AWS CI/CD Pipeline with Terraform

Prerequisites

• AWS CLI installed and configured
• Terraform installed
• An AWS account with necessary permissions, including:
  • iam:PassRole permission for the CodeBuild, CodeDeploy, and CodePipeline service roles
  • Permissions to create and manage resources in S3, CodeCommit, CodeBuild, CodeDeploy, CodePipeline, EC2, and CloudWatch

Setup Instructions

1. Clone this repository:

   git clone <repository-url>
   cd <repository-directory>
   

2. Initialize Terraform:

   terraform init
   

3. Review and modify the variables.tf file to set your desired values.

4. Plan the Terraform execution:

   terraform plan
   

5. Apply the Terraform configuration:

   terraform apply
   

6. After successful application, Terraform will output important information like the CodeCommit repository URL. Make note of these outputs.

7. Push your application code to the newly created CodeCommit repository.

8. The CI/CD pipeline will automatically trigger on new commits to the main branch.

Important Files

• buildspec.yml: This file should be in your source code repository and contain the build instructions for CodeBuild.
• appspec.yml: This file should be in your source code repository and contain the deployment instructions for CodeDeploy.

Cleaning Up

To avoid incurring future charges, remember to destroy the resources when you're done:

Additional Setup

3. (Optional) Set the ARNs for existing IAM roles: If you have existing IAM roles for CodeBuild, CodeDeploy, and CodePipeline, you can set them in the variables.tf file or pass them as variables when applying the Terraform configuration:

   terraform apply \
     -var="existing_codebuild_role_arn=arn:aws:iam::ACCOUNT_ID:role/existing-codebuild-role" \
     -var="existing_codedeploy_role_arn=arn:aws:iam::ACCOUNT_ID:role/existing-codedeploy-role" \
     -var="existing_codepipeline_role_arn=arn:aws:iam::ACCOUNT_ID:role/existing-codepipeline-role"
   

   Replace ACCOUNT_ID with your AWS account ID and ensure the role names are correct. If you don't provide these ARNs, new roles will be created automatically.

Setup Instructions

...

3. (Optional) Override existing IAM role ARNs: The configuration includes default ARNs for existing IAM roles. If you need to use different roles, you can override them by setting the following variables:

   terraform apply \
     -var="existing_codebuild_role_arn=arn:aws:iam::ACCOUNT_ID:role/your-codebuild-role" \
     -var="existing_codedeploy_role_arn=arn:aws:iam::ACCOUNT_ID:role/your-codedeploy-role" \
     -var="existing_codepipeline_role_arn=arn:aws:iam::ACCOUNT_ID:role/your-codepipeline-role"
   

   Replace ACCOUNT_ID with your AWS account ID and adjust the role names as needed.