{"id":3195,"date":"2022-10-31T15:50:01","date_gmt":"2022-10-31T06:50:01","guid":{"rendered":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/?p=3195"},"modified":"2022-10-31T15:51:49","modified_gmt":"2022-10-31T06:51:49","slug":"terraform-apply-safely","status":"publish","type":"post","link":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/blog\/2022\/10\/31\/terraform-apply-safely\/","title":{"rendered":"terraform apply\u3092\u3088\u308a\u5b89\u5168\u306b\u5b9f\u884c\u3059\u308b\u305f\u3081\u306b\u3067\u304d\u308b\u3053\u3068"},"content":{"rendered":"\n<h3 id=\"outline__1\">\u306f\u3058\u3081\u306b<\/h3>\n\n\n\n<p>\u897f\u85e4\u3067\u3059\u3002<br>\u5f53\u793e\u3067\u306fTerraform\u3092\u6d3b\u7528\u3057\u3066AWS\u30af\u30e9\u30a6\u30c9\u4e0a\u3067\u306e\u30a4\u30f3\u30d5\u30e9\u69cb\u7bc9\u3092\u6570\u591a\u304f\u884c\u3063\u3066\u304a\u308a\u307e\u3059\u3002<br>IaC\uff08Infrastructure as Code\uff09\u5316\u304c\u9032\u3080\u3053\u3068\u306b\u3088\u308a\u30a4\u30f3\u30d5\u30e9\u69cb\u6210\u306e\u518d\u6d3b\u7528\u304c\u9032\u307f\u3001\u307e\u305f\u8fc5\u901f\u306a\u30d4\u30a2\u30ec\u30d3\u30e5\u30fc\u3082\u3084\u308a\u3084\u3059\u304f\u306a\u308a\u3001\u5b9f\u88c5\u30b9\u30d4\u30fc\u30c9\u304c\u4e0a\u304c\u308b\u3053\u3068\u3092\u65e5\u3005\u5b9f\u611f\u3057\u3066\u304a\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u305f\u3060\u3057\u3001IaC\u306f\u305d\u306e\u4e07\u80fd\u3055\u3086\u3048\u306b\u3001\u4e88\u671f\u305b\u306c\u5f62\u3067\u306e\u4e8b\u6545\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u307e\u305f\u3001\u300cterraform plan\u3067\u306f\u554f\u984c\u306a\u304b\u3063\u305f\u306e\u306bterraform apply\u3092\u3057\u305f\u3089\u5931\u6557\u3057\u3066\u614c\u3066\u305f\u300d\u3068\u3044\u3046\u7d4c\u9a13\u3092\u304a\u6301\u3061\u306e\u65b9\u3082\u3044\u3089\u3063\u3057\u3083\u308b\u306e\u3067\u306f\u306a\u3044\u3067\u3057\u3087\u3046\u304b\uff1f<\/p>\n\n\n\n<p>\u4eca\u56de\u306f\u3001\u305d\u3046\u3044\u3063\u305fterraform apply\u3092\u5b9f\u884c\u3059\u308b\u969b\u306e\u4e0d\u5b89\u3092\u6e1b\u3089\u3057\u3001\u3088\u308a\u5b89\u5168\u306b\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u306e\u65b9\u6cd5\u3092\u8003\u3048\u3066\u307f\u307e\u3059\u3002<\/p>\n\n\n\n<h3 id=\"outline__2\">1. Terraform \u6a19\u6e96\u30b3\u30de\u30f3\u30c9\u3092\u4f7f\u3046<\/h3>\n\n\n\n<p>\u307e\u305a\u306f\u3001Terraform\u3092\u4f7f\u3063\u305f\u69cb\u7bc9\u306e\u30b9\u30bf\u30f3\u30c0\u30fc\u30c9\u306a\u6d41\u308c\u3060\u3068\u601d\u3044\u307e\u3059\u304c\u3001Terraform\u306e\u30b3\u30fc\u30c9\u3092\u66f8\u3044\u305f\u3089\u3001\u6a19\u6e96\u306e\u30b3\u30de\u30f3\u30c9\u3092\u4f7f\u3063\u3066\u8a18\u8ff0\u3057\u305f\u5185\u5bb9\u3092\u30c1\u30a7\u30c3\u30af\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<ul><li>\u30b3\u30fc\u30c9\u3092\u66f8\u304f\u2192fmt\u3084validate, plan\u3092\u4f7f\u3063\u3066\u4fee\u6b63\u3059\u308b\u2192\u78ba\u5b9a\u3057\u305f\u3089\u3001apply<\/li><\/ul>\n\n\n\n<p>\u3068\u3044\u3046\u306e\u304c\u57fa\u672c\u7684\u306a\u6d41\u308c\u3067\u3001\u591a\u304f\u306eTerraform\u5229\u7528\u8005\u304c\u5b9f\u8df5\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3068\u601d\u3044\u307e\u3059\u3002<br>\u305d\u308c\u3089\u306e\u30b3\u30de\u30f3\u30c9\u3092\u6398\u308a\u4e0b\u3052\u3066\u307f\u307e\u3059\u3002<\/p>\n\n\n\n<h4 id=\"outline__2_1\">terraform fmt<\/h4>\n\n\n\n<p><code>terraform fmt<\/code>\u30b3\u30de\u30f3\u30c9\u306f\u8a18\u8ff0\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u6b63\u898f\u306e\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u3068\u30b9\u30bf\u30a4\u30eb\u306b\u5408\u308f\u305b\u3066\u6574\u5f62\u3092\u3057\u3066\u304f\u308c\u307e\u3059\u3002<\/p>\n\n\n\n<p><a href=\"https:\/\/www.terraform.io\/cli\/commands\/fmt\">https:\/\/www.terraform.io\/cli\/commands\/fmt<\/a><\/p>\n\n\n\n<p>\u305f\u3068\u3048\u3070\u3001<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>resource &quot;aws_instance&quot; &quot;web&quot; {\nami = &quot;ami-078296f82eb463377&quot;\ninstance_type = &quot;t3.micro&quot;\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u3044\u3063\u305f\u30a4\u30f3\u30c7\u30f3\u30c8\u304c\u63c3\u3063\u3066\u3044\u306a\u3044\u30b3\u30fc\u30c9\u304c\u3042\u308c\u3070<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform fmt\ntest.tf<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u3044\u3046\u5177\u5408\u306b<code>terraform fmt<\/code>\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u3067\u3001<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>resource &quot;aws_instance&quot; &quot;web&quot; {\n  ami           = &quot;ami-078296f82eb463377&quot;\n  instance_type = &quot;t3.micro&quot;\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u306e\u3088\u3046\u306b\u30a4\u30f3\u30c7\u30f3\u30c8\u304c\u6574\u7406\u3055\u308c\u305f\u30b3\u30fc\u30c9\u306b\u66f8\u304d\u63db\u3048\u3066\u304f\u308c\u307e\u3059\u3002<br>\u3053\u308c\u306b\u3088\u308a\u3001\u30b3\u30fc\u30c9\u306e\u898b\u3048\u65b9\u304c\u4e00\u5b9a\u3057\u305f\u3082\u306e\u306b\u306a\u308a\u307e\u3059\u306e\u3067\u3001\u81ea\u8eab\u3067\u306e\u30b3\u30fc\u30c9\u306e\u78ba\u8a8d\u3084\u30d4\u30a2\u30ec\u30d3\u30e5\u30fc\u3092\u884c\u3046\u969b\u306b\u6307\u6458\u3059\u3079\u304d\u4e8b\u9805\u306e\u898b\u9003\u3057\u9632\u6b62\u306b\u3064\u306a\u304c\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<h4 id=\"outline__2_2\">terraform validate<\/h4>\n\n\n\n<p>\u6b21\u306b\u3001<code>terraform validate<\/code>\u30b3\u30de\u30f3\u30c9\u3067\u8a18\u8ff0\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u304c\u69cb\u6587\u7684\u306b\u6b63\u3057\u3044\u304b\u306a\u3069\u306e\u691c\u67fb\u3092\u884c\u3044\u307e\u3059\u3002<br>\u3068\u304f\u306bmodule\u3092\u4f7f\u3063\u3066\u5024\u306e\u5f15\u304d\u6e21\u3057\u3092\u3059\u308b\u969b\u306e\u30c1\u30a7\u30c3\u30af\u306b\u52b9\u679c\u7684\u3068\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p><a href=\"https:\/\/www.terraform.io\/cli\/commands\/validate\">https:\/\/www.terraform.io\/cli\/commands\/validate<\/a><\/p>\n\n\n\n<p>\u305f\u3068\u3048\u3070<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>.\n\u251c\u2500\u2500 modules\n\u2502   \u2514\u2500\u2500 web\n\u2502       \u251c\u2500\u2500 inputs.tf\n\u2502       \u251c\u2500\u2500 main.tf\n\u2502       \u2514\u2500\u2500 outputs.tf\n\u2514\u2500\u2500 test.tf<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u8a00\u3046\u3088\u3046\u306a\u69cb\u6210\u3092\u3057\u3066\u3044\u3066\u3001<br>\u547c\u3073\u51fa\u3057\u5143\u306e\u3001test.tf\u3067\u306f<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>module &quot;web&quot; {\n  source        = &quot;.\/modules\/web&quot;\n  ami           = &quot;aami-078296f82eb463377&quot;        #\u308f\u3056\u3068\u8aa4\u3063\u305f\u8a18\u8f09\u3092\u5165\u308c\u3066\u3044\u308b\n  instance_type = &quot;t2.micro&quot;                  #\u308f\u3056\u3068\u8aa4\u3063\u305f\u8a18\u8f09\u3092\u5165\u308c\u3066\u3044\u308b\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u306e\u3088\u3046\u306b\u66f8\u304d\u3001<br><code>modules\/web\/inputs.tf<\/code>\u3067\u306f<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"modules\/web\/inputs.tf\"><code># ami for web server\nvariable &quot;ami&quot; {\n  description = &quot;AMI for web server&quot;\n  type        = string\n\n  validation {\n    condition     = can(regex(&quot;^ami-&quot;, var.ami))\n    error_message = &quot;AMI \u306f &#39;ami-&#39; \u304b\u3089\u306f\u3058\u307e\u308b\u6587\u5b57\u5217\u3067\u3042\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002&quot;\n  }\n}\n\n# instance type for web server\nvariable &quot;instance_type&quot; {\n  description = &quot;Instance type for web server&quot;\n  type        = string\n\n  validation {\n    condition     = can(regex(&quot;^t3&quot;, var.instance_type))\n    error_message = &quot;Instance type \u306f &#39;t3&#39; \u304b\u3089\u306f\u3058\u307e\u308b\u30bf\u30a4\u30d7\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002&quot;\n  }\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u306e\u3088\u3046\u306bAMI\u3084\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30bf\u30a4\u30d7\u306b\u6307\u5b9a\u3055\u308c\u308b\u6587\u5b57\u5217\u306b\u5bfe\u3057\u3066\u3001\u6b63\u898f\u8868\u73fe\u3092\u4f7f\u3063\u3066\u6761\u4ef6\u3092\u5b9a\u7fa9\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u305d\u3057\u3066\u3001<code>modules\/web\/main.tf<\/code>\u3067\u306f<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"modules\/web\/main.tf\"><code>resource &quot;aws_instance&quot; &quot;web&quot; {\n  ami           = var.ami\n  instance_type = var.instance_type\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u3057\u305f\u3068\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3053\u306e\u969b\u306b <code>terraform validate<\/code>\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3068<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform validate\n\u2577\n\u2502 Error: Invalid value for variable\n\u2502 \n\u2502   on test.tf line 3, in module &quot;web&quot;:\n\u2502    3:   ami           = &quot;aami-078296f82eb463377&quot;      #\u308f\u3056\u3068\u8aa4\u3063\u305f\u8a18\u8f09\u3092\u5165\u308c\u3066\u3044\u308b\n\u2502     \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\u2502     \u2502 var.ami is &quot;aami-078296f82eb463377&quot;\n\u2502 \n\u2502 AMI \u306f &#39;ami-&#39; \u304b\u3089\u306f\u3058\u307e\u308b\u6587\u5b57\u5217\u3067\u3042\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\n\u2502 \n\u2502 This was checked by the validation rule at modules\/web\/inputs.tf:6,3-13.\n\u2575\n\u2577\n\u2502 Error: Invalid value for variable\n\u2502 \n\u2502   on test.tf line 4, in module &quot;web&quot;:\n\u2502    4:   instance_type = &quot;t2.micro&quot;                            #\u308f\u3056\u3068\u8aa4\u3063\u305f\u8a18\u8f09\u3092\u5165\u308c\u3066\u3044\u308b\n\u2502     \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\u2502     \u2502 var.instance_type is &quot;t2.micro&quot;\n\u2502 \n\u2502 Instance type \u306f &#39;t3&#39; \u304b\u3089\u306f\u3058\u307e\u308b\u30bf\u30a4\u30d7\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002\n\u2502 \n\u2502 This was checked by the validation rule at modules\/web\/inputs.tf:17,3-13.<\/code><\/pre><\/div>\n\n\n\n<p>\u306e\u3088\u3046\u306b\u30a8\u30e9\u30fc\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<br>\u3053\u308c\u306f\u3001<code>modules\/web\/inputs.tf<\/code>\u3067\u5b9a\u7fa9\u3055\u308c\u3066\u3044\u305f\u5404variable\u3054\u3068\u306evalidation\u6761\u4ef6\u3068module\u306b\u5f15\u304d\u6e21\u3055\u308c\u305f\u5024\u3092\u7a81\u304d\u5408\u308f\u305b\u3066\u691c\u67fb\u3057\u305f\u7d50\u679c\u3001\u30a8\u30e9\u30fc\u306b\u306a\u3063\u305f\u305f\u3081\u3001 \u30e1\u30c3\u30bb\u30fc\u30b8\u3068\u5171\u306b\u6307\u6458\u3092\u3057\u3066\u304f\u308c\u3066\u3044\u307e\u3059\u3002<br>\u3053\u308c\u306b\u3088\u308a\u30a4\u30f3\u30d5\u30e9\u69cb\u7bc9\u306b\u969b\u3057\u3066\u3001\u81ea\u5206\u9054\u3067\u5b9a\u7fa9\u3057\u305f\u30dd\u30ea\u30b7\u30fc\u306b\u6cbf\u308f\u306a\u3044\u30ea\u30bd\u30fc\u30b9\u304c\u4f5c\u3089\u308c\u3066\u3057\u307e\u3046\u3053\u3068\u3092\u9632\u6b62\u3057\u305f\u308a\u3001\u60f3\u5b9a\u5916\u306e\u5024\u304c\u6307\u5b9a\u3055\u308c\u308b\u3053\u3068\u3092\u9632\u6b62\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3061\u306a\u307f\u306b\u3001\u5404\u5024\u3092\u4fee\u6b63\u3057\u305f\u4e0a\u3067\u518d\u5b9f\u884c\u3059\u308b\u3068<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform validate\nSuccess! The configuration is valid.<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u306a\u308a\u3001\u554f\u984c\u306a\u304f\u306a\u3063\u305f\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<h4 id=\"outline__2_3\">terraform plan<\/h4>\n\n\n\n<p>\u6700\u5f8c\u306b<code>terraform plan<\/code>\u306b\u3088\u3063\u3066\u300c\u3053\u306e\u30b3\u30fc\u30c9\u3067\u4f55\u304c\u4f5c\u6210\u3055\u308c\u3001\u524a\u9664\u3055\u308c\u3001\u66f4\u65b0\u3055\u308c\u305d\u3046\u304b\u300d\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<br>\u4e0a\u8a18\u306evalidate\u306e\u691c\u67fb\u3092\u901a\u904e\u3057\u305f\u30b3\u30fc\u30c9\u3092\u4f7f\u3046\u3068<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform plan\n\nTerraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:\n  + create\n\nTerraform will perform the following actions:\n\n  # module.web.aws_instance.web will be created\n  + resource &quot;aws_instance&quot; &quot;web&quot; {\n      + ami                                  = &quot;ami-078296f82eb463377&quot;\n      + arn                                  = (known after apply)\n      + associate_public_ip_address          = (known after apply)\n      + availability_zone                    = (known after apply)\n      + cpu_core_count                       = (known after apply)\n      + cpu_threads_per_core                 = (known after apply)\n      + disable_api_stop                     = (known after apply)\n      + disable_api_termination              = (known after apply)\n      + ebs_optimized                        = (known after apply)\n      + get_password_data                    = false\n      + host_id                              = (known after apply)\n      + host_resource_group_arn              = (known after apply)\n      + id                                   = (known after apply)\n      + instance_initiated_shutdown_behavior = (known after apply)\n      + instance_state                       = (known after apply)\n      + instance_type                        = &quot;t3.micro&quot;\n      + ipv6_address_count                   = (known after apply)\n      + ipv6_addresses                       = (known after apply)\n\n&lt;\u7565&gt;\n\n    }\n\nPlan: 1 to add, 0 to change, 0 to destroy.<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u3044\u3046\u5177\u5408\u306bEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u4f5c\u6210\u3055\u308c\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>terraform plan\u304c\u5931\u6557\u3059\u308b\u72b6\u6cc1\u3067\u3042\u308c\u3070\u3001\u3082\u3061\u308d\u3093apply\u6642\u306b\u3082\u5931\u6557\u3057\u307e\u3059\u306e\u3067\u3001apply\u524d\u306e\u78ba\u8a8d\u306b\u6709\u52b9\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u305f\u3060\u3057\u3001terraform plan\u306f\u3042\u304f\u307e\u3067\u8a18\u8ff0\u3057\u305f\u30b3\u30fc\u30c9\u3092\u3082\u3068\u306b\u3069\u306e\u3088\u3046\u306a\u5909\u66f4\u304c\u52a0\u3048\u3089\u308c\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u304b\u306e\u4e88\u6e2c\u3092\u8868\u793a\u3059\u308b\u3082\u306e\u3067\u3042\u308a\u3001\u6700\u7d42\u7684\u306b\u305d\u306e\u5909\u66f4\u304c\u6b63\u5e38\u306b\u884c\u308f\u308c\u308b\u304b\u3092\u78ba\u7d04\u3057\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<blockquote class=\"wp-block-quote\"><p>The plan command alone does not actually carry out the proposed changes.<\/p><cite><a href=\"https:\/\/www.terraform.io\/cli\/commands\/plan\" target=\"_blank\" rel=\"noopener\" title=\"\">https:\/\/www.terraform.io\/cli\/commands\/plan<\/a><\/cite><\/blockquote>\n\n\n\n<p>Terraform\u306e\u6587\u6cd5\u7684\u306b\u306f\u6b63\u3057\u3044\u304c\u3001AWS\u306e\u30ea\u30bd\u30fc\u30b9\u306e\u4ed5\u69d8\u3068\u3057\u3066\u306f\u5c5e\u6027\u306e\u5024\u306e\u6307\u5b9a\u304c\u9593\u9055\u3063\u3066\u3044\u308b\u969b\u306b\u306f<\/p>\n\n\n\n<ul><li>plan\u306f\u6210\u529f\u3057\u3001apply\u6642\u306b\u5931\u6557\u3059\u308b<\/li><\/ul>\n\n\n\n<p>\u3068\u3044\u3046\u3053\u3068\u304c\u8d77\u3053\u308a\u3001\u3053\u308c\u306b\u82e6\u52b4\u3059\u308b\u3053\u3068\u3082\u591a\u3044\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u305d\u306e\u305f\u3081\u3001\u4e0b\u8a18\u306e\u3088\u3046\u306a\u8ffd\u52a0\u306e\u5bfe\u7b56\u3092\u5165\u308c\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<h3 id=\"outline__3\">2. tflint\u3092\u4f7f\u3046<\/h3>\n\n\n\n<p>validate, plan\u306e\u30b3\u30de\u30f3\u30c9\u306f\u3042\u3089\u304b\u3058\u3081validation\u306econdition\u3067\u5b9a\u7fa9\u3057\u3066\u3044\u308b\u3082\u306e\u3060\u3063\u305f\u308a\u3001Terraform\u3067\u306e\u6587\u6cd5\u7684\u306a\u6b63\u3057\u3055\u3067\u3057\u304b\u691c\u8a3c\u3092\u3057\u3066\u304f\u308c\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<p>\u305f\u3068\u3048\u3070\u3001test.tf\u306b\u3066<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>module &quot;web&quot; {\n  source        = &quot;.\/modules\/web&quot;\n  ami           = &quot;ami-078296f82eb463377&quot;\n  instance_type = &quot;t3.supermicro&quot; #\u308f\u3056\u3068\u5b58\u5728\u3057\u306a\u3044\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30bf\u30a4\u30d7\u3092\u6307\u5b9a\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u8a00\u3046\u5f62\u3067\u3001\u5b58\u5728\u3057\u306a\u3044EC2\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30bf\u30a4\u30d7\u3092\u6307\u5b9a\u3057\u3066\u3082\u3001\u691c\u51fa\u3057\u3066\u304f\u308c\u305a\u3001\u305d\u306e\u307e\u307eterraform apply\u307e\u3067\u5b9f\u884c\u3057\u3066\u3057\u307e\u3046\u3068<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform apply\n\nTerraform used the selected providers to generate the following execution plan. Resource actions are\nindicated with the following symbols:\n  + create\n\nTerraform will perform the following actions:\n\n  # module.web.aws_instance.web will be created\n  + resource &quot;aws_instance&quot; &quot;web&quot; {\n      + ami                                  = &quot;ami-078296f82eb463377&quot;\n      + arn                                  = (known after apply)\n      + associate_public_ip_address          = (known after apply)\n      + availability_zone                    = (known after apply)\n      + cpu_core_count                       = (known after apply)\n      + cpu_threads_per_core                 = (known after apply)\n      + disable_api_stop                     = (known after apply)\n      + disable_api_termination              = (known after apply)\n      + ebs_optimized                        = (known after apply)\n      + get_password_data                    = false\n      + host_id                              = (known after apply)\n      + host_resource_group_arn              = (known after apply)\n      + id                                   = (known after apply)\n      + instance_initiated_shutdown_behavior = (known after apply)\n      + instance_state                       = (known after apply)\n      + instance_type                        = &quot;t3.supermicro&quot;\n      + ipv6_address_count                   = (known after apply)\n      + ipv6_addresses                       = (known after apply)\n\n&lt;\u7565&gt; \n\n    }\n\nPlan: 1 to add, 0 to change, 0 to destroy.\n\nDo you want to perform these actions in workspace &quot;blog-sample&quot;?\n  Terraform will perform the actions described above.\n  Only &#39;yes&#39; will be accepted to approve.\n\n  Enter a value: yes\n\nmodule.web.aws_instance.web: Creating...\n\u2577\n\u2502 Error: creating EC2 Instance: InvalidParameterValue: Invalid value &#39;t3.supermicro&#39; for InstanceType.\n\u2502       status code: 400, request id: 2e934398-2e8d-471a-824e-f46ee9083df0\n\u2502 \n\u2502   with module.web.aws_instance.web,\n\u2502   on modules\/web\/main.tf line 1, in resource &quot;aws_instance&quot; &quot;web&quot;:\n\u2502    1: resource &quot;aws_instance&quot; &quot;web&quot; {\n\u2502 \n\u2575<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u8a00\u3046\u5177\u5408\u3067\u3001\u30ea\u30bd\u30fc\u30b9\u306e\u4f5c\u6210\u3092\u3057\u3088\u3046\u3068\u3059\u308b\u30bf\u30a4\u30df\u30f3\u30b0\u306b\u306a\u3063\u3066\u3001\u30a8\u30e9\u30fc\u306b\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u4eee\u306b\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u30d6\u30e9\u30f3\u30c1\u306bcommit push\u3055\u308c\u305f\u3089apply\u3092\u3059\u308b\u3068\u8a00\u3046\u3088\u3046\u306a\u81ea\u52d5\u5316\u3092\u3057\u3066\u3044\u308b\u5834\u5408\u3001\u6b63\u3057\u304fapply\u3067\u304d\u306a\u3044\u30b3\u30fc\u30c9\u304c\u30c7\u30d5\u30a9\u30eb\u30c8\u30d6\u30e9\u30f3\u30c1\u306b\u8f09\u3063\u3066\u3057\u307e\u3044\u3001IaC\u3067\u8a18\u8ff0\u3055\u308c\u3066\u3044\u308b\u5185\u5bb9\u3068\u5b9f\u614b\u304c\u4e56\u96e2\u3057\u3066\u3044\u308b\u72b6\u6cc1\u3092\u62db\u3044\u3066\u3057\u307e\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3053\u308c\u3092\u9632\u3054\u3046\u3068\u3057\u3066\u3001\u305f\u3068\u3048\u3070AWS\u3067\u5229\u7528\u53ef\u80fd\u306aEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30bf\u30a4\u30d7\u306e\u4e00\u89a7\u3092validation\u306econdition\u306e\u4e2d\u306b\u4e8b\u7d30\u304b\u304f\u5217\u6319\u3057\u3066\u30ab\u30d0\u30fc\u3057\u3088\u3046\u3068\u3059\u308b\u306e\u3082\u52b4\u529b\u304c\u304b\u304b\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u305d\u3053\u3067<code>tflint<\/code>\u3092\u6d3b\u7528\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p><a href=\"https:\/\/github.com\/terraform-linters\/tflint\">https:\/\/github.com\/terraform-linters\/tflint<\/a><\/p>\n\n\n\n<p><code>tflint<\/code>\u306f\u5404provider\u306e\u30ea\u30bd\u30fc\u30b9\u306e\u4ed5\u69d8\u307e\u3067\u6398\u308a\u4e0b\u3052\u305frule set\u3092\u4f7f\u3063\u3066\u691c\u67fb\u3092\u884c\u3044\u3001\u5b9f\u969b\u306bAWS\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u4f5c\u308b\u306b\u306f\u6b63\u3057\u304f\u306a\u3044\u8a18\u8ff0\u306e\u7b87\u6240\u3092\u691c\u51fa\u3057\u3066\u304f\u308c\u308b\u306e\u3067\u3001\u6d3b\u7528\u3059\u308b\u3053\u3068\u3067\u5192\u982d\u306b\u66f8\u3044\u305f<\/p>\n\n\n\n<ul><li>\u300cterraform plan\u3067\u306f\u554f\u984c\u306a\u304b\u3063\u305f\u306e\u306bterraform apply\u3092\u3057\u305f\u3089\u5931\u6557\u3057\u305f\u300d<\/li><\/ul>\n\n\n\n<p>\u3068\u3044\u3046\u72b6\u6cc1\u3092\u5c11\u3057\u3067\u3082\u6e1b\u3089\u3059\u306e\u306b\u6d3b\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<p>tflint\u306e\u5c0e\u5165\u30fb\u521d\u671f\u8a2d\u5b9a\u65b9\u6cd5\u306e\u8a73\u7d30\u306a\u89e3\u8aac\u306f\u5272\u611b\u3057\u3066\u3057\u307e\u3046\u306e\u3067\u3059\u304c\u3001<br>\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u76f4\u4e0b\u306b\u3001<code>.tflint.hcl<\/code>\u3068\u8a00\u3046\u30d5\u30a1\u30a4\u30eb\u540d\u3067<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\".tflint.hcl\"><code>plugin &quot;aws&quot; {\n  enabled    = true\n  version    = &quot;0.17.1&quot;\n  source     = &quot;github.com\/terraform-linters\/tflint-ruleset-aws&quot;\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u8a00\u3046\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u8ffd\u52a0\u3057\u3066\u3001aws\u306e\u30ea\u30bd\u30fc\u30b9\u306b\u5bfe\u3059\u308brule set\u3092\u4f7f\u3063\u3066\u691c\u67fb\u3059\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<br>\u305d\u3057\u3066\u3001<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>.\n\u251c\u2500\u2500 .tflint.hcl\n\u251c\u2500\u2500 modules\n\u2502   \u2514\u2500\u2500 web\n\u2502       \u251c\u2500\u2500 inputs.tf\n\u2502       \u251c\u2500\u2500 main.tf\n\u2502       \u2514\u2500\u2500 outputs.tf\n\u2514\u2500\u2500 test.tf<\/code><\/pre><\/div>\n\n\n\n<p>\u306e\u69cb\u6210\u3067tflint\u306e\u30c1\u30a7\u30c3\u30af\u3092\u304b\u3051\u308b\u3068<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ tflint --module\n1 issue(s) found:\n\nError: &quot;t3.supermicro&quot; is an invalid value as instance_type (aws_instance_invalid_type)\n\n  on test.tf line 4:\n   4:   instance_type = &quot;t3.supermicro&quot; #\u308f\u3056\u3068\u5b58\u5728\u3057\u306a\u3044\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30bf\u30a4\u30d7\u3092\u6307\u5b9a\n\nCallers:\n   test.tf:4,19-34\n   modules\/web\/main.tf:3,19-36<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u306a\u308a\u3001<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><code>Error: \"t3.supermicro\" is an invalid value as instance_type (aws_instance_invalid_type)<\/code><\/code><\/pre>\n\n\n\n<p>\u3068\u3044\u3046\u5177\u5408\u306b\u3001validation\u306econdition\u3067\u7d30\u304b\u304f\u8a2d\u5b9a\u3057\u306a\u304f\u3066\u3082\u3001\u6307\u5b9a\u3057\u305f\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30bf\u30a4\u30d7\u304c\u7570\u5e38\u3067\u3042\u308b\u3053\u3068\u3092\u6307\u6458\u3057\u3066\u304f\u308c\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>\u3053\u306e\u3088\u3046\u306b\u3001tflint\u3068AWS\u7528\u306erule set\u3092\u5c0e\u5165\u3059\u308b\u3053\u3068\u3067AWS\u30ea\u30bd\u30fc\u30b9\u306e\u4ed5\u69d8\u306b\u6cbf\u3063\u305f\u691c\u67fb\u304c\u81ea\u52d5\u7684\u306b\u884c\u3048\u308b\u3088\u3046\u306b\u306a\u308b\u306e\u3067\u3001\u3088\u308a\u5b89\u5168\u306bterraform apply\u3092\u9032\u3081\u3089\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u4eca\u56de\u306f\u300cEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30bf\u30a4\u30d7\u300d\u306e\u4f8b\u3067\u3059\u304c\u3001\u8aac\u660e\u3092\u8aad\u3080\u3068AWS\u7528\u306b\u306f700\u4ee5\u4e0a\u306e\u30eb\u30fc\u30eb\u304c\u6e96\u5099\u3055\u308c\u3066\u3044\u308b\u3088\u3046\u306a\u306e\u3067\u3001\u304b\u306a\u308a\u52a9\u3051\u306b\u306a\u308b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p><a href=\"https:\/\/github.com\/terraform-linters\/tflint-ruleset-aws\/blob\/master\/docs\/rules\/README.md\">https:\/\/github.com\/terraform-linters\/tflint-ruleset-aws\/blob\/master\/docs\/rules\/README.md<\/a><\/p>\n\n\n\n<h3 id=\"outline__4\">3. lifecycle <code>prevent_destroy<\/code> \u3092\u4f7f\u3046<\/h3>\n\n\n\n<p>\u4e0a\u8a18\u307e\u3067\u306f\u3001\u4e3b\u306b\u30ea\u30bd\u30fc\u30b9\u304ccreate\u3055\u308c\u308b\u969b\u306e\u30a8\u30e9\u30fc\u306b\u6ce8\u76ee\u3057\u3066\u3044\u307e\u3057\u305f\u304c\u3001\u6b21\u306f\u4f5c\u6210\u6e08\u307f\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u5b89\u5168\u306b\u4fdd\u8b77\u3059\u308b\u65b9\u6cd5\u3092\u8003\u3048\u3066\u3044\u304d\u305f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p>EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306f\u69cb\u7bc9\u3055\u308c\u305f\u5f8c\u306b\u3001\u305d\u306e\u4e2d\u306e\u72b6\u614b\u304c\u5909\u308f\u3063\u3066\u3044\u304d\u3001\u4fdd\u6301\u3055\u308c\u3066\u3044\u304f\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb\u306a\u30ea\u30bd\u30fc\u30b9\u3067\u3059\u3002\u30ea\u30bd\u30fc\u30b9\u5185\u306e\u60c5\u5831\u306f\u4e00\u5ea6\u524a\u9664\u3055\u308c\u3066\u3057\u307e\u3046\u3068\u3001IaC\u3067\u30ea\u30bd\u30fc\u30b9\u306e\u4f5c\u308a\u76f4\u3057\u3092\u3057\u3066\u3082\u524a\u9664\u524d\u306e\u72b6\u614b\u306b\u623b\u308a\u307e\u305b\u3093\u3002\uff08\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc\u306e\u30ed\u30b0\u3001\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u7528\u306b\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u306a\u3069\uff09<br><\/p>\n\n\n\n<p>\u305d\u306e\u4e00\u65b9\u3067\u3001\u3044\u3063\u305f\u3093\u30ea\u30bd\u30fc\u30b9\u3092\u524a\u9664\u3057\u306a\u3044\u3068\u5909\u66f4\u3067\u304d\u306a\u3044\u5c5e\u6027\u304c\u3042\u308a\u307e\u3059\u3002EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u30b5\u30d6\u30cd\u30c3\u30c8\u306e\u5909\u66f4\u306a\u3069\u304c\u3053\u308c\u306b\u3042\u305f\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u305f\u3068\u3048\u3070\u3001<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>resource &quot;aws_instance&quot; &quot;web&quot; {\n  ami           = &quot;ami-078296f82eb463377&quot;\n  instance_type = &quot;t3.micro&quot;\n  subnet_id     = &quot;subnet-075944dcf7f7a9ee9&quot;\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u8a00\u3046\u8a2d\u5b9a\u3067EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u4f5c\u6210\u6e08\u307f\u3060\u3063\u305f\u3068\u3057\u307e\u3059\u3002<br>\u305d\u308c\u3092\u3001\u30b5\u30d6\u30cd\u30c3\u30c8\u306e\u7b87\u6240\u3092\u5909\u66f4\u3057\u3066<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>resource &quot;aws_instance&quot; &quot;web&quot; {\n  ami           = &quot;ami-078296f82eb463377&quot;\n  instance_type = &quot;t3.micro&quot;\n  subnet_id     = &quot;subnet-0d6807632b15d21c9&quot;   #\u30b5\u30d6\u30cd\u30c3\u30c8ID\u3092\u5909\u66f4\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u306e\u3088\u3046\u306b\u66f8\u304d\u63db\u3048\u3066\u3001terraform plan\u3092\u5b9f\u884c\u3057\u3066\u307f\u307e\u3059\u3068<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform plan\naws_instance.web: Refreshing state... [id=i-0c4957a698fc58406]\n\nTerraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:\n-\/+ destroy and then create replacement\n\nTerraform will perform the following actions:\n\n  # aws_instance.web must be replaced\n-\/+ resource &quot;aws_instance&quot; &quot;web&quot; {\n      ~ arn                                  = &quot;arn:aws:ec2:ap-northeast-1:xxxxxxxxxxxxx:instance\/i-0c4957a698fc58406&quot; -&gt; (known after apply)\n      ~ associate_public_ip_address          = true -&gt; (known after apply)\n      ~ availability_zone                    = &quot;ap-northeast-1d&quot; -&gt; (known after apply)\n      ~ cpu_core_count                       = 1 -&gt; (known after apply)\n      ~ cpu_threads_per_core                 = 2 -&gt; (known after apply)\n      ~ disable_api_stop                     = false -&gt; (known after apply)\n      ~ disable_api_termination              = false -&gt; (known after apply)\n      ~ ebs_optimized                        = false -&gt; (known after apply)\n      - hibernation                          = false -&gt; null\n      + host_id                              = (known after apply)\n      + host_resource_group_arn              = (known after apply)\n      ~ id                                   = &quot;i-0c4957a698fc58406&quot; -&gt; (known after apply)\n      ~ instance_initiated_shutdown_behavior = &quot;stop&quot; -&gt; (known after apply)\n      ~ instance_state                       = &quot;running&quot; -&gt; (known after apply)\n      ~ ipv6_address_count                   = 0 -&gt; (known after apply)\n      ~ ipv6_addresses                       = [] -&gt; (known after apply)\n      + key_name                             = (known after apply)\n      ~ monitoring                           = false -&gt; (known after apply)\n      + outpost_arn                          = (known after apply)\n      + password_data                        = (known after apply)\n      + placement_group                      = (known after apply)\n      + placement_partition_number           = (known after apply)\n      ~ primary_network_interface_id         = &quot;eni-06598a96b3714f2a0&quot; -&gt; (known after apply)\n      ~ private_dns                          = &quot;ip-172-31-28-21.ap-northeast-1.compute.internal&quot; -&gt; (known after apply)\n      ~ private_ip                           = &quot;172.31.28.21&quot; -&gt; (known after apply)\n      ~ public_dns                           = &quot;ec2-18-183-118-98.ap-northeast-1.compute.amazonaws.com&quot; -&gt; (known after apply)\n      ~ public_ip                            = &quot;18.183.118.98&quot; -&gt; (known after apply)\n      ~ secondary_private_ips                = [] -&gt; (known after apply)\n      ~ security_groups                      = [\n          - &quot;default&quot;,\n        ] -&gt; (known after apply)\n      ~ subnet_id                            = &quot;subnet-075944dcf7f7a9ee9&quot; -&gt; &quot;subnet-0d6807632b15d21c9&quot; # forces replacement\n      - tags                                 = {} -&gt; null\n      ~ tenancy                              = &quot;default&quot; -&gt; (known after apply)\n      + user_data                            = (known after apply)\n      + user_data_base64                     = (known after apply)\n      ~ vpc_security_group_ids               = [\n          - &quot;sg-0c6eb82090d1fd67c&quot;,\n        ] -&gt; (known after apply)\n        # (6 unchanged attributes hidden)\n\n      ~ capacity_reservation_specification {\n          ~ capacity_reservation_preference = &quot;open&quot; -&gt; (known after apply)\n\n          + capacity_reservation_target {\n              + capacity_reservation_id                 = (known after apply)\n              + capacity_reservation_resource_group_arn = (known after apply)\n            }\n        }\n\n      - credit_specification {\n          - cpu_credits = &quot;unlimited&quot; -&gt; null\n        }\n\n      + ebs_block_device {\n          + delete_on_termination = (known after apply)\n          + device_name           = (known after apply)\n          + encrypted             = (known after apply)\n          + iops                  = (known after apply)\n          + kms_key_id            = (known after apply)\n          + snapshot_id           = (known after apply)\n          + tags                  = (known after apply)\n          + throughput            = (known after apply)\n          + volume_id             = (known after apply)\n          + volume_size           = (known after apply)\n          + volume_type           = (known after apply)\n        }\n\n      ~ enclave_options {\n          ~ enabled = false -&gt; (known after apply)\n        }\n\n      + ephemeral_block_device {\n          + device_name  = (known after apply)\n          + no_device    = (known after apply)\n          + virtual_name = (known after apply)\n        }\n\n      ~ maintenance_options {\n          ~ auto_recovery = &quot;default&quot; -&gt; (known after apply)\n        }\n\n      ~ metadata_options {\n          ~ http_endpoint               = &quot;enabled&quot; -&gt; (known after apply)\n          ~ http_put_response_hop_limit = 1 -&gt; (known after apply)\n          ~ http_tokens                 = &quot;optional&quot; -&gt; (known after apply)\n          ~ instance_metadata_tags      = &quot;disabled&quot; -&gt; (known after apply)\n        }\n\n      + network_interface {\n          + delete_on_termination = (known after apply)\n          + device_index          = (known after apply)\n          + network_card_index    = (known after apply)\n          + network_interface_id  = (known after apply)\n        }\n\n      ~ private_dns_name_options {\n          ~ enable_resource_name_dns_a_record    = false -&gt; (known after apply)\n          ~ enable_resource_name_dns_aaaa_record = false -&gt; (known after apply)\n          ~ hostname_type                        = &quot;ip-name&quot; -&gt; (known after apply)\n        }\n\n      ~ root_block_device {\n          ~ delete_on_termination = true -&gt; (known after apply)\n          ~ device_name           = &quot;\/dev\/xvda&quot; -&gt; (known after apply)\n          ~ encrypted             = false -&gt; (known after apply)\n          ~ iops                  = 100 -&gt; (known after apply)\n          + kms_key_id            = (known after apply)\n          ~ tags                  = {} -&gt; (known after apply)\n          ~ throughput            = 0 -&gt; (known after apply)\n          ~ volume_id             = &quot;vol-0ce9ae8fa77c4fe71&quot; -&gt; (known after apply)\n          ~ volume_size           = 8 -&gt; (known after apply)\n          ~ volume_type           = &quot;gp2&quot; -&gt; (known after apply)\n        }\n    }\n\nPlan: 1 to add, 0 to change, 1 to destroy.<\/code><\/pre><\/div>\n\n\n\n<p>\u5909\u66f4\u3057\u3088\u3046\u3068\u3057\u305f\u306e\u306f\u30b5\u30d6\u30cd\u30c3\u30c8\u3060\u3051\u3067\u3059\u304c\u3001\u5927\u91cf\u306b\u5909\u66f4\u304c\u51fa\u3066\u304d\u307e\u3059\u3002<br>\u305d\u3057\u3066\u3001<code>subnet_id<\/code>\u306e\u9805\u76ee\u306e\u7b87\u6240\u306b <code>forces replacement<\/code>\u3068\u8a00\u3046\u8868\u793a\u304c\u3042\u308b\u306e\u3068\u3001<br><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><code>Plan: 1 to add, 0 to change, 1 to destroy.<\/code><\/code><\/pre>\n\n\n\n<p><br>\u3068\u3042\u308b\u3053\u3068\u304b\u3089\u3001\u4f5c\u6210\u6e08\u307f\u306eEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u524a\u9664\uff08destroy\uff09\u3055\u308c\u305f\u4e0a\u3067\u3001\u4f5c\u308a\u76f4\u3057\uff08add\uff09\u304c\u3055\u308c\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3057\u304b\u3057\u3001plan\u306e\u8868\u793a\u884c\u6570\u3082\u591a\u3044\u306e\u3067\u3001\u4e00\u5ea6\u524a\u9664\u3055\u308c\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u3053\u3068\u306b\u6c17\u304c\u4ed8\u304b\u305aapply\u3092\u3057\u3066\u3057\u307e\u3044<\/p>\n\n\n\n<p>\u300c\u30b5\u30d6\u30cd\u30c3\u30c8\u306f\u671f\u5f85\u901a\u308a\u5909\u308f\u3063\u305f\u304c\u3001\u65b0\u305f\u306b\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u4f5c\u308a\u76f4\u3055\u308c\u3066\u3044\u305f\uff08\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u5185\u306b\u3042\u3063\u305f\u30c7\u30fc\u30bf\u304c\u6d88\u3048\u3066\u3057\u307e\u3063\u305f\uff09\u300d<\/p>\n\n\n\n<p>\u3068\u8a00\u3046\u4e8b\u6545\u306b\u3064\u306a\u304c\u308a\u304b\u306d\u307e\u305b\u3093\u3002\uff08\u3082\u3061\u308d\u3093plan\u306e\u5185\u5bb9\u3092\u3057\u3063\u304b\u308a\u3068\u898b\u308b\u3002\u3068\u8a00\u3046\u3053\u3068\u306f\u5fc5\u8981\u306a\u3053\u3068\u3067\u3059\u304c\uff09<\/p>\n\n\n\n<p><code>lifecycle<\/code>\u306e <code>prevent_destroy<\/code> \u306f\u8a2d\u5b9a\u3059\u308b\u3053\u3068\u3067\u305d\u3046\u3044\u3063\u305f\u3001\u8a2d\u5b9a\u306e\u5909\u66f4\u306b\u969b\u3057\u3066\u30ea\u30bd\u30fc\u30b9\u304c\u524a\u9664\u3055\u308c\u3066\u3057\u307e\u3046\u3053\u3068\u3092\u9632\u6b62\u3067\u304d\u307e\u3059\u3002<br>\u4f7f\u3044\u65b9\u306f\u8a72\u5f53\u306e\u30ea\u30bd\u30fc\u30b9\u306blifecycle\u306e\u6307\u5b9a\u3092\u3059\u308b\u3060\u3051\u3067\u3059\u3002<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>resource &quot;aws_instance&quot; &quot;web&quot; {\n  ami           = &quot;ami-078296f82eb463377&quot;\n  instance_type = &quot;t3.micro&quot;\n  subnet_id     = &quot;subnet-0d6807632b15d21c9&quot; #\u30b5\u30d6\u30cd\u30c3\u30c8ID\u3092\u5909\u66f4\n\n  lifecycle { # lifecycle block\u3092\u8ffd\u52a0\n    prevent_destroy = true\n  }\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u3053\u306e\u3088\u3046\u306b<code>lifecycle<\/code>\u3067<code>prevent_destroy<\/code>\u306e\u6307\u5b9a\u3092\u5165\u308c\u305f\u4e0a\u3067terraform plan\u3092\u5b9f\u884c\u3059\u308b\u3068<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform plan\naws_instance.web: Refreshing state... [id=i-0c4957a698fc58406]\n\u2577\n\u2502 Error: Instance cannot be destroyed\n\u2502 \n\u2502   on test.tf line 1:\n\u2502    1: resource &quot;aws_instance&quot; &quot;web&quot; {\n\u2502 \n\u2502 Resource aws_instance.web has lifecycle.prevent_destroy set, but the plan calls for this resource to be destroyed. To avoid this error and continue\n\u2502 with the plan, either disable lifecycle.prevent_destroy or reduce the scope of the plan using the -target flag.\n\u2575<\/code><\/pre><\/div>\n\n\n\n<pre class=\"wp-block-code\"><code>Instance cannot be destroyed<\/code><\/pre>\n\n\n\n<p>\u306e\u3088\u3046\u306a\u8b66\u544a\u3068\u5171\u306b\u3001\u30ea\u30bd\u30fc\u30b9\u306e\u524a\u9664\u3092\u4f34\u3046\u5909\u66f4\u70b9\u304c\u691c\u51fa\u3055\u308c\u305f\u6642\u306b\u30a8\u30e9\u30fc\u3068\u306a\u3063\u3066\u5931\u6557\u3057\u3066\u304f\u308c\u307e\u3059\u3002<br>\u3053\u308c\u306b\u3088\u308a\u610f\u56f3\u305b\u305a\u3057\u3066\u3001\u524a\u9664\u3092\u4f34\u3063\u305f\u4f5c\u308a\u76f4\u3057\u304c\u884c\u308f\u308c\u308b\u3053\u3068\u3092\u672a\u7136\u306b\u9632\u3050\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u306a\u304a\u3001\u524a\u9664\u3092\u4f34\u308f\u306a\u3044\u5909\u66f4\u70b9\u3067\u3042\u308c\u3070\u3001\u554f\u984c\u306a\u304f\u5b9f\u884c\u3067\u304d\u307e\u3059\u3002<br>\u305f\u3068\u3048\u3070\u3001\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30bf\u30a4\u30d7\u306e\u5909\u66f4\u306f\u30a8\u30e9\u30fc\u306a\u304fplan\u7d50\u679c\u304c\u8868\u793a\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform plan\naws_instance.web: Refreshing state... [id=i-0c4957a698fc58406]\n\nTerraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:\n  ~ update in-place\n\nTerraform will perform the following actions:\n\n  # aws_instance.web will be updated in-place\n  ~ resource &quot;aws_instance&quot; &quot;web&quot; {\n        id                                   = &quot;i-0c4957a698fc58406&quot;\n      ~ instance_type                        = &quot;t3.micro&quot; -&gt; &quot;t3.nano&quot;\n        tags                                 = {}\n        # (29 unchanged attributes hidden)\n\n        # (7 unchanged blocks hidden)\n    }\n\nPlan: 0 to add, 1 to change, 0 to destroy.<\/code><\/pre><\/div>\n\n\n\n<p>\u30a4\u30f3\u30d5\u30e9\u306e\u69cb\u7bc9\u521d\u671f\u6bb5\u968e\u306b\u304a\u3044\u3066\u306f\u8a66\u884c\u932f\u8aa4\u3059\u308b\u3068\u3053\u308d\u304c\u591a\u304f\u3001\u524a\u9664\u3092\u4f34\u3063\u305f\u5909\u66f4\u3092\u7e70\u308a\u8fd4\u3057\u306a\u304c\u3089\u69cb\u7bc9\u3092\u9032\u3081\u3066\u3044\u304f\u3053\u3068\u306b\u306a\u308b\u3053\u3068\u3082\u591a\u3044\u304b\u3068\u601d\u3044\u307e\u3059\u3002<br>\u305d\u306e\u4e00\u65b9\u3067\u3001\u30ea\u30bd\u30fc\u30b9\u304c\u4fdd\u8b77\u3055\u308c\u308b\u3079\u304d\u6bb5\u968e\u306b\u5165\u3063\u305f\u306a\u3069\u300c\u4eca\u3001\u3069\u306e\u30d5\u30a7\u30fc\u30ba\u306b\u3044\u308b\u306e\u304b\u300d\u3092\u898b\u6975\u3081\u306a\u304c\u3089\u3001\u3053\u306e<code>prevent_destroy<\/code>\u306elifecycle\u8a2d\u5b9a\u3092\u5c0e\u5165\u3059\u308b\u3068\u826f\u3044\u3067\u3057\u3087\u3046\u3002<\/p>\n\n\n\n<h3 id=\"outline__5\">4. EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u524a\u9664\u4fdd\u8b77\u306e\u6ce8\u610f\u70b9<\/h3>\n\n\n\n<p>\u4e0a\u8a18\u306e lifecycle\u8a2d\u5b9a\u306b\u3066\u3001\u8a2d\u5b9a\u306e\u5909\u66f4\u306b\u4f34\u3044\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u524a\u9664\u3055\u308c\u308b\u3053\u3068\u306f\u9632\u6b62\u3067\u304d\u307e\u3057\u305f\u304c\u3001\u300cEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u524a\u9664\u4fdd\u8b77\u306f\u3069\u3046\u4f7f\u3046\u306e\uff1f\u300d\u3068\u304a\u601d\u3044\u306e\u65b9\u3082\u3044\u3089\u3063\u3057\u3083\u308b\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u306e\u3067\u3001\u305d\u3053\u3092\u6398\u308a\u4e0b\u3052\u3066\u307f\u307e\u3059\u3002<\/p>\n\n\n\n<p>Terraform\u5185\u3067\u8a2d\u5b9a\u3059\u308b\u969b\u306b\u306f <code>disable_api_termination<\/code>\u306e\u8a2d\u5b9a\u304c\u3053\u308c\u306b\u3042\u305f\u308a\u307e\u3059\u304c\u3001\u3053\u306e\u8a2d\u5b9a\u5024\u306f\u300cTerraform\u3092\u901a\u3058\u305f\u524a\u9664\u300d\u3092\u9632\u6b62\u3057\u306a\u3044\u3068\u8a00\u3046\u3053\u3068\u306b\u6ce8\u610f\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u305f\u3068\u3048\u3070\u3001<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>resource &quot;aws_instance&quot; &quot;web&quot; {\n  ami           = &quot;ami-078296f82eb463377&quot;\n  instance_type = &quot;t3.micro&quot;\n  subnet_id     = &quot;subnet-075944dcf7f7a9ee9&quot;\n\n  disable_api_termination = true # disable_api_termination\u3092\u8ffd\u52a0\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u8a00\u3046\u8a2d\u5b9a\u3067EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u3059\u3067\u306b\u4f5c\u3089\u308c\u3066\u3044\u308b\u3068\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3053\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b3\u30f3\u30bd\u30fc\u30eb\u4e0a\u304b\u3089\u524a\u9664\uff08\u7d42\u4e86\uff09\u3057\u3088\u3046\u3068\u3059\u308b\u3068<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"\/images\/2022\/10\/disable_api_termination.png\"><img src=\"\/images\/2022\/10\/disable_api_termination-1024x346.png\" alt=\"\"\/><\/a><\/figure>\n\n\n\n<p>\u64cd\u4f5c\u3092\u9078\u629e\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u306a\u3044\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u3066\u3001\u4fdd\u8b77\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u307e\u305f\u3001CLI\u4e0a\u304b\u3089\u306e\u524a\u9664\u3082\u8a66\u3057\u3066\u307f\u307e\u3059\u3068<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ aws ec2 terminate-instances --instance-ids i-0c4957a698fc58406\n\nAn error occurred (OperationNotPermitted) when calling the TerminateInstances operation: The instance &#39;i-0c4957a698fc58406&#39; may not be terminated. Modify its &#39;disableApiTermination&#39; instance attribute and try again.<\/code><\/pre><\/div>\n\n\n\n<p>\u3068\u8a00\u3046\u3088\u3046\u306b\u524a\u9664\uff08\u7d42\u4e86\uff09\u3059\u308b\u305f\u3081\u306b\u306f\u524a\u9664\u4fdd\u8b77\u306e\u8a2d\u5b9a\u3092\u4fee\u6b63\u3059\u308b\u3053\u3068\u304c\u5fc5\u8981\u306a\u65e8\u8868\u793a\u3055\u308c\u3066\u3001\u5931\u6557\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3053\u3053\u307e\u3067\u306f\u3001\u671f\u5f85\u901a\u308a\u306e\u632f\u308b\u821e\u3044\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u4e00\u65b9\u3067\u3001\u4f5c\u6210\u6e08\u307f\u306eEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306eresource\u306e\u8a18\u8ff0\u3092\u6d88\u3057\u53bb\u3063\u3066\u3001Terraform\u3067\u306fdestroy\u304c\u884c\u308f\u308c\u308b\u3088\u3046\u306b\u3059\u308b\u3068\u3069\u3046\u306a\u308b\u304b\u78ba\u8a8d\u3057\u307e\u3059\u3002<br>\u30b3\u30fc\u30c9\u3067\u66f8\u304d\u8868\u3059\u3068\u3057\u305f\u3089\u3053\u306e\u3088\u3046\u306a\u5177\u5408\u3067\u3057\u3087\u3046\u304b\u3002\uff08\u3059\u3079\u3066\u30b3\u30e1\u30f3\u30c8\u30a2\u30a6\u30c8\uff09<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code># resource &quot;aws_instance&quot; &quot;web&quot; {\n#   ami           = &quot;ami-078296f82eb463377&quot;\n#   instance_type = &quot;t3.micro&quot;\n#   subnet_id     = &quot;subnet-075944dcf7f7a9ee9&quot;\n#\n#   disable_api_termination = true\n# }<\/code><\/pre><\/div>\n\n\n\n<p>\u3053\u306e\u72b6\u614b\u3067terraform apply\u3092\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform apply\naws_instance.web: Refreshing state... [id=i-0c4957a698fc58406]\n\nTerraform used the selected providers to generate the following execution plan. Resource actions are\nindicated with the following symbols:\n  - destroy\n\nTerraform will perform the following actions:\n\n  # aws_instance.web will be destroyed\n  # (because aws_instance.web is not in configuration)\n  - resource &quot;aws_instance&quot; &quot;web&quot; {\n      - ami                                  = &quot;ami-078296f82eb463377&quot; -&gt; null\n      - arn                                  = &quot;arn:aws:ec2:ap-northeast-1:xxxxxxxxxxxx:instance\/i-0c4957a698fc58406&quot; -&gt; null\n      - associate_public_ip_address          = true -&gt; null\n      - availability_zone                    = &quot;ap-northeast-1d&quot; -&gt; null\n      - cpu_core_count                       = 1 -&gt; null\n      - cpu_threads_per_core                 = 2 -&gt; null\n      - disable_api_stop                     = false -&gt; null\n      - disable_api_termination              = true -&gt; null\n      - ebs_optimized                        = false -&gt; null\n      - get_password_data                    = false -&gt; null\n      - hibernation                          = false -&gt; null\n      - id                                   = &quot;i-0c4957a698fc58406&quot; -&gt; null\n      - instance_initiated_shutdown_behavior = &quot;stop&quot; -&gt; null\n      - instance_state                       = &quot;running&quot; -&gt; null\n      - instance_type                        = &quot;t3.micro&quot; -&gt; null\n      - ipv6_address_count                   = 0 -&gt; null\n      - ipv6_addresses                       = [] -&gt; null\n&lt;\u7565&gt;\n    }\n\nPlan: 0 to add, 0 to change, 1 to destroy.\n\nDo you want to perform these actions in workspace &quot;blog-sample&quot;?\n  Terraform will perform the actions described above.\n  Only &#39;yes&#39; will be accepted to approve.\n\n  Enter a value: yes\n\naws_instance.web: Destroying... [id=i-0c4957a698fc58406]\naws_instance.web: Still destroying... [id=i-0c4957a698fc58406, 10s elapsed]\naws_instance.web: Still destroying... [id=i-0c4957a698fc58406, 20s elapsed]\naws_instance.web: Still destroying... [id=i-0c4957a698fc58406, 30s elapsed]\naws_instance.web: Still destroying... [id=i-0c4957a698fc58406, 40s elapsed]\naws_instance.web: Still destroying... [id=i-0c4957a698fc58406, 50s elapsed]\naws_instance.web: Still destroying... [id=i-0c4957a698fc58406, 1m0s elapsed]\naws_instance.web: Destruction complete after 1m0s\n\nApply complete! Resources: 0 added, 0 changed, 1 destroyed.<\/code><\/pre><\/div>\n\n\n\n<p>\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u524a\u9664\u306f\u5931\u6557\u3059\u308b\u3053\u3068\u306a\u304f\u5b8c\u4e86\u3057\u307e\u3057\u305f\u3002<br><code>disable_api_termination<\/code> \u3092\u5165\u308c\u3066\u3044\u305f\u306e\u3067\u3001\u524a\u9664\u306b\u5931\u6557\u3059\u308b\u3053\u3068\u3092\u671f\u5f85\u3059\u308b\u65b9\u3082\u3044\u305f\u306e\u3067\u306f\u306a\u3044\u3067\u3057\u3087\u3046\u304b\u3002<\/p>\n\n\n\n<p>\u3057\u304b\u3057\u3001\u3053\u308c\u306f\u4ed5\u69d8\u901a\u308a\u306e\u6319\u52d5\u3067\u3001Terraform\u306b\u304a\u3044\u3066\u306f<\/p>\n\n\n\n<ul><li>\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u4e2d\u304b\u3089resource\u306e\u8a18\u8ff0\u3092\u524a\u9664\u3059\u308b\u3068\u8a00\u3046\u3053\u3068\u306f\u3001\u305d\u306eresource\u3092\u524a\u9664\u3057\u305f\u3044\u3068\u610f\u56f3\u3055\u308c\u305f\u3082\u306e\u3067\u3042\u308b<\/li><\/ul>\n\n\n\n<p>\u3068\u8a00\u3046\u524d\u63d0\u3067\u8a2d\u8a08\u3068\u3055\u308c\u3066\u3044\u308b\u3088\u3046\u3067\u3059\u3002<br>\u4eca\u56de\u306e\u3088\u3046\u306bresource\u306e\u8a18\u8ff0\u3092\u6d88\u3057\u3066\u3001apply\u3092\u3059\u308b\u3068\u3001<code>disable_api_termination<\/code>\u304c\u30aa\u30f3\u3067\u3082\u3001EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u524a\u9664\u3055\u308c\u308b\u306e\u306f\u8a2d\u8a08\u901a\u308a\u3067\u3059\u3002\uff08\u203b\uff09<\/p>\n\n\n\n<p>\u305d\u306e\u305f\u3081\u3001EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u524a\u9664\u4fdd\u8b77\u6a5f\u80fd\u306f<\/p>\n\n\n\n<ul><li>\u300cAWS\u30b3\u30f3\u30bd\u30fc\u30eb\u3001CLI\u306b\u3066\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u60f3\u5b9a\u5916\u306b\u524a\u9664\u3055\u308c\u3066\u3057\u307e\u3046\u306e\u3092\u9632\u3050\u305f\u3081\u306e\u3082\u306e\u3067\u3001Terraform\u304b\u3089\u306e\u524a\u9664\u306f\u9632\u6b62\u3057\u306a\u3044\u300d<\/li><\/ul>\n\n\n\n<p>\u3068\u6349\u3048\u308b\u3053\u3068\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u203b\uff1a\u3053\u306e\u6319\u52d5\u306b\u95a2\u9023\u3057\u305f\u8b70\u8ad6\u304c\u3055\u308c\u3066\u3044\u308bGitHub\u4e0a\u306eissue\u304c\u3042\u308a\u80cc\u666f\u3092\u77e5\u308b\u4e0a\u3067\u53c2\u8003\u306b\u306a\u308a\u307e\u3057\u305f\uff1a<a href=\"https:\/\/github.com\/hashicorp\/terraform\/issues\/17599#issuecomment-373557799\">https:\/\/github.com\/hashicorp\/terraform\/issues\/17599#issuecomment-373557799<\/a><\/p>\n\n\n\n<h3 id=\"outline__6\">5. IAM\u306e\u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3\u3067\u5236\u5fa1<\/h3>\n\n\n\n<p>\u30a4\u30f3\u30d5\u30e9\u306e\u69cb\u7bc9\u30d5\u30a7\u30fc\u30ba\u306b\u304a\u3044\u3066\u306f\u3001\u591a\u304f\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u524a\u9664\u3084\u5909\u66f4\u3082\u4f34\u3044\u306a\u304c\u3089\u69cb\u7bc9\u3057\u3066\u3044\u304f\u3053\u3068\u306b\u306a\u308b\u306e\u3067\u3001Terraform\u5b9f\u884c\u7528\u306eIAM\u306b\u306f\u6bd4\u8f03\u7684\u5f37\u3044\u6a29\u9650\u3092\u4e0e\u3048\u308b\u3053\u3068\u3082\u3042\u308b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3057\u304b\u3057\u3001\u4e00\u65b9\u3067\u3042\u308b\u7a0b\u5ea6\u306e\u69cb\u7bc9\u3092\u7d42\u3048\u3066\u3001\u904b\u7528\u3059\u308b\u30d5\u30a7\u30fc\u30ba\u306b\u5165\u3063\u305f\u3089\u3001\u30ea\u30bd\u30fc\u30b9\u306e\u5909\u66f4\u3059\u308b\u983b\u5ea6\u304c\u4e0b\u304c\u3063\u3066\u304d\u307e\u3059\u3002\u305d\u3057\u3066\u4e2d\u306b\u306f\u3001EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u3088\u3046\u306b\u524a\u9664\u3055\u308c\u306a\u3044\u3088\u3046\u306b\u3059\u308b\u3053\u3068\u304c\u5fc5\u8981\u306a\u3082\u306e\u3082\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u4e0a\u8a18\u306b\u66f8\u3044\u305f\u3088\u3046\u306b\u3001EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306b\u3064\u3044\u3066\u3001\u524a\u9664\u4fdd\u8b77\u6a5f\u80fd\u3067\u306fTerraform\u3092\u901a\u3058\u305f\u5076\u767a\u7684\u306a\u524a\u9664\u306f\u9632\u3052\u306a\u3044\u306e\u3060\u3068\u3059\u308b\u3068\u3001\u3082\u3046\u4e00\u3064\u8003\u3048\u3089\u308c\u308b\u306e\u306f\u3001Terraform\u306e\u5b9f\u884c\u7528\u306eIAM\u306e\u6a29\u9650\u3092\u7d5e\u308b\u3053\u3068\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u305f\u3068\u3048\u3070\u3001Terraform\u306e\u5b9f\u884c\u7528\u306eIAM\u306b\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u62d2\u5426\u30dd\u30ea\u30b7\u30fc\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-json\" data-lang=\"JSON\"><code>{\n    &quot;Version&quot;: &quot;2012-10-17&quot;,\n    &quot;Statement&quot;: [\n        {\n            &quot;Sid&quot;: &quot;DenyTerminateInstances&quot;,\n            &quot;Effect&quot;: &quot;Deny&quot;,\n            &quot;Action&quot;: &quot;ec2:TerminateInstances&quot;,\n            &quot;Resource&quot;: &quot;arn:aws:ec2:*:xxxxxxxxxxxx:instance\/*&quot;,\n            &quot;Condition&quot;: {\n                &quot;StringEquals&quot;: {\n                    &quot;aws:ResourceTag\/Protection&quot;: &quot;True&quot;\n                }\n            }\n        }\n    ]\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u30b5\u30fc\u30d3\u30b9\u30ec\u30d9\u30eb\u306e\u6761\u4ef6\u30ad\u30fc\u3067\u3042\u308b<code>aws:ResourceTag<\/code>\u306e\u4ed5\u7d44\u307f\u3092\u4f7f\u3063\u3066<\/p>\n\n\n\n<ul><li>\u5024\u304c\u201dTrue\u201d\u306e\u201cProtection\u201d\u306e\u30bf\u30b0\u304c\u3064\u3044\u3066\u3044\u308bEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u524a\u9664\u306f\u3067\u304d\u306a\u3044<\/li><\/ul>\n\n\n\n<p>\u3068\u8a00\u3046\u6761\u4ef6\u3092\u4f5c\u3063\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>\u3053\u306e\u72b6\u614b\u3067\u6b21\u306e\u5185\u5bb9\u3067EC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code>resource &quot;aws_instance&quot; &quot;web&quot; {\n  ami           = &quot;ami-078296f82eb463377&quot;\n  instance_type = &quot;t3.micro&quot;\n  subnet_id     = &quot;subnet-075944dcf7f7a9ee9&quot;\n\n  disable_api_termination = true\n  lifecycle {\n    prevent_destroy = true\n  }\n\n  # Protection\u30bf\u30b0\u3092\u8ffd\u52a0\n  tags = {\n    &quot;Protection&quot; = &quot;True&quot;\n  }\n}<\/code><\/pre><\/div>\n\n\n\n<p>\u305d\u3057\u3066\u3001\u305d\u306e\u5f8c\u306b\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304cdestroy\u3055\u308c\u308b\u3088\u3046\u306b\u5909\u66f4\uff08\u30b3\u30e1\u30f3\u30c8\u30a2\u30a6\u30c8\uff09\u3057\u3001apply\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\" data-file=\"test.tf\"><code># resource &quot;aws_instance&quot; &quot;web&quot; {\n#   ami           = &quot;ami-078296f82eb463377&quot;\n#   instance_type = &quot;t3.micro&quot;\n#   subnet_id     = &quot;subnet-075944dcf7f7a9ee9&quot;\n\n#   disable_api_termination = true\n#   lifecycle {\n#     prevent_destroy = true\n#   }\n\n#   # Protection\u30bf\u30b0\u3092\u8ffd\u52a0\n#   tags = {\n#     &quot;Protection&quot; = &quot;True&quot;\n#   }\n# }<\/code><\/pre><\/div>\n\n\n\n<div class=\"hcb_wrap\"><pre class=\"prism line-numbers lang-plain\"><code>$ terraform apply\naws_instance.web: Refreshing state... [id=i-0cd129a6a40720c5d]\n\nTerraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:\n  - destroy\n\nTerraform will perform the following actions:\n\n  # aws_instance.web will be destroyed\n  # (because aws_instance.web is not in configuration)\n  - resource &quot;aws_instance&quot; &quot;web&quot; {\n      - ami                                  = &quot;ami-078296f82eb463377&quot; -&gt; null\n      - arn                                  = &quot;arn:aws:ec2:ap-northeast-1:xxxxxxxxxxxx:instance\/i-0cd129a6a40720c5d&quot; -&gt; null\n      - associate_public_ip_address          = true -&gt; null\n      - availability_zone                    = &quot;ap-northeast-1d&quot; -&gt; null\n      - cpu_core_count                       = 1 -&gt; null\n      - cpu_threads_per_core                 = 2 -&gt; null\n      - disable_api_stop                     = false -&gt; null\n      - disable_api_termination              = true -&gt; null\n      - ebs_optimized                        = false -&gt; null\n      - get_password_data                    = false -&gt; null\n      - hibernation                          = false -&gt; null\n      - id                                   = &quot;i-0cd129a6a40720c5d&quot; -&gt; null\n      - instance_initiated_shutdown_behavior = &quot;stop&quot; -&gt; null\n      - instance_state                       = &quot;running&quot; -&gt; null\n      - instance_type                        = &quot;t3.micro&quot; -&gt; null\n      - ipv6_address_count                   = 0 -&gt; null\n      - ipv6_addresses                       = [] -&gt; null\n&lt;\u7565&gt;\n      - tags                                 = {\n          - &quot;Protection&quot; = &quot;True&quot;\n        } -&gt; null\n      - tags_all                             = {\n          - &quot;ManagedBy&quot;  = &quot;Terraform&quot;\n          - &quot;Project&quot;    = &quot;blog-sample&quot;\n          - &quot;Protection&quot; = &quot;True&quot;\n        } -&gt; null\n&lt;\u7565&gt;\n    }\n\nPlan: 0 to add, 0 to change, 1 to destroy.\n\nDo you want to perform these actions in workspace &quot;blog-sample&quot;?\n  Terraform will perform the actions described above.\n  Only &#39;yes&#39; will be accepted to approve.\n\n  Enter a value: yes\n\naws_instance.web: Destroying... [id=i-0cd129a6a40720c5d]\n\u2577\n\u2502 Error: terminating EC2 Instance (i-0cd129a6a40720c5d): UnauthorizedOperation: You are not authorized to perform this operation. Encoded authorization failure message: \n&lt;\u7565&gt;\n\u2502       status code: 403, request id: a5725471-8062-4c33-b06d-fcd6d99eac29\n\u2502 \n\u2502 \n\u2575<\/code><\/pre><\/div>\n\n\n\n<p>\u201cDestroying\u201d\u306e\u8868\u793a\u307e\u3067\u9032\u307f\u307e\u3057\u305f\u304c\u3001\u6a29\u9650\u4e0d\u8db3\u306e\u8868\u793a\u306b\u306a\u308a\u3001\u671f\u5f85\u901a\u308aEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u524a\u9664\u306f\u5931\u6557\u3057\u307e\u3057\u305f\u3002<br><code>aws:ResourceTag<\/code>\u306e\u6761\u4ef6\u306e\u3064\u3044\u305f\u62d2\u5426\u30dd\u30ea\u30b7\u30fc\u304c\u3061\u3083\u3093\u3068\u6a5f\u80fd\u3057\u305f\u3088\u3046\u3067\u3059\u3002<br>\u3053\u308c\u306b\u3088\u308a\u3001\u305f\u3068\u3048\u3070\u5225\u4ef6\u306e\u5909\u66f4\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u3064\u3082\u308a\u3060\u3063\u305f\u306e\u306b\u3001\u5076\u767a\u7684\u306bEC2\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304cTerraform\u306b\u3088\u308bdestroy\u306e\u5bfe\u8c61\u306b\u306a\u3063\u305f\u3068\u3057\u3066\u3082\u3001\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306b<\/p>\n\n\n\n<p><code>{\"Protection\":\"True\"}<\/code><\/p>\n\n\n\n<p>\u306e\u30bf\u30b0\u304c\u3064\u3044\u3066\u3044\u308c\u3070\u524a\u9664\u3055\u308c\u305a\u4fdd\u8b77\u3055\u308c\u308b\u3053\u3068\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p>\u3053\u306e\u3088\u3046\u306b\u3057\u3066\u30a4\u30f3\u30d5\u30e9\u69cb\u7bc9\u306e\u30d5\u30a7\u30fc\u30ba\u3067\u4eca\u3069\u3053\u306b\u3044\u308b\u306e\u304b\u3092\u9451\u307f\u3066\u3001Terraform\u3092\u5b9f\u884c\u3059\u308bIAM\u306e\u6a29\u9650\u3092\u7d5e\u308b\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u3092\u3057\u3066\u3044\u304f\u3053\u3068\u3067\u3001terraform apply\u3092\u5b9f\u884c\u3059\u308b\u969b\u306e\u5b89\u5168\u3092\u78ba\u4fdd\u3067\u304d\u308b\u306e\u3067\u306f\u306a\u3044\u3067\u3057\u3087\u3046\u304b\u3002<\/p>\n\n\n\n<h3 id=\"outline__7\">\u307e\u3068\u3081<\/h3>\n\n\n\n<p>\u4ee5\u4e0a\u3001terraform apply\u3092\u5c11\u3057\u3067\u3082\u5b89\u5168\u306b\u3057\u3066\u3044\u304f\u305f\u3081\u306e\u30a2\u30a4\u30c7\u30a3\u30a2\u3092\u6319\u3052\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p>\u57fa\u672c\u7684\u306b\u306fterraform apply\u306e\u524d\u306bterraform plan\u3092\u3057\u3063\u304b\u308a\u78ba\u8a8d\u3059\u308b\u3053\u3068\u304c\u5927\u5207\u3067\u306f\u3042\u308b\u306e\u3067\u3059\u304c\u3001\u8ffd\u52a0\u306e\u4ed5\u7d44\u307f\u3092\u5165\u308c\u3066\u3044\u304d\u3001\u3088\u308a\u5feb\u9069\u306b\u5b9f\u88c5\u3092\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u305f\u3044\u3082\u306e\u3067\u3059\u3002<\/p>\n\n\n\n<p>\u4e2d\u306b\u306f\u3001Terraform\u306e\u5b9f\u884c\u4f53\u5236\u304c\u8907\u96d1\u306b\u306a\u308b\u61f8\u5ff5\u306f\u3042\u308b\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u304c\u3001\u30c8\u30ec\u30fc\u30c9\u30aa\u30d5\u3092\u8003\u3048\u306a\u304c\u3089\u3001\u5c11\u3057\u3067\u3082\u30a4\u30f3\u30d5\u30e9\u69cb\u7bc9\u62c5\u5f53\u8005\u306e\u8ca0\u62c5\u3092\u4f4e\u6e1b\u3059\u308b\u53c2\u8003\u306b\u306a\u308c\u3070\u5e78\u3044\u3067\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u306f\u3058\u3081\u306b \u897f\u85e4\u3067\u3059\u3002\u5f53\u793e\u3067\u306fTerraform\u3092\u6d3b\u7528\u3057\u3066AWS\u30af\u30e9\u30a6\u30c9\u4e0a\u3067\u306e\u30a4\u30f3\u30d5\u30e9\u69cb\u7bc9\u3092\u6570\u591a\u304f\u884c\u3063\u3066\u304a\u308a\u307e\u3059\u3002IaC\uff08Infrastructure as Code\uff09\u5316\u304c\u9032\u3080\u3053\u3068\u306b\u3088\u308a\u30a4\u30f3\u30d5\u30e9\u69cb\u6210\u306e\u518d\u6d3b\u7528\u304c\u9032\u307f\u3001\u307e\u305f\u8fc5\u901f\u306a\u30d4\u30a2\u30ec\u30d3\u30e5\u30fc\u3082\u3084\u308a\u3084\u3059\u304f\u306a\u308a\u3001\u5b9f\u88c5\u30b9\u30d4\u30fc\u30c9\u304c\u4e0a\u304c\u308b\u3053\u3068\u3092\u65e5\u3005\u5b9f\u611f\u3057\u3066\u304a\u308a\u307e\u3059\u3002 \u305f\u3060\u3057\u3001IaC\u306f\u305d\u306e\u4e07\u80fd\u3055\u3086\u3048\u306b\u3001\u4e88\u671f\u305b\u306c\u5f62\u3067\u306e\u4e8b\u6545\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u307e\u305f\u3001\u300cterra [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":3437,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[18],"tags":[344,384],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/posts\/3195"}],"collection":[{"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/comments?post=3195"}],"version-history":[{"count":47,"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/posts\/3195\/revisions"}],"predecessor-version":[{"id":3438,"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/posts\/3195\/revisions\/3438"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/media\/3437"}],"wp:attachment":[{"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/media?parent=3195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/categories?post=3195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/wp-json\/wp\/v2\/tags?post=3195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}