DEV Community

Cover image for How to Create VPC and EC2 on AWS for Free Tier With Terraform
Berk
Berk

Posted on • Edited on • Originally published at burakberk.dev

How to Create VPC and EC2 on AWS for Free Tier With Terraform

#aws #terraform #cloud #instance

Overview

In this post, you will learn how to deploy resources to AWS without exceeding the free limits with Terraform.

Once you follow this tutorial, you will have:

  • A VPC with 10.10.0.0/16 CIDR,
  • A public subnet with 10.10.20.0/24 CIDR on eu-central-1a AZ,
    • A public subnet with 10.10.40.0/24 CIDR on eu-central-1b AZ,
    • A private subnet with 10.10.21.0/24 CIDR on eu-central-1a AZ,
    • A private subnet with 10.10.41.0/24 CIDR on eu-central-1b AZ,
    • Security groups for SSH, HTTP(S) for ingress and all for egress,
  • A Public Elastic IP,
  • An Ec2 Instance,
    • Ubuntu Linux
    • t2.micro type,
    • 25GB storage,

All these resources are free if you are on AWS free tier!

You can see an example diagram of the resources.

Pre-Requirements

  • An AWS account.
  • A Linux or macOS computer to run Terraform.
  • Git

Install Terraform

You can skip this section if you already have Terraform installed on your computer.

If you are reading this tutorial, you know what Terraform is. Terraform is an open-source Infrastructure as Code (IaC) tool that enables users to define and provision infrastructure efficiently across various cloud providers.

Installation on MacOS

If you have Homebrew installed on your computer, you can use brew to install Terraform.

Open a terminal and run these commands:

brew tap hashicorp/tap && \
brew install hashicorp/tap/terraform
Enter fullscreen mode Exit fullscreen mode

Once the installation is finished, you can check the Terraform version and verify the installation.

terraform --version
Enter fullscreen mode Exit fullscreen mode

Installation on Windows

You can head to the official Terraform installation document and download the latest Terraform version.

But my recommendation is to use Linux with WSL.

Installation on Linux

You can head to the official Terraform installation document and click on the tab for your distro.

If you are using Arch Linux and have yay tool installed , you can simply install Terraform with the commands below.

yay -S terraform
Enter fullscreen mode Exit fullscreen mode

Create an AWS Service Account for Terraform

If you have a service account for the terraform, you can skip this step.

To create a service account, you can follow the tutorial below step by step.

Creating a Service Account on AWS For Terraform

favicon burakberk.dev

Create an SSH Key For Linux Server Authentication

You can skip this section if you already have an SSH key to use on a Linux server.

To enhance Linux server security, generate an SSH key pair using the ssh-keygen command, enabling secure authentication by pairing a private key on the client with the server's authorized public key.

A SSH key pair consists of 2 files, public and private. You should keep the private one safe and secure. You can think that a private file opens the locks. You should use the public one to lock something like a Linux server.

In summer, we will use a public key to lock our server SSH on our Terraform configuration. After the server is up and running, we will use the private one to connect to the server.

To create a SSH key pair, you can use this command on your macOS or Linux computer.

  • -f ~/.ssh/aws-ec2: The file path and name where you want to create the key pair.
  • -C "contact@burakberk.dev": The comment can be anything.
  • Once you run the command below, it will ask you to enter a passphrase. This is password protection for the private file. You should use a secure and strong password. 
ssh-keygen -t ed25519 -f ~/.ssh/aws-ec2 -C "contact@burakberk.dev"
Enter fullscreen mode Exit fullscreen mode

To view the private file that we will use to connect to the server, you can run:

cat ~/.ssh/aws-ec2
Enter fullscreen mode Exit fullscreen mode

To view the public file that we will use on Terraform, you can run:

cat ~/.ssh/aws-ec2.pub
Enter fullscreen mode Exit fullscreen mode

Create AWS Credentials Environment Variables

Since Terraform must be authenticated to your AWS account, we will use the access keys we created earlier.

There are multiple ways to use those keys. But in this tutorial, I will use the environment variables method, which is unsafe for the long term.

For more details about AWS authentication, you can read the AWS Terraform documentation.

We could run the export command below directly, but this will save the secret access keys in the shell history, which is very unsafe. So we will create a file and put the keys into it.

Create a file named terraform-aws.sh with vim

vim terraform-aws.sh
Enter fullscreen mode Exit fullscreen mode

Copy this template and paste it into the file.

#!/bin/bash
export AWS_ACCESS_KEY_ID=YourAccessKeyId
export AWS_SECRET_ACCESS_KEY=YourSecretAccessKey
Enter fullscreen mode Exit fullscreen mode

Press the i button, move the cursor with the arrow buttons on your keyboard, and edit the AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY variables with yours.

Press esc, colon (:) and write wq! and hit enter on your keyboard to save the changes and exit the editor.

❗Keep this file safe and secure. Whoever gets access to the file controls all resources on your AWS account.

Now you can use this file to use your keys.

source terraform-aws.sh
Enter fullscreen mode Exit fullscreen mode

📚Note: If you close your terminal or open a new one, you should run the source command each time before running terraform commands.

If your AWS variables get lost and you run terraform commands, you will get an error, like in the example below:

Planning failed. Terraform encountered an error while generating this plan.

Error: configuring Terraform AWS Provider: no valid credential sources for Terraform AWS Provider found.
Enter fullscreen mode Exit fullscreen mode

Download the Sample Terraform Files From Github

You should create a couple of files. Instead of creating them manually, you can just download them from the Github repository.

Open a terminal and change the directory to the home directory. You can choose anywhere you want.

cd $HOME
Enter fullscreen mode Exit fullscreen mode

Then you can download the Terraform files from the Github repository.

git clone --depth 1 --branch blog-tutorial https://github.com/burakberkkeskin/personal_infra.git && \ 
cd personal_infra/main
Enter fullscreen mode Exit fullscreen mode

Once the download is finished and you are in the Terraform configuration directory, you can run terraform init to see if Terraform configuration is ready to be used.

❗Be aware that you are in the personal_infra/main directory. The terraform commands below should also run in this directory too.

terraform init
Enter fullscreen mode Exit fullscreen mode

Configure and Customize Terraform Variables

Add the SSH Key

Print the public key you created earlier and copy it.

cat ~/.ssh/aws-ec2.pub
Enter fullscreen mode Exit fullscreen mode

Open the variables.auto.tfvars file with a file editor.

vim variables.auto.tfvars
Enter fullscreen mode Exit fullscreen mode

Press the i button, move to a new line with the arrow buttons on your keyboard, and create a new variable named ec2_public_key like in the example below:

// general variables
 project_name = "main"
 aws_region = "eu-central-1"
 aws_zone = "eu-central-1a"

 ec2_public_key = "ssh-ed25519 SuperSecretKeylZDI1NTE5AAAAINa3hu5qHgD3cS7dxMlO6I3dTTx/AFU5HqhNZnM6rnEJ contact@burakberk.dev"

 ...
Enter fullscreen mode Exit fullscreen mode

Press esc, colon (:) and write wq! and hit enter on your keyboard to save the changes and exit the editor.

You can also configure other variables as you wish, like the aws_region, project_name.

Terraform Plan

To see if everything is ready to use, you can run terraform plan command to see the resources that will be created.

terraform plan
Enter fullscreen mode Exit fullscreen mode

If you see that there are resources that will be created as a plan, it means you have configured terraform correctly ✅

Terraform Apply

Once you are ready to create the resources you saw in the terraform plan output, you can run terraform apply command.

terraform apply
Enter fullscreen mode Exit fullscreen mode

It will ask you to be sure.

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value:
Enter fullscreen mode Exit fullscreen mode

Write yes and hit enter. Within a few minutes, your resources will be ready to use.

Apply complete! Resources: 23 added, 0 changed, 0 destroyed.

Outputs:
ec2_instance_private_ip = "10.10.20.136"
ec2_instance_public_ip = "35.158.26.83"
Enter fullscreen mode Exit fullscreen mode

To check from the AWS Console, you can head to the EC2 instance. You can also see the IP address of the instance.

Ta da 🥳 Your Ubuntu Linux server is ready to use.

SSH Into the Server For Testing

You have already seen the IP address of the instance. To connect, you can open a terminal and run ssh command:

  • -i ~/.ssh/safaws: The path to the private SSH key.
  • ubuntu: Default username of the Ubuntu AMI on the AWS.
  • 35.158.26.83: Public IPv4 address. 
ssh -i ~/.ssh/safaws ubuntu@35.158.26.83
Enter fullscreen mode Exit fullscreen mode

If it is the first time that you are connecting to a server, it will ask if you are sure to connect. Write yes enter hit Enter.

Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Enter fullscreen mode Exit fullscreen mode

If you have followed the tutorial until now, congratulations, You are on the Linux server!

You can use this server however you like. For example, you can host a website, make it a VPN server, a database server, or anything else you want.

Example Nginx Container

In this step, you will see how to deploy a nginx container. The docker should be already installed in the instance. All you need to do is run the docker run command.

Let's run a Nginx container.

sudo docker run --name "website" --rm -d -p "80:80" nginx
Enter fullscreen mode Exit fullscreen mode

To test if everything works, you can simple open a browser and head to the public IPv4 address like:

http://35.158.26.83
Enter fullscreen mode Exit fullscreen mode

Destroying the All Resources

If you want to destroy all the resources for some reason, like the end of the free tier, you can destroy all resources easily.

First, you should change the directory to the Terraform you downloaded earlier.

cd ~/personal_infra/main
Enter fullscreen mode Exit fullscreen mode

You should activate the AWS keys again for authentication.

source terraform-aws.sh
Enter fullscreen mode Exit fullscreen mode

Now, it is time to destroy all resources.

terraform destroy
Enter fullscreen mode Exit fullscreen mode

It will ask you to be sure. Write yes and hit Enter.

Do you really want to destroy all resources?
  Terraform will destroy all your managed infrastructure, as shown above.
  There is no undo. Only 'yes' will be accepted to confirm.

  Enter a value: yes
Enter fullscreen mode Exit fullscreen mode

Once all resources are destroyed, you will see an output like below.

Destroy complete! Resources: 23 destroyed.
Enter fullscreen mode Exit fullscreen mode

Re-Use on Another Account

If you want to use the exact same configuration, you can just change the AWS access keys in the terraform-aws.sh. file and apply the same configuration. With that, you can change AWS accounts under 10 minutes!

For More

If you like the post, you can head to my personal blog site and read more about DevOps, Linux, System Engineering!

Burak Berk Keskin

Blog of a DevOps & System Engineer

favicon burakberk.dev

Top comments (1)

Collapse
 
d1eku profile image
D1eku •

Thanks!

Read next

juantaylor profile image

The Seven Wonders of AWS re:Invent 2024

Juan Taylor -

vaish_98 profile image

Mastering AWS Container Cost Optimization with EKS and ECS: Essential Tips for Developers

Vaishnavi -

arindam0310018 profile image

Rule of Thumb for spinning up Azure Landing Zones

Arindam Mitra -

ravikishan profile image

A Comprehensive Guide to Building a Single Sign-On (SSO) Gateway with Node.js

Ravi Kishan -