Terraform Made Easy : Provisioning, Managing and Automating Cloud Infrastructure with Terraform on Google Cloud

Table of Contents
About the Author
About the Technical Reviewers
Acknowledgments
Preface
Chapter 1: Introduction to IaC and Terraform
	The Traditional Approach of Managing Infrastructure Resources
		The Growing Complexity of Managing Infrastructure
		The Need for Change: Adopt Infrastructure as Code
	Infrastructure as Code
		Benefits of Infrastructure as Code
	A Closer Look at Terraform
		Key Features of Terraform
		Benefits of Terraform
	Summary
Chapter 2: Getting Started with Terraform
	Terraform Installation
		macOS
		Windows
		Linux
			Option 1: Installing with Homebrew
			Option 2: Installing on Ubuntu/Debian
			Option 3: Installing on CentOS/RHEL
			Option 4: Installing on Amazon Linux
		Docker
	Configuration Language
		Syntax and Structure of HCL
			Blocks
			Arguments and Expressions
			Variables
			Outputs
			Modules
	Terraform Workflow
		Initialize Terraform
		Write Configuration Files
		Plan the Changes
		Apply the Changes
		Manage or Destroy Resources
	Summary
Chapter 3: Key Concepts of Terraform
	Providers for Everybody
		Versatility and Widespread Adoption
		Terraform Registry
		Types of Providers
			Independent Releases and Maintenance
			Installing and Managing Provider Versions
			Optimizing Provider Management
		Examples of Providers
			Understanding Provider Requirements
			AWS Provider Example
			Azure Provider Example
			GitHub Provider Example
			Kubernetes Provider Example
			MongoDB Atlas Provider Example
	Variables and Outputs
		Input Variables
			Defining Input Variables
			Understanding Variable Arguments
		Environment Variables
			Setting Environment Variables
			Using Environment Variables
		Undeclared Variables
		Output Variables
			Declaring Output Values
			Accessing Outputs from Child Modules
			Optional Arguments for Output Blocks
		Local Values
			Declaring Local Values
			Using Local Values
		Leveraging the .tfvars Files
			What Are .tfvars Files?
			How to Use .tfvars Files?
			Managing Multiple Environments
	Understand Modules
		What Is a Module?
			Root Module
			Child Module
			Local Module
			Published Module
		Module Block
		Building a Module
		Nested Modules
			Example of Nested Modules
			Organizing Nested Modules
	Dependencies
		Implicit Dependencies
			Inspect the Dependency
		Explicit Dependencies
		Module Dependencies
	Infrastructure Management
		Understanding State
		Local State and Remote State
			Local State
			Remote State
		Understanding Back Ends
			Local Back End
			Remote Backend
		Managing Workspaces
		Understanding State Locking
			What Is State Locking?
			How State Locking Works
			Manual Unlocking
	Summary
Chapter 4: Provisioning Infrastructure on GCP
	Provisioning Cloud Storage
		Create a Storage Bucket
	Confirming Resource Creation
		Create Multiple Storage Buckets
		Google Cloud Storage for State Management
		Create a Cloud Storage Bucket for Remote State
		Configure the Terraform Back End
		Migrate the Back End from Local to Remote
			Step 1: Update Terraform Configuration
			Step 2: Initialize the New Back End
			Step 3: Verify the Migration
			Step 4: Manually Migrate the Existing State
	Provision Compute Engines
		Create a Compute Engine
		Create Multiple Compute Engines with Tags
		Create Multiple Compute Engines in Different Regions
	Provisioning VPC Networks
		Default Network and Custom VPC Network
			Default Network
			Custom VPC Network
		Provision Multiple VPC Networks in Different Regions with Firewall Rules
		Create VPC Networks with Private IPs
	Provisioning Cloud SQL Databases
		Provision a MySQL CloudSQL Instance
		Pitfalls and Improvement Tips
			Pitfalls in the Code
			Improvement Tips
			Improved Code
		Provision a PostgreSQL CloudSQL Instance with Advanced Configurations
			Create Resources
			Backups and Recoveries
			Securing Database Access
			Monitoring and Alerting
	Provisioning Service Accounts and Keys
		Understanding Service Accounts and Keys
		Provision Service Accounts and Keys
		Constructing an Event-Driven Data Pipeline
	Provisioning GKE Clusters with Advanced Configurations
		Creating a GKE Cluster
		Autoscaling
		HTTP Load Balancing
		Setting Network Policy
		Service and Ingress Resource
		Ingress Control
		RBAC and Role Binding
	Summary
Chapter 5: Managing Secrets, Enhancing Security, and Ensuring Resilience
	Managing Secrets
		Inappropriate Ways to Store Sensitive Data in Terraform
		Challenges with Managing Secrets in Terraform
		Secret Management Services
			Example: Creating and Accessing Secrets
		Encryption
			Encryption at Rest
			Example: Using CMEK with Google Secret Manager
			Encryption in Transit
			Example: Enabling Encryption for Google Cloud Storage
		Lifecycle of Secret Versions
			TTL (Time To Live)
			Timeouts
			Expire Time
	Managing Sensitive Data with Variables
	Enforce Identity and Access Management
		IAM Policy
		Role-Based Access Control (RBAC)
		Example: Granting Access to BigQuery Datasets
		Grant Access
		Example: Granular Access Control
		Binding Service Accounts with Members
	Secure Remote State Management
		Use Remote Backends for State Storage
		Enable Encryption
		Implement Access Controls and Policies
		Enable State Locking
		Implement Versioning and Regular Backups
		Audit and Monitor Access
	Disaster Recovery and Regular Backups
		Understanding Disaster Recovery, Backups, and GCP Services
			Disaster Recovery
			Regular Backups
			GCP Services for DR and Backups
		Implementing Backups with Terraform
			Example: Creating a Snapshot
			Example: Creating a Backup Bucket with Lifecycle Rules
		Implementing Disaster Recovery with Terraform
			Example: Setting Up DNS Failover
	Auditing and Monitoring
		Auditing
			Example: Enabling Cloud Audit Logs
		Monitoring
			Example: Setting Up Monitoring Alerts
			Integrating Auditing and Monitoring
	Summary
Chapter 6: Testing and Automation
	Testing
		Initial Testing and Validation
	Testing Tools and Frameworks
		TFLint
			TFLint’s Capabilities
				Syntax Error Detection
				Unused Variables
				Enforcing Best Practices
				Pre-commit Hook Integration
		Checkov
			Checkov’s Capabilities
				Extensive Policy Library
				Custom Policy Creation
				Detailed Reporting and Remediation Guidance
				Integration with CI/CD Pipelines
			Example: Testing for AWS Terraform Configuration
			Example: Customizing Checkov Policies
			Example: Integrating Checkov with Jenkins
		Terratest
			Example: Modules Testing
			Example: End-to-End Infrastructure Testing
			Example: CI/CD Pipeline Integration
				Steps to Integrate Terratest with GitHub Actions
		Python Scripts
			Example: Using pytest for an AWS EC2 Instance
			Example: Using Python to Validate Terraform Outputs for VPC Subnetwork
			Example: Integrating Python Tests into CI/CD Pipelines
	Automation
		Integrating Terraform with CI/CD Pipelines
		Popular CI/CD Tools for Terraform Integration
		Examples with Popular CI/CD Tools
			Terraform with GitHub Actions
				Trigger
				Fetch Code
				Set up Terraform
				Terraform Workflow Steps
			Terraform with GitLab CI
			Terraform with Jenkins
	Summary
Further Resources
Index