Managing Multi-Cloud Environments with Terraform

Learn how to effectively manage infrastructure across multiple cloud providers using Terraform. This guide covers best practices, patterns, and real-world examples.

$1

1. Avoid vendor lock-in

2. Leverage best-of-breed services

3. Improve reliability and redundancy

4. Optimize costs

5. Meet compliance requirements

$1

``hcl

`AWS Provider Configuration`


provider "aws" {
  region = "us-west-2"
  alias  = "west"
}
provider "aws" {
  region = "us-east-1"
  alias  = "east"
}
Azure Provider Configuration
provider "azurerm" {
  features {}
  subscription_id = var.azure_subscription_id
  tenant_id       = var.azure_tenant_id
}
Google Cloud Provider Configuration
provider "google" {
  project = var.gcp_project_id
  region  = "us-central1"
}

`$1`

multi-cloud/

├── providers/

│ ├── aws.tf

│ ├── azure.tf

│ └── gcp.tf

├── modules/

│ ├── networking/

│ │ ├── aws/

│ │ ├── azure/

│ │ └── gcp/

│ └── compute/

│ ├── aws/

│ ├── azure/

│ └── gcp/

├── environments/

│ ├── dev/

│ └── prod/

└── variables.tf

`$1`

`hcl

`AWS VPC`


resource "aws_vpc" "main" {
  provider = aws.west
  cidr_block = "10.0.0.0/16"
  
  tags = {
    Name = "aws-vpc"
  }
}
Azure Virtual Network
resource "azurerm_virtual_network" "main" {
  name                = "azure-vnet"
  resource_group_name = azurerm_resource_group.main.name
  location            = azurerm_resource_group.main.location
  address_space       = ["172.16.0.0/16"]
}
GCP VPC
resource "google_compute_network" "main" {
  name                    = "gcp-vpc"
  auto_create_subnetworks = false
}
VPC Peering
resource "aws_vpc_peering_connection" "aws_azure" {
  provider    = aws.west
  vpc_id      = aws_vpc.main.id
  peer_vpc_id = azurerm_virtual_network.main.id
}

`$1`

`hcl

`AWS Load Balancer`


resource "aws_lb" "main" {
  provider           = aws.west
  name               = "aws-lb"
  internal           = false
  load_balancer_type = "application"
  subnets            = aws_subnet.public[*].id
}
Azure Load Balancer
resource "azurerm_lb" "main" {
  name                = "azure-lb"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name
  sku                 = "Standard"
}
GCP Load Balancer
resource "google_compute_global_forwarding_rule" "main" {
  name       = "gcp-lb"
  target     = google_compute_target_http_proxy.main.self_link
  port_range = "80"
}

`$1`

`hcl

`AWS S3`


resource "aws_s3_bucket" "main" {
  provider = aws.west
  bucket   = "multi-cloud-storage"
}
Azure Blob Storage
resource "azurerm_storage_account" "main" {
  name                     = "multicloudstorage"
  resource_group_name      = azurerm_resource_group.main.name
  location                 = azurerm_resource_group.main.location
  account_tier             = "Standard"
  account_replication_type = "GRS"
}
Google Cloud Storage
resource "google_storage_bucket" "main" {
  name     = "multi-cloud-storage"
  location = "US"
}

`$1`

`hcl

`AWS RDS`


resource "aws_db_instance" "main" {
  provider          = aws.west
  identifier        = "multi-cloud-db"
  engine            = "postgres"
  instance_class    = "db.t3.medium"
  allocated_storage = 20
}
Azure Database
resource "azurerm_postgresql_server" "main" {
  name                = "multi-cloud-db"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name
  sku_name           = "GP_Gen5_2"
  version            = "11"
}
Google Cloud SQL
resource "google_sql_database_instance" "main" {
  name             = "multi-cloud-db"
  database_version = "POSTGRES_11"
  region           = "us-central1"
}

`$1`

`hcl

`AWS IAM`


resource "aws_iam_role" "multi_cloud" {
  provider = aws.west
  name     = "multi-cloud-role"
  
  assume_role_policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Action = "sts:AssumeRole"
        Effect = "Allow"
        Principal = {
          Service = "ec2.amazonaws.com"
        }
      }
    ]
  })
}
Azure Role Assignment
resource "azurerm_role_assignment" "multi_cloud" {
  scope                = azurerm_resource_group.main.id
  role_definition_name = "Contributor"
  principal_id         = data.azurerm_client_config.current.object_id
}
GCP IAM
resource "google_project_iam_member" "multi_cloud" {
  project = var.gcp_project_id
  role    = "roles/editor"
  member  = "user:${var.gcp_user_email}"
}

`$1`

`hcl

`AWS Security Group`


resource "aws_security_group" "main" {
  provider = aws.west
  vpc_id   = aws_vpc.main.id
  
  ingress {
    from_port   = 443
    to_port     = 443
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }
}
Azure Network Security Group
resource "azurerm_network_security_group" "main" {
  name                = "multi-cloud-nsg"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name
}
GCP Firewall Rule
resource "google_compute_firewall" "main" {
  name    = "multi-cloud-firewall"
  network = google_compute_network.main.name
  
  allow {
    protocol = "tcp"
    ports    = ["443"]
  }
}

`$1`

`hcl

`AWS CloudWatch`


resource "aws_cloudwatch_dashboard" "multi_cloud" {
  provider = aws.west
  dashboard_name = "multi-cloud-dashboard"
  
  dashboard_body = jsonencode({
    widgets = [
      {
        type = "metric"
        properties = {
          metrics = [
            ["AWS/EC2", "CPUUtilization"]
          ]
        }
      }
    ]
  })
}
Azure Monitor
resource "azurerm_monitor_action_group" "main" {
  name                = "multi-cloud-alerts"
  resource_group_name = azurerm_resource_group.main.name
  short_name          = "multicloud"
}
GCP Monitoring
resource "google_monitoring_dashboard" "main" {
  dashboard_json = jsonencode({
    displayName = "Multi-Cloud Dashboard"
    gridLayout = {
      widgets = []
    }
  })
}

`$1`

`hcl

`AWS Budgets`


resource "aws_budgets_budget" "multi_cloud" {
  provider       = aws.west
  name          = "multi-cloud-budget"
  budget_type   = "COST"
  limit_amount  = "1000"
  limit_unit    = "USD"
  time_unit     = "MONTHLY"
}
Azure Cost Management
resource "azurerm_consumption_budget_resource_group" "main" {
  name              = "multi-cloud-budget"
  resource_group_id = azurerm_resource_group.main.id
  amount            = 1000
  time_grain        = "Monthly"
}

`$1`

1. Use Workspaces

`hcl

terraform {

backend "s3" {

bucket = "terraform-state"

key = "multi-cloud/${terraform.workspace}/terraform.tfstate"

region = "us-west-2"

}

2. Modular Design

`hcl

module "aws_infrastructure" {

source = "./modules/aws"

providers = {

aws = aws.west

}

module "azure_infrastructure" {

source = "./modules/azure"

}

module "gcp_infrastructure" {

source = "./modules/gcp"

}

3. Variable Management

`hcl

variable "cloud_regions" {

type = map(object({

aws = string

azure = string

gcp = string

}))

default = {

us = {

aws = "us-west-2"

azure = "westus2"

gcp = "us-central1"

}

$1

Managing multi-cloud infrastructure requires:

1. Proper planning and architecture

2. Consistent naming and tagging

3. Centralized state management

4. Robust security practices

5. Comprehensive monitoring

Remember to:

Keep configurations DRY

Use consistent patterns across providers

Implement proper security controls

Monitor costs across all providers

Maintain documentation

$1

Here are essential resources for managing multi-cloud environments with Terraform:

1. [Terraform Multi-Cloud Documentation](https://www.terraform.io/docs/language/providers/configuration.html) - Official guide to multiple providers

2. [AWS Provider Documentation](https://registry.terraform.io/providers/hashicorp/aws/latest/docs) - AWS provider reference

3. [Azure Provider Documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs) - Azure provider reference

4. [Google Cloud Provider Documentation](https://registry.terraform.io/providers/hashicorp/google/latest/docs) - GCP provider reference

5. [Multi-Cloud Architecture](https://www.hashicorp.com/resources/multi-cloud-infrastructure-automation-terraform) - HashiCorp's guide to multi-cloud

6. [Cloud Migration Strategies](https://www.hashicorp.com/resources/cloud-migration-strategies-terraform) - Guide to cloud migration

7. [Terraform Workspaces](https://www.terraform.io/docs/language/state/workspaces.html) - Managing multiple environments

8. [Remote State Management](https://www.terraform.io/docs/language/state/remote.html) - Managing state across clouds

9. [Multi-Cloud Security](https://www.hashicorp.com/resources/securing-multi-cloud-infrastructure) - Security best practices

These resources provide comprehensive information about managing infrastructure across multiple cloud providers.

TL;DR

Managing Multi-Cloud Environments with Terraform

$1

$1

AWS Provider Configuration

Azure Provider Configuration

Google Cloud Provider Configuration

$1

$1

$1

AWS VPC

Azure Virtual Network

GCP VPC

VPC Peering

$1

AWS Load Balancer

Azure Load Balancer

GCP Load Balancer

$1

$1

AWS S3

Azure Blob Storage

Google Cloud Storage

$1

AWS RDS

Azure Database

Google Cloud SQL

$1

$1

AWS IAM

Azure Role Assignment

GCP IAM

$1

AWS Security Group

Azure Network Security Group

GCP Firewall Rule

$1

$1

AWS CloudWatch

Azure Monitor

GCP Monitoring

$1

AWS Budgets

Azure Cost Management

$1

$1

$1

Why This Matters

Trade-offs to Consider

When NOT to Use This

Decision Framework

Related Articles

How to Write Your First Terraform Script for AWS Infrastructure

Terraform Basics: A Comprehensive Guide to Infrastructure as Code

Terraform Modules: Building Reusable Infrastructure Components

`AWS Provider Configuration`

`$1`

`$1`

`$1`

`AWS VPC`

`$1`

`AWS Load Balancer`

`$1`

`$1`

`AWS S3`

`$1`

`AWS RDS`

`$1`

`$1`

`AWS IAM`

`$1`

`AWS Security Group`

`$1`

`$1`

`AWS CloudWatch`

`$1`

`AWS Budgets`

`$1`