{title &&

{title}

}

{children}

; }; The [Superblocks Terraform module for AWS](https://registry.terraform.io/modules/superblocksteam/superblocks/aws/latest) deploys the data plane as an ECS Fargate service and configures all the required infrastructure to expose it to end users in Superblocks. ## Deploy with Terraform Follow the steps below to deploy the data plane on ECS Fargate using Terraform. ### Install prerequisites * Install [Terraform](https://developer.hashicorp.com/terraform/tutorials/aws-get-started/install-cli) * Install [AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) and configure [AWS Credentials](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html) file Do not use root user credentials when deploying the data plane. To learn more about best practices for managing access keys, visit the AWS docs here. ### Create Terraform file To get started, navigate to the [Setup Wizard](https://app.superblocks.com/opas) to generate a `superblocks_agent_key`. We recommend following secret management best practices such as using environment variables, encrypted files, or a secret store to securely pass the `superblocks_agent_key` into your Terraform code. ```hcl theme={null} module "terraform_aws_superblocks" { source = "superblocksteam/superblocks/aws" version = "~>1.0" vpc_id = "[VPC_ID]" lb_subnet_ids = "[LIST_OF_SUBNET_IDS_FOR_LOAD_BALANCER]" ecs_subnet_ids = "[LIST_OF_SUBNET_IDS_FOR_SUPERBLOCKS_DATA_PLANE_ECS_CLUSTER]" domain = "[DOMAIN]" subdomain = "[SUBDOMAIN_FOR_SUPERBLOCKS_DATA_PLANE]" superblocks_agent_key = "[YOUR_AGENT_KEY]" } ``` If you use the EU Superblocks instance, also set superblocks\_agent\_data\_domain = "eu.superblocks.com". By default, the module deploys the data plane within an existing VPC (where your underlying data sources live). To find your VPC details, use `aws ec2 describe-vpcs` or navigate to your VPC in the AWS management console. Alternatively, if you want your agent to access data across multiple VPCs, update the module to create a new VPC then set up VPC peering between the newly configured VPC and existing AWS VPCs. To update the module to create a new VPC, set the following variable. ```hcl theme={null} create_vpc = true ``` For more details on configuring VPC peering see [Connect VPCs using VPC peering](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-peering.html). For all available configuration options, see the [Terraform registry](https://registry.terraform.io/modules/superblocksteam/superblocks/aws/latest). ### Initialize and apply Terraform ```bash theme={null} terraform init terraform apply ``` Note, the Terraform script may fail if you have reached your AWS Service Limits. For more information on managing your AWS account limits, visit [Managing AWS Service Quotas](https://aws.amazon.com/premiumsupport/knowledge-center/manage-service-limits/). ## Billable services The Terraform module makes use of the following AWS services. Be aware of the pricing associated with these. * [VPC](https://aws.amazon.com/vpc/pricing/) - Network where all cloud resources reside (may be additional cost depending on settings and connecting VPN) * [ECS Fargate](https://aws.amazon.com/fargate/pricing/) - ECS cluster, service, and task to run the data plane container * [Application Load Balancer](https://aws.amazon.com/elasticloadbalancing/pricing/?nc=sn\&loc=3) - ALB to front the Fargate service * [Route 53](https://aws.amazon.com/route53/pricing/) - Hosted zone and record for DNS (optional)