This repo is used to explore AWS VPC using Terraform

We will explore a few different AWS scenarios from here.

• scenario-1-public

This subfolder is a replica of the AWS docs Scenario 1. This terraform config will create a simple VPC with a single instance in a public subnet.

First, need to export AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.

Next, create a scenario-1-public/override.tf file the following as the contents:

resource "aws_key_pair" "dev" {
  key_name = "dev-key"
  public_key = "CHANGE ME TO THE CONTENT OF YOUR PUBLIC SSH KEY"
}

Now you can try it out:

$ cd scenario-1-public
$ terraform plan
$ terraform apply
...

State path: terraform.tfstate

Outputs:

  eip_01 = XX.XXX.XX.XXX

After some amount of time, you should get an Ouputs like above. You should be able to ssh to that instance now:

$ ssh [email protected]

• scenario-2-public-private

This subfolder is a replica of the AWS docs Scenario 2. This terraform config will create a simple VPC with an instance in a public subnect, an instance in a private subnet and a NAT instance.

First, need to export AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.

Next, create a scenario-2-public-private/override.tf file the following as the contents:

resource "aws_key_pair" "dev" {
  key_name = "dev-key"
  public_key = "CHANGE ME TO THE CONTENT OF YOUR PUBLIC SSH KEY"
}

Now you can try it out:

$ cd scenario-2-public-private
$ terraform plan
$ terraform apply
...

State path: terraform.tfstate

Outputs:

  db_01_ip   = xx.XXX.xx.XXX
  nat_01_eip = yy.YYY.yy.YYY
  web_01_eip = zz.ZZZ.zz.ZZZ

After some amount of time, you should get an Ouputs like above. You should be able to ssh to that instance now:

$ ssh [email protected]

You will NOT be able to ssh to the instance in the private subnet (db_01)

Because this launches real instances, you may be charged for usage. Be sure to run terraform destroy in each of the folders that you do a terraform apply in.

I'm not responsible for any balances you build up!

• AWS Scenario 1
• AWS Scenario 2
• VPN into vpc
• Custom internal dns