Learn to create an aws vpc with Terraform by defining a resource block, setting cidr block, tenancy, and tags, apply to provision and observe attributes like id and cidr block.

Learn how to use Terraform outputs and interpolations to retrieve and print a VPC CIDR block after apply, by referencing resource type, logical name, and attribute.

Terraform stores resources in a local json state file in your project workspace. Applying changes compares scripts to this state, updating tags and destroying or recreating resources as needed.

Lock state files by configuring a DynamoDB table for state locking with the S3 backend, using the table Javahome-tf that has a primary key named lock id.

Examine how remote state locking on the S3 backend works by running init and apply, then observe DynamoDB entries showing who locks the state file.

Create and manage dev and prod environments with Terraform workspaces, using the same configuration files and dynamic values via Terraform current workspace, with separate state files stored in S3.

Use Terraform local variables to centralize repeated expressions and simplify updates. Define a locals block to compute values like the VPC name from the workspace, improving readability and maintainability.

Create public subnets across multiple availability zones for high availability, configuring an internet gateway and route tables, while using data sources to obtain dynamic availability zones in Terraform.

Create a public subnet by provisioning an internet gateway with Terraform, rename and tag resources, then create a route table and associate it with the public subnet and gateway.

Associate public subnets with a route table in Terraform by looping over public subnet IDs using count.index and local pub sub IDs, linking to the internet gateway.

Create two private subnets in AWS with Terraform, using the slice function to pick two CIDR blocks for two availability zones. No route table change keeps them private by default.

Enable assigning public ips for public subnets in Terraform by configuring subnet settings and setting public ip on launch to true; boolean values may be declared with or without quotes.

Configure NAT instances in Terraform to provide internet access for private subnets, disable source/destination checks, select a public subnet with a public ip, and attach a private route table.

Configure a NAT instance security group to allow outbound traffic from private subnets and link the group to the NAT instance in a Terraform AWS setup.

Launch EC2 instances in a public subnet using Terraform, configure user data to install Apache and deploy a sample website, and manage tags, AMI maps, and multi-region counts.

learn how to provision an EC2 instance in a public subnet and configure a web server with a user data script, Apache install, and index.html, using Terraform data interpolation.

Attach an IAM role to EC2 and use a Terraform template to dynamically grant S3 access, by creating an assume role policy, a bucket-scoped policy, and an instance profile.

Create and attach security groups for EC2 in the public subnet, enabling ingress on ports 80 and 22 TCP with 0.0.0.0/0, and update EC2 instances with security group IDs.

Learn to provision an EC2 key pair in Terraform by generating a public-private SSH key, storing it in scripts/web.pub, and referencing the key for secure web instance login.

Configure a Terraform autoscaling group with a launch configuration, health checks, and load balancer integration, using CPU-based scaling policies.

Configure a public Route 53 hosted zone with Terraform by creating an A alias record that maps a domain to an elastic load balancer.

Configure a relational database backend by creating an RDS instance with the MySQL engine using Terraform for AWS. Learn to replace hardcoded values with variables and manage passwords at runtime.

Configure an RDS security group to allow TCP ingress for MySQL on port 3306, with CIDR blocks from the web layer or corporate data centers, and consider keeping egress open.

Attach EC2 instances to a target group in Terraform by repeating the target attachment resource for each instance, using count and count.index to handle multiple web servers.

Create an AWS application load balancer in Terraform by configuring security groups and subnets, and set a listener on port 80 to forward traffic to the target group and instances.

Create an application load balancer listener on port 80 with http, then forward requests to the web target group, verify in AWS console, and expand with more targets and rules.

Configure application load balancer access logs by creating an s3 bucket and a policy that authorizes the alb to deliver logs, with dynamic naming and region options.

learn to configure an s3 bucket policy for ALB logs with mandatory statements, and render a dynamic policy at runtime using terraform templates to substitute the bucket name.

enable alb access logs by configuring the s3 bucket and policy, fix a bucket name collision by updating the bucket name or prefix, and re-apply terraform to deploy logs.

Deploy lambda functions with Terraform by creating an IAM role and policy, packaging code into a zip with a data archive, and deploying the function with a Python handler.

Learn to build reusable Terraform modules and a structured project layout, exposing outputs to share VPCs, subnets, and EC2 configurations across dev and prod environments.