isaacarnault · August 3, 2024 22:09
diff --git a/A_README.md b/A_README.md
diff --git a/B_INFRASTRUCTURE_OVERVIEW.md b/B_INFRASTRUCTURE_OVERVIEW.md
diff --git a/C_DEPLOYMENT_STEPS.md b/C_DEPLOYMENT_STEPS.md
diff --git a/D_main.tf b/D_main.tf
 terraform {
  required_version = ">= 0.12"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 3.0"
    }
  }
 }

 provider "aws" {
  region = var.aws_region
 }

 module "vpc" {
  source = "terraform-aws-modules/vpc/aws"
  version = "2.21.0"

  name = "s4hana-vpc"
  cidr = "10.0.0.0/16"

  azs             = ["us-west-2a", "us-west-2b"]
  public_subnets  = ["10.0.1.0/24", "10.0.2.0/24"]
  private_subnets = ["10.0.3.0/24", "10.0.4.0/24"]

  enable_nat_gateway = true
  single_nat_gateway = true

  tags = {
    Terraform = "true"
    Environment = "dev"
  }
 }

 module "ec2" {
  source = "./modules/ec2"

  vpc_id     = module.vpc.vpc_id
  subnets    = module.vpc.private_subnets
  ami_id     = var.ami_id
  instance_type = var.instance_type
  key_name   = var.key_name
  security_group_ids = [aws_security_group.sap_s4hana_sg.id]
 }
    module "rds" {
  source = "./rds"

  db_username = var.db_username
  db_password = var.db_password
  vpc_id      = module.vpc.vpc_id
  subnets     = module.vpc.private_subnets
 }

 module "sap" {
  source = "./sap_installation"

  ami_id              = var.ami_id
  instance_type       = var.instance_type
  key_name            = var.key_name
  subnets             = module.vpc.private_subnets
  security_group_ids  = [aws_security_group.sap_s4hana_sg.id]
  db_host             = aws_db_instance.sql_server.address
  db_username         = var.db_username
  db_password         = var.db_password
 }

diff --git a/E_ec2.tf b/E_ec2.tf
 module "ec2" {
  source = "./modules/ec2"

  vpc_id = module.vpc.vpc_id
  subnets = module.vpc.private_subnets
  ami_id = var.ami_id
  instance_type = var.instance_type
  key_name = var.key_name
 }
diff --git a/F_outputs.tf b/F_outputs.tf
 output "vpc_id" {
  value = module.vpc.vpc_id
 }

 output "public_subnets" {
  value = module.vpc.public_subnets
 }

 output "private_subnets" {
  value = module.vpc.private_subnets
 }

 output "ec2_instance_id" {
  value = module.ec2.instance_id
 }
diff --git a/G_providers.tf b/G_providers.tf
 provider "aws" {
  region = var.aws_region
 }
diff --git a/H_variables.tf b/H_variables.tf
 variable "aws_region" {
  description = "The AWS region to deploy resources."
  default     = "us-west-2"
 }

 variable "ami_id" {
  description = "The AMI ID for the EC2 instances."
  default     = "ami-0abcdef1234567890"
 }

 variable "instance_type" {
  description = "The instance type for the EC2 instances."
  default     = "r5.large"
 }

 variable "key_name" {
  description = "The key name for SSH access."
  default     = "my-key"
 }
 variable "db_host" {
  description = "The database host for the SQL Server database."
 }

 variable "db_username" {
  description = "The database username for the SQL Server database."
 }

 variable "db_password" {
  description = "The database password for the SQL Server database."
 }
diff --git a/I_security_groups.tf b/I_security_groups.tf
 resource "aws_security_group" "sap_s4hana_sg" {
  name_prefix = "sap-s4hana-sg"
  vpc_id      = module.vpc.vpc_id

  ingress {
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  ingress {
    from_port   = 80
    to_port     = 80
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }

  tags = {
    Name = "sap-s4hana-sg"
  }
 }
  resource "aws_security_group" "sql_server_sg" {
  name_prefix = "sql-server-sg"
  vpc_id      = module.vpc.vpc_id

  ingress {
    from_port   = 1433
    to_port     = 1433
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }

  tags = {
    Name = "sql-server-sg"
  }
 }

diff --git a/J_sap_installation.tf b/J_sap_installation.tf
 resource "aws_instance" "sap_s4hana" {
  ami           = var.ami_id
  instance_type = var.instance_type
  key_name      = var.key_name
  subnet_id     = element(var.subnets, 0)
  user_data     = file("userdata.sh")

  vpc_security_group_ids = var.security_group_ids

  tags = {
    Name = "SAP S/4HANA"
  }
 }
diff --git a/K_rds.tf b/K_rds.tf
 resource "aws_db_instance" "sql_server" {
  allocated_storage       = 100
  storage_type            = "gp2"
  engine                  = "sqlserver-se"
  engine_version          = "14.00.1000.169.v1"
  instance_class          = "db.m4.large"
  name                    = "sapdb"
  username                = var.db_username
  password                = var.db_password
  db_subnet_group_name    = module.vpc.database_subnet_group
  vpc_security_group_ids  = [aws_security_group.sql_server_sg.id]
  multi_az                = false
  publicly_accessible     = false

  tags = {
    Name = "sap-s4hana-db"
  }
 }
diff --git a/L_userdata.sh b/L_userdata.sh
 #!/bin/bash

 # Update and install necessary packages
 sudo yum update -y
 sudo yum install -y wget unzip java-1.8.0-openjdk.x86_64

 # Download SAP S/4HANA installer (replace with actual download link)
 wget -O /tmp/sap_installer.zip "http://example.com/sap_installer.zip"
 unzip /tmp/sap_installer.zip -d /tmp/sap_installer

 # Example configuration commands
 # Adjust these commands based on the actual SAP S/4HANA installation process

 # Run the installer
 cd /tmp/sap_installer
 ./install.sh --database-host ${db_host} --database-port 1433 --database-name sapdb --database-username ${db_username} --database-password ${db_password}

 # Clean up
 rm -rf /tmp/sap_installer.zip /tmp/sap_installer
diff --git a/M_LICENSE b/M_LICENSE
 MIT License

 Copyright (c) 2024 Isaac Arnault, PhD

 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:

 The above copyright notice and this permission notice shall be included in all
 copies or substantial portions of the Software.

 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
	terraform {
	required_version = ">= 0.12"
	required_providers {
	aws = {
	source = "hashicorp/aws"
	version = "~> 3.0"
	}
	}
	}

	provider "aws" {
	region = var.aws_region
	}

	module "vpc" {
	source = "terraform-aws-modules/vpc/aws"
	version = "2.21.0"

	name = "s4hana-vpc"
	cidr = "10.0.0.0/16"

	azs = ["us-west-2a", "us-west-2b"]
	public_subnets = ["10.0.1.0/24", "10.0.2.0/24"]
	private_subnets = ["10.0.3.0/24", "10.0.4.0/24"]

	enable_nat_gateway = true
	single_nat_gateway = true

	tags = {
	Terraform = "true"
	Environment = "dev"
	}
	}

	module "ec2" {
	source = "./modules/ec2"

	vpc_id = module.vpc.vpc_id
	subnets = module.vpc.private_subnets
	ami_id = var.ami_id
	instance_type = var.instance_type
	key_name = var.key_name
	security_group_ids = [aws_security_group.sap_s4hana_sg.id]
	}
	module "rds" {
	source = "./rds"

	db_username = var.db_username
	db_password = var.db_password
	vpc_id = module.vpc.vpc_id
	subnets = module.vpc.private_subnets
	}

	module "sap" {
	source = "./sap_installation"

	ami_id = var.ami_id
	instance_type = var.instance_type
	key_name = var.key_name
	subnets = module.vpc.private_subnets
	security_group_ids = [aws_security_group.sap_s4hana_sg.id]
	db_host = aws_db_instance.sql_server.address
	db_username = var.db_username
	db_password = var.db_password
	}
	output "vpc_id" {
	value = module.vpc.vpc_id
	}

	output "public_subnets" {
	value = module.vpc.public_subnets
	}

	output "private_subnets" {
	value = module.vpc.private_subnets
	}

	output "ec2_instance_id" {
	value = module.ec2.instance_id
	}
	variable "aws_region" {
	description = "The AWS region to deploy resources."
	default = "us-west-2"
	}

	variable "ami_id" {
	description = "The AMI ID for the EC2 instances."
	default = "ami-0abcdef1234567890"
	}

	variable "instance_type" {
	description = "The instance type for the EC2 instances."
	default = "r5.large"
	}

	variable "key_name" {
	description = "The key name for SSH access."
	default = "my-key"
	}
	variable "db_host" {
	description = "The database host for the SQL Server database."
	}

	variable "db_username" {
	description = "The database username for the SQL Server database."
	}

	variable "db_password" {
	description = "The database password for the SQL Server database."
	}
	resource "aws_security_group" "sap_s4hana_sg" {
	name_prefix = "sap-s4hana-sg"
	vpc_id = module.vpc.vpc_id

	ingress {
	from_port = 22
	to_port = 22
	protocol = "tcp"
	cidr_blocks = ["0.0.0.0/0"]
	}

	ingress {
	from_port = 80
	to_port = 80
	protocol = "tcp"
	cidr_blocks = ["0.0.0.0/0"]
	}

	egress {
	from_port = 0
	to_port = 0
	protocol = "-1"
	cidr_blocks = ["0.0.0.0/0"]
	}

	tags = {
	Name = "sap-s4hana-sg"
	}
	}
	resource "aws_security_group" "sql_server_sg" {
	name_prefix = "sql-server-sg"
	vpc_id = module.vpc.vpc_id

	ingress {
	from_port = 1433
	to_port = 1433
	protocol = "tcp"
	cidr_blocks = ["0.0.0.0/0"]
	}

	egress {
	from_port = 0
	to_port = 0
	protocol = "-1"
	cidr_blocks = ["0.0.0.0/0"]
	}

	tags = {
	Name = "sql-server-sg"
	}
	}
	resource "aws_instance" "sap_s4hana" {
	ami = var.ami_id
	instance_type = var.instance_type
	key_name = var.key_name
	subnet_id = element(var.subnets, 0)
	user_data = file("userdata.sh")

	vpc_security_group_ids = var.security_group_ids

	tags = {
	Name = "SAP S/4HANA"
	}
	}
	resource "aws_db_instance" "sql_server" {
	allocated_storage = 100
	storage_type = "gp2"
	engine = "sqlserver-se"
	engine_version = "14.00.1000.169.v1"
	instance_class = "db.m4.large"
	name = "sapdb"
	username = var.db_username
	password = var.db_password
	db_subnet_group_name = module.vpc.database_subnet_group
	vpc_security_group_ids = [aws_security_group.sql_server_sg.id]
	multi_az = false
	publicly_accessible = false

	tags = {
	Name = "sap-s4hana-db"
	}
	}
	#!/bin/bash

	# Update and install necessary packages
	sudo yum update -y
	sudo yum install -y wget unzip java-1.8.0-openjdk.x86_64

	# Download SAP S/4HANA installer (replace with actual download link)
	wget -O /tmp/sap_installer.zip "http://example.com/sap_installer.zip"
	unzip /tmp/sap_installer.zip -d /tmp/sap_installer

	# Example configuration commands
	# Adjust these commands based on the actual SAP S/4HANA installation process

	# Run the installer
	cd /tmp/sap_installer
	./install.sh --database-host ${db_host} --database-port 1433 --database-name sapdb --database-username ${db_username} --database-password ${db_password}

	# Clean up
	rm -rf /tmp/sap_installer.zip /tmp/sap_installer
	MIT License

	Copyright (c) 2024 Isaac Arnault, PhD

	Permission is hereby granted, free of charge, to any person obtaining a copy
	of this software and associated documentation files (the "Software"), to deal
	in the Software without restriction, including without limitation the rights
	to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	copies of the Software, and to permit persons to whom the Software is
	furnished to do so, subject to the following conditions:

	The above copyright notice and this permission notice shall be included in all
	copies or substantial portions of the Software.

	THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
	AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
	SOFTWARE.