Pike

Abstract

1. Introduction

Pike is a tool to determine the minimum IAM permissions required to run OpenTofu/Terraform infrastructure code.

Some cloud providers require extra permissions depending on the attributes you add; this is how this is handled. Build out your .tf resources to cover all reasonable scenarios.

there are no conditions and even partial resources are wild-carded (for now). (for AWS)minimum

2. Objective

Pike is a tool for determining the permissions or policy required for IAC code

This project demonstrates how HCL, Terraform, AWS can be applied to a real-world Blockchain & Cloud Computing problem.

4. Technology Stack

5. System Requirements

General requirements for this technology stack — check the README for exact versions.

• Terraform CLI
• Cloud provider account (e.g. AWS) with CLI configured
• Git (to clone the repository)

6. Installation & Setup

git clone https://github.com/JamesWoolfenden/pike.git
cd pike

1. Install Pike
2. Scan your OpenTofu/Terraform code
3. Generate as Terraform/OpenTofu code
4. Clone repo
5. Run go install

# macOS
   brew tap jameswoolfenden/homebrew-tap
   brew install jameswoolfenden/tap/pike

   # Windows (using Scoop)
   scoop bucket add iac https://github.com/JamesWoolfenden/scoop.git
   scoop install pike

   # Or install from source
   go install github.com/jameswoolfenden/pike@latest

pike scan -d ./path/to/your/terraform

pike scan -o terraform -d ./path/to/your/terraform

go install  github.com/jameswoolfenden/pike@latest

Full setup instructions are in the project README.

7. Future Enhancements

Suggested extensions you can add to make this your own project.

• Add a CI/CD pipeline with GitHub Actions
• Deploy to a public test network or cloud free tier
• Add monitoring and cost alerts

8. Viva / Review Questions

Common questions examiners ask for projects in this domain.

1. Why does this problem need a blockchain or cloud-native design?
2. Explain the smart contract / infrastructure components and how they interact.
3. How are gas costs or cloud costs kept under control?
4. How is the system secured (keys, IAM, access control)?
5. How would the solution scale to many more users?

9. Source Code & License

This project is developed by JamesWoolfenden and published on GitHub under the Apache License 2.0. Please follow the license terms and credit the original author when you use or modify this code.