# ALB Load Balancer
resource "aws_lb" "alb" {
name = "<env>-alb"
internal = false # Internet-facing
# internal = true # internal
load_balancer_type = "application"
security_groups = [aws_security_group.alb.id]
subnets = [aws_subnet.public_a.id, aws_subnet.public_b.id, aws_subnet.public_c.id] # Public
# subnets = [aws_subnet.private_a.id, aws_subnet.private_b.id, aws_subnet.private_c.id] # Private
access_logs {
bucket = aws_s3_bucket.s3.id
prefix = "<env>-alb"
enabled = true
}
tags = {
Name = "<env>-alb"
}
}
# ALB Target Group
resource "aws_lb_target_group" "alb-tg"{
name = "<env>-tg"
port = "80"
protocol = "HTTP"
vpc_id = aws_vpc.main.id
target_type = "instance"
health_check {
path = "<Path>"
protocol = "HTTP"
healthy_threshold = 2
unhealthy_threshold = 2
interval = 30
timeout = 5
}
tags = {
Name = "<env>-tg"
}
}
# ALB Listener
resource "aws_lb_listener" "app-alb-listner"{
load_balancer_arn = aws_lb.alb.arn
port = "80"
protocol = "HTTP"
default_action {
type = "forward"
target_group_arn = aws_lb_target_group.alb-tg.arn
}
}
# ALB Attach Server
resource "aws_lb_target_group_attachment" "internal-alb-attach-resource"{
target_group_arn = aws_lb_target_group.alb-tg.arn
target_id = aws_instance.app.id
port = 80
depends_on = [aws_lb_listener.app-alb-listner]
}
# Security Group
resource "aws_security_group" "alb" {
name = "<env>-alb-sg"
vpc_id = aws_vpc.main.id
ingress {
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
from_port = "80"
to_port = "80"
}
egress {
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
from_port = "0"
to_port = "0"
}
tags = {
Name = "<env>-alb-sg"
}
}
output "ALB-SG" {
value = aws_security_group.alb.id
}
output "ALB" {
value = aws_lb.alb.id
}
JSON
복사