📊 Infrastructure Cost Analysis & Security Investment
🔗 Secure Development Policy · Classification Framework

📋 Document Owner: CEO | 📄 Version: 1.1 | 📅 Last Updated: 2026-04-21 (UTC) 🔄 Review Cycle: Annual | ⏰ Next Review: 2027-04-21 🏷️ Classification: Public (Frontend-Only Educational Gaming Platform)

🔐 ISMS Alignment: This document follows Hack23 Secure Development Policy business continuity and lifecycle documentation requirements.

This document outlines the financial and security implementation plan for the Black Trigram (흑괘) Korean martial arts educational gaming platform. For architectural context, see the Architecture Documentation and End-of-Life Strategy.

The current architecture is a static React SPA deployed on AWS CloudFront + S3, with disaster recovery on GitHub Pages, resulting in minimal infrastructure costs.

Note: Black Trigram leverages free-tier and low-cost services for open source projects. The primary recurring costs are AWS CloudFront/S3 hosting, Route 53 DNS with health check failover, CloudWatch monitoring, and domain registration.

%%{
  init: {
    'theme': 'base',
    'themeVariables': {
      'primaryColor': '#e8f5e9',
      'primaryTextColor': '#2e7d32',
      'lineColor': '#4caf50',
      'secondaryColor': '#e3f2fd',
      'tertiaryColor': '#fff8e1'
    }
  }
}%%
pie title Monthly Infrastructure Cost Distribution ($7.00/month)
    "AWS CloudFront CDN" : 2.00
    "AWS CloudWatch" : 2.00
    "AWS Route 53 DNS" : 1.50
    "Domain Registration" : 1.00
    "AWS S3 Hosting" : 0.50

Note: This table covers incremental security tooling costs only. Security-related AWS infrastructure services (e.g., CloudFront, CloudWatch) are accounted for separately under the infrastructure cost breakdown above.

Note: ROI figures below cover incremental security tooling and services only (all currently OSS/free). Security-related AWS infrastructure (e.g., CloudFront, CloudWatch, Route 53 health checks) is accounted for separately under infrastructure costs and currently totals ≈$54.00/year across ISMS policy areas.

%%{
  init: {
    'theme': 'base',
    'themeVariables': {
      'primaryColor': '#e3f2fd',
      'primaryTextColor': '#01579b',
      'lineColor': '#2196f3',
      'secondaryColor': '#e8f5e9',
      'tertiaryColor': '#fff8e1'
    }
  }
}%%
flowchart LR
    subgraph USERS["🌐 Users"]
        BROWSER["🖥️ Browser<br/>Korean Martial Arts<br/>Education"]
    end

    subgraph AWS["☁️ AWS Infrastructure ($7.00/month)"]
        CF["🌍 CloudFront CDN<br/>$2.00/month<br/>Global Edge Distribution<br/>TLS 1.3 Termination"]
        S3["📦 S3 Bucket<br/>$0.50/month<br/>Static Site Hosting<br/>Versioning Enabled"]
        R53["🔗 Route 53<br/>$1.50/month<br/>DNS Management<br/>Health Check Failover"]
        CW["📊 CloudWatch<br/>$2.00/month<br/>Basic Monitoring<br/>Alerts"]
        ACM["🔒 ACM<br/>$0.00/month<br/>TLS Certificates<br/>Auto-Renewal"]
    end

    subgraph DR["🔄 Disaster Recovery ($0/month)"]
        GHP["🏠 GitHub Pages<br/>Free DR hosting<br/>Automatic failover"]
    end

    BROWSER --> R53
    R53 --> CF
    CF --> S3
    CF --> ACM
    CW --> CF
    CW --> S3
    R53 -.->|Health Check Failover| GHP

    style AWS fill:#e3f2fd
    style DR fill:#f3e5f5
    style USERS fill:#e8f5e9

CloudFront Functions pricing includes a monthly free tier (e.g., first 2 million invocations); this plan assumes usage remains within that free tier. Higher invocation volumes will incur additional per-invocation charges according to AWS regional pricing and will increase the AWS Infrastructure and TCO figures accordingly.

1. 🆓 Open Source Advantage: All security scanning tools are free for open source projects
2. ☁️ AWS Free Tier: CloudWatch includes an ongoing Free Tier with fixed quotas for metrics, logs, and alarms; the current cost breakdown and illustrative $84/year TCO assume a low-volume workload with an estimated ≈$2/month CloudWatch portion that will increase if usage exceeds those free-tier quotas
3. 📦 Static Architecture: No server-side compute costs (no Lambda, EC2, or containers)
4. 🔒 Built-in Security: AWS Shield Standard and CloudFront security headers at no additional cost
5. 🔄 GitHub Actions: Unlimited CI/CD minutes for public repositories
6. 📊 DR at Zero Cost: GitHub Pages provides automatic disaster recovery hosting

If the platform evolves beyond a static frontend (see FUTURE_ARCHITECTURE.md):