https://github.com/infracost/infracost

Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left!
https://github.com/infracost/infracost

aws azure cloud cloud-cost-estimates cost-estimation cost-management cost-optimization devops finops gcp google infrastructure-as-code monthly-costs terraform terraform-cost-estimation

Last synced: 14 days ago
JSON representation

Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left!

Host: GitHub
URL: https://github.com/infracost/infracost
Owner: infracost
License: apache-2.0
Created: 2020-06-24T09:11:56.000Z (almost 5 years ago)
Default Branch: master
Last Pushed: 2025-03-26T19:40:53.000Z (20 days ago)
Last Synced: 2025-03-28T08:37:51.672Z (18 days ago)
Topics: aws, azure, cloud, cloud-cost-estimates, cost-estimation, cost-management, cost-optimization, devops, finops, gcp, google, infrastructure-as-code, monthly-costs, terraform, terraform-cost-estimation
Language: Go
Homepage: https://infracost.io
Size: 13.6 MB
Stars: 11,347
Watchers: 69
Forks: 586
Open Issues: 217
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md

Awesome Lists containing this project

awesome-platform-engineering-tools - Infracost- cost estimates for Terraform
awesome-list - infracost
awesome-platform-engineering - Infracost- cost estimates for Terraform
awesome-cloud-cost-control - Infra Cost
awesome-tf - Infracost - Cloud cost estimates for Terraform in your CLI and pull requests. (Tools / Community providers)
StarryDivineSky - infracost/infracost
my-awesome-starred - infracost/infracost - Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left! (Go)
jimsghstars - infracost/infracost - Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left! (Go)
awesome-x-ops - Infracost
awesome-starred - infracost/infracost - Cloud cost estimates for Terraform in pull requests💰📉 Love your cloud bill! (devops)
awesome-repositories - infracost/infracost - Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left! (Go)
my-awesome - infracost/infracost - cost-estimates,cost-estimation,cost-management,cost-optimization,devops,finops,gcp,google,infrastructure-as-code,monthly-costs,terraform,terraform-cost-estimation pushed_at:2025-04 star:11.4k fork:0.6k Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left! (Go)

README

        # AWS EC2 Instance Terraform module

Terraform module which creates an EC2 instance on AWS.

## Usage

### Single EC2 Instance

```hcl

module "ec2_instance" {

  source  = "terraform-aws-modules/ec2-instance/aws"

  version = "~> 3.0"

  name = "single-instance"

  ami                    = "ami-ebd02392"

  instance_type          = "t2.micro"

  key_name               = "user1"

  monitoring             = true

  vpc_security_group_ids = ["sg-12345678"]

  subnet_id              = "subnet-eddcdzz4"

  tags = {

    Terraform   = "true"

    Environment = "dev"

  }

}

```

### Multiple EC2 Instance

```hcl

module "ec2_instance" {

  source  = "terraform-aws-modules/ec2-instance/aws"

  version = "~> 3.0"

  for_each = toset(["one", "two", "three"])

  name = "instance-${each.key}"

  ami                    = "ami-ebd02392"

  instance_type          = "t2.micro"

  key_name               = "user1"

  monitoring             = true

  vpc_security_group_ids = ["sg-12345678"]

  subnet_id              = "subnet-eddcdzz4"

  tags = {

    Terraform   = "true"

    Environment = "dev"

  }

}

```

### Spot EC2 Instance

```hcl

module "ec2_instance" {

  source  = "terraform-aws-modules/ec2-instance/aws"

  version = "~> 3.0"

  name = "spot-instance"

  create_spot_instance = true

  spot_price           = "0.60"

  spot_type            = "persistent"

  ami                    = "ami-ebd02392"

  instance_type          = "t2.micro"

  key_name               = "user1"

  monitoring             = true

  vpc_security_group_ids = ["sg-12345678"]

  subnet_id              = "subnet-eddcdzz4"

  tags = {

    Terraform   = "true"

    Environment = "dev"

  }

}

```

## Examples

- [Complete EC2 instance](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/tree/master/examples/complete)

- [EC2 instance with EBS volume attachment](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/tree/master/examples/volume-attachment)

## Make an encrypted AMI for use

This module does not support encrypted AMI's out of the box however it is easy enough for you to generate one for use

This example creates an encrypted image from the latest ubuntu 16.04 base image.

```hcl

provider "aws" {

  region = "us-west-2"

}

data "aws_ami" "ubuntu" {

  most_recent = true

  owners      = ["679593333241"]

  filter {

    name   = "name"

    values = ["ubuntu-minimal/images/hvm-ssd/ubuntu-focal-20.04-*"]

  }

  filter {

    name   = "virtualization-type"

    values = ["hvm"]

  }

}

resource "aws_ami_copy" "ubuntu_encrypted_ami" {

  name              = "ubuntu-encrypted-ami"

  description       = "An encrypted root ami based off ${data.aws_ami.ubuntu.id}"

  source_ami_id     = data.aws_ami.ubuntu.id

  source_ami_region = "eu-west-2"

  encrypted         = true

  tags = { Name = "ubuntu-encrypted-ami" }

}

data "aws_ami" "encrypted-ami" {

  most_recent = true

  filter {

    name   = "name"

    values = [aws_ami_copy.ubuntu_encrypted_ami.id]

  }

  owners = ["self"]

}

```

## Conditional creation

The following combinations are supported to conditionally create resources:

- Disable resource creation (no resources created):

```hcl

  create = false

```

- Create spot instance:

```hcl

  create_spot_instance = true

```

## Notes

- `network_interface` can't be specified together with `vpc_security_group_ids`, `associate_public_ip_address`, `subnet_id`. See [complete example](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/tree/master/examples/complete) for details.

- Changes in `ebs_block_device` argument will be ignored. Use [aws_volume_attachment](https://www.terraform.io/docs/providers/aws/r/volume_attachment.html) resource to attach and detach volumes from AWS EC2 instances. See [this example](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/tree/master/examples/volume-attachment).

- In regards to spot instances, you must grant the `AWSServiceRoleForEC2Spot` service-linked role access to any custom KMS keys, otherwise your spot request and instances will fail with `bad parameters`. You can see more details about why the request failed by using the awscli and `aws ec2 describe-spot-instance-requests`

## Requirements

| Name | Version |

|------|---------|

|  [terraform](#requirement\_terraform) | >= 0.13.1 |

|  [aws](#requirement\_aws) | >= 3.72 |

## Providers

| Name | Version |

|------|---------|

|  [aws](#provider\_aws) | >= 3.72 |

## Modules

No modules.

## Resources

| Name | Type |

|------|------|

| [aws_instance.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance) | resource |

| [aws_spot_instance_request.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/spot_instance_request) | resource |

## Inputs

| Name | Description | Type | Default | Required |

|------|-------------|------|---------|:--------:|

|  [ami](#input\_ami) | ID of AMI to use for the instance | `string` | `""` | no |

|  [associate\_public\_ip\_address](#input\_associate\_public\_ip\_address) | Whether to associate a public IP address with an instance in a VPC | `bool` | `null` | no |

|  [availability\_zone](#input\_availability\_zone) | AZ to start the instance in | `string` | `null` | no |

|  [capacity\_reservation\_specification](#input\_capacity\_reservation\_specification) | Describes an instance's Capacity Reservation targeting option | `any` | `null` | no |

|  [cpu\_core\_count](#input\_cpu\_core\_count) | Sets the number of CPU cores for an instance. | `number` | `null` | no |

|  [cpu\_credits](#input\_cpu\_credits) | The credit option for CPU usage (unlimited or standard) | `string` | `null` | no |

|  [cpu\_threads\_per\_core](#input\_cpu\_threads\_per\_core) | Sets the number of CPU threads per core for an instance (has no effect unless cpu\_core\_count is also set). | `number` | `null` | no |

|  [create](#input\_create) | Whether to create an instance | `bool` | `true` | no |

|  [create\_spot\_instance](#input\_create\_spot\_instance) | Depicts if the instance is a spot instance | `bool` | `false` | no |

|  [disable\_api\_termination](#input\_disable\_api\_termination) | If true, enables EC2 Instance Termination Protection | `bool` | `null` | no |

|  [ebs\_block\_device](#input\_ebs\_block\_device) | Additional EBS block devices to attach to the instance | `list(map(string))` | `[]` | no |

|  [ebs\_optimized](#input\_ebs\_optimized) | If true, the launched EC2 instance will be EBS-optimized | `bool` | `null` | no |

|  [enable\_volume\_tags](#input\_enable\_volume\_tags) | Whether to enable volume tags (if enabled it conflicts with root\_block\_device tags) | `bool` | `true` | no |

|  [enclave\_options\_enabled](#input\_enclave\_options\_enabled) | Whether Nitro Enclaves will be enabled on the instance. Defaults to `false` | `bool` | `null` | no |

|  [ephemeral\_block\_device](#input\_ephemeral\_block\_device) | Customize Ephemeral (also known as Instance Store) volumes on the instance | `list(map(string))` | `[]` | no |

|  [get\_password\_data](#input\_get\_password\_data) | If true, wait for password data to become available and retrieve it. | `bool` | `null` | no |

|  [hibernation](#input\_hibernation) | If true, the launched EC2 instance will support hibernation | `bool` | `null` | no |

|  [host\_id](#input\_host\_id) | ID of a dedicated host that the instance will be assigned to. Use when an instance is to be launched on a specific dedicated host | `string` | `null` | no |

|  [iam\_instance\_profile](#input\_iam\_instance\_profile) | IAM Instance Profile to launch the instance with. Specified as the name of the Instance Profile | `string` | `null` | no |

|  [instance\_initiated\_shutdown\_behavior](#input\_instance\_initiated\_shutdown\_behavior) | Shutdown behavior for the instance. Amazon defaults this to stop for EBS-backed instances and terminate for instance-store instances. Cannot be set on instance-store instance | `string` | `null` | no |

|  [instance\_type](#input\_instance\_type) | The type of instance to start | `string` | `"t3.micro"` | no |

|  [ipv6\_address\_count](#input\_ipv6\_address\_count) | A number of IPv6 addresses to associate with the primary network interface. Amazon EC2 chooses the IPv6 addresses from the range of your subnet | `number` | `null` | no |

|  [ipv6\_addresses](#input\_ipv6\_addresses) | Specify one or more IPv6 addresses from the range of the subnet to associate with the primary network interface | `list(string)` | `null` | no |

|  [key\_name](#input\_key\_name) | Key name of the Key Pair to use for the instance; which can be managed using the `aws_key_pair` resource | `string` | `null` | no |

|  [launch\_template](#input\_launch\_template) | Specifies a Launch Template to configure the instance. Parameters configured on this resource will override the corresponding parameters in the Launch Template | `map(string)` | `null` | no |

|  [metadata\_options](#input\_metadata\_options) | Customize the metadata options of the instance | `map(string)` | `{}` | no |

|  [monitoring](#input\_monitoring) | If true, the launched EC2 instance will have detailed monitoring enabled | `bool` | `false` | no |

|  [name](#input\_name) | Name to be used on EC2 instance created | `string` | `""` | no |

|  [network\_interface](#input\_network\_interface) | Customize network interfaces to be attached at instance boot time | `list(map(string))` | `[]` | no |

|  [placement\_group](#input\_placement\_group) | The Placement Group to start the instance in | `string` | `null` | no |

|  [private\_ip](#input\_private\_ip) | Private IP address to associate with the instance in a VPC | `string` | `null` | no |

|  [root\_block\_device](#input\_root\_block\_device) | Customize details about the root block device of the instance. See Block Devices below for details | `list(any)` | `[]` | no |

|  [secondary\_private\_ips](#input\_secondary\_private\_ips) | A list of secondary private IPv4 addresses to assign to the instance's primary network interface (eth0) in a VPC. Can only be assigned to the primary network interface (eth0) attached at instance creation, not a pre-existing network interface i.e. referenced in a `network_interface block` | `list(string)` | `null` | no |

|  [source\_dest\_check](#input\_source\_dest\_check) | Controls if traffic is routed to the instance when the destination address does not match the instance. Used for NAT or VPNs. | `bool` | `true` | no |

|  [spot\_block\_duration\_minutes](#input\_spot\_block\_duration\_minutes) | The required duration for the Spot instances, in minutes. This value must be a multiple of 60 (60, 120, 180, 240, 300, or 360) | `number` | `null` | no |

|  [spot\_instance\_interruption\_behavior](#input\_spot\_instance\_interruption\_behavior) | Indicates Spot instance behavior when it is interrupted. Valid values are `terminate`, `stop`, or `hibernate` | `string` | `null` | no |

|  [spot\_launch\_group](#input\_spot\_launch\_group) | A launch group is a group of spot instances that launch together and terminate together. If left empty instances are launched and terminated individually | `string` | `null` | no |

|  [spot\_price](#input\_spot\_price) | The maximum price to request on the spot market. Defaults to on-demand price | `string` | `null` | no |

|  [spot\_type](#input\_spot\_type) | If set to one-time, after the instance is terminated, the spot request will be closed. Default `persistent` | `string` | `null` | no |

|  [spot\_valid\_from](#input\_spot\_valid\_from) | The start date and time of the request, in UTC RFC3339 format(for example, YYYY-MM-DDTHH:MM:SSZ) | `string` | `null` | no |

|  [spot\_valid\_until](#input\_spot\_valid\_until) | The end date and time of the request, in UTC RFC3339 format(for example, YYYY-MM-DDTHH:MM:SSZ) | `string` | `null` | no |

|  [spot\_wait\_for\_fulfillment](#input\_spot\_wait\_for\_fulfillment) | If set, Terraform will wait for the Spot Request to be fulfilled, and will throw an error if the timeout of 10m is reached | `bool` | `null` | no |

|  [subnet\_id](#input\_subnet\_id) | The VPC Subnet ID to launch in | `string` | `null` | no |

|  [tags](#input\_tags) | A mapping of tags to assign to the resource | `map(string)` | `{}` | no |

|  [tenancy](#input\_tenancy) | The tenancy of the instance (if the instance is running in a VPC). Available values: default, dedicated, host. | `string` | `null` | no |

|  [timeouts](#input\_timeouts) | Define maximum timeout for creating, updating, and deleting EC2 instance resources | `map(string)` | `{}` | no |

|  [user\_data](#input\_user\_data) | The user data to provide when launching the instance. Do not pass gzip-compressed data via this argument; see user\_data\_base64 instead. | `string` | `null` | no |

|  [user\_data\_base64](#input\_user\_data\_base64) | Can be used instead of user\_data to pass base64-encoded binary data directly. Use this instead of user\_data whenever the value is not a valid UTF-8 string. For example, gzip-encoded user data must be base64-encoded and passed via this argument to avoid corruption. | `string` | `null` | no |

|  [volume\_tags](#input\_volume\_tags) | A mapping of tags to assign to the devices created by the instance at launch time | `map(string)` | `{}` | no |

|  [vpc\_security\_group\_ids](#input\_vpc\_security\_group\_ids) | A list of security group IDs to associate with | `list(string)` | `null` | no |

## Outputs

| Name | Description |

|------|-------------|

|  [arn](#output\_arn) | The ARN of the instance |

|  [capacity\_reservation\_specification](#output\_capacity\_reservation\_specification) | Capacity reservation specification of the instance |

|  [id](#output\_id) | The ID of the instance |

|  [instance\_state](#output\_instance\_state) | The state of the instance. One of: `pending`, `running`, `shutting-down`, `terminated`, `stopping`, `stopped` |

|  [ipv6\_addresses](#output\_ipv6\_addresses) | The IPv6 address assigned to the instance, if applicable. |

|  [outpost\_arn](#output\_outpost\_arn) | The ARN of the Outpost the instance is assigned to |

|  [password\_data](#output\_password\_data) | Base-64 encoded encrypted password data for the instance. Useful for getting the administrator password for instances running Microsoft Windows. This attribute is only exported if `get_password_data` is true |

|  [primary\_network\_interface\_id](#output\_primary\_network\_interface\_id) | The ID of the instance's primary network interface |

|  [private\_dns](#output\_private\_dns) | The private DNS name assigned to the instance. Can only be used inside the Amazon EC2, and only available if you've enabled DNS hostnames for your VPC |

|  [private\_ip](#output\_private\_ip) | The private IP address assigned to the instance. |

|  [public\_dns](#output\_public\_dns) | The public DNS name assigned to the instance. For EC2-VPC, this is only available if you've enabled DNS hostnames for your VPC |

|  [public\_ip](#output\_public\_ip) | The public IP address assigned to the instance, if applicable. NOTE: If you are using an aws\_eip with your instance, you should refer to the EIP's address directly and not use `public_ip` as this field will change after the EIP is attached |

|  [spot\_bid\_status](#output\_spot\_bid\_status) | The current bid status of the Spot Instance Request |

|  [spot\_instance\_id](#output\_spot\_instance\_id) | The Instance ID (if any) that is currently fulfilling the Spot Instance request |

|  [spot\_request\_state](#output\_spot\_request\_state) | The current request state of the Spot Instance Request |

|  [tags\_all](#output\_tags\_all) | A map of tags assigned to the resource, including those inherited from the provider default\_tags configuration block |

## Authors

Module is maintained by [Anton Babenko](https://github.com/antonbabenko) with help from [these awesome contributors](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/graphs/contributors).

## License

Apache 2 Licensed. See [LICENSE](https://github.com/terraform-aws-modules/terraform-aws-ec2-instance/tree/master/LICENSE) for full details.

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Awesome

https://github.com/infracost/infracost

Awesome Lists containing this project

README