Add auto self-destruction capability

[almostwhitehat]

It's entirely possible that someone might create these resources and forget to destroy them (or not know how)

It would be a good idea to provision a self-destruct mechanism by default, with a Scheduled Event to trigger it after X number of days. This could be something as simple as an hashicorp/terraform container in ECR with sufficient permission to destroy everything.

That would require moving the terraform backend to S3 - which opens up a whole bunch of new opportunities for vulnerabilities!

[geowa4]

It's probably not a bad idea to put all of these resources in their own AWS account and use cloud-nuke to get rid of it all when you're done.