Terraform Snippet Generator
Generate Terraform HCL snippets for AWS, Azure, and GCP resources.
Written by Golam Rabbani, Founder & Lead Engineer
How to use this terraform snippet generator
- Pick a Provider — AWS, Azure, or Google Cloud.
- Pick a Template — e.g. S3 bucket, EC2 instance, VPC, Azure Resource Group, GCS bucket, Cloud Run service.
- Enter a resource name (lowercase, dashes/underscores allowed) and a region.
- Leave "Include terraform + provider block" on for a standalone file, or off if you already have those declared elsewhere.
- Click Generate and Copy HCL, then drop the snippet into a .tf file in your Terraform workspace.
About this terraform snippet generator
The Terraform snippet generator produces idiomatic HCL for the resources you reach for most often across AWS, Azure, and Google Cloud. Each snippet uses the current stable provider source (`hashicorp/aws ~> 5.0`, `hashicorp/azurerm ~> 4.0`, `hashicorp/google ~> 5.0`) and sensible secure defaults: S3 buckets get `aws_s3_bucket_public_access_block` and versioning; Cloud SQL instances enable backups and disable public IP; Storage accounts pin TLS 1.2; Cloud Run services use a stable IAM member binding for public access.
Names are validated to start with a lowercase letter and use only lowercase letters, digits, underscores, or dashes — matching Terraform identifier rules so `terraform plan` will not reject the file on parse. When you include the preamble, the tool emits a `terraform { required_providers { ... } }` block, a `variable` for the region, and a `provider` block — so the snippet stands alone as a working `main.tf`.
For example, choosing AWS → S3 bucket with name `app_logs` and region `us-east-1` produces a `terraform {}` block pinning aws ~> 5.0, a `variable "aws_region"` with default `us-east-1`, a `provider "aws"` block, an `aws_s3_bucket.app_logs` resource with the bucket name `app_logs` and tags, plus `aws_s3_bucket_public_access_block.app_logs` blocking all public ACLs and `aws_s3_bucket_versioning.app_logs` with status `Enabled`. The snippet is built from a bundled template — nothing is sent anywhere.
FAQ
- Why are the secure defaults baked in (public-access block, versioning, etc.)?
- Real-world buckets and databases need them in production, and "delete it later" rarely happens. Shipping safe defaults means a copy-paste snippet will not accidentally publish your S3 bucket to the internet or skip database backups. You can always remove the extras if you genuinely do not want them.
- How do I plug the snippet into my existing Terraform code?
- If you already have a provider + required_providers block, turn OFF "Include terraform + provider block" so the output only contains the resources. Paste them into an existing .tf file and run `terraform init` (if you added a new provider) then `terraform plan` to preview the change.
- Which provider versions does the generator target?
- AWS uses `~> 5.0`, AzureRM uses `~> 4.0`, and Google uses `~> 5.0` — all currently maintained majors at the time of writing. Pinning with `~>` lets `terraform init -upgrade` pull patch and minor releases automatically while preventing accidental upgrades to a breaking major.
- Does the snippet handle remote state and backends?
- No — backend configuration is per-team and per-project (S3 + DynamoDB, Azure Storage, GCS, Terraform Cloud, etc.), so the generator does not assume one. Add your own `backend "s3" { ... }` block inside the `terraform { }` section after pasting if needed.
- Does the tool send my resource names or region anywhere?
- No. All templates live in the bundled JavaScript on the page and rendering happens in your browser. Nothing is uploaded, logged, or stored.
- Is this Terraform snippet generator free to use?
- Yes, it is completely free with no account, no signup, and no usage limits.