Terraform Notes

service control policies controlling action over IAM

aws acm import-certificate --certificate fileb://train-dev.cisalearning.org.crt --private-key fileb://train-dev.cisalearning.org.key --certificate-chain fileb://ca.crt
{
    "CertificateArn": "arn:aws-us-gov:acm:us-gov-east-1:011334028644:certificate/943fa91f-1f92-493b-a4bd-82f28a29b5d3"
}

    // The issue why we are ignoring changes is that on every change
    // terraform screws up most of the vpn associations
    // see: https://github.com/hashicorp/terraform-provider-aws/issues/14717

aws ec2 describe-availability-zones --region us-gov-east-1

• https://github.com/terraform-aws-modules/terraform-aws-vpn-gateway
• https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/client-authentication.html#mutual
• https://docs.aws.amazon.com/vpn/index.html
• https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-getting-started.html
• https://www.terraform.io/docs/cli/commands/import.html
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/organizations_organizational_units
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/organizations_organizational_unit
• https://www.azavea.com/blog/2018/07/16/provisioning-acm-certificates-on-aws-with-terraform/
• https://github.com/spucman/terraform-aws-client-vpn
• https://timeular.com/blog/creating-an-aws-client-vpn-with-terraform/
• https://docs.aws.amazon.com/acm/latest/userguide/import-certificate-api-cli.html
• https://www.bogotobogo.com/DevOps/Terraform/Terraform-VPC-Subnet-ELB-RouteTable-SecurityGroup-Apache-Server-1.php
• https://www.middlewareinventory.com/blog/terraform-aws-example-ec2/
• https://dev.betterdoc.org/infrastructure/2020/02/04/setting-up-a-nat-gateway-on-aws-using-terraform.html
• https://github.com/alphagov/govuk-aws/tree/master/terraform/modules/aws
• https://letslearndevops.com/2017/07/24/how-to-create-a-vpc-with-terraform/
• https://medium.com/tensult/vpc-peering-using-terraform-105d554ed04d
• https://github.com/nicksantamaria/example-terraform-aws-vpc-peering
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_peering_connection_options
• https://docs.aws.amazon.com/vpc/latest/peering/peering-scenarios.html
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc_peering_connection_accepter
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/vpcs
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity
• https://aws.amazon.com/blogs/networking-and-content-delivery/vpc-sharing-a-new-approach-to-multiple-accounts-and-vpc-management/
• https://www.nicksantamaria.net/post/how-to-peer-vpcs-with-terraform/
• https://hceris.com/provisioning-a-network-load-balancer-with-terraform/
• https://codeburst.io/provisioning-an-application-load-balancer-with-terraform-166ba6ccf2b8