Upload files to "/"
This commit is contained in:
parent
b0ead18140
commit
b6328c2421
|
|
@ -0,0 +1,314 @@
|
|||
AWSTemplateFormatVersion: '2010-09-09'
|
||||
Description: Lab7 Task 1 template which builds VPC, supporting resources, a basic networking structure, and some Security groups for use in later tasks.
|
||||
Parameters:
|
||||
VPCCIDR:
|
||||
Description: CIDR Block for VPC
|
||||
Type: String
|
||||
Default: 10.0.0.0/16
|
||||
AllowedValues:
|
||||
- 10.0.0.0/16
|
||||
PublicSubnet1Param:
|
||||
Description: Public Subnet 1
|
||||
Type: String
|
||||
Default: 10.0.0.0/24
|
||||
AllowedValues:
|
||||
- 10.0.0.0/24
|
||||
PublicSubnet2Param:
|
||||
Description: Public Subnet 2
|
||||
Type: String
|
||||
Default: 10.0.1.0/24
|
||||
AllowedValues:
|
||||
- 10.0.1.0/24
|
||||
AppSubnet1Param:
|
||||
Description: App Subnet 1
|
||||
Type: String
|
||||
Default: 10.0.2.0/24
|
||||
AllowedValues:
|
||||
- 10.0.2.0/24
|
||||
AppSubnet2Param:
|
||||
Description: App Subnet 2
|
||||
Type: String
|
||||
Default: 10.0.3.0/24
|
||||
AllowedValues:
|
||||
- 10.0.3.0/24
|
||||
DatabaseSubnet1Param:
|
||||
Description: Private Subnet 1
|
||||
Type: String
|
||||
Default: 10.0.4.0/24
|
||||
AllowedValues:
|
||||
- 10.0.4.0/24
|
||||
DatabaseSubnet2Param:
|
||||
Description: Private Subnet 2
|
||||
Type: String
|
||||
Default: 10.0.5.0/24
|
||||
AllowedValues:
|
||||
- 10.0.5.0/24
|
||||
Resources:
|
||||
LabVPC:
|
||||
Type: AWS::EC2::VPC
|
||||
Properties:
|
||||
CidrBlock: !Ref VPCCIDR
|
||||
EnableDnsSupport: true
|
||||
EnableDnsHostnames: true
|
||||
InstanceTenancy: default
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: LabVPC
|
||||
- Key: Env
|
||||
Value: devlab
|
||||
LabInternetGateway:
|
||||
Type: AWS::EC2::InternetGateway
|
||||
AttachGateway:
|
||||
Type: AWS::EC2::VPCGatewayAttachment
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
InternetGatewayId: !Ref LabInternetGateway
|
||||
NATGateway1:
|
||||
Type: AWS::EC2::NatGateway
|
||||
Properties:
|
||||
AllocationId: !GetAtt ElasticIPAddress1.AllocationId
|
||||
SubnetId: !Ref PublicSubnet1
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: NATGateway1
|
||||
- Key: env
|
||||
Value: devlab
|
||||
ElasticIPAddress1:
|
||||
Type: AWS::EC2::EIP
|
||||
Properties:
|
||||
Domain: vpc
|
||||
Tags:
|
||||
- Key: env
|
||||
Value: devlab
|
||||
NATGateway2:
|
||||
Type: AWS::EC2::NatGateway
|
||||
Properties:
|
||||
AllocationId: !GetAtt ElasticIPAddress2.AllocationId
|
||||
SubnetId: !Ref PublicSubnet2
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: NATGateway2
|
||||
- Key: env
|
||||
Value: devlab
|
||||
ElasticIPAddress2:
|
||||
Type: AWS::EC2::EIP
|
||||
Properties:
|
||||
Domain: vpc
|
||||
Tags:
|
||||
- Key: env
|
||||
Value: devlab
|
||||
PublicSubnet1:
|
||||
Type: AWS::EC2::Subnet
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
CidrBlock: !Ref PublicSubnet1Param
|
||||
MapPublicIpOnLaunch: true
|
||||
AvailabilityZone: !Select
|
||||
- '0'
|
||||
- !GetAZs ''
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: PublicSubnet1
|
||||
PublicSubnet2:
|
||||
Type: AWS::EC2::Subnet
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
CidrBlock: !Ref PublicSubnet2Param
|
||||
MapPublicIpOnLaunch: true
|
||||
AvailabilityZone: !Select
|
||||
- '1'
|
||||
- !GetAZs ''
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: PublicSubnet2
|
||||
AppSubnet1:
|
||||
Type: AWS::EC2::Subnet
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
CidrBlock: !Ref AppSubnet1Param
|
||||
MapPublicIpOnLaunch: false
|
||||
AvailabilityZone: !Select
|
||||
- '0'
|
||||
- !GetAZs ''
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: AppSubnet1
|
||||
AppSubnet2:
|
||||
Type: AWS::EC2::Subnet
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
CidrBlock: !Ref AppSubnet2Param
|
||||
MapPublicIpOnLaunch: false
|
||||
AvailabilityZone: !Select
|
||||
- '1'
|
||||
- !GetAZs ''
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: AppSubnet2
|
||||
DatabaseSubnet1:
|
||||
Type: AWS::EC2::Subnet
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
CidrBlock: !Ref DatabaseSubnet1Param
|
||||
MapPublicIpOnLaunch: false
|
||||
AvailabilityZone: !Select
|
||||
- '0'
|
||||
- !GetAZs ''
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: DatabaseSubnet1
|
||||
DatabaseSubnet2:
|
||||
Type: AWS::EC2::Subnet
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
CidrBlock: !Ref DatabaseSubnet2Param
|
||||
MapPublicIpOnLaunch: false
|
||||
AvailabilityZone: !Select
|
||||
- '1'
|
||||
- !GetAZs ''
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: DatabaseSubnet2
|
||||
PublicRouteTable:
|
||||
Type: AWS::EC2::RouteTable
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: PublicRouteTable
|
||||
PrivateRouteTableAZ1:
|
||||
Type: AWS::EC2::RouteTable
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: PrivateRouteTableAZ1
|
||||
PrivateRouteTableAZ2:
|
||||
Type: AWS::EC2::RouteTable
|
||||
Properties:
|
||||
VpcId: !Ref LabVPC
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: PrivateRouteTableAZ2
|
||||
PublicRoute:
|
||||
Type: AWS::EC2::Route
|
||||
Properties:
|
||||
RouteTableId: !Ref PublicRouteTable
|
||||
DestinationCidrBlock: 0.0.0.0/0
|
||||
GatewayId: !Ref LabInternetGateway
|
||||
PrivateRouteAZ1:
|
||||
Type: AWS::EC2::Route
|
||||
Properties:
|
||||
RouteTableId: !Ref PrivateRouteTableAZ1
|
||||
DestinationCidrBlock: 0.0.0.0/0
|
||||
NatGatewayId: !Ref NATGateway1
|
||||
PrivateRouteAZ2:
|
||||
Type: AWS::EC2::Route
|
||||
Properties:
|
||||
RouteTableId: !Ref PrivateRouteTableAZ2
|
||||
DestinationCidrBlock: 0.0.0.0/0
|
||||
NatGatewayId: !Ref NATGateway2
|
||||
PublicSubnet1RouteTableAssociation:
|
||||
Type: AWS::EC2::SubnetRouteTableAssociation
|
||||
Properties:
|
||||
SubnetId: !Ref PublicSubnet1
|
||||
RouteTableId: !Ref PublicRouteTable
|
||||
PublicSubnet2RouteTableAssociation:
|
||||
Type: AWS::EC2::SubnetRouteTableAssociation
|
||||
Properties:
|
||||
SubnetId: !Ref PublicSubnet2
|
||||
RouteTableId: !Ref PublicRouteTable
|
||||
AppSubnet1RouteTableAssociation:
|
||||
Type: AWS::EC2::SubnetRouteTableAssociation
|
||||
Properties:
|
||||
SubnetId: !Ref AppSubnet1
|
||||
RouteTableId: !Ref PrivateRouteTableAZ1
|
||||
AppSubnet2RouteTableAssociation:
|
||||
Type: AWS::EC2::SubnetRouteTableAssociation
|
||||
Properties:
|
||||
SubnetId: !Ref AppSubnet2
|
||||
RouteTableId: !Ref PrivateRouteTableAZ2
|
||||
DatabaseSubnet1RouteTableAssociation:
|
||||
Type: AWS::EC2::SubnetRouteTableAssociation
|
||||
Properties:
|
||||
SubnetId: !Ref DatabaseSubnet1
|
||||
RouteTableId: !Ref PrivateRouteTableAZ1
|
||||
DatabaseSubnet2RouteTableAssociation:
|
||||
Type: AWS::EC2::SubnetRouteTableAssociation
|
||||
Properties:
|
||||
SubnetId: !Ref DatabaseSubnet2
|
||||
RouteTableId: !Ref PrivateRouteTableAZ2
|
||||
AppInstanceSecurityGroup:
|
||||
Type: AWS::EC2::SecurityGroup
|
||||
Properties:
|
||||
GroupDescription: Security Group allowing HTTP traffic for lab instances
|
||||
VpcId: !Ref LabVPC
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: AppInstanceSecurityGroup
|
||||
SecurityGroupIngress:
|
||||
- IpProtocol: tcp
|
||||
FromPort: 80
|
||||
ToPort: 80
|
||||
CidrIp: 0.0.0.0/0
|
||||
RDSSecurityGroup:
|
||||
Type: AWS::EC2::SecurityGroup
|
||||
Properties:
|
||||
GroupDescription: Security Group allowing RDS instances to have internet traffic
|
||||
VpcId: !Ref LabVPC
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: RDSSecurityGroup
|
||||
EFSMountTargetSecurityGroup:
|
||||
Type: AWS::EC2::SecurityGroup
|
||||
Properties:
|
||||
GroupDescription: Security Group allowing traffic between EFS Mount Targets and Amazon EC2 instances
|
||||
VpcId: !Ref LabVPC
|
||||
Tags:
|
||||
- Key: Name
|
||||
Value: EFSMountTargetSecurityGroup
|
||||
SecurityGroupIngress:
|
||||
- IpProtocol: tcp
|
||||
SourceSecurityGroupId: !Ref AppInstanceSecurityGroup
|
||||
FromPort: 80
|
||||
ToPort: 80
|
||||
Outputs:
|
||||
Region:
|
||||
Description: Lab Region
|
||||
Value: !Ref AWS::Region
|
||||
DatabaseSubnet1CIDR:
|
||||
Description: CIDR block for the DB Subnet in AZ a
|
||||
Value: !Ref DatabaseSubnet1Param
|
||||
DatabaseSubnet2CIDR:
|
||||
Description: CIDR block for the DB Subnet in AZ b
|
||||
Value: !Ref DatabaseSubnet2Param
|
||||
DatabaseSubnet1ID:
|
||||
Description: The Subnet ID for the DB Subnet in AZ a
|
||||
Value: !Ref DatabaseSubnet1
|
||||
Export:
|
||||
Name: DatabaseSubnet1ID
|
||||
DatabaseSubnet2ID:
|
||||
Description: The Subnet ID for the DB Subnet in AZ b
|
||||
Value: !Ref DatabaseSubnet2
|
||||
Export:
|
||||
Name: DatabaseSubnet2ID
|
||||
AppInstanceSecurityGroupID:
|
||||
Description: The Security Group ID for the Lab Instance Security Group
|
||||
Value: !Ref AppInstanceSecurityGroup
|
||||
Export:
|
||||
Name: AppInstanceSecurityGroupID
|
||||
EFSMountTargetSecurityGroupID:
|
||||
Description: The Security Group ID for the Lab EFS Mount Target
|
||||
Value: !Ref EFSMountTargetSecurityGroup
|
||||
Export:
|
||||
Name: EFSMountTargetSecurityGroupID
|
||||
RDSSecurityGroupID:
|
||||
Description: The Security Group ID for the Lab RDS cluster
|
||||
Value: !Ref RDSSecurityGroup
|
||||
Export:
|
||||
Name: RDSSecurityGroupID
|
||||
VPCID:
|
||||
Description: The VPC ID for the lab
|
||||
Value: !Ref LabVPC
|
||||
Export:
|
||||
Name: VPCID
|
||||
Loading…
Reference in New Issue