Integrate HashiCorp Terraform with Astra DB Serverless

Install Terraform.

In a terminal, run the following command to confirm that Terraform is installed:

terraform -v

Terraform v1.9.2
on darwin_arm64

Install the Astra CLI. Astra CLI is a command-line tool that lets you interact with your Astra DB database.

brew update && brew install datastax/astra-cli/astra-cli

curl -Ls "https://dtsx.io/get-astra-cli" | bash

Run the following command to confirm that the Astra CLI is installed:

astra --version

0.5

Use your application token to create an Astra CLI configuration that lets you interact with your Astra DB Serverless database:

astra setup --token TOKEN

Confirm that your Astra CLI configuration is correctly set up. This command returns the email address associated with your Astra account.

astra config list

Install the AWS CLI.

curl "https://awscli.amazonaws.com/AWSCLIV2.pkg" -o "AWSCLIV2.pkg"
sudo installer -pkg AWSCLIV2.pkg -target /

Confirm installation of the AWS CLI.

aws help

Access the AWS Identity and Access Management console (IAM).

In the left navigation pane, click Users, and then click Create user.

Name your User and click Next.

Click Attach policies directly.

Search for and attach the following policies your User:

Click Next, and then click Create user.

From your IAM Dashboard, select your new User.

Select Create access key to create a pair of keys wih access_key and secret_key.

Under Access key best practices and alternatives, select Application running outside AWS.

Click Download .csv file to save your keys locally.

Add the keys you downloaded to the AWS CLI configuration file. If you already have a default profile, you can create a new profile for this project by adding it to the ~/.aws/credentials file.

touch ~/.aws/credentials
vi ~/.aws/credentials

Add the following lines to the ~/.aws/credentials file.

[terraform]
aws_access_key_id = YOUR_ACCESS_KEY
aws_secret_access_key = YOUR_SECRET_KEY
region = us-east-2

If you need to change profiles, use export AWS_PROFILE=<profile_name> to switch between profiles.

Confirm that your AWS CLI secret is configured correctly.

aws configure list --profile terraform

      Name                    Value             Type    Location
      ----                    -----             ----    --------
   profile                terraform           manual    --profile
access_key     ****************FZ6H shared-credentials-file
secret_key     ****************u1hZ shared-credentials-file

Create a new directory for your Terraform project:

mkdir terraform-demo && cd terraform-demo

Clone the Terraform AWS Stack repository. This is a submodule of the DataStax AI Stack repository that contains example Terraform modules for deploying the DataStax AI Stack on AWS.

git clone https://github.com/datastax/terraform-aws-ai-stack

Change to the Terraform DataStax AWS Stack directory containing an AWS example that doesn’t require provisioning a custom domain.

cd terraform-aws-ai-stack/examples/aws-no-custom-domain

Initialize Terraform.

terraform init

Confirm that Terraform is set up correctly.

terraform plan

When prompted, enter values for the variables in the .tf files, including your application token.

var.astra_token
  Enter a value: AstraCS...

Apply the Terraform plan. Passing the aws_profile value is optional if you already used export earlier.

terraform apply -var="astra_token=<your_astra_token>" -var="aws_profile=<your_aws_profile>"

Terraform will prompt you to confirm the plan. Enter yes to apply the plan. Your Terraform plan is applied, and you will see a message like Apply complete! Resources: 36 added, 0 changed, 0 destroyed. when the process is complete.

Confirm the creation of new resources with the Astra CLI or check the Astra Portal:

astra db list

+---------------------+--------------------------------------+-----------+-------+---+-----------+
| Name                | id                                   | Regions   | Cloud | V | Status    |
+---------------------+--------------------------------------+-----------+-------+---+-----------+
| us-east-2           | d16f4b43-b3f5-4825-9868-20204e7007d1 | us-east-2 | aws   | ■ | ACTIVE    |
| my_db               | 6005fdc3-80c3-43c0-8adc-688539750001 | us-east-2 | aws   | ■ | ACTIVE    |
| assistant_api_db    | d403e9f7-46d2-46a0-912d-0313892cbcd8 | us-east-2 | aws   | ■ | ACTIVE    |
| langflow_db         | 3b3b3b3b-3b3b-3b3b-3b3b-3b3b3b3b3b3b | us-east-2 | aws   | ■ | ACTIVE    |
+---------------------+--------------------------------------+-----------+-------+---+-----------+

To remove the resources you created with Terraform, run the following command:

terraform destroy -var="astra_token=<your_astra_token>"

If any Terraform files remain locally, delete them manually.

If you want to re-deploy and are running into existing load balancers or CloudWatch logs, you can remove them with the AWS CLI.

List your load balancers and record their ARN resource IDs.

aws elbv2 describe-load-balancers --names datastax-assistants-alb datastax-langflow-alb

Delete the load balancer by ARN resource ID.

aws elbv2 delete-load-balancer --load-balancer-arn <arn-of-load-balancer>

Delete CloudWatch log groups by name.

aws logs delete-log-group --log-group-name /aws/ecs/datastax-ecs-cluster
aws logs delete-log-group --log-group-name /ecs/langflow
aws logs delete-log-group --log-group-name /ecs/assistants