thrashr888/thrashr888-agent-kit/hcp-terraform

# Login to Terraform Cloud
terraform login
 
# Credentials stored in ~/.terraform.d/credentials.tfrc.json

# backend.tf
terraform {
  cloud {
    organization = "your-org"
 
    workspaces {
      name = "your-workspace"
    }
  }
}

terraform {
  cloud {
    organization = "your-org"
 
    workspaces {
      tags = ["app:myapp"]
    }
  }
}

terraform init

terraform plan

terraform apply

# Using the TFC API
TFC_TOKEN=$(jq -r '.credentials."app.terraform.io".token' ~/.terraform.d/credentials.tfrc.json)
 
curl -s \
  -H "Authorization: Bearer $TFC_TOKEN" \
  -H "Content-Type: application/vnd.api+json" \
  "https://app.terraform.io/api/v2/organizations/YOUR_ORG/workspaces/YOUR_WORKSPACE" \
  | jq '.data.attributes | {auto_apply, latest_change: .["latest-change-at"], resources: .["resource-count"]}'

TFC_ORG := your_org
TFC_WORKSPACE := your_workspace
TFC_TOKEN_FILE := $(HOME)/.terraform.d/credentials.tfrc.json
 
tfc-status:
	@test -f $(TFC_TOKEN_FILE) || (echo "Error: No TFC credentials. Run 'terraform login' first." && exit 1)
	@TFC_TOKEN=$$(jq -r '.credentials."app.terraform.io".token' $(TFC_TOKEN_FILE)) && \
	RESPONSE=$$(curl -s -H "Authorization: Bearer $$TFC_TOKEN" -H "Content-Type: application/vnd.api+json" \
		"https://app.terraform.io/api/v2/organizations/$(TFC_ORG)/workspaces/$(TFC_WORKSPACE)") && \
	echo "$$RESPONSE" | jq -r '.data.attributes | "Workspace: $(TFC_WORKSPACE)\nAuto-apply: \(.["auto-apply"])\nLast change: \(.["latest-change-at"])\nResources: \(.["resource-count"])"'
	@echo "View runs: https://app.terraform.io/app/$(TFC_ORG)/workspaces/$(TFC_WORKSPACE)/runs"

provider "aws" {
  region = var.aws_region
 
  # Credentials come from TFC environment variables:
  # AWS_ACCESS_KEY_ID
  # AWS_SECRET_ACCESS_KEY
}

resource "aws_s3_bucket" "website" {
  bucket = "myapp-website"
}
 
resource "aws_s3_bucket_website_configuration" "website" {
  bucket = aws_s3_bucket.website.id
 
  index_document {
    suffix = "index.html"
  }
}
 
resource "aws_s3_bucket_public_access_block" "website" {
  bucket = aws_s3_bucket.website.id
 
  block_public_acls       = false
  block_public_policy     = false
  ignore_public_acls      = false
  restrict_public_buckets = false
}

resource "aws_cloudfront_distribution" "cdn" {
  origin {
    domain_name = aws_s3_bucket.website.bucket_regional_domain_name
    origin_id   = "S3-${aws_s3_bucket.website.id}"
  }
 
  enabled             = true
  default_root_object = "index.html"
 
  default_cache_behavior {
    allowed_methods  = ["GET", "HEAD"]
    cached_methods   = ["GET", "HEAD"]
    target_origin_id = "S3-${aws_s3_bucket.website.id}"
 
    forwarded_values {
      query_string = false
      cookies {
        forward = "none"
      }
    }
 
    viewer_protocol_policy = "redirect-to-https"
  }
 
  restrictions {
    geo_restriction {
      restriction_type = "none"
    }
  }
 
  viewer_certificate {
    cloudfront_default_certificate = true
  }
}

# Re-authenticate
terraform login

# List workspaces
terraform workspace list
 
# Select workspace
terraform workspace select workspace-name

# Initialize (required first)
terraform init
 
# Format check
terraform fmt -check
 
# Validate configuration
terraform validate
 
# Plan (runs remotely)
terraform plan
 
# Apply (runs remotely)
terraform apply
 
# Show current state (fetches from remote)
terraform show
 
# Output values
terraform output
 
# Import existing resource
terraform import aws_s3_bucket.example bucket-name

terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.0"
    }
  }
}