AWS infrastructure, one reviewed plan at a time

Learn Terraform and OpenTofu without learning unsafe habits.

24 practical chapters move from a provider-free first plan to a production-shaped EKS capstone. You review every change before it can create a cloud resource.

Start Chapter 1: safe setup and first plan

Start here

Prerequisites

  • A terminal, Git, and an AWS account you are allowed to use.
  • AWS CLI access through SSO or Identity Center, not long-lived access keys.
  • Terraform or OpenTofu installed from the compatibility contract.

Cost legend

$0 plan-only does not create cloud resources.

review cost needs an account, region, and cleanup check.

must include a cleanup step before you apply.

How to use the course

Read the plan, name the intended change, then apply only when the chapter says to. Use the same HCL tree with Terraform or OpenTofu, but do not mix state ownership between them.

Terraform and OpenTofu compatibility

One configuration, two CLIs. The shared labs stay within the version ranges recorded in COMPATIBILITY.md. This course currently references Terraform 1.16.0 and OpenTofu 1.12.6. Each lab shows explicit command pairs so you can choose one CLI and keep the state with that CLI.

Progressive capstone

Phase 1: Terraform/OpenTofu foundations

Chapters 1-5

Phase 2: Reusable and testable IaC

Chapters 6-8

Phase 3: AWS production foundation

Chapters 9-12

Phase 4: EKS platform

Chapters 13-18

Phase 5: Delivery and stateful workloads

Chapters 19-22
CHAPTER 19

Argo CD and the Terraform Boundary

Planned
CHAPTER 20

Deploy the Full-Stack Application

Planned
CHAPTER 21

Cassandra on EKS

Planned
CHAPTER 22

Cassandra Backup and Restore

Planned

Phase 6: Operate production

Chapters 23-24
CHAPTER 23

Observability, Security, and Failure Drills

Planned
CHAPTER 24

Upgrades, Recovery, Cost, and Production Readiness

Planned