book

Architecting AWS with Terraform

Name: Architecting AWS with Terraform
Author: Erol Kavas
ISBN: 9781803248561

by Erol Kavas

December 2023

Intermediate to advanced

260 pages

6h 54m

English

Packt Publishing

Read now

Unlock full access

Architecting AWS with Terraform
ContributorsAbout the authorAbout the reviewers
Preface
Who this book is forWhat this book coversConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Part 1:Introduction to IAC and Terraform in AWS
Chapter 1: Understanding Patterns and Antipatterns of IaC and Terraform
Introducing IaCKey principles of IaCPatterns and practices of IaCSource control and VCSModules and versionsDocumentationTestingSecurity and complianceHow to handle IaC projectsIaC principlesVersion control systems for IaCSome common use cases of IaCChallenges and best practices with IaCHow to make decisions about IaC projectsThe decision about where to store your codeSummary
Chapter 2: How Not to Use IaC and Terraform
Terraform architecture and workflowArchitectureWorkflowTo Compare with the Other IaC ToolsTerraform versus CloudFormationWhat is AWS CloudFormation?Comparison and differences between Terraform and CloudFormationTerraform or CloudFormation – which should I choose?Summary
Chapter 3: Building Your First Terraform Project
How to install TerraformManual installationPopular package managersVerifying the installationHow to install/prepare Terraform for AWSPrerequisitesAWS CLI installationCreating an IAM user and credentials for TerraformBuilding your first Terraform configurationBuilding your first Terraform templateProvisioning and testing your templateSummary
Chapter 4: Discovering Best Practices for Terraform IaC Projects
How to maintain IaC projects with TerraformFollow a standard module structureAdopt a naming conventionUse variables carefullyExpose outputsUse data sourcesLeverage tfvars filesSeparate variables and inputs based on their functionalityLimit the use of custom scriptsInclude helper scripts in a separate directoryPut static files in a separate directoryProtect stateful resourcesUse built-in formattingLimit the complexity of expressionsUse count for conditional valuesUse for_each for iterated resourcesPublish modules to a registryHow to execute IaC projects with TerraformHow to secure IaC projects with TerraformImplementing Terraform in DevOps or cloud teamsSummary
Part 2:Become an Expert in Terraform with AWS
Chapter 5: Planning and Designing Infrastructure Projects in AWS
Terraform infrastructure project planning basicsThe speed benefitsThe risk management benefitsSecurity, reusability, and governanceTeam skill setsThe best candidates for automationThe types of applications you’ll be runningThe cost of automating too many tasksThe critical nature of the codeThe need for software expertiseThe impact on agilityIntegration with existing infrastructureGoals and available resourcesThe long-term planQuality control and securityHow to design your first Terraform template in AWSAuthentication with AWSSetting up programmatic accessCreate your first AWS infrastructure with TerraformUnderstanding AWS ProvidersWhat are AWS Providers and why are they important in Terraform?How to configure an AWS Provider in your Terraform codeUnderstanding the different versions of the AWS Provider and their compatibility with TerraformBest practices for working with AWS Providers in TerraformUnderstanding Terraform modulesWhat is a Terraform module?Using modulesLocal and remote modulesModule best practicesWhat problems do Terraform modules solve?How to implement best practices with Terraform AWS modulesTerraform configurations file separationFollow a standard module structureUse opinionated modules to do exactly what you needLeverage official open source modulesMake extensive use of convention over configurationMake modules flexible with multiple optional inputsRefer to modules by versionConsider bundling modules together if they serve a common purposeConsider using variable and naming validationUse locals correctlyKeep the code in your module logically separatedSeparate required and optional variablesAlways have an example folder within your module folderSummary
Chapter 6: Making Decisions for Terraform Projects with AWS
AWS infrastructure and fundamentalsWhat is AWS infrastructure?What are the main AWS product and service categories?How to make decisions to start a Terraform project in AWSHow to start designing your first AWS infrastructureAWS Organizations and network fundamentalsAWS resources fundamentalsAWS shared responsibility modelHow to select AWS resourcesAWS environments, projects, workloadsWhat is an environment?How to define environments or projects in AWSSummary

Chapter 7: Implementing Terraform in Projects
Terraform basics for developing AWS infrastructure projectsResourcesProvidersStateModulesVariablesOutputsProvisionersSelecting AWS ProvidersSelecting AWS public modules for your needsHow to decide on Terraform module selectionHow to write custom Terraform AWS modulesSummary
Chapter 8: Deploying Serverless Projects with Terraform
What are landing zones and why do we need them?AWS FoundationsHow to build landing zones with Terraform in AWSWhat is serverless?What are AWS serverless patterns?What is AWS Lambda?What is AWS Fargate?How to design a serverless infrastructure with TerraformHow to develop a serverless infrastructureHow to deploy a serverless infrastructure using TerraformSummary
Chapter 9: Deploying Containers in AWS with Terraform
What are containers?Containers in AWSThe reasons for using containersHow to containerize applicationsAWS containersHow to choose the best containerization platform in AWSHow to utilize Terraform for containersDeploying containers with TerraformHow to use Terraform for AWS container resourcesHow to deploy AWS ECR with TerraformDeploying container images to AWS container platforms with TerraformCreating an AWS EKS cluster with TerraformDeploying an application to an AWS EKS cluster with TerraformSummary
Part 3:How to Structure and Advance Terraform in Enterprises
Chapter 10: Leveraging Terraform for the Enterprise
What is an enterprise infrastructure project?What is an AWS enterprise project?How to define needs and solutions for an AWS enterprise projectDefining success in AWS enterprise projectsHow to discuss AWS enterprise projectsHow to leverage Terraform in AWS enterprise projectsSome recommendations for AWS enterprise projectsSummary
Chapter 11: Building Git Workflows for IaC and Terraform Projects
Why do we need a Git workflow?Implementing a Git workflowTools and flows to use with AWS Terraform projectsHow to secure a Terraform projectStreamlining AWS Terraform projectsSummary
Chapter 12: Automating the Deployment of Terraform Projects
What is deployment in Terraform?What is CI/CD for Terraform?Why do we need CI/CD tool for Terraform?What is the best CI/CD for Terraform?How to build the governance and auditability of provisioning infrastructureHow to provision infrastructure securelySummary
Chapter 13: Governing AWS with Terraform
What is infrastructure governance?The importance of infrastructure governanceKey elements of infrastructure governanceBenefits of infrastructure governanceWhy do we need infrastructure governance?Security and complianceCost optimizationStandardization and consistencyRisk managementHow to govern infrastructure with TerraformResource provisioning with TerraformSummary
Chapter 14: Building a Secure Infrastructure with AWS Terraform
What is security in infrastructure?Threats to infrastructure securityThe importance of infrastructure securityBasic principles of infrastructure securityTypes of security measures for infrastructureThe role of governance in infrastructure securityHow to govern security in AWSAWS security services and featuresAWS security compliance and certificationsAWS security governance frameworksMonitoring and logging for AWS securityIncident response for AWS securityHow to build secure infrastructure in TerraformImplementing least privilege using IAM policiesCreating secure network architecturesAutomating compliance checksStoring secrets securelyManaging Terraform stateSecurity and TerraformThe security benefits of using TerraformBest practices for using Terraform securelyCommon security risks with Terraform and how to mitigate themSecurity and IaC operationsIaC pipeline securitySecuring build and deployment processesSecurely managing secrets in IaC pipelinesTesting and validating infrastructure changesBest practices for secure IaC operationsSummary
Chapter 15: Perfecting AWS Infrastructure with Terraform
What does perfect mean in cloud infrastructure?Meeting stakeholder needsHigh availabilitySecurityScalabilityEfficiencyContinuous improvementHow to design and develop infrastructure for perfectionDefining infrastructure requirementsEstablishing a design frameworkImplementing best practicesTesting and validating the infrastructureContinuous integration and continuous deployment (CI/CD)Continuously improving cloud infrastructureMonitoring and loggingAlerting and notificationCapacity planning and managementCost optimization and managementIaC reviewRegular security audits and updatesPerformance optimization and managementContinuous improvement and iterationBuilding SLAs/SLIs/SLOs with SRE principlesWhat are SLAs, SLIs, and SLOs?Key principles of SREDeveloping SLAs, SLIs, and SLOsMeasuring and monitoring metrics for SLIs and SLOsUsing Terraform to enforce SLAs, SLIs, and SLOsBest practices for managing SLAs, SLIs, and SLOsContinuous improvement of SLAs, SLIs, and SLOsHow to run operations with TerraformAutomating common operational tasks with TerraformManaging infrastructure changes with TerraformMonitoring and logging infrastructure with TerraformTroubleshooting infrastructure issues with TerraformScaling and managing infrastructure with TerraformSummary
Index
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Overview

"Architecting AWS with Terraform" is a beginner-to-advanced guide to mastering the use of Terraform for developing scalable, secure infrastructure on AWS. This book offers a practical and systematic approach to adopting Infrastructure as Code (IaC) practices, teaching you how to plan, design, implement, and manage AWS environments using Terraform.

What this Book will help me do

Understand Terraform frameworks, providers, and modules to build your AWS infrastructure.
Learn to automate deploying AWS projects with Terraform and continuous integration workflows.
Gain insights into best practices and enterprise-grade governance for Terraform projects.
Implement serverless and containerized AWS applications with Terraform.
Build secure and manageable AWS workloads utilizing Terraform capabilities.

Author(s)

Erol Kavas, a seasoned cloud architect and an AWS-certified expert with over a decade of experience, brings a practical, hands-on approach to mastering Terraform on AWS. Leveraging his experience in architecting complex infrastructure projects, he ensures concepts are clearly explained and examples are practical, catering to both beginners and seasoned professionals.

Who is it for?

This book is ideal for cloud architects, DevOps engineers, and developers who are responsible for managing and automating AWS workloads. If you are familiar with AWS concepts and are looking to implement Infrastructure as Code practices and automate recurring tasks, this book is perfect for you.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781803248561

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills