feat: upload static website on s3 bucket

Author: hilalahmad0101

.gitignore

@@ -0,0 +1,6 @@
+.terraform
+.terraform.lock.hcl
+terraform-dev.tfvars
+.terraform
+.terraform.tfstate.lock.info
+terraform.tfstate.backup

README.md

@@ -0,0 +1,46 @@
+# deploy-static-website-on-aws-s3-with-terraform
+
+Basic of terraform to deploy the static html pages on aws to s3 bucket.
+s3 bucket is use for storing the file of a static webiste as well as other file and folder.
+
+## Demo
+
+```bash
+[Demo]('https://random-bucket-name-with-terraform.s3.us-east-1.amazonaws.com/index.html')
+```
+
+## Prerequisites  
+* [Aws](https://aws.amazon.com/) - AWS Account.
+* [Terraform](https://terraform.io/) - Basic knowledge of Terraform. 
+
+## Instalation
+First Clone the rep
+```bash
+git clone https://github.com/hilalahmad0101/deploy-static-website-on-aws-s3-with-terraform.git
+```
+
+## Create tfvar file
+
+_terraform-dev.tfvar_
+
+```bash
+bucket_name = ""
+secret_key  = ""
+access_key  = ""
+region      = ""
+```
+
+## Terraform Command
+
+Run the basic command of terraform to serve your app on aws website.
+
+```bash
+# init command
+terraform init
+
+# plan command
+terraform plan -var-file terraform-dev.tfvar
+
+# apply command
+terraform apply -var-file terraform-dev.tfvar
+```

providers.tf

@@ -0,0 +1,6 @@
+# Configure the AWS Provider
+provider "aws" {
+  region = var.region
+  secret_key = var.secret_key
+  access_key = var.access_key
+}

s3-acl.tf

@@ -0,0 +1,5 @@
+resource "aws_s3_bucket_acl" "bucket_acl" {
+  bucket     = data.aws_s3_bucket.selected_bucket.id
+  acl        = "public-read"
+  depends_on = [aws_s3_bucket_ownership_controls.s3_bucket_acl_ownership]
+}

s3-bucket.tf

@@ -0,0 +1,12 @@
+resource "aws_s3_bucket" "first_bucket" {
+  bucket = var.bucket_name
+
+  tags = {
+    Name        = var.bucket_name
+    Environment = "Dev"
+  }
+}
+
+data "aws_s3_bucket" "selected_bucket" {
+  bucket = aws_s3_bucket.first_bucket.bucket
+}

s3-object-upload.tf

@@ -0,0 +1,18 @@
+resource "aws_s3_object" "object-upload-html" {
+  for_each     = fileset("uploads/", "*.html")
+  bucket       = data.aws_s3_bucket.selected_bucket.bucket
+  key          = each.value
+  source       = "uploads/${each.value}"
+  content_type = "text/html"
+  etag         = filemd5("uploads/${each.value}")
+  acl          = "public-read"
+}
+# resource "aws_s3_object" "object-upload-jpg" {
+#     for_each        = fileset("uploads/", "*.jpeg")
+#     bucket          = data.aws_s3_bucket.selected-bucket.bucket
+#     key             = each.value
+#     source          = "uploads/${each.value}"
+#     content_type    = "image/jpeg"
+#     etag            = filemd5("uploads/${each.value}")
+#     acl             = "public-read"
+# }

s3-versioning.tf

@@ -0,0 +1,6 @@
+resource "aws_s3_bucket_versioning" "versioning_bucket" {
+  bucket = data.aws_s3_bucket.selected_bucket.id
+  versioning_configuration {
+    status = "Enabled"
+  }
+}

s3-website.tf

@@ -0,0 +1,18 @@
+resource "aws_s3_bucket_website_configuration" "website-config" {
+  bucket = data.aws_s3_bucket.selected_bucket.bucket
+  index_document {
+    suffix = "index.html"
+  }
+  #   error_document {
+  #     key = "404.jpeg"
+  #   }
+  # IF you want to use the routing rule
+  #   routing_rule {
+  #     condition {
+  #       key_prefix_equals = "/abc"
+  #     }
+  #     redirect {
+  #       replace_key_prefix_with = "comming-soon.jpeg"
+  #     }
+  #   }
+}

ss3-bucket-policy.tf

@@ -0,0 +1,41 @@
+resource "aws_s3_bucket_ownership_controls" "s3_bucket_acl_ownership" {
+  bucket = data.aws_s3_bucket.selected_bucket.id
+  rule {
+    object_ownership = "BucketOwnerPreferred"
+  }
+  depends_on = [aws_s3_bucket_public_access_block.example]
+}
+
+resource "aws_s3_bucket_public_access_block" "example" {
+  bucket = data.aws_s3_bucket.selected_bucket.id
+
+  block_public_acls       = false
+  block_public_policy     = false
+  ignore_public_acls      = false
+  restrict_public_buckets = false
+}
+
+resource "aws_s3_bucket_policy" "bucket-policy" {
+  bucket = data.aws_s3_bucket.selected_bucket.id
+  policy = data.aws_iam_policy_document.iam-policy-1.json
+}
+data "aws_iam_policy_document" "iam-policy-1" {
+  statement {
+    sid    = "AllowPublicRead"
+    effect = "Allow"
+    resources = [
+      "arn:aws:s3:::${data.aws_s3_bucket.selected_bucket.id}/*"
+    ]
+
+    # resources = [
+    #   "arn:aws:s3:::*"
+    # ]
+    actions = ["S3:GetObject"]
+    principals {
+      type        = "*"
+      identifiers = ["*"]
+    }
+  }
+
+  depends_on = [aws_s3_bucket_public_access_block.example]
+}