-    && /usr/glibc-compat/bin/localedef -i en_US -f UTF-8 en_US.UTF-8 \
-    && curl -sL https://awscli.amazonaws.com/awscli-exe-linux-x86_64-${AWSCLI_VERSION}.zip -o awscliv2.zip \
-    && unzip awscliv2.zip \
-    && aws/install \
-    && rm -rf \
-        awscliv2.zip \
-        aws \
-        /usr/local/aws-cli/v2/current/dist/aws_completer \
-        /usr/local/aws-cli/v2/current/dist/awscli/data/ac.index \
-        /usr/local/aws-cli/v2/current/dist/awscli/examples \
-        glibc-*.apk \
-    && find /usr/local/aws-cli/v2/current/dist/awscli/botocore/data -name examples-1.json -delete \
-    && apk --no-cache del \
-        binutils \
-        curl \
-    && rm -rf /var/cache/apk/*
-
-COPY .terraformrc /root/
-COPY ./ .
-RUN terraform init
-
-ENTRYPOINT ["terraform"]
diff --git a/iac_modules/terraform/gcp/gcs/LICENSE b/iac_modules/terraform/gcp/gcs/LICENSE
deleted file mode 100644
index d9a10c0d..00000000
--- a/iac_modules/terraform/gcp/gcs/LICENSE
+++ /dev/null
@@ -1,176 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
diff --git a/iac_modules/terraform/gcp/gcs/config.yaml b/iac_modules/terraform/gcp/gcs/config.yaml
deleted file mode 100644
index 74b67d27..00000000
--- a/iac_modules/terraform/gcp/gcs/config.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-project_id: "cloudsvcworkspace"
-region: "asia-northeast1"
-bucket_name: "iac_status_terraform_gcp"
diff --git a/iac_modules/terraform/gcp/gcs/main.tf b/iac_modules/terraform/gcp/gcs/main.tf
deleted file mode 100644
index dd42d763..00000000
--- a/iac_modules/terraform/gcp/gcs/main.tf
+++ /dev/null
@@ -1,5 +0,0 @@
-resource "google_storage_bucket" "terraform_state_bucket" {
-  name          = local.config.bucket_name
-  location      = local.config.region
-  force_destroy = true
-}
diff --git a/iac_modules/terraform/gcp/gcs/outputs.tf b/iac_modules/terraform/gcp/gcs/outputs.tf
deleted file mode 100644
index 052e6de2..00000000
--- a/iac_modules/terraform/gcp/gcs/outputs.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-output "bucket_url" {
-  value = google_storage_bucket.terraform_state_bucket.url
-}
diff --git a/iac_modules/terraform/gcp/gcs/provider.tf b/iac_modules/terraform/gcp/gcs/provider.tf
deleted file mode 100644
index 93e2f826..00000000
--- a/iac_modules/terraform/gcp/gcs/provider.tf
+++ /dev/null
@@ -1,4 +0,0 @@
-provider "google" {
-  project     = local.config.project_id
-  region      = local.config.region
-}
diff --git a/iac_modules/terraform/gcp/gcs/run_terraform.sh b/iac_modules/terraform/gcp/gcs/run_terraform.sh
deleted file mode 100644
index b765f7b4..00000000
--- a/iac_modules/terraform/gcp/gcs/run_terraform.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-
-terraform init
-if [ "$STATE" == "create" ]; then
-    terraform apply -auto-approve
-elif [ "$STATE" == "destroy" ]; then
-    terraform destroy -auto-approve
-# Add handling for other states as needed
-else
-    echo "Invalid environment state"
-    exit 1
-fi
diff --git a/iac_modules/terraform/gcp/gcs/variables.tf b/iac_modules/terraform/gcp/gcs/variables.tf
deleted file mode 100644
index 325705a5..00000000
--- a/iac_modules/terraform/gcp/gcs/variables.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-locals {
-  config = yamldecode(file("config.yaml"))
-}
diff --git a/iac_modules/terraform/gcp/key_pair/config.yaml b/iac_modules/terraform/gcp/key_pair/config.yaml
deleted file mode 100644
index d280ac96..00000000
--- a/iac_modules/terraform/gcp/key_pair/config.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-project_id: "cloudsvcworkspace"
-region: "asia-northeast1"
-key_pairs:
-  - name: dev_ssh_keys
-    key_file: ssh_keys.pub
diff --git a/iac_modules/terraform/gcp/key_pair/provider.tf b/iac_modules/terraform/gcp/key_pair/provider.tf
deleted file mode 100644
index 0d4dbf9a..00000000
--- a/iac_modules/terraform/gcp/key_pair/provider.tf
+++ /dev/null
@@ -1,18 +0,0 @@
-provider "google" {
- project     = local.config.project_id
- region      = local.config.region
-}
-
-terraform {
-  backend "gcs" {
-    bucket = "iac_status_terraform_gcp"  # 替换为你的 GCS 存储桶名称
-    prefix = "key_pair/"                # 根据需要调整前缀
-  }
-  required_providers {
-    google = {
-      source  = "hashicorp/google"
-      version = ">= 3.74.0"  # 使用适当的版本号
-    }
-  }
-  required_version = ">= 0.14.9"
-}
diff --git a/iac_modules/terraform/gcp/key_pair/scripts/check_ssh_metadata.sh b/iac_modules/terraform/gcp/key_pair/scripts/check_ssh_metadata.sh
deleted file mode 100644
index 43995a64..00000000
--- a/iac_modules/terraform/gcp/key_pair/scripts/check_ssh_metadata.sh
+++ /dev/null
@@ -1,27 +0,0 @@
-#!/bin/bash
-
-# Get the directory of the script
-script_dir="$(dirname "$(readlink -f "$0")")"
-
-# Read config.yaml and set environment variables
-project_id=$(yq eval '.project_id' "$script_dir/../config.yaml")
-key_pairs_name=$(yq eval '.key_pairs[0].name' "$script_dir/../config.yaml")
-
-if [ -z "$project_id" ]; then
-  echo "Error: Project ID not set in config.yaml"
-  exit 1
-fi
-
-if [ -z "$key_pairs_name" ]; then
-  echo "Error: Key pairs name not set in config.yaml"
-  exit 1
-fi
-
-# Check SSH Metadata
-SSH_METADATA_EXISTS=$(gcloud compute project-info describe --project=${project_id} --format="value(commonInstanceMetadata.items['${key_pairs_name}'])")
-
-if [ -n "$SSH_METADATA_EXISTS" ]; then
-   echo "::set-output name=ssh_metadata_exists::true"
-else
-   echo "::set-output name=ssh_metadata_exists::false"
-fi
diff --git a/iac_modules/terraform/gcp/key_pair/scripts/init.py b/iac_modules/terraform/gcp/key_pair/scripts/init.py
deleted file mode 100644
index 44463a44..00000000
--- a/iac_modules/terraform/gcp/key_pair/scripts/init.py
+++ /dev/null
@@ -1,32 +0,0 @@
-import os
-import sys
-import yaml
-from pathlib import Path
-from jinja2 import Environment, FileSystemLoader
-
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-def load_config():
-    with open('config.yaml', 'r') as config_file:
-        config = yaml.safe_load(config_file)
-    return config
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-if __name__ == '__main__':
-
-    config = load_config()
-    print("Loaded config:", config)
-
-    vars = {
-        'key_pairs': config.get('key_pairs', []),
-    }
-
-    print("templated main.tf")
-    render_template('templates/main.tf', 'main.tf', vars)
diff --git a/iac_modules/terraform/gcp/key_pair/scripts/run_terraform.sh b/iac_modules/terraform/gcp/key_pair/scripts/run_terraform.sh
deleted file mode 100644
index b765f7b4..00000000
--- a/iac_modules/terraform/gcp/key_pair/scripts/run_terraform.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-
-terraform init
-if [ "$STATE" == "create" ]; then
-    terraform apply -auto-approve
-elif [ "$STATE" == "destroy" ]; then
-    terraform destroy -auto-approve
-# Add handling for other states as needed
-else
-    echo "Invalid environment state"
-    exit 1
-fi
diff --git a/iac_modules/terraform/gcp/key_pair/scripts/templates/main.tf b/iac_modules/terraform/gcp/key_pair/scripts/templates/main.tf
deleted file mode 100644
index 944d6ab4..00000000
--- a/iac_modules/terraform/gcp/key_pair/scripts/templates/main.tf
+++ /dev/null
@@ -1,11 +0,0 @@
-resource "google_compute_project_metadata" "default" {
-  metadata = {
-    "ssh-keys" = <<EOF
-ubuntu:${local.ssh_keys_content}
-EOF
-  }
-}
-
-output "metadata" {
-  value = google_compute_project_metadata.default.metadata
-}
diff --git a/iac_modules/terraform/gcp/key_pair/variables.tf b/iac_modules/terraform/gcp/key_pair/variables.tf
deleted file mode 100644
index 21e90acf..00000000
--- a/iac_modules/terraform/gcp/key_pair/variables.tf
+++ /dev/null
@@ -1,7 +0,0 @@
-locals {
-  config = yamldecode(file("config.yaml"))
-}
-
-locals {
-  ssh_keys_content = file("ssh_keys.pub")
-}
diff --git a/iac_modules/terraform/gcp/network/config.yaml b/iac_modules/terraform/gcp/network/config.yaml
deleted file mode 100644
index b735a986..00000000
--- a/iac_modules/terraform/gcp/network/config.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-project_id: "cloudsvcworkspace"
-region: "asia-northeast1"
-vpc_cidr: "10.0.0.0/16"
-region: "asia-northeast1"
-bucket_name: "iac_status_terraform_gcp"
diff --git a/iac_modules/terraform/gcp/network/internet_route_gateway.tf b/iac_modules/terraform/gcp/network/internet_route_gateway.tf
deleted file mode 100644
index 152b1132..00000000
--- a/iac_modules/terraform/gcp/network/internet_route_gateway.tf
+++ /dev/null
@@ -1,5 +0,0 @@
-# 创建互联网网关
-resource "google_compute_router" "public_router" {
-  name    = "public-router"
-  network = google_compute_network.default.id
-}
diff --git a/iac_modules/terraform/gcp/network/main.tf b/iac_modules/terraform/gcp/network/main.tf
deleted file mode 100644
index 8d9ce142..00000000
--- a/iac_modules/terraform/gcp/network/main.tf
+++ /dev/null
@@ -1,29 +0,0 @@
-# Create a VPC network
-resource "google_compute_network" "default" {
-  name                    = "dev"
-  project                 = local.config.project_id
-  auto_create_subnetworks = false
-  delete_default_routes_on_create = true
-  description             = "My custom network for Dev"
-}
-
-# 子网1：路由到互联网网关出口的子网
-resource "google_compute_subnetwork" "public_subnet" {
-  name          = "internet-subnet"
-  ip_cidr_range = "10.0.1.0/24"  # 请根据实际需要调整 IP 范围
-  network       = google_compute_network.default.id
-}
-
-# 子网2：路由到 NAT 网关出口的子网
-resource "google_compute_subnetwork" "nat_subnet" {
-  name          = "nat-subnet"
-  ip_cidr_range = "10.0.2.0/24"  # 请根据实际需要调整 IP 范围
-  network       = google_compute_network.default.id
-}
-
-# 子网3：私有的安全子网
-resource "google_compute_subnetwork" "private_subnet" {
-  name          = "private-subnet"
-  ip_cidr_range = "10.0.3.0/24"  # 请根据实际需要调整 IP 范围
-  network       = google_compute_network.default.id
-}
diff --git a/iac_modules/terraform/gcp/network/nat_route_gateway.tf b/iac_modules/terraform/gcp/network/nat_route_gateway.tf
deleted file mode 100644
index 07f5be01..00000000
--- a/iac_modules/terraform/gcp/network/nat_route_gateway.tf
+++ /dev/null
@@ -1,28 +0,0 @@
-# 创建 NAT 网关
-
-resource "google_compute_router" "nat_router" {
-  name    = "nat-router"
-  region  = google_compute_subnetwork.nat_subnet.region
-  network = google_compute_network.default.id
-}
-
-resource "google_compute_address" "nat_address" {
-  count  = 1
-  name   = "nat-manual-ip-${count.index}"
-  region = google_compute_subnetwork.nat_subnet.region
-}
-
-resource "google_compute_router_nat" "nat_manual" {
-  name   = "router-nat"
-  router = google_compute_router.nat_router.name
-  region = google_compute_router.nat_router.region
-
-  nat_ip_allocate_option = "MANUAL_ONLY"
-  nat_ips                = google_compute_address.nat_address.*.self_link
-
-  source_subnetwork_ip_ranges_to_nat = "LIST_OF_SUBNETWORKS"
-  subnetwork {
-    name                    = google_compute_subnetwork.nat_subnet.id
-    source_ip_ranges_to_nat = ["ALL_IP_RANGES"]
-  }
-}
diff --git a/iac_modules/terraform/gcp/network/outputs.tf b/iac_modules/terraform/gcp/network/outputs.tf
deleted file mode 100644
index f695dd9c..00000000
--- a/iac_modules/terraform/gcp/network/outputs.tf
+++ /dev/null
@@ -1,10 +0,0 @@
-# Output network information
-output "network_info" {
-  description = "Information about the created network"
-  value = {
-    network_name        = google_compute_network.default.name
-    public_subnet_cidr  = google_compute_subnetwork.public_subnet.ip_cidr_range
-    nat_subnet1_cidr = google_compute_subnetwork.nat_subnet.ip_cidr_range
-    private_subnet_cidr = google_compute_subnetwork.private_subnet.ip_cidr_range
-  }
-}
diff --git a/iac_modules/terraform/gcp/network/provider.tf b/iac_modules/terraform/gcp/network/provider.tf
deleted file mode 100644
index cfff9db9..00000000
--- a/iac_modules/terraform/gcp/network/provider.tf
+++ /dev/null
@@ -1,18 +0,0 @@
-provider "google" {
- project     = local.config.project_id
- region      = local.config.region
-}
-
-terraform {
-  backend "gcs" {
-    bucket = "iac_status_terraform_gcp"  # 替换为你的 GCS 存储桶名称
-    prefix = "vpc/"                     # 根据需要调整前缀
-  }
-  required_providers {
-    google = {
-      source  = "hashicorp/google"
-      version = ">= 3.74.0"  # 使用适当的版本号
-    }
-  }
-  required_version = ">= 0.14.9"
-}
diff --git a/iac_modules/terraform/gcp/network/route_table.tf b/iac_modules/terraform/gcp/network/route_table.tf
deleted file mode 100644
index 01a8baab..00000000
--- a/iac_modules/terraform/gcp/network/route_table.tf
+++ /dev/null
@@ -1,9 +0,0 @@
-resource "google_compute_route" "default_route" {
-  name                  = "static-route"
-  network               = google_compute_network.default.name
-  dest_range            = "0.0.0.0/0"
-  priority              = 1000
-  next_hop_gateway      = "default-internet-gateway"  # 默认互联网网关
-
-  tags = []             # 可选的标签，根据需要添加
-}
diff --git a/iac_modules/terraform/gcp/network/run_terraform.sh b/iac_modules/terraform/gcp/network/run_terraform.sh
deleted file mode 100644
index b765f7b4..00000000
--- a/iac_modules/terraform/gcp/network/run_terraform.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-
-terraform init
-if [ "$STATE" == "create" ]; then
-    terraform apply -auto-approve
-elif [ "$STATE" == "destroy" ]; then
-    terraform destroy -auto-approve
-# Add handling for other states as needed
-else
-    echo "Invalid environment state"
-    exit 1
-fi
diff --git a/iac_modules/terraform/gcp/network/variables.tf b/iac_modules/terraform/gcp/network/variables.tf
deleted file mode 100644
index 325705a5..00000000
--- a/iac_modules/terraform/gcp/network/variables.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-locals {
-  config = yamldecode(file("config.yaml"))
-}
diff --git a/iac_modules/terraform/gcp/vhost/config.yaml b/iac_modules/terraform/gcp/vhost/config.yaml
deleted file mode 100644
index 7af29916..00000000
--- a/iac_modules/terraform/gcp/vhost/config.yaml
+++ /dev/null
@@ -1,32 +0,0 @@
-region: "asia-northeast1"
-project_id: "cloudsvcworkspace"
-bucket_name: "iac_status_terraform_gcp"
-instances:
-  - name: "monitor"
-    type: "e2-standard-2"
-    zone: "asia-northeast1-a"
-    image: "ubuntu-2004-lts"
-    disk_size_gb: 100
-    network: "dev"
-    subnetwork: internet-subnet
-  - name: "sit"
-    image: "ubuntu-2004-lts"
-    disk_size_gb: 100
-    type: "e2-standard-2"
-    zone: "asia-northeast1-a"
-    network: "dev"
-    subnetwork: internet-subnet
-  - name: "uat"
-    type: "e2-standard-2"
-    zone: "asia-northeast1-a"
-    image: "ubuntu-2004-lts"
-    disk_size_gb: 100
-    network: "dev"
-    subnetwork: internet-subnet
-  - name: "prod"
-    type: "e2-standard-2"
-    zone: "asia-northeast1-a"
-    image: "ubuntu-2004-lts"
-    disk_size_gb: 100
-    network: "dev"
-    subnetwork: internet-subnet
diff --git a/iac_modules/terraform/gcp/vhost/provider.tf b/iac_modules/terraform/gcp/vhost/provider.tf
deleted file mode 100644
index 7f7419fb..00000000
--- a/iac_modules/terraform/gcp/vhost/provider.tf
+++ /dev/null
@@ -1,18 +0,0 @@
-provider "google" {
- project     = local.config.project_id
- region      = local.config.region
-}
-
-terraform {
-  backend "gcs" {
-    bucket = "iac_status_terraform_gcp"  # 替换为你的 GCS 存储桶名称
-    prefix = "vhosts/"                     # 根据需要调整前缀
-  }
-  required_providers {
-    google = {
-      source  = "hashicorp/google"
-      version = ">= 3.74.0"  # 使用适当的版本号
-    }
-  }
-  required_version = ">= 0.14.9"
-}
diff --git a/iac_modules/terraform/gcp/vhost/scripts/init.py b/iac_modules/terraform/gcp/vhost/scripts/init.py
deleted file mode 100644
index e9532d28..00000000
--- a/iac_modules/terraform/gcp/vhost/scripts/init.py
+++ /dev/null
@@ -1,35 +0,0 @@
-import os
-import sys
-import yaml
-from pathlib import Path
-from jinja2 import Environment, FileSystemLoader
-
-THIS_DIR = os.path.dirname(os.path.abspath(__file__))
-
-def load_config():
-    with open('config.yaml', 'r') as config_file:
-        config = yaml.safe_load(config_file)
-    return config
-
-def render_template( template_source, template_result, template_vars ):
-    inventory_env      = Environment(loader=FileSystemLoader(THIS_DIR),
-                         trim_blocks=True)
-    inventory_template = inventory_env.get_template(template_source)
-    inventory_output   = inventory_template.render(vars=template_vars)
-    with open(template_result, "w+") as f:
-        f.write(inventory_output)
-
-if __name__ == '__main__':
-
-    config = load_config()
-    print("Loaded config:", config)
-
-    vars = {
-        'region': config.get('region'),
-        'network': config.get('network'),
-        'project_id': config.get('project_id'),
-        'instances': config.get('instances', []),
-    }
-
-    print("templated main.tf")
-    render_template('templates/main.tf', 'main.tf', vars)
diff --git a/iac_modules/terraform/gcp/vhost/scripts/output.sh b/iac_modules/terraform/gcp/vhost/scripts/output.sh
deleted file mode 100644
index 070ea26d..00000000
--- a/iac_modules/terraform/gcp/vhost/scripts/output.sh
+++ /dev/null
@@ -1,11 +0,0 @@
-#!/bin/bash
-# 遍历输出行并设置 GitHub Actions 输出变量
-
-terraform_output=`terraform output`
-
-# Loop through output lines and set GitHub Actions output variables
-printf "%s" "$terraform_output" | while IFS= read -r line; do
-    key=$(printf "%s" "$line" | awk -F= '{print $1}')
-    value=$(printf "%s" "$line" | awk -F= '{print $2}')
-    printf "%s\n" "$key=$value" >> "$GITHUB_OUTPUT"
-done
diff --git a/iac_modules/terraform/gcp/vhost/scripts/run_terraform.sh b/iac_modules/terraform/gcp/vhost/scripts/run_terraform.sh
deleted file mode 100644
index b765f7b4..00000000
--- a/iac_modules/terraform/gcp/vhost/scripts/run_terraform.sh
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/bin/bash
-
-terraform init
-if [ "$STATE" == "create" ]; then
-    terraform apply -auto-approve
-elif [ "$STATE" == "destroy" ]; then
-    terraform destroy -auto-approve
-# Add handling for other states as needed
-else
-    echo "Invalid environment state"
-    exit 1
-fi
diff --git a/iac_modules/terraform/gcp/vhost/scripts/templates/main.tf b/iac_modules/terraform/gcp/vhost/scripts/templates/main.tf
deleted file mode 100644
index e6aab864..00000000
--- a/iac_modules/terraform/gcp/vhost/scripts/templates/main.tf
+++ /dev/null
@@ -1,46 +0,0 @@
-locals {
-  ssh_keys_content = file("ssh_keys.pub")
-}
-
-{% for instance in vars.instances %}
-resource "google_compute_address" "{{ instance.name | lower }}" {
-  name    = "{{ instance.name }}"
-  project = "{{ vars.project_id }}"
-  region  = "{{ vars.region }}"
-}
-
-resource "google_compute_instance" "{{ instance.name | lower }}" {
-  name         = "{{ instance.name }}"
-  machine_type = "{{ instance.type }}"
-  zone         = "{{ instance.zone }}"
-
-  boot_disk {
-    initialize_params {
-      image = "{{ instance.image }}"
-      size  = {{ instance.disk_size_gb }}
-    }
-  }
-
-  network_interface {
-    network = "{{ instance.network }}"
-    subnetwork = "{{ instance.subnetwork }}"
-
-    access_config {
-      nat_ip = google_compute_address.{{ instance.name | lower }}.address
-    }
-  }
-
-  metadata = {
-    "ssh-keys" = <<EOF
-ubuntu:${local.ssh_keys_content}
-EOF
-  }
-
-  depends_on = [google_compute_address.{{ instance.name | lower }}]
-}
-
-output "{{ instance.name | lower }}" {
-  value = google_compute_address.{{ instance.name | lower }}.address
-}
-
-{% endfor %}
diff --git a/iac_modules/terraform/gcp/vhost/variables.tf b/iac_modules/terraform/gcp/vhost/variables.tf
deleted file mode 100644
index 325705a5..00000000
--- a/iac_modules/terraform/gcp/vhost/variables.tf
+++ /dev/null
@@ -1,3 +0,0 @@
-locals {
-  config = yamldecode(file("config.yaml"))
-}