{"id":1941,"date":"2022-11-09T10:06:41","date_gmt":"2022-11-09T10:06:41","guid":{"rendered":"https:\/\/www.easydeploy.io\/blog\/?p=1941"},"modified":"2023-03-03T11:44:03","modified_gmt":"2023-03-03T11:44:03","slug":"lambda-automation-for-ami-creation-with-terraform","status":"publish","type":"post","link":"https:\/\/www.easydeploy.io\/blog\/lambda-automation-for-ami-creation-with-terraform\/","title":{"rendered":"Lambda Automation for AMI Creation with Terraform"},"content":{"rendered":"

\u00a0Amazon Machine Image <\/em><\/strong>is known as <\/em>AMI<\/em><\/strong>\u00a0that makes it easier and faster to recover an instance in case of disaster or failure of an instance. So, here we are going to create custom AMIs<\/strong> from any instances that have some particular tags in an automation way using Lambda.<\/span><\/p>\n

Lambda<\/strong> is an event<\/strong>–driven<\/strong>, server less<\/b>\u00a0computing platform provided by AWS. It simplifies the process of building smaller, on-demand applications that are responsive to events and new information. It runs code in response to events and automatically manages instances or any other services based on the code.\u00a0<\/span><\/p>\n

Now we are going to create some of the resources that we need to automate this process using Terraform<\/strong>. So, Let\u2019s dive into this.<\/span><\/p>\n

Create an IAM Role and Policy<\/h2>\n

First we have to create an IAM Policy<\/strong> that has some permissions to access our instances.<\/span><\/p>\n

So create a file called provider.tf<\/strong> and add the following code in it.<\/span><\/p>\n

provider<\/span> \"aws\"<\/span> {<\/span>\r\n\u00a0\u00a0<\/span>region\u00a0 <\/span>=<\/span> \"us-east-1\"<\/span>\r\n}<\/span><\/pre>\n
Then create another file named as iam.tf<\/strong> file. This is the one that has the policy and role.<\/span><\/p>\n
Add the below code in iam.tf<\/strong> file.<\/span><\/p>\n
resource<\/span> \"aws_iam_policy\"<\/span> \"policy\"<\/span> {<\/span>\r\n\u00a0\u00a0<\/span>name\u00a0 \u00a0 \u00a0 \u00a0 <\/span>=<\/span> \"AMIAutomationLamdaPolicy\"<\/span>\r\n \u00a0<\/span>path\u00a0 \u00a0 \u00a0 \u00a0 <\/span>=<\/span> \"\/\"<\/span>\r\n \u00a0<\/span>description <\/span>=<\/span> \"My test policy\"<\/span>\r\n\r\n\u00a0\u00a0<\/span>policy <\/span>=<\/span> jsonencode<\/span>(<\/span>\r\n \u00a0\u00a0\u00a0{<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Version\"<\/span> : <\/span>\"2012-10-17\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Statement\"<\/span> : [<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Effect\"<\/span> : <\/span>\"Allow\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Action\"<\/span> : [<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"logs:CreateLogGroup\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"logs:CreateLogStream\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"logs:PutLogEvents\"<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0],<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Resource\"<\/span> : <\/span>\"arn:aws:logs:*:*:*\"<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Effect\"<\/span> : <\/span>\"Allow\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Action\"<\/span> : [<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"ec2:CreateImage\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"ec2:CreateTags\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"ec2:DeleteSnapshot\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"ec2:DeregisterImage\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"ec2:DescribeImages\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"ec2:DescribeInstances\"<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0],<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Resource\"<\/span> : <\/span>\"*\"<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0]<\/span>\r\n \u00a0\u00a0\u00a0}<\/span>\r\n \u00a0)<\/span>\r\n}<\/span>\r\nresource<\/span> \"aws_iam_role\"<\/span> \"role\"<\/span> {<\/span>\r\n \u00a0<\/span>name <\/span>=<\/span> \"AMIAutomationLamdaRole\"<\/span>\r\n \u00a0<\/span>assume_role_policy <\/span>=<\/span> jsonencode<\/span>(<\/span>\r\n \u00a0\u00a0\u00a0{<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Version\"<\/span> : <\/span>\"2012-10-17\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Statement\"<\/span> : [<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Effect\"<\/span> : <\/span>\"Allow\"<\/span>,<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Principal\"<\/span> : {<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Service\"<\/span> : <\/span>\"lambda.amazonaws.com\"<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\"Action\"<\/span> : <\/span>\"sts:AssumeRole\"<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}<\/span>\r\n \u00a0\u00a0\u00a0\u00a0\u00a0]<\/span>\r\n \u00a0})<\/span>\r\n \u00a0<\/span>managed_policy_arns <\/span>=<\/span> [<\/span>aws_iam_policy<\/span>.<\/span>policy<\/span>.<\/span>arn<\/span>]<\/span>\r\n}<\/span><\/pre>\n