Deploying VPC Endpoints for SSM with Terraform
This lab environment gives you the ability to deploy VPC endpoints for the SSM service, as well as the required security group for port 443 access.
- 4 guided tasks
- Terminal in the browser

Scenario
This lab is part of the Terraform on AWS course. It continues the project that you build in the Getting started - building the VPC module, Building Subnets, Route Tables, and NAT Gateway, Building the SSM module and Creating our VPC Endpoint for SSM lessons. If you completed those lessons in your own terminal, open your project-ssm directory and continue to the next task.
You can also see the course project code on GitHub. The repository holds the finished project, so it also includes the modules from later lessons.
In this lab, you'll add two VPC endpoints for AWS Systems Manager (SSM), ssm and ssmmessages, to the project network. With these endpoints, SSM traffic from the private subnets goes through AWS's private network instead of the public internet. You'll deploy the VPC, the SSM configuration, the endpoints and their security group with Terraform.
What you will learn
- Write the project's Terraform files for the VPC module, the SSM module, and the SSM VPC endpoints.
- Configure the AWS CLI with your lab credentials.
- Preview the deployment with terraform plan.
- Deploy the VPC endpoints for SSM and their security group with terraform apply.
Deploying VPC Endpoints for SSM with Terraform
Included in Cybr Premium.