The Unreviewed Code

# main.tf  -  new Waha environment  (written by dev-khalid)

provider "aws" {
  region = "eu-central-1"
}

# --- customer documents storage ---
resource "aws_s3_bucket" "customer_docs" {
  bucket = "waha-customer-docs-prod"
}

resource "aws_s3_bucket_public_access_block" "customer_docs" {
  bucket                  = aws_s3_bucket.customer_docs.id
  block_public_acls       = false
  block_public_policy     = false
  ignore_public_acls      = false
  restrict_public_buckets = false
}

# --- transactions database ---
resource "aws_db_instance" "transactions" {
  identifier          = "waha-transactions-db"
  engine              = "postgres"
  instance_class      = "db.t3.micro"
  allocated_storage   = 20
  username            = "waha_admin"
  password            = "RAZEEN{h4rdc0d3d_s3cr3t_1n_t3rr4f0rm}"
  storage_encrypted   = false
  skip_final_snapshot = true
}

# --- network ---
resource "aws_security_group" "app" {
  name = "waha-app-sg"

  ingress {
    description = "HTTPS for customers"
    from_port   = 443
    to_port     = 443
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  ingress {
    description = "temp access - remove later"
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }
}