Provision a database in terraform

deployment/infrastructure/main.tf

@@ -1,3 +1,14 @@
+variable "db_username" {
+  type      = string
+  sensitive = true
+}
+variable "db_password" {
+  type      = string
+  sensitive = true
+}
+
+
+
 provider "aws" {
   region = "us-east-2"
 }
@@ -11,13 +22,15 @@ resource "aws_vpc" "finus" {
 }
 
 resource "aws_subnet" "prod" {
-  vpc_id     = aws_vpc.finus.id
-  cidr_block = "10.0.0.0/17"
+  vpc_id            = aws_vpc.finus.id
+  cidr_block        = "10.0.0.0/17"
+  availability_zone = "us-east-2c"
 }
 
-resource "aws_subnet" "dev" {
-  vpc_id     = aws_vpc.finus.id
-  cidr_block = "10.0.128.0/17"
+resource "aws_subnet" "secondary" {
+  vpc_id            = aws_vpc.finus.id
+  cidr_block        = "10.0.128.0/17"
+  availability_zone = "us-east-2a"
 }
 
 resource "aws_internet_gateway" "default" {
@@ -100,7 +113,11 @@ module "prod" {
   webserver_security_group_ids = [aws_security_group.webserver.id]
   backend_security_group_ids   = [aws_security_group.services.id]
   subnet_id                    = aws_subnet.prod.id
+  secondary_subnet_id          = aws_subnet.secondary.id
   vpc_id                       = aws_vpc.finus.id
   gateway_id                   = aws_internet_gateway.default.id
   route_table_id               = aws_route_table.route_table.id
+
+  db_username = var.db_username
+  db_password = var.db_password
 }

deployment/infrastructure/modules/finus/main.tf

@@ -16,6 +16,9 @@ variable "backend_security_group_ids" {
 variable "subnet_id" {
   type = string
 }
+variable "secondary_subnet_id" {
+  type = string
+}
 variable "vpc_id" {
   type = string
 }
@@ -25,6 +28,14 @@ variable "gateway_id" {
 variable "route_table_id" {
   type = string
 }
+variable "db_username" {
+  type      = string
+  sensitive = true
+}
+variable "db_password" {
+  type      = string
+  sensitive = true
+}
 
 
 data "aws_ami" "amazon_linux" {
@@ -81,3 +92,36 @@ resource "aws_eip" "webserver" {
     Name = join("", ["finus-", var.environment_name, "-webserver"])
   }
 }
+
+resource "aws_security_group" "db" {
+  name   = "backend access"
+  vpc_id = var.vpc_id
+
+  ingress {
+    cidr_blocks = [join("/", [aws_instance.backend.private_ip, "32"])]
+    from_port   = 3306
+    to_port     = 3306
+    protocol    = "tcp"
+  }
+}
+
+resource "aws_db_subnet_group" "default" {
+  name       = "finus-${var.environment_name}-db-subnet-group"
+  subnet_ids = [var.subnet_id, var.secondary_subnet_id]
+
+  tags = {
+    Name = "finus-${var.environment_name}-db-subnet-group"
+  }
+}
+resource "aws_db_instance" "default" {
+  allocated_storage = 5
+  db_name           = "finus"
+  engine            = "mysql"
+  engine_version    = "8.0"
+  instance_class    = "db.t3.micro"
+  username          = var.db_username
+  password          = var.db_password
+
+  vpc_security_group_ids = [aws_security_group.db.id]
+  db_subnet_group_name   = aws_db_subnet_group.default.name
+}