Infrastructure as Code: Deploying AWS Cost Optimization Engines with Terraform

Описание и применение

Автоматизация развертывания сервера очистки неактивных EBS‑томов в AWS с помощью Terraform обеспечивает воспроизводимость, контроль версий и масштабируемость, заменяя ручные настройки IAM и EventBridge.

Задача

Manually deploying a Python script to clean idle EBS volumes, configuring IAM roles, and setting up EventBridge schedules via the AWS Management Console does not scale for production.

Результат

Deploying the cost optimization engine via Terraform provides reproducible, versioned, and automated infrastructure, eliminating manual console steps and enabling environment isolation.

Рабочий процесс

• Define deployment variables in variables.tf to support multiple environments.
• Create strict IAM role and least‑privilege policies in iam.tf for Lambda execution.
• Package the Python script into a ZIP archive using data "archive_file" in main.tf.
• Deploy the Lambda function with aws_lambda_function, passing environment variables for retention days.
• Create an EventBridge rule (aws_cloudwatch_event_rule) to trigger weekly at 6:00 PM UTC.
• Link the EventBridge rule to the Lambda function with aws_cloudwatch_event_target.
• Grant EventBridge permission to invoke the Lambda via aws_lambda_permission.
• Store Terraform state remotely in an encrypted S3 bucket with DynamoDB locking.
• Use Terraform workspaces or separate environment folders to isolate dev and prod deployments.

Доказательства

Manually deploying that script, configuring IAM roles, and setting up EventBridge schedules via the AWS Management Console doesn't scale for production.

Источник

Everything must be managed as Infrastructure as Code (IaC).

Источник

With over 12 years in IT and 6+ years managing scalable AWS infrastructure, I always recommend automating cloud governance architectures from day one.

Источник

Store it safely inside an encrypted Amazon S3 bucket configured with state locking via an Amazon DynamoDB table to prevent concurrent updates.

Источник