[Documentation] DDG drift vs. current code needs to be resolved

[JohnHales]

Description of Documentation Need

The DDG has the following refence is phase 0 for the terraform.tfvars.sample:

locations for GCS, BigQuery, and logging buckets created here

locations = {
bq = "<region>"
gcs = "<region>"
logging = "<region>"
pubsub = ["<region>"]
kms = "<region>"
}

However, the actual code in the fast/stages-aw/0-bootstrap/terraform.tfvars.sample has:

region configuration - this will automatically populate locations for GCS, BigQuery, KMS, and logging buckets

Default to us-east4 for IL5/FedRAMP compliance - adjust as needed

regions = {
primary = "us-east4" # Change to your preferred region - this will be used for all bootstrap resources
}

I'm sure there are probably other configuration drifts that may have occurred since the May 11 2026 v 2.9.1 version based on other commits that require changes to the DDG to keep it in sync with changes to the code so that it stays authoritative for the configuration and deployment process.

Target Audience

Operators

Proposed Location

In the existing DDG

Content Outline / Draft

Fix the error outlined above. If there is any other drift, resolve that as well. Ideally, the process of making any change to the code would validate if any changes are needed in the DDG and then both get committed together and the version and date should be updated with each PR.

Compliance Context (if applicable)

N/A

[JohnHales]

I reviewed the code vs. the DDG and found the following discrepencies vs. code / terraform.tfvars.sample:

• log_sinks type: DDG says logging, repo sample says pubsub. Materially different architectures (persistent CMEK buckets vs. unsubscribed topics).
• locations block: the DDG includes it; the repo sample replaced it with the regions block. Also, key finding: var.locations is declared in variables.tf but referenced nowhere; local.locations in main.tf is built entirely from var.regions.primary.
• Prefix length: the DDG says 6 characters max, the sample comment says 9, and the actual validation in variables.tf enforces ≤ 7 (length(var.prefix) <= 7) while its own description says "9 characters or less." 3 different source with 3 answers. I've been teaching and enforcing 6 - but maybe that's for a future change?
• customer_id: the DDG's placeholder says to use the organization ID, which is wrong; the repo sample correctly shows the C0xxxxxxx directory customer ID format.