This repository contains the Terraform code to create the AWS resources needed to support the TDR application

The prototype is divided into separate Terraform modules that represent the different AWS resources that are needed for the TDR project.

The different modules are used by Terraform workspaces which represent three AWS environments:

• intg
• staging
• prod

Ensure that the Terraform backend has been created.

See here: https://github.com/nationalarchives/tdr-dev-documentation/tree/master/manual/tdr-create-aws-instructure-setup.md

This project creates an s3 Terraform backend that stores the Terraform state for the different TDR environments.

See: https://learn.hashicorp.com/terraform/getting-started/install.html

See: https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-install.html

HCL Language Support: https://plugins.jetbrains.com/plugin/7808-hashicorp-terraform--hcl-language-support

1. Update local AWS credentials file (~/.aws/credentials) with a user's credentials for the TDR AWS management account:

   ... other credentials ...
   
   [terraform]
   aws_access_key_id = ... terraform user access key ...
   aws_secret_access_key = ... terraform user secret access key ...
   

NOTE: Running Terraform locally should only be used to check the Terraform plan. Updating the TDR environments should only ever be done through Jenkins

1. Clone TDR Environments project to local machine: https://github.com/nationalarchives/tdr-terraform-environments

2. In command terminal navigate to the folder where the project has been cloned to

3. Clone TDR Configurations repository

   [location of project] $ git clone [email protected]/nationalarchives/tdr-configurations.git
   

4. Clone Terraform modules repository

   [location of project] $ git clone [email protected]:nationalarchives/tdr-terraform-modules.git
   

5. Create Terraform workspaces corresponding to the TDR environments:

   [location of project] $ terraform workspace new intg
   
   [location of project] $ terraform workspace new staging
   
   [location of project] $ terraform workspace new prod
   

6. Switch to the Terraform workspace corresponding to the TDR environment to be worked on:

   [location of project] $ terraform workspace select intg
   

7. Run the following command to ensure Terraform uses the correct credentials:

   [location of project] $ export AWS_PROFILE=terraform
   

8. Set the following Terraform environment variables on the local environment:

   • TF_VAR_tdr_account_number=[account number of the environment to update]

9. Initialize Terraform (if not done so previously):

   [location of project] $ terraform init   
   

10. Run Terraform to make changes to the TDR environment AWS resources

[location of project] $ terraform plan

• Terraform website: https://www.terraform.io/
• Terraform basic tutorial: https://learn.hashicorp.com/terraform/getting-started/build