Category Terraform-AWS-Labs

Cross-Account S3 Replication with KMS Encryption ☁ AWS 🔥 Advanced S3 Replication Cross-Account KMS Assume Role Provider Aliases Scenario Your compliance team requires that all objects uploaded to the production S3 bucket in Account A are automatically replicated to a…

VPC Peering: Connecting Application and Data VPCs Privately ☁ AWS 🔥 Advanced VPC Peering Route Tables Security Groups DNS Hostnames Non-Overlapping CIDRs Scenario Your organisation uses two VPCs: an application VPC (10.0.0.0/16) running ECS workloads, and a data VPC (10.1.0.0/16)…

Compliance Automation: AWS Config Rules + Lambda Auto-Remediation ☁ AWS 🔥 Advanced AWS Config Config Rules Auto-Remediation SNS Systems Manager Scenario Your security team’s compliance scan revealed that S3 buckets with public access enabled and EC2 instances without required tags…

Transit Gateway: Hub-and-Spoke Multi-VPC Connectivity ☁ AWS 🔥 Advanced Transit Gateway Hub-and-Spoke Route Tables TGW Attachments Transitive Routing Scenario Your organisation has three VPCs: App, Shared Services (DNS, Active Directory), and Egress (with a NAT Gateway for shared internet access).…

Terraform for_each: Map-Driven Resource Creation ☁ AWS ⭐ Beginner for_each each.key / each.value toset() for expressions Scenario Your organisation needs to create multiple IAM users for a new development team, each with different access levels. You also need to create…

Input Variables: Validation Rules, Types, and Sensitive Values ☁ AWS ⭐ Beginner Variable Validation Type Constraints Sensitive Variables tfvars locals Scenario Your Terraform modules are being used by multiple teams who occasionally pass invalid values — wrong environment names, invalid…

S3 Remote State with DynamoDB Locking and Workspaces ☁ AWS ⭐ Beginner Remote State S3 Backend DynamoDB Locking Workspaces terraform.tfstate Scenario Your team has been running Terraform on individual laptops with local state files. Two engineers ran terraform apply simultaneously…

Amazon EKS: Managed Node Group, IRSA, and ALB Ingress Controller ☁ AWS 🔥 Advanced EKS Managed Node Groups IRSA OIDC Provider AWS Load Balancer Controller Scenario Your platform team is migrating workloads to Kubernetes on EKS. You need a production-ready…

REST API Gateway with Lambda Integration and Stage Deployment ☁ AWS ⭐ Beginner API Gateway Lambda Proxy Stage Deployment Method Request Scenario You have a Python Lambda function that returns a JSON greeting response and you want to expose it…

ECR Private Repository with Lifecycle Policy and Image Scanning ☁ AWS ⭐ Beginner ECR Container Registry Image Scanning Lifecycle Policy Scenario Your team is containerising the web application and needs a private Docker image repository in AWS. You also need…