💻 Terraform Demo

📖 Resources and Accessibility ♿

We are committed to providing learning resources that are accessible to all. If you see a resource that is not compliant, please let us know by creating an issue.

• Slides
• HashiCorp Developer
• A Cloud Guru
• New Relic
• CDS Terraform Modules
• CDS's Terraform Plan module

🏖️ Terraform Boilerplate 🗄️

🧰 Tools Needed 🛠️

• An AWS account
• AWS CLI
• Terraform

✔️ How to set it up 🦾

After you have a scratch AWS account setup and connected with AWS CLI, the first step to getting started with Terraform is to use the AWS module to create an S3 bucket.

Once this bucket is created, we can create a DynamoDB table and use this DynamoDB table instance to 'lock state' to prevent state corruption.

🤖 Integrating Terragrunt and future 🔮

Terragrunt Docs

We will use a 'partial configuration' instead of specifying the same configuration over and over again in Terraform files, which lets us 'keep things DRY' -- "Don't Repeat Yourself".

🐳 Using a DevContainer 🛠️

A DevContainer allows you to standardize your development environment using Colima. To use the provided DevContainer:

1. Ensure you have Colima installed on your machine.
2. Install Visual Studio Code and the Dev Containers extension.
3. Open this project in VS Code.
4. When prompted, reopen the project in the DevContainer. Alternatively, press F1, search for "Dev Containers: Reopen in Container," and select it.
5. Once the container is built and running, you can start working with all the required tools pre-installed.

This setup ensures consistency across development environments and simplifies onboarding for new contributors.

✅ SSH Commit Signing Setup (macOS + GitHub)

This guide sets up SSH key-based Git commit signing (not just repository authentication) using Git and GitHub.

---

1. Generate an SSH Key (if needed)

ssh-keygen -t ed25519 -C "your_email@example.com"

This creates:

~/.ssh/id_ed25519 (private key)

~/.ssh/id_ed25519.pub (public key)

2. Configure Git to Sign Commits with SSH

git config --global gpg.format ssh
git config --global user.signingkey ~/.ssh/id_ed25519.pub
git config --global commit.gpgsign true

3. Use a Verified GitHub Email

Check your Git email:

git config --global user.email

Make sure that email is added and verified in GitHub.

4. Upload Your SSH Signing Key to GitHub

cat ~/.ssh/id_ed25519.pub`

Go to: GitHub → Settings → SSH and GPG Keys

Click "New SSH Key"

Select "Signing key" as the key type

Paste your key and save

5. Make a Signed Commit

git commit -S -m "Your signed commit message"
git push

You should now see ✅ Verified next to your commits on GitHub.