## Terraform Configuration

```hcl
# main.tf - Cloud Native Architecture Evidence
resource "azurerm_log_analytics_workspace" "aks" {
  name                = "log-fedramp-aks"
  location            = var.location
  resource_group_name = azurerm_resource_group.evidence.name
  sku                 = "PerGB2018"
  retention_in_days   = 730
}

resource "azurerm_kubernetes_cluster" "main" {
  name                = "aks-fedramp-prod"
  location            = var.location
  resource_group_name = azurerm_resource_group.evidence.name
  dns_prefix          = "fedramp"
  
  identity {
    type = "SystemAssigned"
  }

  network_profile {
    network_plugin    = "azure"
    network_policy    = "calico"
    service_cidr      = "10.0.0.0/16"
    dns_service_ip    = "10.0.0.10"
  }

  oms_agent {
    log_analytics_workspace_id = azurerm_log_analytics_workspace.aks.id
  }

  azure_policy_enabled = true

  default_node_pool {
    name       = "default"
    node_count = 3
    vm_size    = "Standard_DS2_v2"
  }
}

output "aks_cluster_name" {
  value = azurerm_kubernetes_cluster.main.name
}

output "workspace_id" {
  value = azurerm_log_analytics_workspace.aks.id
}
```
