Same terraform apply. Requires terraform.tfvars values for jenkins_ssh_public_key and admin_cidr (your IP, /32).

terraform output jenkins_public_ip

Give the instance 2–3 minutes to run its boot script, then verify:

ssh -i <your-key> ubuntu@<jenkins_public_ip>
systemctl status jenkins
which terraform kubectl helm aws
sudo cat /var/lib/jenkins/secrets/initialAdminPassword

Open http://<jenkins_public_ip>:8080, unlock with that password, install suggested plugins.