provider "aws" {
  region = "ap-south-1"
}

# EC2 instance
resource "aws_instance" "ec2_t2-micro" {
  ami                         = "ami-0861f4e788f5069dd"                  # Amazon Linux
  instance_type               = "t2.micro"                               # Instance type
  key_name                    = "kshitij-personal-ed25519"               # SSH keys
  subnet_id                   = "subnet-0f2515644bbe8e603"               # VPC -> Subnet ID
  associate_public_ip_address = true                                     # Public IP for SSH
  vpc_security_group_ids      = [aws_security_group.ec2_ssh_security.id] # VPC security group

  tags = {
    Name = "Test-EC2" # Instance name
  }
}

# Security group (firewall) for allowing incoming SSH connections
resource "aws_security_group" "ec2_ssh_security" {
  name = "allow_ssh" # Firewall rule name

  ingress {
    # Ingress rules (incoming)
    from_port   = 22                     # Starting port range
    to_port     = 22                     # End port range
    protocol    = "tcp"                  # Allowed protocol
    cidr_blocks = ["${var.ssh_ingress}"] # Allowed IP ranges
  }
  egress {
    from_port   = 0             # Starting port range; 0 implies all ports
    to_port     = 0             # End port range; 0 implies all ports
    protocol    = -1            # Allowed protocol; -1 implies all protocols (in HCL)
    cidr_blocks = ["0.0.0.0/0"] # Allowed IP ranges
  }
  # For each protocol, new block; eg. egress { from... to... protocol = "icmp" cidr...}
}

# DynamoDB Table
resource "aws_dynamodb_table" "dynamo-test" {
  name           = "testTable"   # Table name
  billing_mode   = "PROVISIONED" # Specify billing type; PROVISIONED (provisioned billing mode) / PAY_PER_REQUEST (on-demand billing mode)
  read_capacity  = 1             # no. of reads per sec.
  write_capacity = 1             # no. of writes per sec.

  # Attribute
  attribute {
    name = "username" # Col. name
    type = "S"        # Col. type;
    # S -> String, N -> Number, B -> Binary, BOOL -> Boolean, List -> L (ordered collection of values), Map ->M (key-value pairs), Null -> NULL
  }

  hash_key = "username" # Primary key
}