Terraform - Provisioning Infrastructure level Security in AWS

A year ago I have created an article showing how to create infrastructure-level security in AWS step by step. Now its time to automate the provisioning process using Octopus and terrafrom.

We have done it manually from AWS Management console.

Here is the link for the earlier article. 

Here are the components we intend to create using terrafrom.

We will be creating VPC, Public and Private Subnets, RoutTables, Security Groups, Inbound / Outbound rules for communication channels on each of the security groups.

AWS VPC Basics - How To Configure Security Using Subnets

In this article i will explain whats a "VPC", its uses and demonstrate how we can handle the networking & security using various components like VPCs, Subnets, Route tables.

Please know that i will spend little time on theory as it was better explained in AWS Documentation. We will go deep in implementing in a step-by-step manner.

We will :
1. Define AWS Components like VPC, Subnet, Route table, EC2 instance, S3.
2. Configure VPC
3. Configure Subnets
4. Setting Rout Tables
5. Creating EC2 instances in various subnets
6. Testing security we setup.
7. Talk little bit about VPC endpoints.

Let me start with a design of what we will be creating.

AWS FreeTier Subscription - First 4 Things You Need To Do

As a AWS Free-Tier user you are entitled for lot of free compute power.

This is AWS way of saying "Please experiment and learn".

But expirements go wrong sometimes. In this case they can go really bad if you are not carefull.

Here are the 4 things you need to do first after signingup for AWS Free-Tier subscription.

#1. Set billing alert.

#2. Enable MFA

#3. Delete root account access keys

#4. Bring IAM dashboard's "Security Status" to all Green 5/5

Ok, i will take you through each change and explain you why.