To create a site-to-site VPN utilizing Terraform, you should use the aws_vpn_gateway
and aws_vpn_connection
assets from the AWS supplier. Right here’s an instance Terraform configuration to create a site-to-site VPN:
useful resource "aws_vpn_gateway" "vpn_gateway" {
vpc_id = "<VPC_ID>"
tags = {
Title = "SiteToSiteVPN"
}
}
useful resource "aws_vpn_connection" "vpn_connection" {
customer_gateway_id = "<CUSTOMER_GATEWAY_ID>"
vpn_gateway_id = aws_vpn_gateway.vpn_gateway.id
sort = "ipsec.1"
static_routes_only = true
tags = {
Title = "SiteToSiteVPNConnection"
}
}
useful resource "aws_vpn_connection_route" "vpn_connection_route" {
destination_cidr_block = "<DESTINATION_CIDR_BLOCK>"
vpn_connection_id = aws_vpn_connection.vpn_connection.id
}
Within the above Terraform configuration, you have to substitute <VPC_ID>
with the ID of the VPC the place the VPN gateway will probably be connected, <CUSTOMER_GATEWAY_ID>
with the ID of the shopper gateway representing the distant website, and <DESTINATION_CIDR_BLOCK>
with the CIDR block of the distant community you wish to connect with.
This configuration creates a VPN gateway (aws_vpn_gateway
), a VPN connection (aws_vpn_connection
), and a VPN connection route (aws_vpn_connection_route
). The VPN gateway is connected to the desired VPC, and the VPN connection is related to the shopper gateway and the VPN gateway. The VPN connection route specifies the vacation spot CIDR block that ought to be routed by the VPN connection.
After getting the Terraform configuration prepared, you’ll be able to initialize the Terraform challenge, plan the infrastructure adjustments, and apply them utilizing the Terraform CLI. The VPN assets will probably be provisioned primarily based on the configuration supplied.