Ec2-creation-using-VPC-module
说明： Amazon Virtual Private Cloud（Amazon VPC）允许您将Amazon Web Services资源启动到您定义的虚拟网络中。该虚拟网络类似于在自己的数据中心中运行的传统网络，具有使用AWS的可扩展基础架构的优势。地形模块是专用目录中标准配置文件的集合。地形模块封装了专用于一个任务的资源组，减少了您必须执行的代码量
(Amazon Virtual Private Cloud (Amazon VPC) enables you to launch Amazon Web Services resources into a virtual network you ve defined. This virtual network resembles a traditional network that you d operate in your own data center, with the benefits of using the scalable infrastructure of AWS. A Terraform module is a collection of standard configuration files in a dedicated directory. Terraform modules encapsulate groups of resources dedicated to one task, reducing the amount of code you have to)
(Amazon Virtual Private Cloud (Amazon VPC) enables you to launch Amazon Web Services resources into a virtual network you ve defined. This virtual network resembles a traditional network that you d operate in your own data center, with the benefits of using the scalable infrastructure of AWS. A Terraform module is a collection of standard configuration files in a dedicated directory. Terraform modules encapsulate groups of resources dedicated to one task, reducing the amount of code you have to)
文件列表:
module/
dev.tfvars
main.tf
output.tf
prod.tfvars
provider.tf
setup.sh
variables.tf
dev.tfvars
main.tf
output.tf
prod.tfvars
provider.tf
setup.sh
variables.tf
# Ec2-creation-using-VPC-module
Creating EC2 using terraform on custom VPC. The creation of VPC is fully automated and i have setup the VPC provision as a module.
[]()
## Description:
Amazon Virtual Private Cloud (Amazon VPC) enables you to launch Amazon Web Services resources into a virtual network you've defined. This virtual network resembles a traditional network that you'd operate in your own data center, with the benefits of using the scalable infrastructure of AWS.
A Terraform module is a collection of standard configuration files in a dedicated directory. Terraform modules encapsulate groups of resources dedicated to one task, reducing the amount of code you have to develop for similar infrastructure components.
## Pre-requisites:
1) IAM Role (Role needs to be attached on terraform running server)
2) Basic knowledge about AWS services especially VPC, EC2 and IP Subnetting.
3) Terraform and its installation.
> Click here to [download](https://www.terraform.io/downloads.html) and [install](https://learn.hashicorp.com/tutorials/terraform/install-cli?in=terraform/aws-get-started) terraform.
Installation steps I followed:
```sh
wget https://releases.hashicorp.com/terraform/0.15.3/terraform_0.15.3_linux_amd64.zip
unzip terraform_0.15.3_linux_amd64.zip
ls
terraform terraform_0.15.3_linux_amd64.zip
mv terraform /usr/bin/
which terraform
/usr/bin/terraform
```
## Steps for creating the VPC module with code:
### Module path as you like eg: /var/terraform/modules/vpc/
#### Create a file datasource.tf under above path,
```sh
data "aws_availability_zones" "az" {
state = "available"
}
```
#### Create a file main.tf
```sh
# -------------------------------------------------------------------
# Vpc Creation
# -------------------------------------------------------------------
resource "aws_vpc" "vpc" {
cidr_block = var.vpc_cidr
instance_tenancy = "default"
enable_dns_support = true
enable_dns_hostnames = true
tags = {
Name = "${var.project}-vpc-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# InterNet GateWay Creation
# -------------------------------------------------------------------
resource "aws_internet_gateway" "igw" {
vpc_id = aws_vpc.vpc.id
tags = {
Name = "${var.project}-igw-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# Public Subnet 1
# -------------------------------------------------------------------
resource "aws_subnet" "public1" {
vpc_id = aws_vpc.vpc.id
cidr_block = cidrsubnet(var.vpc_cidr, "3", 0)
map_public_ip_on_launch = true
availability_zone = data.aws_availability_zones.az.names[0]
tags = {
Name = "${var.project}-public1-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# Public Subnet 2
# -------------------------------------------------------------------
resource "aws_subnet" "public2" {
vpc_id = aws_vpc.vpc.id
cidr_block = cidrsubnet(var.vpc_cidr, "3", 1)
map_public_ip_on_launch = true
availability_zone = data.aws_availability_zones.az.names[1]
tags = {
Name = "${var.project}-public2-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# Public Subnet 3
# -------------------------------------------------------------------
resource "aws_subnet" "public3" {
vpc_id = aws_vpc.vpc.id
cidr_block = cidrsubnet(var.vpc_cidr, "3", 2)
map_public_ip_on_launch = true
availability_zone = data.aws_availability_zones.az.names[2]
tags = {
Name = "${var.project}-public3-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# Private Subnet 1
# -------------------------------------------------------------------
resource "aws_subnet" "private1" {
vpc_id = aws_vpc.vpc.id
cidr_block = cidrsubnet(var.vpc_cidr, "3", 3)
map_public_ip_on_launch = false
availability_zone = data.aws_availability_zones.az.names[0]
tags = {
Name = "${var.project}-private1-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# Private Subnet 2
# -------------------------------------------------------------------
resource "aws_subnet" "private2" {
vpc_id = aws_vpc.vpc.id
cidr_block = cidrsubnet(var.vpc_cidr, "3", 4)
map_public_ip_on_launch = false
availability_zone = data.aws_availability_zones.az.names[1]
tags = {
Name = "${var.project}-private2-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# Private Subnet 3
# -------------------------------------------------------------------
resource "aws_subnet" "private3" {
vpc_id = aws_vpc.vpc.id
cidr_block = cidrsubnet(var.vpc_cidr, "3", 5)
map_public_ip_on_launch = false
availability_zone = data.aws_availability_zones.az.names[2]
tags = {
Name = "${var.project}-private3-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# ElasticIp for NatGateway
# -------------------------------------------------------------------
resource "aws_eip" "nat" {
vpc = true
tags = {
Name = "${var.project}-nat-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# NatGateway Creation
# -------------------------------------------------------------------
resource "aws_nat_gateway" "nat" {
allocation_id = aws_eip.nat.id
subnet_id = aws_subnet.public1.id
tags = {
Name = "${var.project}-nat-${var.env}"
project = var.project
environment = var.env
}
depends_on = [aws_internet_gateway.igw]
}
# -------------------------------------------------------------------
# Public RouteTable
# -------------------------------------------------------------------
resource "aws_route_table" "public" {
vpc_id = aws_vpc.vpc.id
route {
cidr_block = "0.0.0.0/0"
gateway_id = aws_internet_gateway.igw.id
}
tags = {
Name = "${var.project}-public-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# Private RouteTable
# -------------------------------------------------------------------
resource "aws_route_table" "private" {
vpc_id = aws_vpc.vpc.id
route {
cidr_block = "0.0.0.0/0"
nat_gateway_id = aws_nat_gateway.nat.id
}
tags = {
Name = "${var.project}-private-${var.env}"
project = var.project
environment = var.env
}
}
# -------------------------------------------------------------------
# Public RouteTable association
# -------------------------------------------------------------------
resource "aws_route_table_association" "public1" {
subnet_id = aws_subnet.public1.id
route_table_id = aws_route_table.public.id
}
resource "aws_route_table_association" "public2" {
subnet_id = aws_subnet.public2.id
route_table_id = aws_route_table.public.id
}
resource "aws_route_table_association" "public3" {
subnet_id = aws_subnet.public3.id
route_table_id = aws_route_table.public.id
}
# -------------------------------------------------------------------
# Private RouteTable association
# -------------------------------------------------------------------
resource "aws_route_table_association" "private1" {
subnet_id = aws_subnet.private1.id
route_table_id = aws_route_table.private.id
}
resource "aws_route_table_association" "private2" {
subnet_id = aws_subnet.private2.id
route_table_id = aws_route_table.private.id
}
resource "aws_route_table_association" "private3" {
subnet_id = aws_subnet.private3.id
route_table_id = aws_route_table.private.id
}
```
#### Create a file output.tf
```sh
output "vpc_id" {
value = aws_vpc.vpc.id
}
output "subnet_public1_id" {
value = aws_subnet.public1.id
}
output "subnet_public2_id" {
value = aws_subnet.public2.id
}
output "subnet_public3_id" {
value = aws_subnet.public3.id
}
output "subnet_private1_id" {
value = aws_subnet.private1.id
}
output "subnet_private2_id" {
value = aws_subnet.private2.id
}
output "subnet_private3_id" {
value = aws_subnet.private3.id
}
```
#### Create a file variables.tf
```sh
variable "vpc_cidr" {
default = "172.16.0.0/16"
}
variable "project" {
default = "example"
}
variable "env" {
default = "Production"
}
```
### Module creation of VPC creation is finished. Moving to the EC2 creation using the above VPC Module:
#### You can also use workspace for the provision as you like. But its quite danger to USE on production level.
#### Create a file main.tf
```sh
# --------------------------------------------------------------------
# Calling Module
# --------------------------------------------------------------------
module "vpc" {
source = "/var/terraform/modules/vpc/"
vpc_cidr = var.project_vpc_cidr
project = var.project_name
env = var.project_env
}
# =========================================================================
# Creating Ssh KeyPair
# =========================================================================
resource "aws_key_pair" "terraform" {
key_name = "terraform"
public_key = file("devops.pub")
tags = {
Name = "terraform"
}
}
# --------------------------------------------------------------------
# Creating SecurityGroup bastion
# --------------------------------------------------------------------
resource "aws_security_group" "bastion" {
name = "${var.project_name}-bastion-${var.project_env}"
description = "allow 22 traffic"
vpc_id = module.vpc.vpc_id
ingress {
description = ""
from_port = 22
to_port = 22
protocol = "tcp"
cidr_blocks = [ "0.0.0.0/0" ]
ipv6_cidr_blocks = [ "::/0" ]
}
egress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
ipv6_cidr_blocks = ["::/0"]
}
tags = {
Name = "${var.project_name}-bastion-${var.project_env}"
project = var.project_name
environment = var.project_env
}
}
# --------------------------------------------------------------------
# Creating SecurityGroup webserver
# --------------------------------------------------------------------
resource "aws_security_group" "webserver" {
name = "${var.project_name}-webserver-${var.project_env}"
description = "allow 80,443 traffic"
vpc_id = module.vpc.vpc_id
ingress {
description = ""
from_port = 80
to_port = 80
protocol = "tcp"
cidr_blocks = [ "0.0.0.0/0" ]
ipv6_cidr_blocks = [ "::/0" ]
}
ingress {
description = ""
from_port = 443
to_port = 443
protocol = "tcp"
cidr_blocks = [ "0.0.0.0/0" ]
ipv6_cidr_blocks = [ "::/0" ]
}
ingress {
description = ""
from_port = 22
to_port = 22
protocol = "tcp"
security_groups = [ aws_security_group.bastion.id ]
}
egress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
ipv6_cidr_blocks = ["::/0"]
}
tags = {
Name = "${var.project_name}-webserver-${var.project_env}"
project = var.project_name
environment = var.project_env
}
}
# --------------------------------------------------------------------
# Creating SecurityGroup database
# --------------------------------------------------------------------
resource "aws_security_group" "database" {
name = "${var.project_name}-database-${var.project_env}"
description = "allow 3306 traffic"
vpc_id = module.vpc.vpc_id
ingress {
description = ""
from_port = 3306
to_port = 3306
protocol = "tcp"
security_groups = [ aws_security_group.webserver.id ]
}
ingress {
description = ""
from_port = 22
to_port = 22
protocol = "tcp"
security_groups = [ aws_security_group.bastion.id ]
}
egress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
ipv6_cidr_blocks = ["::/0"]
}
tags = {
Name = "${var.project_name}-database-${var.project_env}"
project = var.project_name
environment = var.project_env
}
}
# --------------------------------------------------------------------
# Creating Bastion Instance
# --------------------------------------------------------------------
resource "aws_instance" "bastion" {
ami = "ami-03fa4afc89e4a8a09"
instance_type = "t2.micro"
key_name = aws_key_pair.terraform.id
vpc_security_group_ids = [ aws_security_group.bastion.id ]
subnet_id = module.vpc.subnet_public2_id
user_data = file("setup.sh")
tags = {
Name = "${var.project_name}-bastion-${var.project_env}"
project = var.project_name
environment = var.project_env
}
}
# --------------------------------------------------------------------
# Creating webserver Instance
# --------------------------------------------------------------------
resource "aws_instance" "webserver" {
ami = "ami-03fa4afc89e4a8a09"
instance_type = "t2.micro"
key_name = aws_key_pair.terraform.id
vpc_security_group_ids = [ aws_security_group.webserver.id ]
subnet_id = module.vpc.subnet_public1_id
user_data = file("setup.sh")
tags = {
Name = "${var.project_name}-webserver-${var.project_env}"
project = var.project_name
environment = var.project_env
}
}
# --------------------------------------------------------------------
# Creating database Instance
# --------------------------------------------------------------------
resource "aws_instance" "database" {
ami = "ami-03fa4afc89e4a8a09"
instance_type = "t2.micro"
key_name = aws_key_pair.terraform.id
vpc_security_group_ids = [ aws_security_group.database.id ]
subnet_id = module.vpc.subnet_private1_id
user_data = file("setup.sh")
tags = {
Name = "${var.project_name}-database-${var.project_env}"
project = var.project_name
environment = var.project_env
}
}
terraform {
backend "s3" {
bucket = "state-file-s33-bucket"
key = "terraform.tfstate"
region = "ap-south-1"
}
}
```
#### Create a file provider.tf
```sh
provider "aws" {
region = "ap-south-1"
}
```
#### Create a file setup.sh
```sh
#!/bin/bash
echo "ClientAliveInterval 60" >> /etc/ssh/sshd_config
echo "LANG=en_US.utf-8" >> /etc/environment
echo "LC_ALL=en_US.utf-8" >> /etc/environment
echo "password123" | passwd root --stdin
sed -i 's/#PermitRootLogin yes/PermitRootLogin yes/' /etc/ssh/sshd_config
sed -i 's/PasswordAuthentication no/PasswordAuthentication yes/' /etc/ssh/sshd_config
service sshd restart
```
#### Create a file variable.tf
```sh
variable "project_vpc_cidr" {}
variable "project_env" {}
variable "project_name" {
default = "zomato"
}
```
#### Create a file output.tf
```sh
output "bastion_public_ip" {
value = aws_instance.bastion.public_ip
}
output "webserver_public_ip" {
value = aws_instance.webserver.public_ip
}
output "webserver_private_ip" {
value = aws_instance.webserver.private_ip
}
output "database_private_ip" {
value = aws_instance.database.private_ip
}
```
#### Create a file for development workspace provision dev.tfvars
```sh
project_vpc_cidr = "172.25.0.0/16"
project_env = "development"
```
#### Create a file for production workspace provision prod.tfvars
```sh
project_vpc_cidr = "172.20.0.0/16"
project_env = "production"
```
## Conclusion:
I have created a VPC by calling as module and launched the EC2 on the newly created VPC.
### Connect with Me
近期下载者：
相关文件：
收藏者：