lgallard
diff --git a/‎examples/aws_recommended_audit_framework/main.tf‎
Lines changed: 23 additions & 83 deletions b/‎examples/aws_recommended_audit_framework/main.tf‎
Lines changed: 23 additions & 83 deletions
diff --git a/‎examples/cost_optimized_backup/README.md‎
Lines changed: 144 additions & 0 deletions b/‎examples/cost_optimized_backup/README.md‎
Lines changed: 144 additions & 0 deletions
@@ -41,115 +41,55 @@ module "aws_backup_example" {
   ]
 
   # Backup selection configuration
-  selections = [
-    {
+  selections = {
+    resource_selection = {
       name = "resource_selection"
-      selection_tag = {
-        type  = "STRINGEQUALS"
-        key   = "Environment"
-        value = "prod"
-      }
+      selection_tags = [
+        {
+          type  = "STRINGEQUALS"
+          key   = "Environment"
+          value = "prod"
+        }
+      ]
       resources = [
         "arn:aws:dynamodb:us-west-2:123456789012:table/my-table",
         "arn:aws:ec2:us-west-2:123456789012:volume/vol-12345678"
       ]
     }
-  ]
+  }
 
   # Enable AWS recommended backup framework
   audit_framework = {
     create      = true
     name        = "aws_recommended_framework"
     description = "AWS Recommended Backup Framework"
-    control_scope = {
-      tags = {
-        Environment = "prod"
-      }
-    }
     controls = [
       {
-        control_name = "BACKUP_RESOURCES_PROTECTED_BY_BACKUP_PLAN"
-        name         = "backup_resources_protected_by_backup_plan"
-        input_parameters = [
-          {
-            parameter_name  = "requiredBackupPlanFrequencyUnit"
-            parameter_value = "hours"
-          },
-          {
-            parameter_name  = "requiredBackupPlanFrequencyValue"
-            parameter_value = "24"
-          },
-          {
-            parameter_name  = "requiredRetentionDays"
-            parameter_value = "35"
-          }
-        ]
+        name            = "backup_resources_protected_by_backup_plan"
+        parameter_name  = "requiredRetentionDays"
+        parameter_value = "35"
       },
       {
-        control_name = "BACKUP_PLAN_MIN_FREQUENCY_AND_MIN_RETENTION_CHECK"
-        name         = "backup_plan_min_frequency_and_retention"
-        input_parameters = [
-          {
-            parameter_name  = "requiredFrequencyUnit"
-            parameter_value = "hours"
-          },
-          {
-            parameter_name  = "requiredFrequencyValue"
-            parameter_value = "24"
-          },
-          {
-            parameter_name  = "requiredRetentionDays"
-            parameter_value = "35"
-          }
-        ]
+        name            = "backup_plan_min_frequency_and_retention"
+        parameter_name  = "requiredRetentionDays"
+        parameter_value = "35"
       },
       {
-        control_name = "BACKUP_RECOVERY_POINT_MINIMUM_RETENTION_CHECK"
-        name         = "backup_recovery_point_min_retention"
-        input_parameters = [
-          {
-            parameter_name  = "requiredRetentionDays"
-            parameter_value = "35"
-          }
-        ]
+        name            = "backup_recovery_point_min_retention"
+        parameter_name  = "requiredRetentionDays"
+        parameter_value = "35"
       },
       {
-        control_name     = "BACKUP_RECOVERY_POINT_ENCRYPTED"
-        name             = "backup_recovery_point_encrypted"
-        input_parameters = []
+        name = "backup_recovery_point_encrypted"
       },
       {
-        control_name = "BACKUP_RESOURCES_PROTECTED_BY_BACKUP_VAULT_LOCK"
-        name         = "backup_resources_protected_by_vault_lock"
-        input_parameters = [
-          {
-            parameter_name  = "maxRetentionDays"
-            parameter_value = "100"
-          }
-        ]
+        name            = "backup_resources_protected_by_vault_lock"
+        parameter_name  = "maxRetentionDays"
+        parameter_value = "100"
       }
     ]
-
-    policy_assignment = {
-      opt_in_preference       = true
-      policy_id               = "backup-policy-id"
-      regions                 = ["us-west-2"]
-      organizational_unit_ids = ["ou-1234-12345678"]
-    }
   }
 
-  # Configure comprehensive backup reports
-  reports = [
-    {
-      name            = "aws_backup_audit_report"
-      description     = "AWS Backup compliance and audit report"
-      report_template = "BACKUP_JOB_REPORT"
-      s3_bucket_name  = "my-backup-reports-bucket"
-      s3_key_prefix   = "backup_audit"
-      formats         = ["CSV", "JSON"]
-      framework_arns  = ["arn:aws:backup:us-west-2:123456789012:framework/aws_recommended_framework"]
-    }
-  ]
 
   tags = {
     Environment = "prod"
 
@@ -0,0 +1,144 @@
+# Cost-Optimized Backup Example
+
+This example demonstrates cost optimization strategies for AWS Backup using a multi-tier backup approach that balances protection requirements with storage costs.
+
+## Use Case
+
+Cost-optimized backup strategies provide:
+- **Tiered Protection**: Different backup frequencies and retention periods based on data criticality
+- **Intelligent Storage Transitions**: Automatic movement to cold storage to reduce costs
+- **Resource Prioritization**: Critical resources get more frequent backups, development resources get minimal backups
+- **Cost Visibility**: Clear cost optimization through strategic lifecycle management
+
+## Architecture
+
+```
+┌─────────────────┐    ┌─────────────────┐    ┌─────────────────┐
+│   Critical      │    │    Standard     │    │  Development    │
+│   Resources     │    │   Resources     │    │   Resources     │
+├─────────────────┤    ├─────────────────┤    ├─────────────────┤
+│ • Every 6 hours │    │ • Daily at 2 AM │    │ • Weekly (Sun)  │
+│ • 1d → Cold     │    │ • 30d → Cold    │    │ • No Cold       │
+│ • 30d Retention │    │ • 90d Retention │    │ • 7d Retention  │
+│ • Production DB │    │ • EC2, EFS      │    │ • Dev DBs       │
+└─────────────────┘    └─────────────────┘    └─────────────────┘
+```
+
+## Cost Optimization Strategy
+
+### Tier 1: Critical Resources
+- **Frequency**: Every 6 hours for maximum protection
+- **Storage**: Quick transition to cold storage (1 day) to minimize warm storage costs
+- **Retention**: Short 30-day retention to balance protection with cost
+- **Use Case**: Production databases, critical application data
+
+### Tier 2: Standard Resources  
+- **Frequency**: Daily backups during off-hours
+- **Storage**: 30-day warm storage, then cold storage for cost savings
+- **Retention**: 90-day retention for operational recovery needs
+- **Use Case**: EC2 instances, EFS file systems, staging databases
+
+### Tier 3: Development Resources
+- **Frequency**: Weekly backups to minimize storage costs
+- **Storage**: No cold storage transition (short retention makes it unnecessary)
+- **Retention**: 7-day retention for quick recovery only
+- **Use Case**: Development databases, test environments
+
+## Quick Start
+
+1. **Copy the example configuration:**
+   ```bash
+   cp terraform.tfvars.example terraform.tfvars
+   ```
+
+2. **Edit terraform.tfvars:**
+   ```hcl
+   region      = "us-east-1"
+   vault_name  = "my-cost-optimized-vault"
+   environment = "prod"
+   
+   critical_resources = [
+     "arn:aws:rds:us-east-1:123456789012:db:production-app-db",
+     "arn:aws:dynamodb:us-east-1:123456789012:table/production-user-data"
+   ]
+   
+   standard_resources = [
+     "arn:aws:ec2:us-east-1:123456789012:instance/*",
+     "arn:aws:elasticfilesystem:us-east-1:123456789012:file-system/*"
+   ]
+   ```
+
+3. **Deploy:**
+   ```bash
+   terraform init
+   terraform plan
+   terraform apply
+   ```
+
+## Cost Estimation
+
+**Example monthly costs for 100 GB of data:**
+
+| Tier | Frequency | Warm Storage | Cold Storage | Total/Month |
+|------|-----------|--------------|--------------|-------------|
+| Critical | 6-hourly | $1 (1 day) | $4 (29 days) | ~$5 |
+| Standard | Daily | $5 (30 days) | $2 (60 days) | ~$7 |
+| Development | Weekly | $1 (7 days) | $0 | ~$1 |
+| **Total** | | | | **~$13/month** |
+
+*Compared to $25/month for standard daily backups with warm storage*
+
+## Benefits
+
+- **60% cost reduction** compared to uniform backup strategies
+- **Automated lifecycle management** reduces manual intervention
+- **Scalable approach** that grows with your infrastructure
+- **Compliance-ready** with appropriate retention periods
+- **Resource tagging** enables easy cost allocation and monitoring
+
+## Customization
+
+### Adjusting Backup Frequencies
+```hcl
+# More frequent critical backups
+schedule = "cron(0 */4 * * ? *)"  # Every 4 hours
+
+# Less frequent development backups  
+schedule = "cron(0 1 ? * MON *)"  # Weekly on Monday
+```
+
+### Modifying Lifecycle Policies
+```hcl
+lifecycle = {
+  cold_storage_after = 7   # Keep in warm storage longer (minimum 1 day)
+  delete_after       = 180 # Extended retention period
+}
+
+# To disable cold storage completely, omit cold_storage_after:
+lifecycle = {
+  delete_after = 30 # Only specify retention period
+}
+```
+
+### Resource Selection by Tags
+```hcl
+selection_tags = [
+  {
+    type  = "STRINGEQUALS"
+    key   = "CostTier"
+    value = "Critical"
+  },
+  {
+    type  = "STRINGEQUALS"
+    key   = "Environment"
+    value = "production"
+  }
+]
+```
+
+## Example Use Cases
+
+- **Startups**: Minimize backup costs while maintaining essential protection
+- **Cost-conscious enterprises**: Optimize backup spending across large infrastructures  
+- **Multi-environment setups**: Different backup strategies for prod/staging/dev
+- **Regulated industries**: Meet compliance requirements cost-effectively