{
  "stackName": "CloudForge-Prod-HIPAA",
  "applicationId": "jenkins",
  "runtime": "ec2",
  "topology": "jenkins-service",
  "securityProfile": "production",
  "region": "us-east-1",

  "domain": "example.com",
  "subdomain": "jenkins",
  "enableSsl": true,
  "createZone": false,

  "networkMode": "private-with-nat",
  "wafEnabled": true,
  "authMode": "alb-oidc",
  "cognitoAutoProvision": true,
  "cognitoDomainPrefix": "cloudforge-hipaa",
  "cognitoMfaEnabled": true,
  "cognitoMfaMethod": "totp",

  "awsConfigEnabled": true,
  "createConfigInfrastructure": true,
  "complianceFrameworks": "HIPAA,SOC2",
  "scopeConfigRulesToDeployment": false,
  "enableS3VersioningRemediation": true,
  "enableCloudTrailBucketAccessRemediation": true,
  "complianceMode": "enforce",

  "guardDutyEnabled": true,
  "guardDutyAlertsConfigured": true,
  "auditManagerEnabled": true,
  "securityHubEnabled": true,
  "inspectorEnabled": true,
  "macieEnabled": true,

  "logRetentionDays": 2190,
  "albAccessLogging": true,
  "enableFlowlogs": true,

  "instanceType": "t3.large",
  "minInstanceCapacity": 2,
  "maxInstanceCapacity": 8,
  "enableAutoScaling": true,
  "cpuTargetUtilization": 50,

  "healthCheckGracePeriod": 300,
  "healthCheckInterval": 30,
  "healthCheckTimeout": 5,
  "healthyThreshold": 2,
  "unhealthyThreshold": 2,

  "enableMonitoring": true,
  "enableEncryption": true,
  "retainStorage": true,
  "certificateExpirationMonitoring": true
}