mycooldomain.tf

provider "aws" {
    region = "us-west-2"
}

resource "aws_route53_zone" "apex" {
   name = "mycooldomain.com"
}

resource "aws_iam_role" "instance_appserver" {
    name = "instance_appserver"
    assume_role_policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": "sts:AssumeRole",
      "Principal": {
        "Service": "ec2.amazonaws.com"
      },
      "Effect": "Allow",
      "Sid": ""
    }
  ]
}
EOF
}

resource "aws_iam_role_policy" "instance_appserver" {
    name = "instance_appserver"
    role = "${aws_iam_role.instance_appserver.id}"
    policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "route53:ListHostedZones",
        "route53:GetChange"
      ],
      "Effect": "Allow",
      "Resource": "*"
    },
    {
      "Action": [
        "route53:ChangeResourceRecordSets"
      ],
      "Effect": "Allow",
      "Resource": "arn:aws:route53:::hostedzone/${aws_route53_zone.apex.zone_id}"
    }
  ]
}
EOF
}

resource "aws_iam_instance_profile" "appserver" {
    name = "appserver"
    roles = ["${aws_iam_role.instance_appserver.name}"]
}

resource "aws_instance" "appserver" {
  ami = "ami-abbc94bc"
  instance_type = "m3.medium"
  iam_instance_profile = "${aws_iam_instance_profile.appserver.id}"
  tags {
      Name = "appserver"
  }
}