As per https://docs.aws.amazon.com/acm/latest/userguide/acm-regions.html, ACM has a restriction that requires certificates to be created in the us-east-1 region in order to be used with CloudFront:

To use an ACM Certificate with Amazon CloudFront, you must request or import the certificate in the US East (N. Virginia) region. ACM Certificates in this region that are associated with a CloudFr

The DISCOVERY_DOCUMENT does not include the api login url for okta its juts creates a random /callback url which there is no documentation on configuring

Create recipes for the new gatsby recipes CLI.
Not sure at this point if this will entirely replace the existing recipe pages.

https://www.gatsbyjs.org/blog/2020-04-15-announcing-gatsby-recipes/

According to S3 CORS configuration Amazon documentation there is a bug in configuration of allowed origins.

Example from documentation shows that each CORS rule need to consist only one AllowedOrigin parameter:

<CORSConfiguration>
 <CORSRule>
   <AllowedOrigin>http://www.example1.com</AllowedOrigin>

   <AllowedMethod>PUT</A

With CloudFormation sort of becoming legacy at this point, it would make sense to split the documentation and move it into the respective sub-directories.

This would allow for a more independent development of the Terraform module. Plus, less clutter, which is always good.

from help:

…
        --connections-critical-over N
                                     Trigger a critical if connections usage is over a percentage
        --connections-warning-over N Trigger a warning if connections usage is over a percentage

parameters passed --connections-warning-over 70 --connections-critical-over 85
check output: `CheckRDS CRITICAL: RDSNAME: ; DatabaseCon

Add WAF to CloudFront (web-ui) and web service load balancers. Note that once #5 is complete, WAF should be added to APIGW instead.

There should be a better way to manage deployments across multiple clients

The README documents the follow behaviour for the enabled input variable:

However when actually using this variable, all resources for this module are still created. On inspection of the [main.tf file](https://github.com/cloudpo

Add HA_CONFIG.md to repo. The document should describe how MSAM can be used from an alternate region if the primary region goes down completely. This should include the process to install a high-availability configuration of MSAM, which includes using global tables in DynamoDB.