Congratulations on reaching this stage of our application process and thank you for taking part in this assessment exercise.

This is an exercise used to assess your approach to development and use of infrastructure as code tooling. This has been tested using terraform v0.14 we advise you use this version.

Here we have some terraform to build a simple VPC network, for now we have just one instance running the web server Nginx in its default configuration, serving up the default welcome page. To run this use the following command...

terraform init && terraform apply -var-file=london.tfvars

We want this to be extended. You're tasked with making the alterations detailed below. After completing each stage, a test to show the things are still working would be to run the following command. Expect to see the Nginx welcome page HTML.

terraform output nginx_domain | xargs curl

1. We want to be able to run the same stack closer to our customers in the US. Please build the same stack in the us-east-2 (Ohio) region, leaving the existing one in place too. Feel free to modify the code and or structure as much as needed in order to do this, bearing in mind we may want to deploy the stack to more region in the future. You'll need to consider terraform state each stack should have its own state but don't feel you need to go as far as setting up remote state. As for a CIDR the new VPC use whatever you feel like, providing it is compliant with RFC-1918 and does not overlap with the London network.

2. The EC2 instance running Nginx went down over the weekend, we had an outage, it's been decided that we need a solution that is more resilient than just a single instance. Please implement a solution that you'd be confident would continue to run in the event one instance goes down.

3. We are looking to improve the security and segregation of our network we've decided we would like private subnets that are not addressable on the internet. Modify the VPC to meet this requirement, the private subnets should still have egress internet connectivity.

4. In order to provide a consistent environment on the teams CI server and each engineer's workstation we've decided it would make sense to run terraform in Docker. Create a Dockerfile and a wrapper script that will enable this. The script should be callable with the same arguments as the terraform cli tool, i.e. init/plan/apply etc

Please note any assumptions you make and what you would do differently given more time or in a real world production system and it would also be great to hear any design thoughts and tradeoffs you made when deciding on a solution.

As a guide this test should take approximately 3 hours, it is designed to be challenging and there are lots of ways to approach it. It’s ok to spend more time on it but we don’t want to take up an excessive amount of your time. If you don’t have time to complete everything you’d like to, feel free to submit a partial solution with a summary of how you’d tackle the outstanding aspects. It won’t count against you, we’re aware that varying circumstances can make finding time for recruitment exercises tricky.

Zip and email your solution. Do not send a Pull Request to this repo.