Use Terraform to manage Alibaba Cloud resources

Start Cloud Shell

Manage Alibaba Cloud resources

1. Compile a Terraform template in Cloud Shell.

   Use Vim to create and edit a Terraform template.

   Run the following commands to create a project directory and a template file:

   mkdir terraform-project
   cd terraform-project 
   touch main.tf

   The following sample Terraform template creates Elastic Compute Service (ECS) instances. Copy the code to the main.tf file. Cloud Shell automatically obtains the identity credentials of the logged-on account, so you do not need to configure environment variables.

   provider "alicloud" {
     region = "cn-beijing"
   }
   
   data "alicloud_zones" "default" {
     available_disk_category     = "cloud_efficiency"
     available_resource_creation = "VSwitch"
   }
   
   resource "alicloud_vpc" "vpc" {
     vpc_name   = "tf_test_foo"
     cidr_block = "172.16.0.0/12"
   }
   
   resource "alicloud_vswitch" "vsw" {
     vpc_id     = alicloud_vpc.vpc.id
     cidr_block = "172.16.0.0/21"
     zone_id    = data.alicloud_zones.default.zones.0.id
   }
   
   resource "alicloud_security_group" "default" {
     name   = "default"
     vpc_id = alicloud_vpc.vpc.id
   }
   
   resource "alicloud_instance" "instance" {
     # cn-beijing
     availability_zone = data.alicloud_zones.default.zones.0.id
     security_groups   = alicloud_security_group.default.*.id
     # series III
     instance_type              = "ecs.n4.large"
     system_disk_category       = "cloud_efficiency"
     image_id                   = "ubuntu_18_04_64_20G_alibase_20190624.vhd"
     instance_name              = "test_foo"
     vswitch_id                 = alicloud_vswitch.vsw.id
     internet_max_bandwidth_out = 10
   }
   
   resource "alicloud_security_group_rule" "allow_all_tcp" {
     type              = "ingress"
     ip_protocol       = "tcp"
     nic_type          = "intranet"
     policy            = "accept"
     port_range        = "1/65535"
     priority          = 1
     security_group_id = alicloud_security_group.default.id
     cidr_ip           = "0.0.0.0/0"
   }

2. Run the init command to initialize Terraform.

   terraform init

   Expected output:

   Terraform has been successfully initialized!
   
   You may now begin working with Terraform. Try running "terraform plan" to see
   any changes that are required for your infrastructure. All Terraform commands
   should now work.
   
   If you ever set or change modules or backend configuration for Terraform,
   rerun this command to reinitialize your working directory. If you forget, other
   commands will detect it and remind you to do so if necessary.

3. Run the plan command to preview the execution result of the Terraform template.

   terraform plan

4. Run the apply command to create an ECS instance. During the execution, type yes as prompted and press Enter. Wait for the command to complete. If the following output is displayed, the ECS instance is created.

   terraform apply

   Expected output:

   Apply complete! Resources: 5 added, 0 changed, 0 destroyed.

Verify the resources

Run the following command to query the details of the resources created by Terraform:

terraform show

Expected output:

# alicloud_instance.instance:
resource "alicloud_instance" "instance" {
    availability_zone               = "cn-shanghai-a"
    cpu                             = 2
    create_time                     = "2024-11-13T08:52Z"
    deletion_protection             = false
    dry_run                         = false
    enable_jumbo_frame              = false
    expired_time                    = "2099-12-31T15:59Z"
    host_name                       = "iZuxxx"
    http_put_response_hop_limit     = 0
    id                              = "i-ufxxx"
    image_id                        = "ubuntu_18_04_64_20G_alibase_xxx vhd"
    instance_charge_type            = "PostPaid"
    instance_name                   = "test_fofo"
    instance_type                   = "ecs.n4.large"
    internet_charge_type            = "PayByTraffic"
    internet_max_bandwidth_in       = 500
    internet_max_bandwidth_out      = 10
    ipv6_address_count              = 0
    ipv6_addresses                  = []
    maintenance_action              = "AutoRecover"
    maintenance_notify              = false
    memory                          = 4096
    network_interface_id            = "eni-uf6ixxx"
    network_interface_traffic_mode  = "Standard"
    os_name                         = "Ubuntu  18.04 64位"
    os_type                         = "linux"
    primary_ip_address              = "xxx"
    private_ip                      = "xxx"
    public_ip                       = "xxx"
    queue_pair_number               = 0

Log in to the ECS console and verify the created instance. In the left navigation pane, click Instances to go to the Instances page. Confirm the instance ID and running status of the target instance.

References

• What is Alibaba Cloud Terraform?

• Alibaba Cloud Module Registry