Elastic Compute Cloud (EC2)

A virtual machine in the cloud. You choose the operating system image and the instance size, and your team patches and maintains everything that runs on it. At BYM, teams use EC2 for third-party software that needs a server of its own, such as Windows-based GIS tools or license servers.

Terraform configuration

terraform-byks-module doesn't create EC2 instances. Provision each instance directly with the terraform-aws-ec2-instance module, outside the module "application" block. Each module block creates one instance with an encrypted root volume, optional extra EBS volumes, an optional Elastic IP, and a Route53 DNS record. The instance always requires IMDSv2 tokens for its metadata service.

The module doesn't create a security group, a key pair, or an IAM instance profile. Create the ones you need yourself and pass them in, as the example does with the security group.

The module creates DNS records through the aws.route53 provider, which your Terraform Infrastruktur-repo defines in route53_provider.tf. Pass it in through providers, as in the example. See Terraform Infrastruktur-repos.

data "aws_ssm_parameter" "vpc_information" {
  name = "/bym/vpc"
}

data "aws_route53_zone" "route53_zone" {
  provider = aws.route53
  name     = "test.bymoslo.net"
}

locals {
  vpc = jsondecode(data.aws_ssm_parameter.vpc_information.insecure_value)
}

resource "aws_security_group" "example" {
  name   = "example-ec2"
  vpc_id = local.vpc.vpc_id
}

module "ec2" {
  source = "git@github.com:BYM-IKT/terraform-aws-ec2-instance.git?ref=v2"
  application_name             = "example"
  environment                  = var.environment
  instance_name                = "example"
  ami                          = "ami-0123456789abcdef0"
  instance_type                = "t3.small"
  subnet_ids                   = local.vpc.private_subnets
  aws_security_group_public_id = [aws_security_group.example.id]
  key_name                     = "example"
  associate_public_ip_address  = false
  disable_api_termination      = true
  zone_id                      = data.aws_route53_zone.route53_zone.zone_id
  instance_route53             = "example-int.test.bymoslo.net"
  eip_assoc                    = false

  providers = {
    aws.route53 = aws.route53
  }
  # options go here
}

Options

Backup settings object

Used in backup_settings.

Outputs

Read these from the module, for example module.ec2.private_ip.

Resources