This GitHub repository contains multiple use cases of working with Terraform to provision Amazon EC2 instances. Specific Git branches separate these use cases. To read more about that, click here.
I came across a use cases where I wanted to connect to an Amazon EC2 instance without enabling access to the internet or opening up ingress ports (SSH or Remote Desktop) in the Amazon EC2 security group. I learned about the capability of attaching the AWS managed policy arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore to the Amazon EC2 instance to manage access from the AWS Console.
I have supporting documentation on my note at: create an Amazon EC2 instance using Terraform with Session Manager access using VPC Endpoint.
I installed terraform before I worked on this repository. Installation information is available in the install guide.
I used the access_key and the secret_key of an IAM user that had permission to create all the resources managed via this terraform code.
I created a terraform.tfvars file to store them.
Ensure that the IAM user whose credentials are being used in this configuration has permission to create and manage all the resources that are included in this repository.
Review the code, especially the iamrole.tf and ec2.tf file to understand all the concepts associated with creating an IAM role, attaching the role to the AWS managed policy, creating an IAM instance profile with the IAM role and finally attaching the IAM instance profile to the Amazon EC2 instance.
Next, run terraform init
Then run terraform plan
And finally run terraform apply
There are other branches in this repository discussing other use-cases:
This code is released under the Unlincse License. See LICENSE.