1# OCI Terraform Module Patterns
2 
3## VCN Module
4 
5- VCN with public/private subnets
6- Dynamic Routing Gateway (DRG) attachments
7- Internet Gateway, NAT Gateway, Service Gateway
8- Route tables and security lists / NSGs
9- VCN Flow Logs
10 
11## OKE Module
12 
13- OKE cluster and node pools
14- IAM policies and dynamic groups
15- VCN-native pod networking
16- Cluster autoscaling and observability hooks
17- OCIR integration
18 
19## Autonomous Database Module
20 
21- Autonomous Database provisioning
22- Network access controls and private endpoints
23- Wallet and secret handling
24- Backup and maintenance preferences
25- Tagging and cost tracking
26 
27## Object Storage Module
28 
29- Buckets with lifecycle rules
30- Versioning and retention
31- Customer-managed encryption keys
32- Replication policies
33- Event rules and service connectors
34 
35## Load Balancer Module
36 
37- Public or private load balancer
38- Backend sets and listeners
39- TLS certificates
40- Health checks
41- Logging and metrics integration
42 
43## Best Practices
44 
451. Use the OCI provider version `~> 7.26`
462. Model compartments explicitly and pass them through module interfaces
473. Prefer NSGs over broad security list rules where practical
484. Tag all resources with owner, environment, and cost center metadata
495. Use dynamic groups and least-privilege IAM policies for workload access
506. Keep network, identity, and data modules loosely coupled
517. Expose OCIDs and subnet details for module composition
528. Enable logging, metrics, and backup settings by default
53