AWS Region module

[bpmct]

A discussion dedicated to the AWS Region module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 17	20 / 20	2 / 2	10 / 10	100 / 100

Drilldown

Presentation & Onboarding — 17 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README documents every major mode with a full Terraform example: standard parameter mode (with count), default_availability_zone usage, create_parameter = false (outputs-only), custom names/icons, and region exclusion. Each example uses sensible defaults.
Visual preview	5	5	Three embedded images verified to exist: aws-regions.png (112.7 KB), aws-custom.png (52.8 KB), aws-exclude.png (56.2 KB).

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs exist in this module (it is a region picker, not a credential handler). No inline secrets appear in any README example. Vacuously satisfied.
Non-hardcoded auth path	4	4	Dedicated "## AWS credentials" section explicitly recommends IAM instance profile/role on the provisioner or environment-injected credentials, with a link to the AWS provider auth docs. No raw keys in any example.

Restricted-Environment Readiness — 2 / 2 (18 pts N/A)

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module downloads or installs nothing; it reads a bundled regions.json and creates a coder_parameter. No download URL exists to override.
Bring-your-own binary	10	N/A	No tool is downloaded or installed by the module.
Egress transparency	3	N/A	Module makes no external network calls at plan or apply time.
Runs without sudo	2	2	.scripts/update.sh (the only script in the module) uses aws, jq, printf, tr, sort—never sudo. No root required.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All 9 variables have description, type, and sensible default. default and exclude carry regex validation blocks with clear error_message strings.
Test coverage	4	4	main.tftest.hcl contains 10 run blocks covering: parameter name, order propagation, full-option rendering, empty-default edge case, custom default, regions catalog output, exclusion, custom name/icon override, create_parameter = false mode, and no-parameter-no-default edge case. Mix of plan and apply commands. No TypeScript component exists, so .tftest.hcl is the complete testing story.

Overall — 100 / 100

Raw 49 / 49 → round(49 / 49 × 100) = 100

---

Scored against SCORECARD.md on 2026-09-28 with solstice-1.