Terraform 部署（AWS）

cd terraform/aws
cp example.tfvars terraform.tfvars
# edit terraform.tfvars

terraform init
terraform plan
terraform apply

$(terraform output -raw kubeconfig_command)

# Then bootstrap chart Secrets from Terraform outputs and
helm install spendguard ./charts/spendguard ...

一并创建 VPC + EKS + RDS Postgres + Secrets Manager + S3 bundle bucket + IRSA policy。

成本估算和 POC 限制见 terraform/aws/README.md。