From 4a8ccec63e0fdc678e63399453a82f523a15f5fc Mon Sep 17 00:00:00 2001
From: =?utf8?q?C=C3=A1ssio=20Gabriel?= <cassiogabrielcontato@gmail.com>
Date: Sat, 24 Jan 2026 13:43:58 -0300
Subject: [PATCH] Add the EC2 instance in the private subnet and gitignore file

---
 assessment/.gitignore             |  9 +++++++++
 assessment/terraform/main.tf      | 17 +++++++++++++++++
 assessment/terraform/variables.tf |  5 +++++
 3 files changed, 31 insertions(+)
 create mode 100644 assessment/.gitignore

diff --git a/assessment/.gitignore b/assessment/.gitignore
new file mode 100644
index 0000000..626270d
--- /dev/null
+++ b/assessment/.gitignore
@@ -0,0 +1,9 @@
+# Docs and files generated by Terraform
+.terraform/
+*.tfstate
+*.tfstate.*
+crash.log
+
+# Sensible variables
+*.tfvars
+*.tfvars.json
diff --git a/assessment/terraform/main.tf b/assessment/terraform/main.tf
index 8003c7f..33092c5 100644
--- a/assessment/terraform/main.tf
+++ b/assessment/terraform/main.tf
@@ -157,3 +157,20 @@ resource "aws_iam_instance_profile" "ec2_ssm_profile" {
   role = aws_iam_role.ec2_ssm_role.name
 }
 
+# -------------------------------------------------------
+
+# EC2 instance
+resource "aws_instance" "wazuh" {
+  ami                    = var.ami_id
+  instance_type          = "t3.xlarge"
+  subnet_id              = aws_subnet.private[0].id
+  vpc_security_group_ids = [aws_security_group.wazuh_ec2.id]
+  iam_instance_profile   = aws_iam_instance_profile.ec2_ssm_profile.name
+
+  associate_public_ip_address = false
+
+  tags = {
+    Name = "wazuh-ec2"
+  }
+}
+
diff --git a/assessment/terraform/variables.tf b/assessment/terraform/variables.tf
index 1a4b052..21ded16 100644
--- a/assessment/terraform/variables.tf
+++ b/assessment/terraform/variables.tf
@@ -24,3 +24,8 @@ variable "availability_zones" {
   default = ["us-east-1a", "us-east-1b"]
 }
 
+# AMI var
+variable "ami_id" {
+  description = "AMI ID for EC2 instance"
+  type        = string
+}
-- 
2.34.1