# main.tf - Basis Terraform configuratie
# Configureer de AWS provider
terraform {
  required_version = ">= 1.0.0"
  
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.0"
    }
  }
  
  backend "s3" {
    bucket = "my-terraform-state"
    key    = "prod/terraform.tfstate"
    region = "eu-west-1"
  }
}

# Configureer de AWS provider
provider "aws" {
  region = "eu-west-1"
  profile = "default"
}

# Maak een VPC
resource "aws_vpc" "main" {
  cidr_block = "10.0.0.0/16"
  
  tags = {
    Name = "main-vpc"
    Environment = "production"
  }
}

# data-infrastructure.tf - Data platform op AWS
# S3 Bucket voor data lake
resource "aws_s3_bucket" "data_lake" {
  bucket = "company-data-lake-${var.environment}"
  
  tags = {
    Name        = "Data Lake"
    Environment = var.environment
    ManagedBy   = "Terraform"
  }
}

# Glue Data Catalog Database
resource "aws_glue_catalog_database" "data_catalog" {
  name = "data_catalog_${var.environment}"
}

# Redshift Cluster voor data warehouse
resource "aws_redshift_cluster" "data_warehouse" {
  cluster_identifier = "data-warehouse-${var.environment}"
  database_name      = "data_warehouse"
  master_username    = var.redshift_username
  master_password    = var.redshift_password
  node_type          = "dc2.large"
  cluster_type       = "single-node"
  
  tags = {
    Name = "Data Warehouse"
  }
}

# IAM Role voor data access
resource "aws_iam_role" "data_access" {
  name = "data-access-role-${var.environment}"
  
  assume_role_policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "glue.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}
EOF
}

Remote State Configuratie

# backend.tf - Remote state configuratie
terraform {
  backend "s3" {
    # S3 bucket voor state opslag
    bucket = "company-terraform-state"
    key    = "global/s3/terraform.tfstate"
    region = "eu-west-1"
    
    # DynamoDB voor state locking
    dynamodb_table = "terraform-state-locks"
    encrypt        = true
  }
}

# state-locking.tf - DynamoDB table voor locking
resource "aws_dynamodb_table" "terraform_state_lock" {
  name           = "terraform-state-locks"
  billing_mode   = "PAY_PER_REQUEST"
  hash_key       = "LockID"
  
  attribute {
    name = "LockID"
    type = "S"
  }
}

Module Structuur

# modules/vpc/main.tf
variable "vpc_cidr" {
  type    = string
  default = "10.0.0.0/16"
}

variable "environment" {
  type = string
}

resource "aws_vpc" "main" {
  cidr_block = var.vpc_cidr
  
  tags = {
    Name        = "vpc-${var.environment}"
    Environment = var.environment
  }
}

output "vpc_id" {
  value = aws_vpc.main.id
}

# main.tf - Module gebruik
module "vpc" {
  source  = "./modules/vpc"
  vpc_cidr = "10.0.0.0/16"
  environment = "production"
}

# Gebruik module output
resource "aws_subnet" "main" {
  vpc_id     = module.vpc.vpc_id
  cidr_block = "10.0.1.0/24"
}