TerraformでAmazon Redshift クラスターを構築

resource "aws_redshift_parameter_group" "tf-test-parameter-group" {
    name = "tf-test"
    family = "redshift-1.0"
    description = "Test parameter group for terraform"
    parameter {
      name = "require_ssl"
      value = "true"
    }
    parameter{
      name = "enable_user_activity_logging"
      value = "true"
    }
}

resource "aws_redshift_subnet_group" "tf-test-subnet-group" {
    name = "tf-test"
    description = "Test subnet group for terraform"
    subnet_ids = ["${aws_subnet.public-a.id}"]
}

variable "aws_access_key" {}
variable "aws_secret_key" {}
variable "region" {
    default = "ap-northeast-1"
}

variable "redshift_master_password" {}
variable "cidr_block" {
    type = "map"
    default = {
      classmethod = ""
    }
}

provider "aws" {
    access_key = "${var.aws_access_key}"
    secret_key = "${var.aws_secret_key}"
    region = "ap-northeast-1"
}

resource "aws_vpc" "myVPC" {
    cidr_block = "10.50.0.0/16"
    enable_dns_hostnames = true
}

resource "aws_internet_gateway" "myGW" {
    vpc_id = "${aws_vpc.myVPC.id}"
}

resource "aws_subnet" "public-a" {
    vpc_id = "${aws_vpc.myVPC.id}"
    cidr_block = "10.50.10.0/24"
    availability_zone = "ap-northeast-1a"
}

resource "aws_route_table" "public-route" {
    vpc_id = "${aws_vpc.myVPC.id}"
    route {
        cidr_block = "0.0.0.0/0"
        gateway_id = "${aws_internet_gateway.myGW.id}"
    }
}

resource "aws_route_table_association" "puclic-a" {
    subnet_id = "${aws_subnet.public-a.id}"
    route_table_id = "${aws_route_table.public-route.id}"
}

resource "aws_security_group" "sg_for_redshift" {
  name = "sg_for_redshift"
  description = "Security Group for Redshift"
  vpc_id = "${aws_vpc.myVPC.id}"
  ingress {
      from_port = 5439
      to_port = 5439
      protocol = "tcp"
      cidr_blocks = ["${var.cidr_block.classmethod}"]
  }

  egress {
      from_port = 0
      to_port = 0
      protocol = "-1"
      cidr_blocks = ["0.0.0.0/0"]
  }
}

resource "aws_redshift_parameter_group" "tf-test-parameter-group" {
    name = "tf-test"
    family = "redshift-1.0"
    description = "Test parameter group for terraform"
    parameter {
      name = "require_ssl"
      value = "true"
    }
    parameter{
      name = "enable_user_activity_logging"
      value = "true"
    }
}

resource "aws_redshift_subnet_group" "tf-test-subnet-group" {
    name = "tf-test"
    description = "Test subnet group for terraform"
    subnet_ids = ["${aws_subnet.public-a.id}"]
}

resource "aws_redshift_cluster" "tf-test-redshift-cluster" {
  cluster_identifier = "tf-test-redshift-cluster"
  database_name = "mydwh"
  master_username = "root"
  master_password = "${var.redshift_master_password}"
  node_type = "dc1.large"
  cluster_type = "multi-node"
  vpc_security_group_ids = ["${aws_security_group.sg_for_redshift.id}"]
  cluster_subnet_group_name = "${aws_redshift_subnet_group.tf-test-subnet-group.id}"
  availability_zone = "ap-northeast-1a"
  preferred_maintenance_window = "sat:20:00-sat:20:30"
  cluster_parameter_group_name = "${aws_redshift_parameter_group.tf-test-parameter-group.id}"
  automated_snapshot_retention_period = 7
  number_of_nodes = 2
  publicly_accessible = true
  skip_final_snapshot = true
}