AMI lookup data source example in Terraform - Mini Project: Build & Apply

AMI lookup data source example

📖 Scenario: You are setting up a cloud server and need to find the latest Amazon Machine Image (AMI) for Ubuntu 22.04 in the AWS region you are working in.

🎯 Goal: Create a Terraform configuration that uses the aws_ami data source to look up the latest Ubuntu 22.04 AMI and then launch an EC2 instance using that AMI.

📋 What You'll Learn

Use the aws_ami data source to find the latest Ubuntu 22.04 AMI

Filter the AMI by owner 099720109477 (official Ubuntu owner)

Launch an EC2 instance using the found AMI

Use the aws_instance resource with a simple instance type

💡 Why This Matters

🌍 Real World

Finding the latest AMI ensures your cloud servers use up-to-date and secure operating system images.

💼 Career

Cloud engineers often use data sources in Terraform to dynamically find resources like AMIs, making infrastructure code reusable and reliable.

1

Set up AWS provider

Write a Terraform block to configure the AWS provider with the region us-east-1. Create a variable called region and set it to "us-east-1". Then configure the provider to use this variable.

Terraform

variable "region" {
  default = "us-east-1"
}

provider "aws" {
  region = var.region
}

# Your code here

Hint

Use a variable block to define region and then use it inside the provider block.

2

Add AMI lookup data source

Add a Terraform data block named ubuntu using the aws_ami data source. Filter for the latest Ubuntu 22.04 AMI by setting most_recent = true, owners = ["099720109477"], and a filter with name = "name" and values = ["ubuntu/images/hvm-ssd/ubuntu-jammy-22.04-amd64-server-*"].

Terraform

variable "region" {
  default = "us-east-1"
}

provider "aws" {
  region = var.region
}

# Your code here to add aws_ami data source named ubuntu

Hint

Use the aws_ami data source with filters to find the latest Ubuntu 22.04 AMI.

3

Create EC2 instance resource

Add an aws_instance resource named web. Use the AMI ID from the data source data.aws_ami.ubuntu.id. Set the instance type to t2.micro.

Terraform

variable "region" {
  default = "us-east-1"
}

provider "aws" {
  region = var.region
}

data "aws_ami" "ubuntu" {
  most_recent = true
  owners      = ["099720109477"]

  filter {
    name   = "name"
    values = ["ubuntu/images/hvm-ssd/ubuntu-jammy-22.04-amd64-server-*"]
  }
}

# Your code here to add aws_instance resource named web

Hint

Use the AMI ID from the data source to launch the EC2 instance.

4

Add tags to EC2 instance

Add a tags block inside the aws_instance.web resource. Set the tag Name to "UbuntuServer".

Terraform

variable "region" {
  default = "us-east-1"
}

provider "aws" {
  region = var.region
}

data "aws_ami" "ubuntu" {
  most_recent = true
  owners      = ["099720109477"]

  filter {
    name   = "name"
    values = ["ubuntu/images/hvm-ssd/ubuntu-jammy-22.04-amd64-server-*"]
  }
}

resource "aws_instance" "web" {
  ami           = data.aws_ami.ubuntu.id
  instance_type = "t2.micro"

  # Your code here to add tags block
}

Hint

Add a tags block with the Name key inside the EC2 instance resource.

Practice

1. What is the main purpose of using the aws_ami data source in Terraform?

easy

A. To find the latest Amazon Machine Image (AMI) based on filters

B. To create a new AMI from an existing instance

C. To delete unused AMIs automatically

D. To launch an EC2 instance directly

Solution

1. Step 1: Understand the role of aws_ami data source

   The aws_ami data source is used to query existing AMIs, not to create or delete them.

2. Step 2: Identify its main use

   It helps find the latest AMI by applying filters like name, owner, and tags.

3. Final Answer:

   To find the latest Amazon Machine Image (AMI) based on filters -> Option A

4. Quick Check:

   AMI lookup = find latest AMI [OK]

Hint: Remember: data source reads info, does not create resources [OK]

Common Mistakes:

• Confusing data source with resource creation
• Thinking it deletes AMIs
• Assuming it launches instances directly

2. Which of the following is the correct syntax to lookup an AMI by name prefix and owner in Terraform?

easy

A. resource "aws_ami" "example" { filter { name = "name" values = ["my-ami*"] } owners = ["self"] }

B. data "aws_ami" "example" { filter { name = "name" values = ["my-ami*"] } owners = ["self"] }

C. data "aws_ami" "example" { filter { name = "owner" values = ["self"] } owners = ["my-ami*"] }

D. data "aws_ami" "example" { filter { name = "name" values = "my-ami*" } owners = "self" }

Solution

1. Step 1: Identify correct resource type and block structure

   AMI lookup uses data "aws_ami", not resource. Filters require a block with name and values as a list.

2. Step 2: Check syntax for filters and owners

   Filters use values = ["my-ami*"] (list), and owners is a list of strings like ["self"].

3. Final Answer:

   data "aws_ami" "example" { filter { name = "name" values = ["my-ami*"] } owners = ["self"] } -> Option B

4. Quick Check:

   Correct data source syntax = data "aws_ami" "example" { filter { name = "name" values = ["my-ami*"] } owners = ["self"] } [OK]

Hint: Data source uses 'data', filters need list values [OK]

Common Mistakes:

• Using 'resource' instead of 'data'
• Setting 'values' as string instead of list
• Swapping 'name' and 'owners' fields

3. Given this Terraform snippet:

data "aws_ami" "ubuntu" {
  most_recent = true
  filter {
    name   = "name"
    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
  }
  owners = ["099720109477"]
}

output "ami_id" {
  value = data.aws_ami.ubuntu.id
}

What will the output ami_id contain?

medium

A. An error because most_recent is not valid here

B. A list of all Ubuntu AMI IDs owned by the user

C. The name of the AMI instead of the ID

D. The ID of the most recent Ubuntu 20.04 AMI owned by Canonical

Solution

1. Step 1: Understand the most_recent flag

   Setting most_recent = true returns the newest AMI matching the filter.

2. Step 2: Analyze the filter and owner

   The filter matches Ubuntu 20.04 AMIs by Canonical's owner ID, so the data source returns the latest matching AMI ID.

3. Final Answer:

   The ID of the most recent Ubuntu 20.04 AMI owned by Canonical -> Option D

4. Quick Check:

   most_recent true = latest AMI ID [OK]

Hint: most_recent true returns single newest AMI ID [OK]

Common Mistakes:

• Thinking it returns a list of AMIs
• Confusing AMI name with ID
• Assuming most_recent is invalid

4. You wrote this Terraform data source to find an AMI:

data "aws_ami" "example" {
  filter {
    name = "name"
    values = "my-ami-*"
  }
  owners = ["self"]
}

Terraform gives an error. What is the problem?

medium

A. The owners field cannot be a list

B. The filter block is missing the most_recent flag

C. The values field must be a list, not a string

D. The name field should be owner

Solution

1. Step 1: Check the values field type

   The values field expects a list of strings, but here it is given as a single string.

2. Step 2: Confirm correct syntax for values

   It should be values = ["my-ami-*"] to be valid.

3. Final Answer:

   The values field must be a list, not a string -> Option C

4. Quick Check:

   values needs list brackets [OK]

Hint: Always use square brackets for filter values [OK]

Common Mistakes:

• Using string instead of list for values
• Misunderstanding owners field format
• Adding unnecessary most_recent flag

5. You want to launch an EC2 instance using the latest Amazon Linux 2 AMI in your Terraform code. Which snippet correctly combines AMI lookup and instance resource?

hard

A. data "aws_ami" "amazon_linux" {
most_recent = true
filter {
name = "name"
values = ["amzn2-ami-hvm-*-x86_64-gp2"]
}
owners = ["137112412989"]
}

resource "aws_instance" "web" {
ami = data.aws_ami.amazon_linux.id
instance_type = "t2.micro"
}

B. resource "aws_ami" "amazon_linux" {
filter {
name = "name"
values = ["amzn2-ami-hvm-*-x86_64-gp2"]
}
owners = ["137112412989"]
}

resource "aws_instance" "web" {
ami = aws_ami.amazon_linux.id
instance_type = "t2.micro"
}

C. data "aws_ami" "amazon_linux" {
filter {
name = "owner"
values = ["137112412989"]
}
most_recent = true
}

resource "aws_instance" "web" {
ami = data.aws_ami.amazon_linux.id
instance_type = "t2.micro"
}

D. data "aws_ami" "amazon_linux" {
most_recent = true
filter {
name = "name"
values = "amzn2-ami-hvm-*-x86_64-gp2"
}
owners = ["137112412989"]
}

resource "aws_instance" "web" {
ami = data.aws_ami.amazon_linux.id
instance_type = "t2.micro"
}

Solution

1. Step 1: Verify correct use of data source for AMI lookup

   data "aws_ami" "amazon_linux" { most_recent = true filter { name = "name" values = ["amzn2-ami-hvm-*-x86_64-gp2"] } owners = ["137112412989"] } resource "aws_instance" "web" { ami = data.aws_ami.amazon_linux.id instance_type = "t2.micro" } correctly uses data "aws_ami" with most_recent = true, proper filter with name = "name" and list for values, and correct owner ID.

2. Step 2: Check instance resource references the data source ID

   The aws_instance resource uses ami = data.aws_ami.amazon_linux.id, which is correct to launch with the looked-up AMI.

3. Final Answer:

   data "aws_ami" "amazon_linux" { most_recent = true filter { name = "name" values = ["amzn2-ami-hvm-*-x86_64-gp2"] } owners = ["137112412989"] } resource "aws_instance" "web" { ami = data.aws_ami.amazon_linux.id instance_type = "t2.micro" } -> Option A

4. Quick Check:

   Data source + resource with correct references = data "aws_ami" "amazon_linux" { most_recent = true filter { name = "name" values = ["amzn2-ami-hvm-*-x86_64-gp2"] } owners = ["137112412989"] } resource "aws_instance" "web" { ami = data.aws_ami.amazon_linux.id instance_type = "t2.micro" } [OK]

Hint: Use data source ID in instance AMI field [OK]

Common Mistakes:

• Using resource instead of data for AMI lookup
• Passing string instead of list in filter values
• Incorrect filter name or owner placement