Caso queira criar um usu\u00e1rio somente com as permiss\u00f5es necess\u00e1rias para este laborat\u00f3rio crie uma conta com as pol\u00edticas a seguir:<\/p>\n\n\n\n
{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": [\n \/\/ A\u00e7\u00f5es gen\u00e9ricas de descri\u00e7\u00e3o (somente leitura)\n \"ec2:Describe*\",\n\n \/\/ Gerenciamento completo de VPCs (cria\u00e7\u00e3o, exclus\u00e3o e tagging)\n \"ec2:CreateVpc\",\n \"ec2:DeleteVpc\",\n \"ec2:CreateTags\",\n\n \/\/ Gerenciamento de subnets (cria\u00e7\u00e3o e exclus\u00e3o)\n \"ec2:CreateSubnet\",\n \"ec2:DeleteSubnet\",\n\n \/\/ Gerenciamento completo de Security Groups (cria\u00e7\u00e3o, exclus\u00e3o e regras)\n \"ec2:CreateSecurityGroup\",\n \"ec2:DeleteSecurityGroup\",\n \"ec2:DescribeSecurityGroups\",\n \"ec2:AuthorizeSecurityGroupIngress\",\n \"ec2:AuthorizeSecurityGroupEgress\",\n \"ec2:RevokeSecurityGroupEgress\",\n\n \/\/ Gerenciamento de Internet Gateways (ciclo completo)\n \"ec2:CreateInternetGateway\",\n \"ec2:DeleteInternetGateway\",\n \"ec2:AttachInternetGateway\",\n \"ec2:DetachInternetGateway\",\n\n \/\/ Gerenciamento de Route Tables e rotas\n \"ec2:CreateRouteTable\",\n \"ec2:DeleteRouteTable\",\n \"ec2:CreateRoute\",\n \"ec2:AssociateRouteTable\",\n \"ec2:DisassociateRouteTable\",\n\n \/\/ Gerenciamento de Elastic IPs (aloca\u00e7\u00e3o e associa\u00e7\u00e3o)\n \"ec2:AllocateAddress\",\n \"ec2:AssociateAddress\",\n\n \/\/ Gerenciamento de inst\u00e2ncias EC2 (inicializa\u00e7\u00e3o e t\u00e9rmino)\n \"ec2:RunInstances\",\n \"ec2:TerminateInstances\"\n ],\n \"Resource\": \"*\"\n }\n ]\n}<\/code><\/pre>\n\n\n\nPasso 1: Configura\u00e7\u00e3o Inicial<\/h2>\n\n\n\n Crie um arquivo chamado main.tf<\/mark><\/code> e cole o c\u00f3digo fornecido abaixo. Vamos analisar cada se\u00e7\u00e3o, e todos os c\u00f3digos informados ficaram dentro desse arquivo.<\/p>\n\n\n\nPasso 2: Entendendo o C\u00f3digo<\/h2>\n\n\n\n1. Configura\u00e7\u00e3o do Provider AWS<\/h3>\n\n\n\nprovider \"aws\" {\n region = \"us-east-1\" # Escolha sua regi\u00e3o preferida\n}<\/code><\/pre>\n\n\n\n\nprovider \"aws\"<\/code>: <\/strong>Define que estamos usando o provedor AWS.<\/li>\n\n\n\nregion<\/code>:<\/strong> Especifica a regi\u00e3o AWS onde os recursos ser\u00e3o criados.<\/li>\n<\/ul>\n\n\n\n2. Cria\u00e7\u00e3o da VPC<\/h3>\n\n\n\nresource \"aws_vpc\" \"main\" {\naws_vpc<\/code>:<\/strong> Recurso que cria uma VPC.<\/li>\n\n\n\ncidr_block<\/code>: <\/strong>Define o bloco IP para a VPC (10.0.0.0\/16 permite 65.536 endere\u00e7os IP).<\/li>\n\n\n\ntags<\/strong><\/code>: Metadados para identificar o recurso.<\/li>\n<\/ul>\n\n\n\n3. Cria\u00e7\u00e3o da Subnet P\u00fablica<\/h3>\n\n\n\nresource \"aws_subnet\" \"public\" {\naws_subnet<\/code>:<\/strong> Cria uma subnet dentro da VPC.<\/li>\n\n\n\nvpc_id<\/code>: <\/strong>Referencia a VPC criada anteriormente.<\/li>\n\n\n\ncidr_block<\/code>: <\/strong>Define um bloco IP menor (\/24 = 256 endere\u00e7os) dentro da VPC.<\/li>\n\n\n\navailability_zone<\/code>:<\/strong> Define em qual zona de disponibilidade a subnet ser\u00e1 criada.<\/li>\n<\/ul>\n\n\n\n4. Cria\u00e7\u00e3o do Internet Gateway<\/h3>\n\n\n\nresource \"aws_internet_gateway\" \"gw\" {\naws_internet_gateway<\/code>: <\/strong>Cria um gateway para acesso \u00e0 internet.<\/li>\n\n\n\nvpc_id<\/code>:<\/strong> Associa o gateway \u00e0 VPC criada.<\/li>\n<\/ul>\n\n\n\n5. Cria\u00e7\u00e3o da Tabela de Rotas<\/h3>\n\n\n\nresource \"aws_route_table\" \"public\" {\naws_route_table<\/code>:<\/strong> Cria uma tabela de rotas.<\/li>\n\n\n\nroute<\/code>:<\/strong> Define uma rota padr\u00e3o (0.0.0.0\/0) para o Internet Gateway.<\/li>\n<\/ul>\n\n\n\n6. Associa\u00e7\u00e3o da Tabela de Rotas<\/h3>\n\n\n\nresource \"aws_route_table_association\" \"public\" {\n subnet_id = aws_subnet.public.id\n route_table_id = aws_route_table.public.id\n}\n<\/code><\/pre>\n\n\n\n\naws_route_table_association<\/code>:<\/strong> Associa a tabela de rotas \u00e0 subnet p\u00fablica.<\/li>\n<\/ul>\n\n\n\n7. Cria\u00e7\u00e3o do Grupo de Seguran\u00e7a<\/h3>\n\n\n\nresource \"aws_security_group\" \"web\" {\naws_security_group<\/code>:<\/strong> Cria um firewall virtual.<\/li>\n\n\n\ningress<\/code>:<\/strong> Regra de entrada permitindo tr\u00e1fego HTTP (porta 80).<\/li>\n\n\n\negress<\/code>:<\/strong> Regra de sa\u00edda permitindo todo tr\u00e1fego.<\/li>\n<\/ul>\n\n\n\n8. Cria\u00e7\u00e3o da Inst\u00e2ncia EC2<\/h3>\n\n\n\nresource \"aws_instance\" \"web_server\" {\n ami = \"ami-085386e29e44dacd7\" # Amazon Linux 2 (us-east-1)\n instance_type = \"t2.micro\"\n subnet_id = aws_subnet.public.id\n vpc_security_group_ids = [aws_security_group.web.id]\n associate_public_ip_address = true\n \n user_data = <<-EOF\n #!\/bin\/bash\n yum update -y\n yum install -y httpd\n systemctl start httpd\n systemctl enable httpd\n echo \"<html><body><h1>Hello World from Terraform!<\/h1><\/body><\/html>\" > \/var\/www\/html\/index.html\n EOF\n\n tags = {\n Name = \"Web-Server-Tutorial\"\n }\n}<\/code><\/pre>\n\n\n\n<\/pre>\n\n\n\n \naws_instance<\/code>: <\/strong>Cria uma inst\u00e2ncia EC2.<\/li>\n\n\n\nami<\/code>:<\/strong> ID da imagem da m\u00e1quina (Amazon Linux 2 na us-east-1).<\/li>\n\n\n\ninstance_type<\/code>: <\/strong>Tipo da inst\u00e2ncia (t2.micro \u00e9 eleg\u00edvel para o free tier).<\/li>\n\n\n\nsubnet_id<\/code>: <\/strong>Define em qual subnet a inst\u00e2ncia ser\u00e1 criada.<\/li>\n\n\n\nvpc_security_group_ids<\/code>:<\/strong> Associa o grupo de seguran\u00e7a criado.<\/li>\n\n\n\nassociate_public_ip_address<\/code>:<\/strong> Atribui um IP p\u00fablico automaticamente.<\/li>\n\n\n\nuser_data<\/code>: <\/strong>Script executado no primeiro boot para instalar e configurar o Apache.<\/li>\n<\/ul>\n\n\n\n9. Sa\u00edda do IP P\u00fablico<\/h3>\n\n\n\noutput \"public_ip\" {\n value = aws_instance.web_server.public_ip\n}\n<\/code><\/pre>\n\n\n\n\noutput<\/code>:<\/strong> Exibe o IP p\u00fablico da inst\u00e2ncia ap\u00f3s a implanta\u00e7\u00e3o.<\/li>\n<\/ul>\n\n\n\n10. Verifica\u00e7\u00e3o do configura\u00e7\u00e3o<\/strong><\/p>\n\n\n\nValidar configura\u00e7\u00e3o<\/strong>: terraform validate<\/mark>Passo 3: Inicializa\u00e7\u00e3o e Aplica\u00e7\u00e3o<\/h2>\n\n\n\n\nInicialize o Terraform<\/strong>: terraform init<\/mark>Verifique o plano de execu\u00e7\u00e3o<\/strong>: terraform plan<\/mark>Aplique a configura\u00e7\u00e3o<\/strong>: terraform apply<\/mark>yes<\/code> quando solicitado para confirmar.<\/li>\n<\/ol>\n\n\n\nPasso 4: Teste a Implanta\u00e7\u00e3o<\/h2>\n\n\n\n\nAp\u00f3s a conclus\u00e3o, o Terraform exibir\u00e1 o IP p\u00fablico da inst\u00e2ncia.<\/li>\n\n\n\n Abra um navegador e acesse http:\/\/<IP_PUBLICO><\/code>.<\/li>\n\n\n\nVoc\u00ea deve ver a mensagem “Hello World from Terraform!”.<\/li>\n<\/ol>\n\n\n\nPasso 5: Limpeza dos Recursos<\/h2>\n\n\n\n Para evitar custos desnecess\u00e1rios, destrua os recursos quando n\u00e3o precisar mais deles:<\/p>\n\n\n\n
terraform destroy<\/mark><\/pre>\n\n\n\nDigite yes<\/code> quando solicitado para confirmar.<\/p>\n\n\n\nAbaixo o nosso c\u00f3digo completo:<\/p>\n\n\n\n
provider \"aws\" {\n region = \"us-east-1\" # Escolha sua regi\u00e3o preferida\n}\n\n#Cria\u00e7\u00e3o de um VPC\nresource \"aws_vpc\" \"main\" {\n cidr_block = \"10.0.0.0\/16\"\n \n tags = {\n Name = \"Tutorial-VPC\"\n }\n}\n\n\n#Cria\u00e7\u00e3o de uma Subnet p\u00fablica\n#A subnet p\u00fablica \u00e9 uma sub-rede que pode se comunicar com a Internet\nresource \"aws_subnet\" \"public\" {\n vpc_id = aws_vpc.main.id\n cidr_block = \"10.0.1.0\/24\"\n availability_zone = \"us-east-1a\" # Altere conforme sua regi\u00e3o\n \n tags = {\n Name = \"Public-Subnet-Tutorial\"\n }\n}\n\n#Cria\u00e7\u00e3o de uma Internet Gateway\n#A Internet Gateway \u00e9 um ponto de acesso \u00e0 Internet para a VPC\nresource \"aws_internet_gateway\" \"gw\" {\n vpc_id = aws_vpc.main.id\n \n tags = {\n Name = \"Tutorial-IGW\" \n }\n}\n\n#Cria\u00e7\u00e3o de uma Route Table\n#A tabela de rotas \u00e9 usada para direcionar o tr\u00e1fego da subnet p\u00fablica para a Internet Gateway\nresource \"aws_route_table\" \"public\" {\n vpc_id = aws_vpc.main.id\n\n route {\n cidr_block = \"0.0.0.0\/0\"\n gateway_id = aws_internet_gateway.gw.id\n }\n \n tags = {\n Name = \"Public-Route-Table\"\n }\n}\n\n#Associa a tabela de rotas \u00e0 subnet p\u00fablica\nresource \"aws_route_table_association\" \"public\" {\n subnet_id = aws_subnet.public.id\n route_table_id = aws_route_table.public.id\n}\n\n\n#Cria\u00e7\u00e3o de um Security Group\n#O Security Group \u00e9 um firewall virtual que controla o tr\u00e1fego de entrada e sa\u00edda da inst\u00e2ncia EC2\nresource \"aws_security_group\" \"web\" {\n name = \"web-sg\"\n description = \"Allow HTTP traffic\"\n vpc_id = aws_vpc.main.id\n\n ingress {\n description = \"HTTP from anywhere\"\n from_port = 80\n to_port = 80\n protocol = \"tcp\"\n cidr_blocks = [\"0.0.0.0\/0\"]\n }\n\n egress {\n from_port = 0\n to_port = 0\n protocol = \"-1\"\n cidr_blocks = [\"0.0.0.0\/0\"]\n }\n \n tags = {\n Name = \"Web-Security-Group\"\n }\n}\n\n\n#Cria\u00e7\u00e3o de uma inst\u00e2ncia EC2\n#A inst\u00e2ncia EC2 \u00e9 uma m\u00e1quina virtual na nuvem da AWS\nresource \"aws_instance\" \"web_server\" {\n ami = \"ami-085386e29e44dacd7\" # Amazon Linux 2 (us-east-1)\n instance_type = \"t2.micro\"\n subnet_id = aws_subnet.public.id\n vpc_security_group_ids = [aws_security_group.web.id]\n associate_public_ip_address = true\n \n user_data = <<-EOF\n #!\/bin\/bash\n yum update -y\n yum install -y httpd\n systemctl start httpd\n systemctl enable httpd\n echo \"<html><body><h1>Hello World from Terraform!<\/h1><\/body><\/html>\" > \/var\/www\/html\/index.html\n EOF\n\n tags = {\n Name = \"Web-Server-Tutorial\"\n }\n}\n\n#Sa\u00edda do IP p\u00fablico da inst\u00e2ncia EC2\noutput \"public_ip\" {\n value = aws_instance.web_server.public_ip\n}<\/code><\/pre>\n\n\n\nConclus\u00e3o<\/h2>\n\n\n\n Neste tutorial, voc\u00ea aprendeu a:<\/p>\n\n\n\n
\nCriar uma VPC e subnets<\/li>\n\n\n\n Configurar um Internet Gateway e tabelas de rotas<\/li>\n\n\n\n Definir grupos de seguran\u00e7a<\/li>\n\n\n\n Implantar uma inst\u00e2ncia EC2 com configura\u00e7\u00e3o autom\u00e1tica<\/li>\n\n\n\n Gerenciar o ciclo de vida da infraestrutura com Terraform<\/li>\n<\/ul>\n\n\n\nEste \u00e9 um exemplo b\u00e1sico que pode ser expandido com mais recursos.
Vale tamb\u00e9m lembrar que o nosso c\u00f3digo esta todo dentro do arquivo main.tf, o ideal seria usar modulos, mas isso ser\u00e1 um assunto para outro tutorial.<\/p>\n","protected":false},"excerpt":{"rendered":"
“Hello World” Terraform + AWS O nosso Hello world com Terraforma + AWS vai ser uma infraestrutura b\u00e1sica<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[230,216],"tags":[209,232,280,279],"class_list":["post-599","post","type-post","status-publish","format-standard","hentry","category-aws","category-cloud","tag-aws","tag-cloud","tag-iac","tag-terraform"],"_links":{"self":[{"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/posts\/599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/comments?post=599"}],"version-history":[{"count":3,"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/posts\/599\/revisions"}],"predecessor-version":[{"id":606,"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/posts\/599\/revisions\/606"}],"wp:attachment":[{"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/media?parent=599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/categories?post=599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/difusao.tech\/blog\/wp-json\/wp\/v2\/tags?post=599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"https:\/\/difusao.tech\/blog\/wp-content\/uploads\/2025\/05\/image.png\")
<\/figure>\n<\/div>\n\n\n![\"\"](\"https:\/\/difusao.tech\/blog\/wp-content\/uploads\/2025\/05\/image-1.png\")
<\/figure>\n\n\n\n