Category Terraform-AWS-Labs

Hybrid Connectivity: Site-to-Site VPN with BGP Routing ☁ AWS 🔥 Advanced Site-to-Site VPN Virtual Private Gateway Customer Gateway BGP Hybrid Cloud Scenario Your organisation has an on-premises data center in London with a Cisco ASA firewall. Internal teams need access…

ECS Fargate Cluster with Task Definition and Service ☁ AWS ⭐ Beginner ECS Fargate Task Definition Task Role CloudWatch Logs Scenario You have containerised the web application, built a Docker image, and pushed it to a private ECR repository. Now…

Advanced HCL: Dynamic Blocks, Complex Expressions, and Custom Conditions ☁ AWS 🔥 Advanced Dynamic Blocks Expressions precondition postcondition Custom Validation HCL Mastery Scenario You manage security groups for 12 different microservices. Each service has a different set of ingress rules…

Capstone: Production Deployment — State Management, Drift Detection, and Lifecycle Control ☁ AWS 🔥 Advanced State Management Drift Detection terraform import prevent_destroy ignore_changes moved blocks Replacing Resources Scenario You’ve been handed ownership of a production AWS account. Somebody manually created…

CloudWatch Alarm on EC2 CPU with SNS Alert ☁ AWS ⭐ Beginner CloudWatch Alarms Metric Filters SNS Scenario Your EC2-based web server has been running in production and sometime last week it hit 100% CPU for several minutes, causing request…

DynamoDB Table with GSI, TTL, and Point-in-Time Recovery ☁ AWS ⭐ Beginner DynamoDB Global Secondary Index TTL PITR On-Demand Billing Scenario Your application stores user session data in DynamoDB. Sessions need to automatically expire after a set time (TTL), and…

Auto Scaling Group with Launch Template ☁ AWS ⭐ Beginner ASG Launch Template Scaling Policies User Data Scenario Traffic to your web application spikes every weekday morning. A single EC2 instance can’t handle peak load, and you can’t afford to…

Application Load Balancer with Target Group and HTTPS Listener ☁ AWS ⭐ Beginner ALB Target Groups Health Checks HTTP Redirect Scenario Your Auto Scaling Group runs multiple EC2 instances, but there is no single DNS name for the application and…

Terraform Workspaces + Remote State Data Sources: Env Pipeline ☁ AWS 🔥 Advanced Workspaces Remote State terraform_remote_state S3 Backend DynamoDB Lock Layered Architecture Scenario Your infrastructure is split into two layers: a networking layer (VPCs, subnets, route tables) managed by…

AWS Organizations: Service Control Policies as Account Guardrails ☁ AWS 🔥 Advanced AWS Organizations Service Control Policies OU Hierarchy Account Guardrails Deny by Default Scenario Your organisation uses AWS Organizations with three OUs: Production, Development, and Sandbox. Your security team…