Spring Boot + Terraform

This repository is a study case for provisioning simple infrastructure with Terraform and deploying basic Spring Boot application on AWS.

Table of contents

• Requirements
• Infrastructure
• Running Locally
• Pack app
• Build app image
• Preparing entrypoint
• Creating programmatic user (Terraform)
• Configuring AWS CLI
• Generating SSH Key Pair
• Attach your IP to SSH Rule
• Set up Terraform
• Formatting and validating file
• Planning and provisioning resources
• Accessing application
• Destroying infrastructure provisioned
• Next Steps with Terraform
• Links references

Requirements

• OpenJdk v21
• Apache Maven
• AWS CLI
• Terraform CLI
• Make (optional)

Infrastructure

• EC2 Instance
• Key pair for SSH access
• Security Groups
  • Allow Http
  • Allow Https
  • Allow SSH access to EC2 (from a IPs list)
• User data file to prepare and run our application

Running locally

./mvnw spring-boot:run

curl -i http://localhost:8080

Accessing the application url, must be possible see the instant datetime.

{"datetime": "2025-11-09T00:00:00"}

Pack app

In root path, run the following command:

make pack-app

Build app image

make build-image

# before push image, do login
docker login ...

make push-image

Preparing entrypoint

In infra/userdata.sh replace <docker-username> to your real docker username.

Creating a programmatic user (Terraform)

1. Access the AWS Console
2. Go to IAM section.
3. In left sidebar click on User Groups and click on Create User Group.
4. In create user group page, give a name to group of user.
5. In persmission section, select only AmazonEC2FullAccess and click on create user group.
6. In left sidebar click on Users and click on Create User.
7. In create user page, give a name to new user and click on next.
8. In permissions page keep selected Add user to group, select the group of user created previously and click on next and finally, Create User.
9. With user create, click on him to see details and following click on Create Access Key.
10. In access key page, select the use case, something like Local Code or CLI, mark confirmation checkbox, click on next and finally Create Access Key.

Configuring AWS CLI

1. With the keys of access and secret, run aws configure in tyour terminal
2. Provide access key of programmatic user, press enter
3. Provide secret key of programmatic user, press enter
4. Provide a region where the resources are been created
5. Ignore output, press enter

Generating SSH Key Pair

ssh-keygen -t rsa -b 4096 -C "EC2 Instance"

If you save out of default path or with another name, you must be change the ssh key path/name on infra/main.tf file.

Attach your IP to SSH Rule

In the infra/main.tf just replace all occurrences of <your-ip> by your real IP.

Set up Terraform

From this section onwards, all commands must be executed in the infra folder.

With Terraform installed run the following command in root path of this project, to set up terraform with AWS.

terraform init

Formatting and validating file

# format the file
terraform fmt

# check for errors of syntax and etc.
terraform validate

Planning and provisioning resources

# visualize the Terraform plan before to applying
terraform plan

# provision resources on cloud provider
terraform apply

Accessing application

In EC2 page, click on EC2 instance created by Terraform, search by Public IPV4 address and click on it, to access the application.

The app url must be access without https, because is not fully configured.

Accessing EC2 instance via SSH

ssh -i \
    ~/.ssh/id_rsa \ # private ssh key path
    ec2-user@<public-ip-instance>

Destroying infrastructure provisioned

terraform destroy

Next Steps with Terraform

• Store the Terraform state in a private AWS S3 Bucket (automatically)
• Create a specficic user to IAC (Terraform) and used it to provision infra
• Provision ECR private repository to store all app images instead store on Docker Hub

Links references

• AWS Documentation
• Amazon Corretto Images
• Terraform Registry Documentation

License

This project is under MIT License.