scottslowe-learning-tools/terraform/aws/bastion-aws/networking.tf

# Create a new VPC
resource "aws_vpc" "bastion_vpc" {
    cidr_block              = "10.2.0.0/16"
    enable_dns_hostnames    = true
    enable_dns_support      = true
    tags {
        tool                = "terraform"
        demo                = "bastion-aws"
        area                = "networking"
    }
}

# Create a public subnet in the new VPC
resource "aws_subnet" "bastion_net" {
    vpc_id                  = "${aws_vpc.bastion_vpc.id}"
    cidr_block              = "10.2.1.0/24"
    map_public_ip_on_launch = true
    tags {
        tool                = "terraform"
        demo                = "bastion-aws"
        area                = "networking"
    }
}

# Create a private subnet in the new VPC
resource "aws_subnet" "private_net" {
    vpc_id                  = "${aws_vpc.bastion_vpc.id}"
    cidr_block              = "10.2.2.0/24"
    map_public_ip_on_launch = false
    tags {
        tool                = "terraform"
        demo                = "bastion-aws"
        area                = "networking"
    }
}

# Create a new Internet gateway
resource "aws_internet_gateway" "bastion_gw" {
    vpc_id                  = "${aws_vpc.bastion_vpc.id}"
    tags {
        tool                = "terraform"
        demo                = "bastion-aws"
        area                = "networking"
    }
}

# Create a route table for the new VPC
resource "aws_route_table" "bastion_routes" {
    vpc_id                  = "${aws_vpc.bastion_vpc.id}"
    route {
        cidr_block          = "0.0.0.0/0"
        gateway_id          = "${aws_internet_gateway.bastion_gw.id}"
    }
    tags {
        tool                = "terraform"
        demo                = "bastion-aws"
        area                = "networking"
    }
}

# Associate route table with subnet in VPC
resource "aws_route_table_association" "bastion_rt_assoc" {
    subnet_id               = "${aws_subnet.bastion_net.id}"
    route_table_id          = "${aws_route_table.bastion_routes.id}"
}