aws-infra-terraform

This project is used to standardize and deploy the core infrastructure components in AWS across multiple regions using terraform. The goal is to programmatically deploy and manage multiple environments (production, development, staging, etc) across any number of regions from a central location while maintaining isolation between environments and regions within Terraform.

Architecture

Environment	Region	CIDR Block
Production	US-West-2	10.0.0.0/14
Production	US-East-1	10.4.0.0/14
Development	US-West-2	172.16.0.0/14
Development	US-East-1	172.20.0.0/14

Setup

AWS Credentials

AWS credentials are assumed to be passed in from your local aws credentials file using profiles for each environment. profile variables are set in the enviroment provider file.

Terraform Workspaces

Create a workspaces for each region within the environment (production, development, staging, etc) you plan to deploy and work within. This is how isolation is achieved between regions and environments.

Navigate to the environment you want to work with then initialize terraform and then create a workspace for each region.

Here we are creating two workspaces us-east-1 and us-west-2 in the production environment.

cd environments/production
terraform init
terraform workspace new us-east-1
terraform workspace new us-west-2

You will be automatically dropped into the workspace once it is created. Listing the workspaces now should look like this:

terraform workspace list         
  default
  us-east-1
* us-west-2

Usage

Navigate to the environment you want to work with if you are not already there from the step above. Then select the workspace of the region you want to deploy and work within

cd environments/production 
terraform workspace select us-west-2

Bastion Host Access

An AWS key-pair is created using the public key provided in the environment variable TF_VAR_pub_key The security group created uses the environment variable TF_VAR_bastion_admins

export TF_VAR_pub_key='<your pub key here>'
export TF_VAR_bastion_admins=['public_ip1', 'public_ip2']

Deploy

When ready plan and apply changes for each region. Dont forget to switch workspaces when working with a different region

terraform plan -var-file=us-west-2.tfvars
terraform apply -var-file=us-west-2.tfvars

terraform workspace select us-east-1
terraform plan -var-file=us-east-1.tfvars
terraform apply -var-file=us-east-1.tfvars

Repeat these steps for additional environment.

Credit for terraform organization and workspace setup goes here: https://dev.to/sdileep/manage-a-multi-environment-multi-region-infrastructure-on-aws-using-terraform-1p2p

that1guy15 / aws-infra-terraform Goto Github PK