IAMユーザーの作成
AWSのコンソールでTerraform実行用のIAMユーザーを作成して、アクセスキーとシークレットキーを控えておきます。
この記事の内容を試す場合は、S3への操作を許可しただけの以下のようなポリシーを設定するだけで良いです。
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": ["s3:*"],
"Resource": "*"
}
]
}HomebrewでTerraformとAWS CLIをインストール
brew install terraform awscliTerraform用のディレクトリとファイルを作成
mkdir example-terraform && cd $_ && touch main.tf secrets.tfvars .gitignore上記コマンドを実行後、各ファイルを以下のように編集します。
main.tf
variable "aws_access_key" {}
variable "aws_secret_key" {}
locals {
app_name = "example-app"
region = "us-east-1"
}
provider "aws" {
region = local.region
access_key = var.aws_access_key
secret_key = var.aws_secret_key
# 全てのリソースに共通のタグをつける
default_tags {
tags = {
env = "production"
app-name = local.app_name
}
}
}
# S3のバケットを作成する
resource "aws_s3_bucket" "example" {
bucket = "example-bucket"
}secrets.tfvars
aws_access_key = "XXXX"
aws_secret_key = "XXXX"XXXXにはアクセスキーとシークレットキーを設定します。
.gitignore
参考: gitignore/Terraform.gitignore at main · github/gitignore
# Local .terraform directories **/.terraform/* # .tfstate files *.tfstate *.tfstate.* # Crash log files crash.log crash.*.log # Exclude all .tfvars files, which are likely to contain sensitive data, such as # password, private keys, and other secrets. These should not be part of version # control as they are data points which are potentially sensitive and subject # to change depending on the environment. *.tfvars *.tfvars.json # Ignore override files as they are usually used to override resources locally and so # are not checked in override.tf override.tf.json *_override.tf *_override.tf.json # Include override files you do wish to add to version control using negated pattern # !example_override.tf # Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan # example: *tfplan* # Ignore CLI configuration files .terraformrc terraform.rc
terraform init
terraform init上記コマンドを実行すると、.terraformと.terraform.lock.hclが作成されます。
terraform plan
terraform plan -var-file=secrets.tfvars上記コマンドを実行後に以下のように表示されたら成功です 🎉
Terraform used the selected providers to generate the following execution plan. Resource actions are indicated
with the following symbols:
+ create
Terraform will perform the following actions:
# aws_s3_bucket.example will be created
...
...
...
Plan: 1 to add, 0 to change, 0 to destroy.
