Update app.py

app.py

@@ -79,6 +79,138 @@ def generate_terraform_code(prompt_base, detail_level, provider, security_level,
     - If the description includes storage, create secure and complete storage configurations, using all the available options from the provider.
      - If the description includes compute resources, create the most secure and complete setup using the provider options.
 
+Always create cloud infrastructure with the following considerations:
+
+Security:
+
+Implement strict security groups/firewalls allowing only necessary ports.
+Configure IAM roles and policies with the principle of least privilege.
+Enable logging and monitoring for all resources.
+Networking:
+
+Set up a Virtual Private Cloud (VPC) or equivalent, with public and private subnets.
+Use NAT gateways for internet access in private subnets.
+Configure proper routing tables and internet gateways.
+Automation:
+
+Use Infrastructure as Code (IaC) tools like Terraform, CloudFormation, or ARM templates.
+Include automation for updates, scaling, and backups.
+Resilience:
+
+Ensure resources are highly available, using multiple availability zones where possible.
+Configure automatic backups and disaster recovery plans.
+Resource Optimization:
+
+Choose appropriate instance types and sizes based on the workload.
+Enable resource tagging for cost management and organization.
+Specific Instructions for Cloud Providers:
+
+For AWS:
+
+Use AWS services like EC2, S3, RDS, and CloudWatch.
+Always select the latest AMI for operating systems.
+Configure CloudTrail for auditing.
+Use Auto Scaling Groups for EC2 instances to ensure high availability.
+For Google Cloud:
+
+Use Google Compute Engine for VMs, Cloud Storage, and Cloud Monitoring.
+Set up VPC networks with subnets in multiple regions for high availability.
+Use Google Cloud IAM for access management.
+For Azure:
+
+Utilize Azure Virtual Machines, Azure Storage, and Azure Monitor.
+Set up Azure Virtual Networks with subnets and NSGs.
+Use Azure Role-Based Access Control (RBAC) for permissions.
+Never forget to:
+
+Configure proper logging and monitoring for observability.
+Include alerts and notifications for critical resource changes.
+Use version control for all IaC files.
+Ensure compliance with the cloud provider’s best practices and guidelines.
+
+When creating cloud infrastructure, always adhere to state-of-the-art practices across different cloud providers (AWS, Google Cloud, Azure). Your goal is to ensure the architecture is secure, scalable, resilient, and cost-optimized while maintaining high automation and compliance standards. Follow these detailed instructions:
+
+General Best Practices (Applicable to All Providers):
+Security:
+
+Implement multi-layered security:
+Use security groups/firewalls to restrict inbound and outbound traffic to the minimum necessary.
+Enforce encryption for data at rest (e.g., EBS volumes, databases) and in transit (e.g., HTTPS, TLS).
+Use secrets management services for sensitive data (e.g., AWS Secrets Manager, Google Secret Manager, Azure Key Vault).
+IAM Policies:
+Define and apply the principle of least privilege (PoLP) to all roles and users.
+Use separate accounts/projects/subscriptions for different environments (e.g., development, testing, production).
+Monitoring and Logging:
+Enable centralized logging (e.g., CloudWatch Logs, Stackdriver Logging, Azure Monitor).
+Set up alerts for unusual activities (e.g., unauthorized access attempts).
+Networking:
+
+Create VPCs or equivalent for isolated networking environments.
+Design subnets (public/private) based on the application’s accessibility needs.
+Use NAT Gateways for private subnet instances to access the internet securely.
+Apply Network Access Control Lists (ACLs) to provide an additional layer of security.
+Implement VPC Peering, VPN, or Direct Connect for secure on-premises connectivity.
+Automation and IaC:
+
+Use Terraform for declaring all cloud resources, ensuring infrastructure is version-controlled and repeatable.
+Apply modular design in Terraform for reusability and maintainability.
+Use remote state storage (e.g., S3 with state locking via DynamoDB, Google Cloud Storage with versioning) for state management.
+Integrate CI/CD pipelines for automatic deployment and validation of infrastructure code.
+Resilience and High Availability:
+
+Design for multi-region and multi-availability zone deployments for critical applications.
+Implement load balancers (e.g., ALB, Cloud Load Balancer, Azure Load Balancer) to distribute traffic across multiple instances.
+Use Auto Scaling Groups or equivalent to handle variable traffic loads automatically.
+Set up disaster recovery strategies, including backups and failover mechanisms.
+Cost Optimization:
+
+Tag all resources for cost tracking and management.
+Use Reserved Instances or Savings Plans for predictable workloads.
+Enable idle resource management (e.g., stopping unused instances, rightsizing underutilized resources).
+Compliance and Governance:
+
+Implement policies and guardrails using services like AWS Config, Google Organization Policies, and Azure Policy.
+Use audit logs to ensure traceability of actions.
+Regularly conduct compliance checks and audits.
+AWS-Specific Best Practices:
+Compute:
+Use EC2 Auto Scaling Groups for dynamic scaling.
+Leverage Lambda for serverless applications to reduce costs and increase scalability.
+Storage:
+Use S3 with lifecycle policies for automatic transition of data between storage classes.
+Enable S3 Bucket Versioning and MFA Delete for data protection.
+Database:
+Use RDS Multi-AZ for high availability.
+Leverage Aurora for managed relational databases with built-in replication.
+Networking:
+Configure VPC Flow Logs for network traffic analysis.
+Use CloudFront for CDN and enhanced security with AWS Shield.
+Google Cloud-Specific Best Practices:
+Compute:
+Use Managed Instance Groups for high availability and scaling.
+Leverage Cloud Functions or Cloud Run for serverless deployments.
+Storage:
+Enable Bucket Versioning and use Nearline/Coldline storage classes for cost efficiency.
+Set up Data Loss Prevention (DLP) to safeguard sensitive data.
+Networking:
+Use Cloud NAT for private instance internet access.
+Implement VPC Service Controls for enhanced data security.
+Monitoring:
+Set up Stackdriver Monitoring with custom metrics and dashboards.
+Azure-Specific Best Practices:
+Compute:
+Use Virtual Machine Scale Sets for scalable VMs.
+Leverage Azure Functions for event-driven, serverless applications.
+Storage:
+Use Azure Blob Storage with Soft Delete enabled for accidental recovery.
+Implement Storage Account Firewalls and VNET Service Endpoints.
+Networking:
+Configure NSGs (Network Security Groups) with detailed inbound/outbound rules.
+Use Azure Bastion for secure RDP/SSH connectivity.
+Monitoring:
+Enable Azure Monitor with Log Analytics for resource insights.
+Set up Application Insights for performance monitoring.
+
     """
     response = send_message_to_model(prompt, model_name, temperature, top_p, top_k, max_tokens)
     return response