How ping192.sbs runs on AWS — infrastructure as code at scale

# ping192.sbs — Full Stack AWS Infrastructure
# Terraform 1.6+ · Multi-AZ · Production Grade

terraform {
  required_version = ">= 1.6.0"
  required_providers {
    aws = { source = "hashicorp/aws", version = "~> 5.0" }
  }
  backend "s3" {
    bucket = "ping192-tfstate"
    key    = "prod/terraform.tfstate"
    region = "us-east-1"
    dynamodb_table = "ping192-tflock"
    encrypt = true
  }
}

# ─── NETWORK ─────────────────────────────────────
module "vpc" {
  source = "terraform-aws-modules/vpc/aws"
  name   = "ping192-prod"
  cidr   = "10.20.0.0/16"
  azs    = ["us-east-1a", "us-east-1b", "us-east-1c"]
  private_subnets  = ["10.20.1.0/24", "10.20.2.0/24", "10.20.3.0/24"]
  public_subnets   = ["10.20.101.0/24", "10.20.102.0/24", "10.20.103.0/24"]
  database_subnets = ["10.20.201.0/24", "10.20.202.0/24", "10.20.203.0/24"]
  enable_nat_gateway = true
  enable_flow_log    = true
}

# ─── DATA ────────────────────────────────────────
module "rds" {
  source = "terraform-aws-modules/rds/aws"
  identifier = "ping192-prod"
  engine     = "postgres"
  engine_version = "15.4"
  instance_class = "db.r6g.large"
  allocated_storage = 250
  storage_encrypted = true
  multi_az = true
  backup_retention_period = 14
}

resource "aws_elasticache_replication_group" "cc_cache" {
  replication_group_id = "ping192-cache"
  node_type = "cache.r6g.large"
  num_cache_clusters = 2
  at_rest_encryption_enabled = true
}

resource "aws_s3_bucket" "recordings" {
  bucket = "ping192-call-recordings"
}
resource "aws_s3_bucket" "invoices" {
  bucket = "ping192-invoices"
}

resource "aws_dynamodb_table" "contacts" {
  name = "ping192-contacts"
  billing_mode = "PAY_PER_REQUEST"
  hash_key = "contact_id"
  server_side_encryption { enabled = true }
}

# ─── RESEARCH PIPELINE ───────────────────────────
resource "aws_sqs_queue" "research_queue" {
  name = "ping192-research-queue"
  visibility_timeout_seconds = 300
  message_retention_seconds  = 86400
}

resource "aws_lambda_function" "enrichment" {
  function_name = "ping192-enrichment"
  runtime       = "python3.12"
  handler       = "enrich.handler"
  memory_size   = 1024
  timeout       = 120
    environment { variables = {
    APOLLO_KEY = "████████████████████"
    CLEARBIT_KEY = "████████████"
    LINKEDIN_COOKIE = "██████████████"
  } }
}

resource "aws_lambda_function" "human_verification" {
  function_name = "ping192-human-verification"
  runtime       = "python3.12"
  memory_size   = 512
}

resource "aws_sqs_queue" "verification_queue" {
  name = "ping192-verification-queue"
}

resource "aws_comprehend_document_classifier" "intent" {
  name = "ping192-intent-v3"
  language_code = "en"
    data_access_role_arn = "arn:aws:iam::████:role/████████"
  model_kms_key_id     = "arn:aws:kms:...:key/████"
}

# ─── OUTREACH / DIALER ───────────────────────────
resource "aws_connect_instance" "cc" {
  identity_management_type = "CONNECT_MANAGED"
  inbound_calls_enabled    = true
  outbound_calls_enabled   = true
  instance_alias           = "ping192-prod"
}

resource "aws_connect_queue" "outbound" {
  instance_id = aws_connect_instance.cc.id
  name        = "Outbound-SDR"
  description = "Outbound sales development reps"
  hours_of_operation_id = aws_connect_hours_of_operation.biz_hours.hours_of_operation_id
}

resource "aws_connect_hours_of_operation" "biz_hours" {
  instance_id = aws_connect_instance.cc.id
  name        = "Business Hours"
  time_zone   = "America/Puerto_Rico"
  config {
    start_time { hours = 8, minutes = 0 }
    end_time   { hours = 18, minutes = 0 }
    days_of_week = ["MONDAY","TUESDAY","WEDNESDAY","THURSDAY","FRIDAY"]
  }
}

resource "aws_connect_contact_flow" "dialer" {
  instance_id = aws_connect_instance.cc.id
  name        = "Outbound-Dialer"
  type        = "CONTACT_FLOW"
    content = jsonencode({
    Version = "2019-10-30"
    StartAction = "████████████████"
    Actions = [ /* ████ proprietary flow logic ████ */ ]
  })
}

# ─── COMPLIANCE ──────────────────────────────────
resource "aws_kms_key" "cc_data" {
  description = "ping192 — PII + recording key"
  enable_key_rotation = true
  multi_region = true
}

resource "aws_wafv2_web_acl" "cc_waf" {
  name = "ping192-waf"
  scope = "REGIONAL"
  default_action { allow {} }
}

resource "aws_sns_topic" "tcpa_alerts" {
  name = "ping192-tcpa-alerts"
    subscription { protocol = "████" endpoint = "████████" }
}

resource "aws_lambda_function" "dnc_check" {
  function_name = "ping192-dnc-scrub"
  runtime       = "python3.12"
  memory_size   = 256
}

# ─── BILLING / INVOICING ─────────────────────────
resource "aws_lambda_function" "invoice_gen" {
  function_name = "ping192-invoice-gen"
  runtime       = "python3.12"
    environment { variables = {
    FROM_NAME    = "Tony - ping192"
    ADMIN_EMAIL  = "[email protected]"
    BTC_ADDRESS  = "1AgLVuvND7PtJhXowtKCPjagdZta3UQMas"
    SMTP_PASS    = "████████████████"
  } }
}

resource "aws_ses_email_identity" "admin" {
  email = "[email protected]"
}

resource "aws_route53_record" "apex" {
  zone_id = "Z0P1NG192"
  name    = "ping192.sbs"
  type    = "A"
  alias {
    name    = aws_cloudfront_distribution.app.domain_name
    zone_id = aws_cloudfront_distribution.app.hosted_zone_id
  }
}

resource "aws_cloudfront_distribution" "app" {
  enabled = true
  aliases = ["ping192.sbs", "www.ping192.sbs", "app.ping192.sbs"]
}

# ─── OUTPUTS ─────────────────────────────────────
output "app_url"       { value = "https://ping192.sbs" }
output "api_endpoint"   { value = "https://api.ping192.sbs" }
output "connect_alias"  { value = aws_connect_instance.cc.instance_alias }
output "support_phone"  { value = "+1-702-728-1122" }
output "btc_address"    { value = "1AgLVuvND7PtJhXowtKCPjagdZta3UQMas" }