Configure it for Static Website Hosting

Oct 13, 2025 by wbrum.org 54 views

Terraform is an infrastructure as code (IaC) tool that allows you to manage and provision your infrastructure using a human-readable configuration file. In this article, we will learn how to use Terraform to create a static website on S3 storage and set up a basic VPC.

Static Website on S3 Storage - Build and Configure using Terraform

Create a Bucket

To create a bucket using Terraform, you need to create a new file called main.tf and add the following code:

# main.tf

# Create a new S3 bucket
resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
  acl    = "public-read"

  # Enable static website hosting
  website {
    index_document = "index.html"
  }
}

This code creates a new S3 bucket with the name example-bucket and sets the ACL to public-read. It also enables static website hosting and sets the index document to index.html.

Configure it for Static Website Hosting

To configure the bucket for static website hosting, you need to add the following code to the main.tf file:

# main.tf

# Create a new S3 bucket
resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
  acl    = "public-read"

  # Enable static website hosting
  website {
    index_document = "index.html"
  }
}

# Create a new S3 bucket policy
resource "aws_s3_bucket_policy" "example" {
  bucket = aws_s3_bucket.example.id

  # Policy to allow public access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "PublicReadGetObject"
        Effect    = "Allow"
        Principal = "*"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

This code creates a new S3 bucket policy that allows public access to the bucket.

Set up Proper Access Policies

To set up proper access policies, you need to add the following code to the main.tf file:

# main.tf

# Create a new S3 bucket
resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
  acl    = "public-read"

  # Enable static website hosting
  website {
    index_document = "index.html"
  }
}

# Create a new S3 bucket policy
resource "aws_s3_bucket_policy" "example" {
  bucket = aws_s3_bucket.example.id

  # Policy to allow public access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "PublicReadGetObject"
        Effect    = "Allow"
        Principal = "*"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

# Create a new IAM user
resource "aws_iam_user" "example" {
  name = "example-user"
}

# Create a new IAM user policy
resource "aws_iam_user_policy" "example" {
  name = "example-policy"
  user = aws_iam_user.example.id

  # Policy to allow access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "AllowAccessToBucket"
        Effect    = "Allow"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

This code creates a new IAM user and a new IAM user policy that allows access to the bucket.

Deploy Sample HTML Files

To deploy sample HTML files, you need to add the following code to the main.tf file:

# main.tf

# Create a new S3 bucket
resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
  acl    = "public-read"

  # Enable static website hosting
  website {
    index_document = "index.html"
  }
}

# Create a new S3 bucket policy
resource "aws_s3_bucket_policy" "example" {
  bucket = aws_s3_bucket.example.id

  # Policy to allow public access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "PublicReadGetObject"
        Effect    = "Allow"
        Principal = "*"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

# Create a new IAM user
resource "aws_iam_user" "example" {
  name = "example-user"
}

# Create a new IAM user policy
resource "aws_iam_user_policy" "example" {
  name = "example-policy"
  user = aws_iam_user.example.id

  # Policy to allow access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "AllowAccessToBucket"
        Effect    = "Allow"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

# Upload sample HTML files to the bucket
resource "aws_s3_bucket_object" "example" {
  bucket = aws_s3_bucket.example.id
  key    = "index.html"
  source = "index.html"
  etag   = filemd5("index.html")
}

resource "aws_s3_bucket_object" "example2" {
  bucket = aws_s3_bucket.example.id
  key    = "style.css"
  source = "style.css"
  etag   = filemd5("style.css")
}

This code uploads sample HTML files to the bucket.

Basic VPC Setup

Create a Network with Public and Private Subnets

To create a network with public and private subnets, you need to add the following code to the main.tf file:

# main.tf

# Create a new VPC
resource "aws_vpc" "example" {
  cidr_block = "10.0.0.0/16"
}

# Create a new subnet for the public subnet
resource "aws_subnet" "public" {
  cidr_block = "10.0.1.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2a"
}

# Create a new subnet for the private subnet
resource "aws_subnet" "private" {
  cidr_block = "10.0.2.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2b"
}

This code creates a new VPC and two subnets, one for the public subnet and one for the private subnet.

Set up Routing Tables

To set up routing tables, you need to add the following code to the main.tf file:

# main.tf

# Create a new VPC
resource "aws_vpc" "example" {
  cidr_block = "10.0.0.0/16"
}

# Create a new subnet for the public subnet
resource "aws_subnet" "public" {
  cidr_block = "10.0.1.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2a"
}

# Create a new subnet for the private subnet
resource "aws_subnet" "private" {
  cidr_block = "10.0.2.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2b"
}

# Create a new route table for the public subnet
resource "aws_route_table" "public" {
  vpc_id = aws_vpc.example.id

  # Add a route to the public subnet
  route {
    cidr_block = "0.0.0.0/0"
    gateway_id = aws_internet_gateway.example.id
  }
}

# Create a new route table for the private subnet
resource "aws_route_table" "private" {
  vpc_id = aws_vpc.example.id

  # Add a route to the private subnet
  route {
    cidr_block = "0.0.0.0/0"
    gateway_id = aws_nat_gateway.example.id
  }
}

This code creates two route tables, one for the public subnet and one for the private subnet.

Configure Internet and NAT Gateways

To configure internet and NAT gateways, you need to add the following code to the main.tf file:

# main.tf

# Create a new VPC
resource "aws_vpc" "example" {
  cidr_block = "10.0.0.0/16"
}

# Create a new subnet for the public subnet
resource "aws_subnet" "public" {
  cidr_block = "10.0.1.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2a"
}

# Create a new subnet for the private subnet
resource "aws_subnet" "private" {
  cidr_block = "10.0<br/>
# Learn Terraform - Hands-on

Terraform is an infrastructure as code (IaC) tool that allows you to manage and provision your infrastructure using a human-readable configuration file. In this article, we will learn how to use Terraform to create a static website on S3 storage and set up a basic VPC.

## Static Website on S3 Storage - Build and Configure using Terraform

### Create a Bucket

To create a bucket using Terraform, you need to create a new file called `main.tf` and add the following code:

```hcl
# main.tf

# Create a new S3 bucket
resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
  acl    = "public-read"

  # Enable static website hosting
  website {
    index_document = "index.html"
  }
}

This code creates a new S3 bucket with the name example-bucket and sets the ACL to public-read. It also enables static website hosting and sets the index document to index.html.

Configure it for Static Website Hosting

To configure the bucket for static website hosting, you need to add the following code to the main.tf file:

# main.tf

# Create a new S3 bucket
resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
  acl    = "public-read"

  # Enable static website hosting
  website {
    index_document = "index.html"
  }
}

# Create a new S3 bucket policy
resource "aws_s3_bucket_policy" "example" {
  bucket = aws_s3_bucket.example.id

  # Policy to allow public access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "PublicReadGetObject"
        Effect    = "Allow"
        Principal = "*"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

This code creates a new S3 bucket policy that allows public access to the bucket.

Set up Proper Access Policies

To set up proper access policies, you need to add the following code to the main.tf file:

# main.tf

# Create a new S3 bucket
resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
  acl    = "public-read"

  # Enable static website hosting
  website {
    index_document = "index.html"
  }
}

# Create a new S3 bucket policy
resource "aws_s3_bucket_policy" "example" {
  bucket = aws_s3_bucket.example.id

  # Policy to allow public access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "PublicReadGetObject"
        Effect    = "Allow"
        Principal = "*"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

# Create a new IAM user
resource "aws_iam_user" "example" {
  name = "example-user"
}

# Create a new IAM user policy
resource "aws_iam_user_policy" "example" {
  name = "example-policy"
  user = aws_iam_user.example.id

  # Policy to allow access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "AllowAccessToBucket"
        Effect    = "Allow"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

This code creates a new IAM user and a new IAM user policy that allows access to the bucket.

Deploy Sample HTML Files

To deploy sample HTML files, you need to add the following code to the main.tf file:

# main.tf

# Create a new S3 bucket
resource "aws_s3_bucket" "example" {
  bucket = "example-bucket"
  acl    = "public-read"

  # Enable static website hosting
  website {
    index_document = "index.html"
  }
}

# Create a new S3 bucket policy
resource "aws_s3_bucket_policy" "example" {
  bucket = aws_s3_bucket.example.id

  # Policy to allow public access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "PublicReadGetObject"
        Effect    = "Allow"
        Principal = "*"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

# Create a new IAM user
resource "aws_iam_user" "example" {
  name = "example-user"
}

# Create a new IAM user policy
resource "aws_iam_user_policy" "example" {
  name = "example-policy"
  user = aws_iam_user.example.id

  # Policy to allow access to the bucket
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid       = "AllowAccessToBucket"
        Effect    = "Allow"
        Action    = "s3:GetObject"
        Resource = "${aws_s3_bucket.example.arn}/*"
      }
    ]
  })
}

# Upload sample HTML files to the bucket
resource "aws_s3_bucket_object" "example" {
  bucket = aws_s3_bucket.example.id
  key    = "index.html"
  source = "index.html"
  etag   = filemd5("index.html")
}

resource "aws_s3_bucket_object" "example2" {
  bucket = aws_s3_bucket.example.id
  key    = "style.css"
  source = "style.css"
  etag   = filemd5("style.css")
}

This code uploads sample HTML files to the bucket.

Basic VPC Setup

Create a Network with Public and Private Subnets

To create a network with public and private subnets, you need to add the following code to the main.tf file:

# main.tf

# Create a new VPC
resource "aws_vpc" "example" {
  cidr_block = "10.0.0.0/16"
}

# Create a new subnet for the public subnet
resource "aws_subnet" "public" {
  cidr_block = "10.0.1.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2a"
}

# Create a new subnet for the private subnet
resource "aws_subnet" "private" {
  cidr_block = "10.0.2.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2b"
}

This code creates a new VPC and two subnets, one for the public subnet and one for the private subnet.

Set up Routing Tables

To set up routing tables, you need to add the following code to the main.tf file:

# main.tf

# Create a new VPC
resource "aws_vpc" "example" {
  cidr_block = "10.0.0.0/16"
}

# Create a new subnet for the public subnet
resource "aws_subnet" "public" {
  cidr_block = "10.0.1.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2a"
}

# Create a new subnet for the private subnet
resource "aws_subnet" "private" {
  cidr_block = "10.0.2.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2b"
}

# Create a new route table for the public subnet
resource "aws_route_table" "public" {
  vpc_id = aws_vpc.example.id

  # Add a route to the public subnet
  route {
    cidr_block = "0.0.0.0/0"
    gateway_id = aws_internet_gateway.example.id
  }
}

# Create a new route table for the private subnet
resource "aws_route_table" "private" {
  vpc_id = aws_vpc.example.id

  # Add a route to the private subnet
  route {
    cidr_block = "0.0.0.0/0"
    gateway_id = aws_nat_gateway.example.id
  }
}

This code creates two route tables, one for the public subnet and one for the private subnet.

Configure Internet and NAT Gateways

To configure internet and NAT gateways, you need to add the following code to the main.tf file:

# main.tf

# Create a new VPC
resource "aws_vpc" "example" {
  cidr_block = "10.0.0.0/16"
}

# Create a new subnet for the public subnet
resource "aws_subnet" "public" {
  cidr_block = "10.0.1.0/24"
  vpc_id     = aws_vpc.example.id
  availability_zone = "us-west-2a"
}

# Create a new subnet for the private subnet
resource "aws_subnet" "private" {
  cidr_block = "10.0