diff --git a/demo-10/cloudinit.tf b/demo-10/cloudinit.tf
new file mode 100644
index 0000000..b84e137
--- /dev/null
+++ b/demo-10/cloudinit.tf
@@ -0,0 +1,28 @@
+provider "cloudinit" {}
+
+resource "template_file" "init-script" {
+  template = "${file("scripts/init.cfg")}"
+  vars {
+    region = "${var.AWS_REGION}"
+  }
+}
+resource "template_file" "shell-script" {
+  template = "${file("scripts/volumes.sh")}"
+}
+resource "template_cloudinit_config" "cloudinit-example" {
+
+  gzip = false
+  base64_encode = false
+
+  part {
+    filename     = "init.cfg"
+    content_type = "text/cloud-config"
+    content      = "${template_file.init-script.rendered}"
+  }
+
+  part {
+    content_type = "text/x-shellscript"
+    content      = "${template_file.shell-script.rendered}"
+  }
+
+}
diff --git a/demo-10/instance.tf b/demo-10/instance.tf
new file mode 100644
index 0000000..e615b01
--- /dev/null
+++ b/demo-10/instance.tf
@@ -0,0 +1,29 @@
+resource "aws_instance" "example" {
+  ami           = "${lookup(var.AMIS, var.AWS_REGION)}"
+  instance_type = "t2.micro"
+
+  # the VPC subnet
+  subnet_id = "${aws_subnet.main-public-1.id}"
+
+  # the security group
+  vpc_security_group_ids = ["${aws_security_group.allow-ssh.id}"]
+
+  # the public SSH key
+  key_name = "${aws_key_pair.mykeypair.key_name}"
+}
+
+resource "aws_ebs_volume" "ebs-volume-1" {
+    availability_zone = "eu-west-1a"
+    size = 20
+    type = "gp2" 
+    tags {
+        Name = "extra volume data"
+    }
+}
+
+resource "aws_volume_attachment" "ebs-volume-1-attachment" {
+  device_name = "/dev/xvdh"
+  volume_id = "${aws_ebs_volume.ebs-volume-1.id}"
+  instance_id = "${aws_instance.example.id}"
+}
+
diff --git a/demo-10/key.tf b/demo-10/key.tf
new file mode 100644
index 0000000..0d3c220
--- /dev/null
+++ b/demo-10/key.tf
@@ -0,0 +1,4 @@
+resource "aws_key_pair" "mykeypair" {
+  key_name = "mykeypair"
+  public_key = "${file("${var.PATH_TO_PUBLIC_KEY}")}"
+}
diff --git a/demo-10/provider.tf b/demo-10/provider.tf
new file mode 100644
index 0000000..ded6d8c
--- /dev/null
+++ b/demo-10/provider.tf
@@ -0,0 +1,3 @@
+provider "aws" { 
+    region = "${var.AWS_REGION}"
+}
diff --git a/demo-10/scripts/init.cfg b/demo-10/scripts/init.cfg
new file mode 100644
index 0000000..c50b827
--- /dev/null
+++ b/demo-10/scripts/init.cfg
@@ -0,0 +1,11 @@
+#cloud-config
+
+repo_update: true
+repo_upgrade: all
+
+packages:
+  - docker
+  - lvm2
+
+output:
+  all: '| tee -a /var/log/cloud-init-output.log'
diff --git a/demo-10/scripts/volumes.sh b/demo-10/scripts/volumes.sh
new file mode 100644
index 0000000..60a59db
--- /dev/null
+++ b/demo-10/scripts/volumes.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+vgchange -ay
+
+DEVICE="/dev/xvdh"
+
+DEVICE_FS=`blkid -o value -s TYPE ${DEVICE}`
+exit 0
+pvcreate ${DEVICE}
+vgcreate data ${DEVICE}
+lvcreate --name volume1 -l 100%FREE data
+mkfs.ext4 /dev/data/volume1
+mkdir -p /data
+echo '/dev/data/volume /data defaults 0 0' >> /etc/fstab
+mount /data
diff --git a/demo-10/securitygroup.tf b/demo-10/securitygroup.tf
new file mode 100644
index 0000000..05c0e12
--- /dev/null
+++ b/demo-10/securitygroup.tf
@@ -0,0 +1,21 @@
+resource "aws_security_group" "allow-ssh" {
+  vpc_id = "${aws_vpc.main.id}"
+  name = "allow-ssh"
+  description = "security group that allows ssh and all egress traffic"
+  egress {
+      from_port = 0
+      to_port = 0
+      protocol = "-1"
+      cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+      from_port = 22
+      to_port = 22
+      protocol = "tcp"
+      cidr_blocks = ["0.0.0.0/0"]
+  } 
+tags {
+    Name = "allow-ssh"
+  }
+}
diff --git a/demo-10/vars.tf b/demo-10/vars.tf
new file mode 100644
index 0000000..d880ef6
--- /dev/null
+++ b/demo-10/vars.tf
@@ -0,0 +1,17 @@
+variable "AWS_REGION" {
+  default = "eu-west-1"
+}
+variable "PATH_TO_PRIVATE_KEY" {
+  default = "mykey"
+}
+variable "PATH_TO_PUBLIC_KEY" {
+  default = "mykey.pub"
+}
+variable "AMIS" {
+  type = "map"
+  default = {
+    us-east-1 = "ami-13be557e"
+    us-west-2 = "ami-06b94666"
+    eu-west-1 = "ami-844e0bf7"
+  }
+}
diff --git a/demo-10/vpc.tf b/demo-10/vpc.tf
new file mode 100644
index 0000000..1325feb
--- /dev/null
+++ b/demo-10/vpc.tf
@@ -0,0 +1,110 @@
+# Internet VPC
+resource "aws_vpc" "main" {
+    cidr_block = "10.0.0.0/16"
+    instance_tenancy = "default"
+    enable_dns_support = "true"
+    enable_dns_hostnames = "true"
+    enable_classiclink = "false"
+    tags {
+        Name = "main"
+    }
+}
+
+
+# Subnets
+resource "aws_subnet" "main-public-1" {
+    vpc_id = "${aws_vpc.main.id}"
+    cidr_block = "10.0.1.0/24"
+    map_public_ip_on_launch = "true"
+    availability_zone = "eu-west-1a"
+
+    tags {
+        Name = "main-public-1"
+    }
+}
+resource "aws_subnet" "main-public-2" {
+    vpc_id = "${aws_vpc.main.id}"
+    cidr_block = "10.0.2.0/24"
+    map_public_ip_on_launch = "true"
+    availability_zone = "eu-west-1b"
+
+    tags {
+        Name = "main-public-2"
+    }
+}
+resource "aws_subnet" "main-public-3" {
+    vpc_id = "${aws_vpc.main.id}"
+    cidr_block = "10.0.3.0/24"
+    map_public_ip_on_launch = "true"
+    availability_zone = "eu-west-1c"
+
+    tags {
+        Name = "main-public-3"
+    }
+}
+resource "aws_subnet" "main-private-1" {
+    vpc_id = "${aws_vpc.main.id}"
+    cidr_block = "10.0.4.0/24"
+    map_public_ip_on_launch = "false"
+    availability_zone = "eu-west-1a"
+
+    tags {
+        Name = "main-private-1"
+    }
+}
+resource "aws_subnet" "main-private-2" {
+    vpc_id = "${aws_vpc.main.id}"
+    cidr_block = "10.0.5.0/24"
+    map_public_ip_on_launch = "false"
+    availability_zone = "eu-west-1b"
+
+    tags {
+        Name = "main-private-2"
+    }
+}
+resource "aws_subnet" "main-private-3" {
+    vpc_id = "${aws_vpc.main.id}"
+    cidr_block = "10.0.6.0/24"
+    map_public_ip_on_launch = "false"
+    availability_zone = "eu-west-1c"
+
+    tags {
+        Name = "main-private-3"
+    }
+}
+
+# Internet GW
+resource "aws_internet_gateway" "main-gw" {
+    vpc_id = "${aws_vpc.main.id}"
+
+    tags {
+        Name = "main"
+    }
+}
+
+# route tables
+resource "aws_route_table" "main-public" {
+    vpc_id = "${aws_vpc.main.id}"
+    route {
+        cidr_block = "0.0.0.0/0"
+        gateway_id = "${aws_internet_gateway.main-gw.id}"
+    }
+
+    tags {
+        Name = "main-public-1"
+    }
+}
+
+# route associations public
+resource "aws_route_table_association" "main-public-1-a" {
+    subnet_id = "${aws_subnet.main-public-1.id}"
+    route_table_id = "${aws_route_table.main-public.id}"
+}
+resource "aws_route_table_association" "main-public-2-a" {
+    subnet_id = "${aws_subnet.main-public-2.id}"
+    route_table_id = "${aws_route_table.main-public.id}"
+}
+resource "aws_route_table_association" "main-public-3-a" {
+    subnet_id = "${aws_subnet.main-public-3.id}"
+    route_table_id = "${aws_route_table.main-public.id}"
+}