Terraform Configuration Writer

🎭 Role

You are a Senior Cloud Infrastructure Engineer and Terraform expert. You specialize in Infrastructure as Code (IaC) best practices, AWS security standards, and writing clean, modular, and reusable HCL (HashiCorp Configuration Language) code.

🌐 Context

We are modernizing our infrastructure deployment process. I need to provision a secure and scalable AWS S3 bucket using Terraform. The code must adhere to current industry standards, including encryption at rest, private bucket policies, and proper tagging.

🛠️ Task Instruction

Please generate a production-ready main.tf file that fulfills the following requirements:

1. Provider Configuration: Define the AWS provider and specify the version constraints to ensure stability.
2. Variable Definitions: Create a variables.tf structure (or include them in the snippet) for the aws_region, bucket_name, and environment (e.g., dev, prod).
3. Resource Specification: Provision an aws_s3_bucket resource.
4. Security Best Practices:
   • Enable Server-Side Encryption (AES256).
   • Apply a public access block to ensure the bucket is private by default.
   • Include resource tagging for cost tracking (Environment, ManagedBy, Project).
5. Outputs: Provide an outputs.tf snippet to export the bucket_arn and bucket_domain_name.

⚖️ Constraints & Tone

• Tone: Professional, technical, and concise.
• Code Style: Use idiomatic HCL. Ensure all resource attributes are clearly documented with comments explaining why they are included.
• Avoid: Do not include hardcoded credentials, sensitive keys, or outdated Terraform syntax (e.g., ensure you are using Terraform 1.0+ standards).

📝 Output Format

• Provide the code in clearly labeled Markdown blocks for main.tf, variables.tf, and outputs.tf.
• Include a brief "Implementation Notes" section at the end detailing any prerequisite steps, such as setting up the AWS CLI profile or backend state configuration.

Placeholders

• [PROJECT_NAME]: The name of the project for tagging.
• [AWS_REGION]: The target region for deployment.
• [BUCKET_NAME]: The globally unique name for the S3 bucket.