S3 使用 terraform 存储双向复制

Question

使用 terraform，我正在尝试创建两个 s3 存储桶，每个存储桶相互复制。这会导致依赖循环。我不确定如何在 terraform 中处理这个问题。

我想到的一种解决方案可能是将其拆分为两组 terraform 脚本，一组用于创建两个存储桶，然后另一组用于修改这些存储桶添加复制规则。

还有其他方法可以处理这种情况吗？

Answer 1

为您描述了解决方案。它在数据一致性方面存在一些问题，但效果很好。

所以基本上让我们假设您在 2 个单独的区域中有 2 个存储桶：

• bucket1-us-east-1
• bucket1-us-west-2

要进行双向复制，您需要设置从bucket1-us-east-1 到bucket1-us-west-2 的复制。然后设置从bucket1-us-west-2 到bucket1-us-east-1 的复制

地形解决方案

循环依赖存在问题，所以需要先在一个地方创建资源，然后需要为它们启用复制：

resource "aws_s3_bucket" "west" {
    provider = "aws.west"
    bucket   = "bucket1-us-west-2"
    region   = "us-west-2"
    acl      = "private"

    versioning {
        enabled = true
    }

  replication_configuration {
    role = "${aws_iam_role.some_replication_role.arn}"

    rules {
      id     = "replicate_all"
      prefix = ""
      status = "Enabled"

      destination {
        bucket        = "arn:aws:s3:::bucket1-us-east-1"
        storage_class = "STANDARD"
      }
    }
  }

}

resource "aws_s3_bucket" "east" {
    provider = "aws.east"
    bucket   = "bucket1-us-east-1"
    region   = "us-east-1"
    acl      = "private"

    versioning {
        enabled = true
    }

  replication_configuration {
    role = "${aws_iam_role.some_replication_role.arn}"

    rules {
      id     = "replicate_all"
      prefix = ""
      status = "Enabled"

      destination {
        bucket        = "arn:aws:s3:::bucket1-us-west-2"
        storage_class = "STANDARD"
      }
    }
  }

}

参考文献

• AWS 官方文档：https://aws.amazon.com/about-aws/whats-new/2020/12/amazon-s3-replication-adds-support-two-way-replication/
• 适用于您的用例的实验室：https://wellarchitectedlabs.com/reliability/200_labs/200_bidirectional_replication_for_s3/