Lab → scenario

Terraform resource selection

Pick resources for a VPC with public ALB and private app subnets.

Requirements

Network foundation

aws_vpc + aws_subnet (public/private) + aws_internet_gateway Use default VPC for production One subnet in one AZ only

Load balancer placement

aws_lb in public subnets, internal=false aws_lb internal in private subnets only Public IPs on every EC2 instance

Team collaboration

Remote state in S3 + DynamoDB lock table terraform.tfstate on each laptop only Commit tfstate to git