AWS provider setup in Terraform - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the AWS provider version.

Terraform

provider "aws" {
  version = "~> [1]"
}

Drag options to blanks, or click blank then click option'

A3.0

B5.0

C4.0

D2.5

Attempts:

3 left

💡 Hint

Common Mistakes

Using an outdated provider version like 2.5.

Specifying a version without the ~> operator.

The AWS provider version is set to "~> 5.0" to use the latest compatible 5.x version.

2fill in blank

medium

Complete the code to set the AWS region to us-west-2.

Terraform

provider "aws" {
  region = "[1]"
}

Drag options to blanks, or click blank then click option'

Aap-southeast-1

Bus-east-1

Ceu-central-1

Dus-west-2

Attempts:

3 left

💡 Hint

Common Mistakes

Using a region code that does not exist.

Mixing up region codes like us-east-1 and us-west-2.

The region is set to "us-west-2" to deploy resources in the US West (Oregon) region.

3fill in blank

hard

Fix the error in the provider block by completing the missing argument.

Terraform

provider "aws" {
  [1] = "us-east-1"
}

Drag options to blanks, or click blank then click option'

Aprofile

Baccess_key

Cregion

Dsecret_key

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'profile' instead of 'region' to set the AWS region.

Trying to set access_key or secret_key directly in the provider block.

The 'region' argument is required to specify where AWS resources will be created.

4fill in blank

hard

Fill both blanks to configure the AWS provider with a profile and region.

Terraform

provider "aws" {
  [1] = "myprofile"
  [2] = "eu-west-1"
}

Drag options to blanks, or click blank then click option'

Aprofile

Bregion

Caccess_key

Dsecret_key

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing 'access_key' with 'profile'.

Setting 'secret_key' instead of 'region'.

The 'profile' sets the AWS CLI profile to use, and 'region' sets the AWS region.

5fill in blank

hard

Fill all three blanks to configure the AWS provider with region, profile, and enable shared credentials file.

Terraform

provider "aws" {
  [1] = "ap-northeast-1"
  [2] = "devprofile"
  [3] = "~/.aws/credentials"
}

Drag options to blanks, or click blank then click option'

Aregion

Bprofile

Cshared_credentials_file

Dshared_credentials_file_enabled

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'shared_credentials_file_enabled' which does not exist, instead of 'shared_credentials_file'.

Mixing up the order of arguments.

'region' sets the AWS region, 'profile' selects the AWS CLI profile, and 'shared_credentials_file' enables using the shared credentials file by specifying its path.

Practice

1. What is the minimum required configuration to set up the AWS provider in Terraform?

easy

A. Specify the AWS region in the provider block

B. Provide the AWS access key and secret key directly in the provider block

C. Create an IAM user with admin permissions

D. Install the AWS CLI before running Terraform

Solution

1. Step 1: Understand AWS provider requirements

   The AWS provider requires at least the region to know where to create resources.

2. Step 2: Check minimal configuration

   Providing the region in the provider block is the minimal valid setup; credentials can be handled separately.

3. Final Answer:

   Specify the AWS region in the provider block -> Option A

4. Quick Check:

   AWS provider needs region at minimum [OK]

Hint: Always specify region in provider block for AWS setup [OK]

Common Mistakes:

• Putting credentials directly in provider (not recommended)
• Skipping region configuration
• Assuming AWS CLI must be installed for Terraform

2. Which of the following is the correct syntax to configure the AWS provider with region us-east-1 in Terraform?

easy

A. provider "aws" region = "us-east-1"

B. provider aws { region = us-east-1 }

C. provider "aws" { region = "us-east-1" }

D. provider "aws" { region: "us-east-1" }

Solution

1. Step 1: Review Terraform provider block syntax

   Terraform uses HCL syntax with provider name in quotes and block braces.

2. Step 2: Validate correct key-value assignment

   Key-value pairs use equals sign and values in quotes for strings.

3. Final Answer:

   provider "aws" { region = "us-east-1" } -> Option C

4. Quick Check:

   Correct HCL syntax uses equals and braces [OK]

Hint: Use quotes and equals sign inside braces for provider config [OK]

Common Mistakes:

• Missing quotes around provider name
• Using colon instead of equals sign
• Omitting braces around provider block

3. Given this Terraform provider configuration:

provider "aws" {
  region  = "us-west-2"
  profile = "myprofile"
}

What will Terraform use to authenticate AWS API calls?

medium

A. Credentials from the AWS CLI profile named 'myprofile'

B. Default environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY

C. Anonymous access without credentials

D. Credentials hardcoded in the provider block

Solution

1. Step 1: Understand the 'profile' argument in AWS provider

   The 'profile' tells Terraform to use credentials stored in the named AWS CLI profile.

2. Step 2: Confirm authentication source

   Terraform reads credentials from the AWS config files under the specified profile, not environment variables or hardcoded keys.

3. Final Answer:

   Credentials from the AWS CLI profile named 'myprofile' -> Option A

4. Quick Check:

   Profile argument uses AWS CLI stored credentials [OK]

Hint: Profile uses AWS CLI stored credentials, not env vars [OK]

Common Mistakes:

• Assuming environment variables override profile
• Thinking credentials are anonymous
• Hardcoding keys inside provider block

4. This Terraform AWS provider configuration causes an error:

provider "aws" {
  region = us-east-1
}

What is the cause of the error?

medium

A. The provider block name is missing quotes

B. The provider block is missing a closing brace

C. The equals sign is missing

D. The region value is missing quotes

Solution

1. Step 1: Check the region value syntax

   In HCL, string values must be enclosed in double quotes.

2. Step 2: Identify the error

   The region value us-east-1 is unquoted, causing a syntax error.

3. Final Answer:

   The region value is missing quotes -> Option D

4. Quick Check:

   String values require quotes in Terraform [OK]

Hint: Always quote string values like region names [OK]

Common Mistakes:

• Forgetting quotes around strings
• Misplacing braces or equals sign
• Assuming unquoted strings are valid

5. You want to configure the AWS provider in Terraform to use the region 'eu-central-1' and a profile named 'devuser'. Which configuration is correct and follows best security practices?

hard

A. provider "aws" {
region = "eu-central-1"
profile = "devuser"
access_key = "AKIA..."
secret_key = "secret"
}

B. provider "aws" {
region = "eu-central-1"
profile = "devuser"
}

C. provider "aws" {
region = "eu-central-1"
access_key = "AKIA..."
secret_key = "secret"
}

D. provider "aws" {
region = "eu-central-1"
}

Solution

1. Step 1: Understand best security practices for AWS credentials

   Hardcoding access keys in Terraform files is insecure and discouraged.

2. Step 2: Use AWS profiles for credential management

   Using the 'profile' argument lets Terraform use credentials stored securely in AWS CLI config files.

3. Step 3: Confirm correct configuration

   provider "aws" { region = "eu-central-1" profile = "devuser" } specifies region and profile without hardcoding keys, following best practices.

4. Final Answer:

   provider "aws" { region = "eu-central-1" profile = "devuser" } -> Option B

5. Quick Check:

   Use profiles, avoid hardcoding keys [OK]

Hint: Never hardcode keys; use profiles or env variables [OK]

Common Mistakes:

• Hardcoding AWS keys in Terraform files
• Omitting region or profile causing errors
• Using incomplete provider blocks