First make a S3 bucket manually. Although we could use Terraform to create and manage this, it will cause us problems. Ideally, you would use a separate ‘infrastructure’ project to handle this (and other things like databases that you don’t want to accidentally rollback). That will be a separate effort and doing it manually for now will be sufficient.<\/p>\n\n\n\n
Go to the AWS console and find the S3 service page.<\/p>\n\n\n\n Click Now go ahead and make a DynamoDB table. First navigate to DynamoDB in the console.<\/p>\n\n\n\n Click Uncheck Since we’re only using this for state management, we don’t expect to be using this table often enough to justify leaving a server up. I think<\/em> there’s a free tier eligible DynamoDB, but I’m not sure how to configure it and I’m very scared about unexpected costs, so this works for me (but if you can figure out how to do it for free with the provisioned configuration I’d be glad to update the docs)<\/p>\n\n\n\n Make a new branch<\/p>\n\n\n\n Now we need to tell Terraform to use the cloud state management. <\/p>\n\n\n\n First, create some new variables in Add these lines to This is going to tell terraform to look for (and create if necessary) the state managment in the bucket and table we just created. Additionally, we need to grant access to the bucket and link it to the role that we created previously.<\/p>\n\n\n\n We’ll need to terraform init first<\/p>\n\n\n\n and then apply<\/p>\n\n\n\n and we should see it create our infrastructure and the state file in the bucket and a lock entry in the database<\/p>\n\n\n\n Let’s destroy everything first before we start the next step which will be creating a github action to build and deploy this lambda whenever we merge to ![\"\"](\"https:\/\/i0.wp.com\/bullyrooks.com\/wp-content\/uploads\/2021\/07\/image-23-1024x175.png?resize=960%2C164&ssl=1\")
<\/figure>\n\n\n\nCreate bucket<\/code> and set the minimum configuration. You only need to set a name, accept all of the other defaults.<\/p>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/bullyrooks.com\/wp-content\/uploads\/2021\/07\/image-25.png?resize=848%2C498&ssl=1\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/bullyrooks.com\/wp-content\/uploads\/2021\/07\/image-26.png?resize=960%2C228&ssl=1\")
<\/figure>\n\n\n\nCreate table<\/code>. Add a name, but the primary key must<\/em> be LockID<\/code><\/strong> exactly with a String type.<\/p>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/bullyrooks.com\/wp-content\/uploads\/2021\/07\/image-27.png?resize=631%2C292&ssl=1\")
<\/figure>\n\n\n\nUse default settings<\/code> and change Read\/write capacity mode<\/code> to On-demand<\/code><\/p>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/bullyrooks.com\/wp-content\/uploads\/2021\/07\/image-28.png?resize=960%2C221&ssl=1\")
<\/figure>\n\n\n\nUpdate the Terraform Configuration<\/h2>\n\n\n\n
$ git checkout -b cloud-state<\/code><\/pre>\n\n\n\nvariables.tf<\/code><\/p>\n\n\n\nvariable \"s3_bucket\" {\r\n default = \"helloworld-lambda-state\"\r\n}\r\nvariable \"s3_key\" {\r\n default = \"global\/s3\/terraform.tfstate\"\r\n}\r\nvariable \"dynamo_lock\" {\r\n default = \"helloworld-lambda-state-lock\"\r\n}\r\n<\/code><\/pre>\n\n\n\nmain.tf<\/code> (after the provider<\/code> clause)<\/p>\n\n\n\ndata \"aws_caller_identity\" \"current\" {}\r\n\r\nterraform {\r\n backend \"s3\" {\r\n # Replace this with your bucket name!\r\n bucket = \"helloworld-lambda-state\"\r\n encrypt = true\r\n key = \"global\/s3\/terraform.tfstate\"\r\n region = \"us-east-1\"\r\n shared_credentials_file = \"\/Users\/brian\/.aws\/bullyrook\/credentials\"\r\n # Replace this with your DynamoDB table name!\r\n dynamodb_table = \"helloworld-lambda-state-lock\"\r\n\r\n }\r\n}\r<\/pre>\n\n\n\nCreate the State<\/h2>\n\n\n\n
$ terraform init<\/code><\/pre>\n\n\n\n$ terraform apply\n...\naws_lambda_permission.helloWorld-permission: Creation complete after 1s [id=terraform-20210724235555315200000002]\r\nReleasing state lock. This may take a few moments...\r\n\r\nApply complete! Resources: 7 added, 0 changed, 0 destroyed.\r\n\r\n<\/code><\/pre>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/bullyrooks.com\/wp-content\/uploads\/2021\/07\/image-29-1024x39.png?resize=960%2C37&ssl=1\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/bullyrooks.com\/wp-content\/uploads\/2021\/07\/image-30-1024x405.png?resize=960%2C380&ssl=1\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/bullyrooks.com\/wp-content\/uploads\/2021\/07\/image-31.png?resize=868%2C424&ssl=1\")
<\/figure>\n\n\n\nmain<\/code><\/p>\n\n\n\n$ terraform destroy<\/code><\/pre>\n\n\n\nCommit and Merge<\/h2>\n\n\n\n
$ git status\n$ git add .\n$ git commit -m \"state in aws configuration\"\n$ git push --set-upstream origin cloud-state\n$ git checkout main\n$ git merge cloud-state\n$ git push<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"