Terraform for Humanoid Robotics Fleet Management on AWS

resource "aws_dynamodb_table" "robots" {
  name         = "robots"
  billing_mode = "PAY_PER_REQUEST"
  hash_key     = "robot_id"
 
  attribute {
    name = "robot_id"
    type = "S"
  }
 
  attribute {
    name = "site"
    type = "S"
  }
 
  global_secondary_index {
    name            = "by-site"
    hash_key        = "site"
    projection_type = "ALL"
  }
 
  point_in_time_recovery { enabled = true }
}

resource "aws_apigatewayv2_api" "robots" {
  name          = "robots-api"
  protocol_type = "HTTP"
}
 
resource "aws_lambda_function" "dispatch" {
  function_name = "robot-dispatch"
  role          = aws_iam_role.dispatch.arn
  package_type  = "Image"
  image_uri     = "${aws_ecr_repository.dispatch.repository_url}:${var.dispatch_tag}"
  timeout       = 15
  memory_size   = 1024
 
  environment {
    variables = {
      ROBOT_TABLE = aws_dynamodb_table.robots.name
      IOT_ENDPOINT = data.aws_iot_endpoint.data.endpoint_address
    }
  }
}

resource "aws_iot_job" "humanoid_firmware_v8" {
  job_id   = "humanoid-firmware-v8"
  targets  = [aws_iot_thing_group.humanoid_fleet.arn]
 
  document = jsonencode({
    operation = "ota_update"
    url       = "s3://${aws_s3_bucket.firmware.bucket}/humanoid/v8.bin"
    sha256    = var.firmware_sha256
    size      = var.firmware_size
    rollback  = "v7"
  })
 
  job_executions_rollout_config {
    maximum_per_minute = 10
    exponential_rate {
      base_rate_per_minute    = 5
      increment_factor        = 2
      rate_increase_criteria {
        number_of_succeeded_things = 50
      }
    }
  }
 
  abort_config {
    criteria_list {
      action          = "CANCEL"
      failure_type    = "FAILED"
      min_number_of_executed_things = 20
      threshold_percentage          = 10
    }
  }
}

resource "aws_batch_compute_environment" "sim" {
  compute_environment_name = "humanoid-sim"
  type                     = "MANAGED"
  service_role             = aws_iam_role.batch.arn
 
  compute_resources {
    type                = "SPOT"
    allocation_strategy = "SPOT_CAPACITY_OPTIMIZED"
    bid_percentage      = 60
    instance_type       = ["g5.4xlarge", "g5.8xlarge"]
    min_vcpus           = 0
    desired_vcpus       = 0
    max_vcpus           = 512
    subnets             = var.private_subnet_ids
    security_group_ids  = [aws_security_group.batch.id]
    instance_role       = aws_iam_instance_profile.batch.arn
  }
}
 
resource "aws_batch_job_queue" "sim" {
  name     = "humanoid-sim"
  state    = "ENABLED"
  priority = 10
 
  compute_environment_order {
    order               = 1
    compute_environment = aws_batch_compute_environment.sim.arn
  }
}

resource "aws_s3_bucket" "maps" {
  bucket = "acme-humanoid-maps"
}
 
resource "aws_cloudfront_distribution" "maps" {
  enabled             = true
  default_root_object = "index.json"
 
  origin {
    domain_name              = aws_s3_bucket.maps.bucket_regional_domain_name
    origin_id                = "maps-origin"
    origin_access_control_id = aws_cloudfront_origin_access_control.maps.id
  }
 
  default_cache_behavior {
    target_origin_id       = "maps-origin"
    viewer_protocol_policy = "redirect-to-https"
    allowed_methods        = ["GET", "HEAD"]
    cached_methods         = ["GET", "HEAD"]
    cache_policy_id        = data.aws_cloudfront_cache_policy.optimized.id
  }
 
  restrictions {
    geo_restriction { restriction_type = "none" }
  }
 
  viewer_certificate {
    cloudfront_default_certificate = true
  }
}