Part of the StackToIT package, published unchanged. A file of a proposal: nothing here is approved or applied.

%% PROPOSAL — generated by StackToIT Assess. Architect review required before any decision.
%% Run `f6267c3f-2848-4aa5-89df-5fee8b15b3b9` · source digest `sha256:812c5ae3f6cc8530163abbf5b6fbe305ed3b363c4886ec6b87623db857ea0c70`
%% What this view is: the SOURCE dependency graph with each box relabelled with the STACKIT service proposed for that source unit (? where the unit has no target), its class and its confidence. It is not a graph of the STACKIT resources the draft creates.
%% One source unit can become several STACKIT resources, none, or be folded into another, and the arrows are the dependencies the units have in the source, not STACKIT relations or network paths. The resources of the draft, when the run wrote one, are in the terraform/ folder.
flowchart LR
  n0["STACKIT MongoDB Flex (alternative — data-model redesign; PostgreSQL Flex JSONB is the other option)<br/><small>REDESIGN · MEDIUM</small>"]:::redesign
  n1["STACKIT Logs<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n2["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · MEDIUM</small>"]:::replatform
  n3["STACKIT KMS<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n4["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n5["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n6["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n7["implicit (belongs to the NAT gateway)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n8["STACKIT project networking / Network Area (SNA)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n9["STACKIT Secrets Manager<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n10["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n11["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n12["STACKIT service account for the workload<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
  n13["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n14["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n15["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n16["STACKIT service account for the workload<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
  n17["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n18["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n19["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n20["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n21["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n22["implicit outbound (STACKIT network)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n23["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n24["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n25["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n26["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n27["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n28["STACKIT Application Load Balancer<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n29["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · LOW</small>"]:::replatform
  n30["STACKIT RabbitMQ<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n31["STACKIT OpenSearch<br/><small>REPLATFORM · LOW</small>"]:::replatform
  n32["STACKIT MariaDB<br/><small>REPLATFORM · LOW</small>"]:::replatform
  n33["STACKIT Key Value Store (Valkey)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n34["STACKIT PostgreSQL Flex<br/><small>REPLATFORM · MEDIUM</small>"]:::replatform
  n35["STACKIT Secrets Manager<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n36["STACKIT Secrets Manager<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n37["STACKIT Secrets Manager<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n38["STACKIT service account for the workload<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
  n39["STACKIT service account for the workload<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
  n40["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · LOW</small>"]:::replatform
  n41["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · LOW</small>"]:::replatform
  n42["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · MEDIUM</small>"]:::replatform
  n43["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · MEDIUM</small>"]:::replatform
  n44["implicit (STACKIT network default gateway)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n45["implicit (STACKIT network default routing)<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
  n46["implicit (STACKIT network default routing)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n47["STACKIT network<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n48["STACKIT network<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
  n30 --> n24
  n30 --> n47
  n23 --> n15
  n23 --> n8
  n24 --> n19
  n24 --> n8
  n31 --> n23
  n31 --> n47
  n32 --> n25
  n32 --> n47
  n25 --> n15
  n25 --> n8
  n33 --> n26
  n33 --> n47
  n26 --> n17
  n26 --> n8
  n34 --> n27
  n34 --> n47
  n27 --> n19
  n27 --> n8
  n35 --> n32
  n35 --> n3
  n9 --> n3
  n36 --> n30
  n37 --> n34
  n28 --> n10
  n28 --> n11
  n28 --> n48
  n28 --> n8
  n10 --> n8
  n11 --> n8
  n29 --> n0
  n29 --> n1
  n29 --> n2
  n29 --> n4
  n29 --> n12
  n29 --> n13
  n29 --> n47
  n29 --> n8
  n12 --> n0
  n12 --> n1
  n13 --> n8
  n40 --> n31
  n40 --> n1
  n40 --> n2
  n40 --> n35
  n40 --> n9
  n40 --> n38
  n40 --> n14
  n40 --> n15
  n40 --> n47
  n40 --> n8
  n38 --> n3
  n38 --> n35
  n38 --> n9
  n14 --> n1
  n15 --> n8
  n42 --> n33
  n42 --> n1
  n42 --> n2
  n42 --> n5
  n42 --> n16
  n42 --> n17
  n42 --> n41
  n42 --> n47
  n42 --> n8
  n16 --> n0
  n16 --> n1
  n17 --> n8
  n41 --> n1
  n41 --> n2
  n41 --> n36
  n41 --> n37
  n41 --> n39
  n41 --> n18
  n41 --> n19
  n41 --> n47
  n41 --> n8
  n39 --> n3
  n39 --> n36
  n39 --> n37
  n18 --> n1
  n19 --> n8
  n43 --> n1
  n43 --> n2
  n43 --> n29
  n43 --> n40
  n43 --> n42
  n43 --> n41
  n43 --> n6
  n43 --> n20
  n43 --> n21
  n43 --> n47
  n43 --> n8
  n20 --> n1
  n21 --> n8
  n7 --> n44
  n44 --> n8
  n22 --> n7
  n22 --> n44
  n22 --> n48
  n45 --> n22
  n45 --> n47
  n45 --> n8
  n46 --> n44
  n46 --> n48
  n46 --> n8
  n47 --> n8
  n48 --> n8
  classDef direct fill:#ffffff,stroke:#10201d
  classDef reconfigure fill:#fbe8bd,stroke:#a8700f
  classDef replatform fill:#d8e5fa,stroke:#2f5fb3
  classDef containerize fill:#cde9f5,stroke:#1b6e96
  classDef redesign fill:#fbdad3,stroke:#c0392b
  classDef manual fill:#f6d6e0,stroke:#a23a62,stroke-dasharray:4 3
  classDef blocked fill:#f1b7ae,stroke:#8e1b10