Welcome to Day 67 of the #90DaysOfDevOps Challenge! Today, we will explore the powerful capabilities of Amazon S3 (Simple Storage Service) and learn how to create and manage S3 buckets using Terraform. S3 is a highly scalable, secure, and reliable object storage service offered by AWS.

AWS S3 Bucket & Terraform

AWS S3 (Simple Storage Service) is a versatile storage solution that caters to a wide range of use cases, including data backup and restore, content distribution, application data storage, and even hosting static websites. With its robust features and flexible configuration options, S3 provides a reliable foundation for managing your data in the cloud.

By leveraging Terraform, an Infrastructure as Code (IaC) tool, you can easily create and manage S3 buckets in AWS. Terraform allows you to define your desired state for S3 buckets using declarative code, enabling efficient provisioning and configuration. You can specify various bucket attributes such as access control, versioning, lifecycle policies, and more, ensuring your S3 buckets align with your specific requirements.

With Terraform, you can automate the entire lifecycle of your S3 buckets, from creation to management and even destruction if needed. This helps in maintaining consistency across different environments and simplifies the process of managing large-scale deployments.

Whether you need to store and retrieve data, distribute content, or host static websites, Terraform provides an intuitive and scalable approach to creating and managing AWS S3 buckets. By leveraging the power of Infrastructure as Code, you can achieve efficient, repeatable, and scalable data management solutions in the cloud.

Task: Creating and Managing S3 Buckets Using Terraform.

Step 1: Create an S3 Bucket using Terraform

To create an S3 bucket using Terraform, define the following resource block in your Terraform configuration file:

resource "aws_s3_bucket" "my_bucket" {
  bucket = "devopschallenge-s3-bucket"
}

Step 2: Configure Public Read Access

To configure the S3 bucket to allow public read access, add the following resource block:

# Allow public read acces
resource "aws_s3_bucket_public_access_block" "public_access_block" {
  bucket = aws_s3_bucket.my_bucket.id

  block_public_acls       = false
  block_public_policy     = false
  ignore_public_acls      = false
  restrict_public_buckets = false
}

Step 3: Create an S3 Bucket Policy for IAM User or Role

To create an S3 bucket policy that allows read-only access to a specific IAM user or role, modify the existing bucket policy resource block as follows:

# Bucket policy to allow read-only access to the devops-user
resource "aws_s3_bucket_policy" "my_bucket_policy" {
  bucket = aws_s3_bucket.my_bucket.id

  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid    = "AllowUserAccess"
        Effect = "Allow"
        Principal = {
          AWS = "arn:aws:iam::974262444728:user/iamadmin"
        }
        Action   = "s3:GetObject"
        Resource = "${aws_s3_bucket.my_bucket.arn}/*"
      }
    ]
  })
}

Step 4: Enable Versioning

To enable versioning for the S3 bucket, add the following resource block:

# Enable versioning for the S3 bucket
resource "aws_s3_bucket_versioning" "bucket_versioning" {
  bucket = aws_s3_bucket.my_bucket.id
  versioning_configuration {
    status = "Enabled"
  }
}

This resource block enables versioning, which allows you to keep multiple versions of an object in your S3 bucket.

Step 5: Execute Terraform

Run terraform init, terraform plan, and terraform apply to create the above infrastructure.

Step 6: Validate the infrastructure

Navigate to the S3 Dashboard and verify if the S3 Bucket created allows public read access and if bucket versioning is enabled.

By following these steps, you will be able to create and manage S3 buckets in AWS using Terraform. Take advantage of the flexibility and scalability offered by S3 to meet your storage needs effectively.

Stay tuned for Day 68 of the #90daysofdevops challenge, where we’ll explore Auto Scaling Groups using Terraform.

I hope you learned something from this blog. If you have, don’t forget to follow and click the clap 👏 button below to show your support 😄. Subscribe to my blogs so that you won’t miss any future posts.

If you have any questions or feedback, feel free to leave a comment below. Thanks for reading and have an amazing day ahead!

LinkedIn: https://www.linkedin.com/in/trushid-hatmode/

GitHub: https://github.com/Trushid

Happy Learning : )