Vault on AWS: Deploying the Project

[@garrydias]

This is a great video for deploying Vault in aws ec2 instances.. really great. Is there videos about acess Vault as an application on AWS Control Tower home page?

[@amilsonjunior9869]

Oh I'm receiving an error at s3.tf... Can you help me with that? Error: Computed attribute cannot be set on s3.tf line 6, in resource "aws_s3_bucket" "vault_data": 6: region = data.aws_region.current.name

[@amilsonjunior9869]

Well I just removed that line and it worked perfectly.

[@Jo7696]

how many days it took for your record to get issued

[@GS-vn9pf]

Hi, a quick question: i have KMS key already in my AWS Account, so AWS-CLI gives exception of Key already existing, how do I make decryption?

[@NoelyeuMila]

somehow the file vault_creds_encrypted cannot be found on the S3 bucket after running 'terraform apply'. Do you have an idea why? Thanks :) EDIT: Seems the reason is the commands in userdata_compiled.sh runs incorrectly and failed to start vault service. I ended up having to manually type in every commands and check along the way. Finally got the server up and running!

[@kiranbhulokam6712]

Hi, Could you pls provide the steps like where you ran the command etc.... :)

[@nforlife]

Hi @Tech Guides and Thoughts Could you help with the below error message? It looks like the command to run vault init and copy to the required S3 bucket didn’t execute any fix? . ./temp/vault_credentials.sh fatal error: An error occurred (404) when calling the HeadObject operation: Key "vault_creds_encrypted" does not exist Error parsing parameter '--ciphertext-blob': Unable to load paramfile fileb://temp/vault_creds_encrypted: [Errno 2] No such file or directory: 'temp/vault_creds_encrypted' Vault crednetials decrypted. Find them at ./temp/vault_creds_decrypted ----

[@TheJunkmailbot]

Running into the following error.. │ Error: Value for unconfigurable attribute │ │ with aws_s3_bucket.vault_data, │ on s3.tf line 4, in resource "aws_s3_bucket" "vault_data": │ 4: resource "aws_s3_bucket" "vault_data" { │ │ Can't configure a value for "server_side_encryption_configuration": its value will be decided automatically based on │ the result of applying this configuration. Apparently this is an issue with changes made to the aws_s3_bucket resource, though being new at Terraform I don't know what to do in order to fix it.

[@5412dingo]

I am also getting the same error.

[@TheJunkmailbot]

@@5412dingo This is fixed now. You can clone the Github repo and start again to include the fixed code and it should be fine.

[@kiranbhulokam6712]

Hi Thanks for the video. Facing an issue when I ran the. ./temp/vault_credentials.sh and here is the error fatal error: An error occurred (404) when calling the HeadObject operation: Key "vault_creds_encrypted" does not exist Error parsing parameter '--ciphertext-blob': Unable to load paramfile fileb://temp/vault_creds_encrypted: [Errno 2] No such file or directory: 'temp/vault_creds_encrypted'

[@nforlife]

Hi @kiranbhulokam6712, I am facing the same issues were you able to resolve the issue. Did you find a way to automate it.