Fix | Generic Issue to preliminary reflect comments, fixes and improvements that will result in new detailed issues.

[exequielrafaela]

Fix | Generic Issue to preliminary reflect comments, fixes and improvements that will result in new detailed issues.

[exequielrafaela]

Ref Arch Guarduty Layer issue: https://binbashar.slack.com/archives/C0769GU6PEJ/p1729273854650129

[exequielrafaela]

Platform Engineering

1. Manual Merge https://github.com/binbashar/le-tf-infra-aws/pulls renovate PRs
2. Clone this issue Enhancement | Sync template with Ref Arch le-tf-infra-aws-template#23 to iterate over the Ref Arch template sync.
   1. Tests manually against the Ref Arch with leverage terraform plan
   2. Evaluate local-stack testing
3. Finish chore(deps): update terraform github.com/binbashar/terraform-aws-kms-key to v0.12.2 #623
4. Review and finish this issues disscused in slack with @angelofenoglio
   1. Enhancement | Consolidate k8s-eks layers that must result in a single layer #501
5. After finishing consider testing and updating https://github.com/binbashar/le-devops-workflows
6. Ref Arch GH action gitops pipeline Feature | Implement GitOps with GitHub Actions for Ref Arch #519
   1. Future iteration review argo workflows.
7. Migrate terraform modules CI from CircleCI to GHActions
8. K8s EKS Demo Apps (EmojiVoto) Argo full CI/CD workflow
   1. https://binbashar.slack.com/archives/GG0PJ78J3/p1730466632211409?thread_ts=1730377830.572519&cid=GG0PJ78J3
9. K8s Karpenter implementation in the Ref Arch.
10. Sync SOW's templates in order to have the Ref Arch and Doc links in all of them
    1. eg From: https://docs.google.com/document/d/1-r47YvV-z1sbUieE0tRCACRxm9lCKrf3Aawek3cSkcc/
    2. eg To: https://docs.google.com/document/d/1QUuWVhstweyJr7FBdpy4uOCLClvQXkYyAbDdv5anR-g/
11. https://github.com/binbashar/le-tf-github/issues/1
12. Leverage SaaS Platform: Start with a read-only UI / centralized dashboard (similar to Lens for K8s).
    1. GitOps ✅ to grant that the code is the source of thruth.
    2. ⚠️ Drift and Clickops.

DevOps Engineering

1. CI / Repo setup and checks
   1. Standardize gh repos branch protection with terraform module, eg: https://registry.terraform.io/modules/mineiros-io/repository/github/latest
   2. GH action enforcing labels
   3. Validate Snyk cross repo config
   4. GH secrets scanning (GitHub brings free secret scanning to all public repos | TechCrunch ) vs currently implemented gitguardian.com (related closed issue: Feature | New security & cost analysis in the CI PR automated process #73)
   5. Open Source cross-org repos checklist enforcement (Feature | Open Source repository  #223)

Data/ML/GenAI Engineering

1. Data-Lake (Feature | Create data-lake ref-arch #649)
   1. Add short intro in the Overview README.md section about the DataLake concept and main use cases for Fintech and Healthtech startups.
   2. Feature | Create data-lake ref-arch #649
2. Lake-House Ref Arch Terraform review w/ @martingaleano
   1. Following the Data-Lake README.md as reference create the new readme for the Lake-House AWS Architecture layer /data-science/us-east-1/lakehouse-demo (diagram here: https://drive.google.com/drive/u/1/folders/1BhROPGUoNwKdnB4X_OIv-PH0aOqpLYb9).
   2. Create lakehouse Ref arch #683
3. GenAI RAG Chatbot full project
   1. ECS Fargate + Open Search + BedRock multi-account to Ref Arch
4. Streamlit RAG Well Architected TF (https://github.com/aws-samples/well-architected-iac-analyzer)
   1. @martingaleano will implement this in the Ref Arch via Terraform
   2. Add Cognito to the AWS WA-IaC-Analizer Ref Arch Layer (https://github.com/aws-samples/deploy-streamlit-app) we'll integrate auth with AWS IdC (formerly SSO - https://github.com/binbashar/le-tf-infra-aws/tree/master/management/global/sso)
   3. We'll validate with @msorozabal the best way to use the Bedrock knowledge base and give all the necessary context to the RAG architecture.
5. After finishing 4. we'll reuse what we've developed and learned in order to integrate with this new feature: Leverage --help with AI (Feature | Integrate GenAI Doc into Leverage CLI Help Command leverage#93)

CC: @diego-ojeda-binbash @juanmatias @renemontilva @angelofenoglio @manuel-quinteros-binbash @manuel-quinteros-binbash @fgauchat-binbash