Step 1: Create IAM User

1. Log into the AWS Console
2. Navigate to IAM service
3. Click Users in the left sidebar
4. Click Create User
5. Enter username: devops-demo-user
6. Check Provide user access to the AWS Management Console (optional)
7. Click Next

Step 2: Attach Permissions

1. Select Attach policies directly
2. Search for and select AdministratorAccess
3. Click Next
4. Review and click Create User

Note: AdministratorAccess is used for simplicity in this demo. In production, use more restrictive policies.

Step 3: Create Access Keys

1. Click on your newly created user
2. Go to the Security credentials tab
3. Scroll down to Access keys
4. Click Create access key
5. Select Command Line Interface (CLI)
6. Check the confirmation checkbox
7. Click Next
8. Add description (optional): DevOps Demo CLI Access
9. Click Create access key
10. ⚠️ Important: Copy both the Access Key ID and Secret Access Key immediately!

Configure AWS CLI

Run the following command and enter your credentials when prompted:

aws configure

Enter These Values

Verify Configuration

Test your configuration by checking your identity:

aws sts get-caller-identity

This should return your AWS account ID and user ARN.

Create Each Repository

Follow these steps for each of the 3 repositories:

1. Go to github.com/new
2. Enter the repository name (see list below)
3. Set visibility to Private (recommended for AWS keys)
4. Check Add a README file
5. Click Create repository

What You'll See:

Infrastructure Repository

Backend Repository

Frontend Repository

Clone Repositories Locally

Replace [username] with your GitHub username:

# Create a folder for all projects
mkdir devops-demo
cd devops-demo

# Clone all repositories
git clone https://github.com/[username]/devops-demo-infrastructure.git
git clone https://github.com/[username]/devops-demo-backend.git
git clone https://github.com/[username]/devops-demo-frontend.git

# Verify all folders exist
ls -la

1. Create FastAPI app

File: devops-demo-backend/app/main.py

from fastapi import FastAPI, HTTPException
from fastapi.middleware.cors import CORSMiddleware
import os
import json
import psycopg2
from psycopg2.extras import RealDictCursor

app = FastAPI()
app.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"])

# ... (truncated for brevity)

2. Add dependencies

File: requirements.txt

fastapi==0.104.1
uvicorn==0.24.0
psycopg2-binary==2.9.9

3. Setup directories and secrets

cd devops-demo-backend
mkdir app .github .github/workflows

GitHub Actions CI/CD Pipeline

The backend uses a fully automated CI/CD pipeline that builds, tests, and deploys your FastAPI application to AWS ECS.

4. Deploy

git add .
git commit -m "Add backend"
git push origin main

1. Get backend IP

# Get task ARN
aws ecs list-tasks --cluster demo-cluster --service demo-app --desired-status RUNNING --query 'taskArns[0]' --output text --region us-east-1

# Get network interface ID (use task ARN from above)
aws ecs describe-tasks --cluster demo-cluster --tasks [TASK_ARN] --region us-east-1 --query 'tasks[0].attachments[0].details[?name==`networkInterfaceId`].value[0]' --output text

# Get public IP (use network interface ID from above)
aws ec2 describe-network-interfaces --network-interface-ids [NETWORK_INTERFACE_ID] --region us-east-1 --query 'NetworkInterfaces[0].Association.PublicIp' --output text

2. Setup and deploy

cd devops-demo-frontend
mkdir .github .github/workflows
git add .
git commit -m "Add frontend"
git push origin main

GitHub Actions Static Website Deployment

The frontend uses a streamlined deployment pipeline that builds and uploads your static website directly to AWS S3.

Common Terraform Errors

GitHub Actions Issues

ECS IAM Permissions Debug

# Check service status
aws ecs describe-services --cluster demo-cluster --services demo-app --region us-east-1

# Check stopped tasks for error details
aws ecs list-tasks --cluster demo-cluster --desired-status STOPPED --region us-east-1
aws ecs describe-tasks --cluster demo-cluster --tasks [TASK_ARN] --region us-east-1

resource "aws_iam_role_policy" "execution_ssm" {
  name = "ssm-access"
  role = aws_iam_role.execution.id
  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [{
      Effect = "Allow"
      Action = [
        "ssm:GetParameter",
        "ssm:GetParameters"  # Added this line
      ]
      Resource = [aws_ssm_parameter.db_url.arn]
    }]
  })
}

Connection Issues

Error Examples:

Terraform Error Example

Error Resolution