Necati Özmen
Introduction
Managing infrastructure across multiple environments and regions can be an operational headache for teams as applications scale. Provisioning resources manually is boring and time-consuming while scripting the process requires significant engineering effort.
Infrastructure as code (IaC) tools like HashCorp's Terraform provides a compelling solution - allowing you to define reusable configurations for spinning up everything from storage buckets to Kubernetes clusters.
In this beginner's guide, I will walk through getting started with Terraform specifically for infrastructure provisioning on Amazon Web Services (AWS). I will cover the prerequisites, configuring access to AWS, writing a simple Terraform configuration, modifying your infrastructure, and then cleaning up.
Whether you're already using AWS or looking to explore it with an IaC approach, this article will equip you with the fundamentals for provisioning just about any infrastructure you need.
Steps we'll cover:
- AWS Account and Credentials
- AWS CLI
- Terraform
- Configuring AWS Credentials
- Creating a Simple Configuration
- Modifying Infrastructure
Prerequisites
Before you can start using Terraform to manage infrastructure on AWS, you need a few prerequisites:
AWS Account and Credentials
For this guide, you need an AWS account. Accounts are free to sign up for. As part of the account creation process, you will create a root user who has complete access to the account.
For security best practices, you will be creating an IAM user with more limited permissions for Terraform to use.
Once you have an AWS account, under the IAM service, create a new IAM user. Be sure to save the access key and secret access key. These keys will be used by Terraform to authenticate and interact with your AWS account.
AWS CLI
The AWS CLI tool allows you to manage AWS services from the command line. Install this and configure it with your access keys for Terraform to provision resources.
Download and install the CLI for your operating system. Once installed, run aws configure and enter your access keys when prompted.
Terraform
Finally, go to terraform site and download the Terraform binary for your system. Terraform is distributed as a single binary, so once downloaded you can run Terraform commands from your terminal.
Be sure to add the Terraform binary to your PATH environment variable so it is accessible system-wide.
Configuring AWS Credentials
Now that you have your AWS account set up and Terraform installed, you need to configure your access credentials for Terraform to use when interacting with AWS.
Here are some of the options for specifying credentials:
Access Keys and Secret Keys
When you created your IAM user, AWS generated access and secret access keys for you. These keys act as username and password for programmatically interacting with AWS through their API.
You can pass these directly to Terraform through environment variables:
export AWS_ACCESS_KEY_ID=<your_access_key>
export AWS_SECRET_ACCESS_KEY=<your_secret_key>
Terraform will check these environment variables when needing credentials.
~/.aws/credentials File
Another option is to save your keys in a local AWS credentials file that AWS CLI checks by default:
[default]
aws_access_key_id = <your_access_key>
aws_secret_access_key = <your_secret_key>
This file is located at ~/.aws/credentials on Linux/macOS. Terraform automatically checks this file for credentials to use.
With credentials configured through either approach, Terraform is now ready to build infrastructure on your AWS account.
Creating a Simple Configuration
Now that Terraform can access your AWS account, let's write your first Terraform configuration file to deploy infrastructure. Terraform code is written in HCL (HashCorp Configuration Language) syntax.
Configuration files end in .tf and define providers and resources. You will specify that you want to use AWS as your provider.
Following the AWS provider documentation, create main.tf with the following:
terraform {
required_providers {
aws = {
source = "hashicorp/aws"
version = "~> 5.0"
}
}
}
provider "aws" {
region = "us-east-1"
}
Then define an AWS EC2 resource instance:
resource "aws_instance" "refine-dev" {
ami = "ami-0fc5d935ebf8bc3bc"
instance_type = "t2.micro"
tags = {
Name = "refine-dev"
}
}
This configures an EC2 instance in the us-east-1 region using a free Linux image. Put together, your configuration file should look like the following:
terraform {
required_providers {
aws = {
source = "hashicorp/aws"
version = "~> 5.0"
}
}
}
provider "aws" {
region = "us-east-1"
}
resource "aws_instance" "refine-dev" {
ami = "ami-0fc5d935ebf8bc3bc"
instance_type = "t2.micro"
}
With your provider and initial resource defined, run:
terraform init
This will initialize your Terraform working directory complete with plugins for the AWS provider.
Then run:
terraform plan
Terraform reads your config file and outlines what infrastructure it will create. If the plan looks good, it's time to apply.
Run terraform apply and Terraform will call out to AWS and create the EC2 instance.
Modifying Infrastructure
A key advantage of infrastructure as code is how you can evolve your stack over time through code changes.
Let's make a small update to your configuration by adding some AWS tags into your resource:
resource "aws_instance" "refine-dev" {
ami = "ami-0fc5d935ebf8bc3bc"
instance_type = "t2.micro"
tags = {
Name = "refine-dev"
}
}
After saving this update in your Terraform file, run:
terraform plan
Terraform will output the changes needed to add these tags to your EC2 instance.
If they look good, apply with:
terraform apply
Your instance will then be updated in place, adding a name to your instance:
Terraform does this immutably by destroying the instance and recreating it, assigning it the same IP address throughout this process.
This immutable approach ensures consistency across updates and provides more visibility than manually editing existing resources in the AWS console.
By coding your infrastructure, you gain improved collaboration, version control integration, and automation capabilities for managing changes.
Cleaning Up
Once you’re done experimenting with your infrastructure, it's best practice to clean up the resources you've created so you don't incur unnecessary charges.
Terraform makes this very simple - just run:
terraform destroy
Terraform will output all resources that will be destroyed and prompt for confirmation.
Type yes and Terraform will delete all the related infrastructure on AWS - EC2 instances, networking components, and security groups. Here, Terraform will delete your EC2 instance.
This is a key advantage over console-based provisioning. With all your infrastructure described in declarative config files, Terraform knows exactly what needs to be deleted based on the state. You don't have to manually track down orphaned resources or decompress tangled dependencies.
Properly cleaning up infrastructure keeps your accounts lean, extends the experience to production-grade workflows, and surfaces gaps in your understanding. Make sure to always destroy your test environments when finished experimenting!
You can recreate your stack easily at any time by running terraform apply. Your configuration code serves as the single source of truth.
Conclusion
Through this getting started, hopefully, you now appreciate why contractors, startups, and enterprises alike are adopting IaC practices with Terraform. I touched on several benefits like configuration files serving as the single source of truth.
Need to recreate something from last month? Just reapply an old config commit instead of decoding tribal knowledge and runbooks. Changes systematically pass through pull requests and can integrate with CI/CD pipelines just like application code changes. No more snowflake production hotfixes!
So, what's next for you? Start by version-controlling your Terraform configurations, making them accessible to your team, and gradually converting more of your cloud infrastructure to code. As you gain experience, you'll be ready to use Terraform to manage infrastructure for production applications.
Thanks for following along with this getting started guide - hopefully you’re feeling empowered to start down the path of harnessing infrastructure as code! What will you build next?
