Terraform으로 AWS Infra 구축하기

$ brew install terraform

$ terraform version
# Terraform v1.6.4

$ brew install tfenv

# terraform 1.6.4 설치
$ tfenv install 1.6.4

$ terraform version
# Terraform v1.6.4

$ mkdir aws_infra

$ touch provider.tf

provider "aws" {
    access_key = "<AWS_ACCESS_KEY>"
    secret_key = "<AWS_SECRET_KEY>"
    region = "<AWS_DEFAULT_REGION>"
}

export AWS_ACCESS_KEY=""
export AWS_SECRET_KEY=""
export AWS_DEFAULT_REGION=""

provider "aws" {}

$ terraform init

$ terraform version

resource "aws_security_group" "sg" {
    name = "allow_ssh_from_all"
    description = "Allow SSH from all"
    ingress = {
        from_port = 22
        to_port = 22
        protocol = "tcp"
        cidr_blocks = ["0.0.0.0/0"]
    }
}

$ terraform apply

data "aws_security_group" "sg" {
  name = "allow_ssh_from_all"
}

resource "aws_instance" "this" {
    ami = "ami-06d88f849af021b38"
    instance_type = "t2.micro"
    key_name = var.key_name

    tags = {
        Name = "EC2 NAME"
    }

    vpc_security_group_ids = [
        data.aws_security_group.sg.id
    ]
}

$ terraform plan

data.aws_security_group.sg: Reading...
data.aws_security_group.sg: Read complete after 0s [id=sg-0a5bab6b1b735815b]

Terraform used the selected providers to generate the following execution plan.
Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # aws_instance.this will be created
  + resource "aws_instance" "this" {
      + ami                                  = "ami-06311c5f6a3951ada"
      + arn                                  = (known after apply)
      + associate_public_ip_address          = (known after apply)
  ...
      + vpc_security_group_ids               = [
            + "sg-0a5bab6b1b735815b",
        ]
    }

Plan: 1 to add, 0 to change, 0 to destroy.

$ terraform apply

aws_instance.this: Creating...
aws_instance.this: Still creating... [10s elapsed]
aws_instance.this: Still creating... [20s elapsed]
aws_instance.this: Still creating... [30s elapsed]
aws_instance.this: Creation complete after 31s [id=i-091eb4dfeef5c01ca]

Apply complete! Resources: 1 added, 0 changed, 0 destroyed.

resource "aws_lb_target_group" "target_group_client" {
  name = format("%s-%s", aws_instance.this.id, "example")
  depends_on = [ aws_instance.this ]
  port = var.target_port
  ip_address_type = "ipv4"
  protocol = "HTTP"
  vpc_id = var.vpc_id
  target_type = "instance"
}

variable "vpc_id" {
    description = "value of vpc"
    default = "vpc-67ae5f0c"
    type = string
}

resource "aws_lb_target_group_attachment" "target_group_attach" {
  target_group_arn = aws_lb_target_group.target_group_client.arn
  target_id = aws_instance.this.id
  port = var.target_port
}

data "aws_lb" "this_lb" {
  name = var.lb_name
}

data "aws_lb_listener" "this_lb443" {
  load_balancer_arn = data.aws_lb.this_lb.arn
  port              = 443
}

resource "aws_lb_listener_rule" "rule" {
  listener_arn = data.aws_lb_listener.this_lb443.arn
  priority = 100

  action {
    type = "forward"
    target_group_arn = aws_lb_target_group.target_group_client.arn
  }
  condition {
    host_header {
      values = ["${var.sub_domain}.${var.domain_name}"]
    }
  }
}

data "aws_route53_zone" "route53" {
  name = var.domain_name
  private_zone = false
}

resource "aws_route53_record" "www" {
    zone_id = data.aws_route53_zone.route53.zone_id
    name = "${var.sub_domain}.${var.domain_name}"
    type = "A"
    alias {
        name = data.aws_lb.this_lb.dns_name
        zone_id = data.aws_lb.this_lb.zone_id
        evaluate_target_health = true
    }
}