Enterprise Infrastructure Engineering with Terraform (AWS)

Overview

This four-day hands-on course teaches experienced Terraform users how enterprise engineering teams design, build, govern and automate AWS infrastructure. Learn reusable modules, governance, multi-environment deployments, remote state, GitHub Actions, OpenID Connect (OIDC), infrastructure migration and production-ready engineering practices.

Prerequisites

Participants should have:

• A working knowledge of Microsoft 365 services, including Teams, SharePoint, and Exchange Online.
• Familiarity with IT administration and basic troubleshooting concepts.
• Access to a Microsoft 365 tenant for hands-on labs (recommended).

Target audience

• This course is designed for:
• Cloud Engineers
• Infrastructure Engineers
• Platform Engineers
• DevOps Engineers
• Site Reliability Engineers
• Cloud Architects

Objectives

By the end of this course, learners will be able to:

• Enterprise Terraform architecture
• Reusable modules
• Validation and governance
• Secure CI/CD with GitHub Actions
• OIDC authentication
• Infrastructure migration
• Production-ready Infrastructure as Code

The course follows the complete infrastructure engineering lifecycle—from designing enterprise Terraform architectures and reusable modules, through automation and governance, to managing and modernising production AWS environments.

Outline

Module 1 – Enterprise Terraform Engineering

Establish the engineering principles that underpin modern Infrastructure as Code. Learn how enterprise teams structure Terraform projects, organise environments, manage state and apply engineering practices that support scalable, maintainable cloud infrastructure.

Module 2 – Engineering Robust Terraform Configurations

Develop resilient Terraform configurations using validation, sanitisation, expressions, locals and reusable configuration techniques. Learn how to reduce deployment errors while creating infrastructure that is easier to maintain, extend and support.

Module 3 – Building Reusable Infrastructure with Modules

Discover how reusable Terraform modules simplify infrastructure management. Learn to design module interfaces, manage inputs and outputs, implement versioning strategies and build reusable components that support enterprise-scale deployments.

Module 4 – Managing Enterprise Infrastructure

Learn how to organise and manage infrastructure across multiple environments using parameterisation, remote state and structured project layouts. Explore techniques for maintaining consistency while supporting development, testing and production deployments.

Module 5 – Publishing and Consuming Remote Modules

Learn how engineering teams publish, version and consume Terraform modules using Git repositories. Understand module versioning, dependency management, release strategies and techniques for safely introducing new functionality into existing infrastructure.

Module 6 – Secure Infrastructure Automation with GitHub Actions

Build secure deployment pipelines using GitHub Actions and OpenID Connect (OIDC). Learn how to replace long-lived AWS credentials with short-lived identity tokens, automate infrastructure deployments and implement controlled promotion workflows between environments.

Module 7 – Migrating Existing Infrastructure into Terraform

Bring existing AWS resources under Terraform management without rebuilding infrastructure. Learn how to import resources, manage Terraform state, refactor configurations using moved blocks and modernise legacy environments safely and incrementally.

Module 8 – Engineering for Production

Consolidate the techniques learned throughout the course by applying enterprise engineering practices to build production-ready Infrastructure as Code solutions. Focus on scalability, maintainability, governance, automation and operational resilience.

Exams and assessments

There are no formal exams included in this course. Participants will complete interactive labs and knowledge checks to reinforce learning outcomes.

Hands-on learning

The course includes extensive practical exercises in which delegates progressively develop, refactor and automate a realistic AWS Terraform solution.

• Lab 1 – Advanced Terraform Configuration

Build and enhance an AWS infrastructure configuration using advanced variables, expressions, validation and data transformation techniques.

• Lab 2 – Engineering Robust Terraform Configurations

Apply validation, sanitisation, normalisation and conditional logic to create safer, more predictable infrastructure configurations.

• Lab 3 – Managing Multiple Environments

Develop environment-specific configurations for development, test and production while maintaining a consistent infrastructure design.

• Lab 4 – Remote State and State Migration

Migrate Terraform state to a remote AWS S3 backend and explore the operational considerations of shared state management.

• Lab 5 – Refactoring Infrastructure into Modules

Decompose a monolithic Terraform configuration into reusable network and compute modules while preserving existing infrastructure using Terraform moved blocks.

• Lab 6 – Publishing and Versioning Terraform Modules

Publish modules to Git repositories, introduce module versioning and upgrade environments between explicitly pinned module releases.

• Lab 7 – CI/CD with GitHub Actions and AWS OIDC

Build automated Terraform plan and deployment workflows using GitHub Actions and secure, short-lived AWS authentication through OpenID Connect (OIDC).

• Lab 8 – Environment Promotion and Deployment Governance

Implement controlled development, test and production workflows, including pull-request planning, module promotion and deployment intent.

• Lab 9 – Bringing Existing AWS Infrastructure Under Terraform Management

Import existing AWS resources into Terraform, reconcile configuration with deployed infrastructure and safely establish Terraform ownership