├── AutoScalingLessonPart2
    ├── autoscalingLifecycleHooks.sh
    └── readme
├── AutoScalingWithSQS
    └── CLICommands
├── CanaryDeployment
    ├── mathCeil.js
    └── mathFloor.js
├── CrossStack
    ├── Network.json
    └── webapp.json
├── Drift Detection
    ├── afterdriftupdate.json
    └── ec24drift.json
├── Lambda Aliases
    ├── AWS Lambda Aliases Lab Commands.docx
    └── amilookup.js
├── Lambda
    ├── index.js
    ├── readme
    └── samTemplate.yaml
├── Nested Stacks
    ├── error.html
    ├── index.html
    ├── rootstack.json
    └── s3static.json
├── StackPolicies
    ├── stackpolicies.json
    └── wordpress-single-instance.yaml
├── VPC Endpoints for S3
    └── readme
├── lamp-stack-1478287817_1530269327 (3).json
├── lifecyclehooks
    └── userdataForLifeCycleHooks.sh
└── userdataForLifeCycleHooks.sh


/AutoScalingLessonPart2/autoscalingLifecycleHooks.sh:
--------------------------------------------------------------------------------
1 | #!/bin/bash
2 | yum update -y && \
3 | yum install stress -y && \
4 | INSTANCE_ID="`wget -q -O - http://instance-data/latest/meta-data/instance-id`" && \
5 | aws autoscaling complete-lifecycle-action --lifecycle-action-result CONTINUE --instance-id $INSTANCE_ID --lifecycle-hook-name devops-pro-hook --auto-scaling-group-name devopsASG --region us-east-1 || \
6 | aws autoscaling complete-lifecycle-action --lifecycle-action-result ABANDON --instance-id $INSTANCE_ID --lifecycle-hook-name devops-pro-hook --auto-scaling-group-name devopsASG --region us-east-1
7 | 


--------------------------------------------------------------------------------
/AutoScalingLessonPart2/readme:
--------------------------------------------------------------------------------
1 | Please note, the bash script in this folder is for the Lesson (not the Lab) named 'Auto Scaling Lifecycle Hooks Part 2'. 
2 | The bash scripts for the lesson and the lab are different. The script is ONLY for the lesson.
3 | 


--------------------------------------------------------------------------------
/AutoScalingWithSQS/CLICommands:
--------------------------------------------------------------------------------
 1 | aws autoscaling put-scaling-policy --policy-name sqs-scaleout --auto-scaling-group-name ASG4SQS --scaling-adjustment 1 --adjustment-type ChangeInCapacity
 2 | 
 3 | aws autoscaling put-scaling-policy --policy-name sqs-scalein --auto-scaling-group-name ASG4SQS --scaling-adjustment -1 --adjustment-type ChangeInCapacity
 4 | 
 5 | aws cloudwatch put-metric-alarm --alarm-name AddCapacityToProcessQueue --metric-name ApproximateNumberOfMessagesVisible --namespace “AWS/SQS” --statistic Average --period 300 --threshold 3 --comparison-operator GreaterThanOrEqualToThreshold --dimensions Name=QueueName, Value=SQS4ASG.fifo --evaluation-periods 2 --alarm-actions arn:aws:<REGION>:<ACCOUNT NUMBER>:scalingPolicy:<Policy ID>:autoScalingGroupName/ASG4SQS:policyName/sqs-scaleout
 6 | 
 7 | aws cloudwatch put-metric-alarm --alarm-name RemoveCapacityFromProcessQueue --metric-name ApproximateNumberOfMessagesVisible --namespace “AWS/SQS” --statistic Average --period 300 --threshold 1 --comparison-operator LessThanOrEqualToThreshold --dimensions Name=QueueName, Value=SQS4ASG.fifo --evaluation-periods 2 --alarm-actions arn:aws:<REGION>:<ACCOUNT NUMBER>:scalingPolicy:<Policy ID>:autoScalingGroupName/ASG4SQS:policyName/sqs-scalein
 8 | 
 9 | aws cloudwatch describe-alarms --alarm-names AddCapacityToProcessQueue RemoveCapacityFromProcessQueue
10 | 
11 | aws autoscaling describe-policies --auto-scaling-group-name ASG4SQS
12 | 
13 | 
14 | 
15 | 
16 | 


--------------------------------------------------------------------------------
/CanaryDeployment/mathCeil.js:
--------------------------------------------------------------------------------
1 | console.log('Loading Lambda function');
2 | 
3 | exports.handler = async (event, context, callback) => {
4 |     let resultNum = Math.ceil(999.99);
5 | 
6 |     callback(null, 'this is the original function (Math.ceil) = ' + resultNum);
7 | };


--------------------------------------------------------------------------------
/CanaryDeployment/mathFloor.js:
--------------------------------------------------------------------------------
1 | console.log('Loading Lambda function');
2 | 
3 | exports.handler = async (event, context, callback) => {
4 |     let resultNum = Math.floor(999.99);
5 | 
6 |     callback(null, 'this is the canary function (Math.floor) = ' + resultNum);
7 | };


--------------------------------------------------------------------------------
/CrossStack/Network.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "AWSTemplateFormatVersion" : "2010-09-09",
 3 |   "Description" : "AWS CloudFormation Sample Template VPC_with_PublicIPs_And_DNS: Sample template that creates a VPC with DNS and public IPs enabled. Note that you are billed for the AWS resources that you use when you create a stack from this template.",
 4 |   "Resources" : {
 5 |     "VPC" : {
 6 |       "Type" : "AWS::EC2::VPC",
 7 |       "Properties" : {
 8 |         "EnableDnsSupport" : "true",
 9 |         "EnableDnsHostnames" : "true",
10 |         "CidrBlock" : "10.0.0.0/16"
11 |       }
12 |     },
13 |     "PublicSubnet" : {
14 |       "Type" : "AWS::EC2::Subnet",
15 |       "Properties" : {
16 |         "VpcId" : { "Ref" : "VPC" },
17 |         "CidrBlock" : "10.0.0.0/24"
18 |       }
19 |     },
20 |     "InternetGateway" : {
21 |       "Type" : "AWS::EC2::InternetGateway"
22 |     },
23 |     "VPCGatewayAttachment" : {
24 |        "Type" : "AWS::EC2::VPCGatewayAttachment",
25 |        "Properties" : {
26 |          "VpcId" : { "Ref" : "VPC" },
27 |          "InternetGatewayId" : { "Ref" : "InternetGateway" }
28 |        }
29 |     },
30 |     "PublicRouteTable" : {
31 |       "Type" : "AWS::EC2::RouteTable",
32 |       "Properties" : {
33 |         "VpcId" : { "Ref" : "VPC" }
34 |       }
35 |     },
36 |     "PublicRoute" : {
37 |       "Type" : "AWS::EC2::Route",
38 |       "DependsOn" : "VPCGatewayAttachment",
39 |       "Properties" : {
40 |         "RouteTableId" : { "Ref" : "PublicRouteTable" },
41 |         "DestinationCidrBlock" : "0.0.0.0/0",
42 |         "GatewayId" : { "Ref" : "InternetGateway" }
43 |       }
44 |     },
45 |     "PublicSubnetRouteTableAssociation" : {
46 |       "Type" : "AWS::EC2::SubnetRouteTableAssociation",
47 |       "Properties" : {
48 |         "SubnetId" : { "Ref" : "PublicSubnet" },
49 |         "RouteTableId" : { "Ref" : "PublicRouteTable" }
50 |       }
51 |     },
52 |     "PublicSubnetNetworkAclAssociation" : {
53 |       "Type" : "AWS::EC2::SubnetNetworkAclAssociation",
54 |       "Properties" : {
55 |         "SubnetId" : { "Ref" : "PublicSubnet" },
56 |         "NetworkAclId" : { "Fn::GetAtt" : ["VPC", "DefaultNetworkAcl"] }
57 |       }
58 |     },
59 |     "WebServerSecurityGroup" : {
60 |       "Type" : "AWS::EC2::SecurityGroup",
61 |       "Properties" : {
62 |         "GroupDescription" : "Enable HTTP ingress",
63 |         "VpcId" : { "Ref" : "VPC" },
64 |         "SecurityGroupIngress" : [ { 
65 |           "IpProtocol" : "tcp",
66 |           "FromPort" : "80",  
67 |           "ToPort" : "80",
68 |           "CidrIp" : "0.0.0.0/0"
69 |         } ]
70 |       }
71 |     }
72 |   },
73 |   "Outputs" : {
74 |     "VPCId" : {
75 |       "Description" : "VPC ID",
76 |       "Value" :  { "Ref" : "VPC" },
77 |       "Export" : { "Name" : {"Fn::Sub": "${AWS::StackName}-VPCID" }}
78 |     },
79 |     "PublicSubnet" : {
80 |       "Description" : "The subnet ID to use for public web servers",
81 |       "Value" :  { "Ref" : "PublicSubnet" },
82 |       "Export" : { "Name" : {"Fn::Sub": "${AWS::StackName}-SubnetID" }}
83 |     },
84 |     "WebServerSecurityGroup" : {
85 |       "Description" : "The security group ID to use for public web servers",
86 |       "Value" :  { "Fn::GetAtt" : ["WebServerSecurityGroup", "GroupId"] },
87 |       "Export" : { "Name" : {"Fn::Sub": "${AWS::StackName}-SecurityGroupID" }}
88 |     }
89 |   }
90 | }


--------------------------------------------------------------------------------
/CrossStack/webapp.json:
--------------------------------------------------------------------------------
  1 | {
  2 |   "AWSTemplateFormatVersion" : "2010-09-09",
  3 |   
  4 |   "Description" : "AWS CloudFormation Cross-Stack Reference Sample Template: Demonstrates how to reference resources from a different stack. This template provisions an EC2 instance in an EC2 Security Group provisioned in a different stack. **WARNING** This template creates an Amazon EC2 instance. You will be billed for the AWS resources used if you create a stack from this template.",
  5 | 
  6 |   "Parameters": {
  7 |     "NetworkStackName": {
  8 |       "Description": "Name of an active CloudFormation stack that contains the networking resources, such as the subnet and security group, that will be used in this stack.",
  9 |       "Type": "String",
 10 |       "MinLength" : 1,
 11 |       "MaxLength" : 255,
 12 |       "AllowedPattern" : "^[a-zA-Z][-a-zA-Z0-9]*$",
 13 |       "Default" : "SampleNetworkCrossStack"
 14 |     }
 15 |   },
 16 | 
 17 |   "Mappings" : {
 18 |     "AWSRegionArch2AMI" : {
 19 |       "us-east-1"        : {"PV64" : "ami-8ff710e2", "HVM64" : "ami-f5f41398", "HVMG2" : "ami-4afd1d27"},
 20 |       "us-west-2"        : {"PV64" : "ami-eff1028f", "HVM64" : "ami-d0f506b0", "HVMG2" : "ami-ee897b8e"},
 21 |       "us-west-1"        : {"PV64" : "ami-ac85fbcc", "HVM64" : "ami-6e84fa0e", "HVMG2" : "ami-69106909"},
 22 |       "eu-west-1"        : {"PV64" : "ami-23ab2250", "HVM64" : "ami-b0ac25c3", "HVMG2" : "ami-936de5e0"},
 23 |       "eu-central-1"     : {"PV64" : "ami-27c12348", "HVM64" : "ami-d3c022bc", "HVMG2" : "ami-8e7092e1"},
 24 |       "ap-northeast-1"   : {"PV64" : "ami-26160d48", "HVM64" : "ami-29160d47", "HVMG2" : "ami-91809aff"},
 25 |       "ap-northeast-2"   : {"PV64" : "NOT_SUPPORTED", "HVM64" : "ami-cf32faa1", "HVMG2" : "NOT_SUPPORTED"},
 26 |       "ap-southeast-1"   : {"PV64" : "ami-f3dd0a90", "HVM64" : "ami-1ddc0b7e", "HVMG2" : "ami-3c30e75f"},
 27 |       "ap-southeast-2"   : {"PV64" : "ami-8f94b9ec", "HVM64" : "ami-0c95b86f", "HVMG2" : "ami-543d1137"},
 28 |       "sa-east-1"        : {"PV64" : "ami-e188018d", "HVM64" : "ami-fb890097", "HVMG2" : "NOT_SUPPORTED"},
 29 |       "cn-north-1"       : {"PV64" : "ami-77a46e1a", "HVM64" : "ami-05a66c68", "HVMG2" : "NOT_SUPPORTED"}
 30 |     }
 31 |   },
 32 | 
 33 |   "Resources" : {
 34 |     "WebServerInstance": {  
 35 |       "Type": "AWS::EC2::Instance",
 36 |       "Metadata" : {
 37 |         "AWS::CloudFormation::Init" : {
 38 |           "configSets" : {
 39 |             "All" : [ "ConfigureSampleApp" ]
 40 |           },
 41 | 
 42 |           "ConfigureSampleApp" : {
 43 |             "packages" : {
 44 |               "yum" : {
 45 |                 "httpd" : []
 46 |               }
 47 |             },
 48 | 
 49 |             "files" : {
 50 |               "/var/www/html/index.html" : {
 51 |                 "content" : { "Fn::Join" : ["\n", [
 52 |                   "<img src=\"https://s3.amazonaws.com/cloudformation-examples/cloudformation_graphic.png\" alt=\"AWS CloudFormation Logo\"/>",
 53 |                   "<h1>Congratulations, you have successfully launched the AWS CloudFormation sample.</h1>"
 54 |                 ]]},
 55 |                 "mode"    : "000644",
 56 |                 "owner"   : "root",
 57 |                 "group"   : "root"
 58 |               }
 59 |             },
 60 | 
 61 |             "services" : {
 62 |               "sysvinit" : {
 63 |                 "httpd"    : { "enabled" : "true", "ensureRunning" : "true" }
 64 |               }
 65 |             }
 66 |           }
 67 |         }
 68 |       },
 69 |       "Properties": {
 70 |         "InstanceType"   : "t2.micro",
 71 |         "ImageId": { "Fn::FindInMap": [ "AWSRegionArch2AMI", { "Ref": "AWS::Region" } , "HVM64" ] },
 72 |         "NetworkInterfaces" : [{
 73 |           "GroupSet"                 : [{ "Fn::ImportValue" :  {"Fn::Sub": "${NetworkStackName}-SecurityGroupID" } }],
 74 |           "AssociatePublicIpAddress" : "true",
 75 |           "DeviceIndex"              : "0",
 76 |           "DeleteOnTermination"      : "true",
 77 |           "SubnetId"                 : { "Fn::ImportValue" : {"Fn::Sub": "${NetworkStackName}-SubnetID" } }
 78 |         }],
 79 |         "UserData"       : { "Fn::Base64" : { "Fn::Join" : ["", [
 80 |              "#!/bin/bash -xe\n",
 81 |              "yum update -y aws-cfn-bootstrap\n",
 82 | 
 83 |              "# Install the files and packages from the metadata\n",
 84 |              "/opt/aws/bin/cfn-init -v ",
 85 |              "         --stack ", { "Ref" : "AWS::StackName" },
 86 |              "         --resource WebServerInstance ",
 87 |              "         --configsets All ",
 88 |              "         --region ", { "Ref" : "AWS::Region" }, "\n",
 89 | 
 90 |              "# Signal the status from cfn-init\n",
 91 |              "/opt/aws/bin/cfn-signal -e $? ",
 92 |              "         --stack ", { "Ref" : "AWS::StackName" },
 93 |              "         --resource WebServerInstance ",
 94 |              "         --region ", { "Ref" : "AWS::Region" }, "\n"
 95 |         ]]}}        
 96 |       },
 97 |       "CreationPolicy" : {
 98 |         "ResourceSignal" : {
 99 |           "Timeout" : "PT5M"
100 |         }
101 |       }
102 |     }
103 |   },
104 | 
105 |   "Outputs" : {
106 |     "URL" : {
107 |       "Description" : "URL of the sample website",
108 |       "Value" :  { "Fn::Join" : [ "", [ "http://", { "Fn::GetAtt" : [ "WebServerInstance", "PublicDnsName" ]}]]}
109 |     }
110 |   }
111 | }


--------------------------------------------------------------------------------
/Drift Detection/afterdriftupdate.json:
--------------------------------------------------------------------------------
  1 | {
  2 |   "AWSTemplateFormatVersion" : "2010-09-09",
  3 | 
  4 |   "Description" : "AWS CloudFormation Sample Template EC2InstanceWithSecurityGroupSample: Create an Amazon EC2 instance running the Amazon Linux AMI. The AMI is chosen based on the region in which the stack is run. This example creates an EC2 security group for the instance to give you SSH access. **WARNING** This template creates an Amazon EC2 instance. You will be billed for the AWS resources used if you create a stack from this template.",
  5 | 
  6 |   "Parameters" : {
  7 |     "KeyName": {
  8 |       "Description" : "Name of an existing EC2 KeyPair to enable SSH access to the instance",
  9 |       "Type": "AWS::EC2::KeyPair::KeyName",
 10 |       "ConstraintDescription" : "must be the name of an existing EC2 KeyPair."
 11 |     },
 12 | 
 13 |     "InstanceType" : {
 14 |       "Description" : "WebServer EC2 instance type",
 15 |       "Type" : "String",
 16 |       "Default" : "t2.small",
 17 |       "AllowedValues" : [ "t1.micro", "t2.nano", "t2.micro", "t2.small", "t2.medium", "t2.large", "m1.small", "m1.medium", "m1.large", "m1.xlarge", "m2.xlarge", "m2.2xlarge", "m2.4xlarge", "m3.medium", "m3.large", "m3.xlarge", "m3.2xlarge", "m4.large", "m4.xlarge", "m4.2xlarge", "m4.4xlarge", "m4.10xlarge", "c1.medium", "c1.xlarge", "c3.large", "c3.xlarge", "c3.2xlarge", "c3.4xlarge", "c3.8xlarge", "c4.large", "c4.xlarge", "c4.2xlarge", "c4.4xlarge", "c4.8xlarge", "g2.2xlarge", "g2.8xlarge", "r3.large", "r3.xlarge", "r3.2xlarge", "r3.4xlarge", "r3.8xlarge", "i2.xlarge", "i2.2xlarge", "i2.4xlarge", "i2.8xlarge", "d2.xlarge", "d2.2xlarge", "d2.4xlarge", "d2.8xlarge", "hi1.4xlarge", "hs1.8xlarge", "cr1.8xlarge", "cc2.8xlarge", "cg1.4xlarge"]
 18 | ,
 19 |       "ConstraintDescription" : "must be a valid EC2 instance type."
 20 |     },
 21 |     "myVPC": {
 22 |         "Description" : "Learning Activity Provided VPC",
 23 |         "Type"        : "String",
 24 |         "Default"     : "vpc-XXXXXXXX"
 25 |     },
 26 |     "MySubnet": {
 27 |         "Description" : "Learning Activity Provided subnet",
 28 |         "Type": "String",
 29 |         "Default": "subnet-XXXXXXXX"
 30 |     }, 
 31 |     "SSHLocation" : {
 32 |       "Description" : "The IP address range that can be used to SSH to the EC2 instances",
 33 |       "Type": "String",
 34 |       "MinLength": "9",
 35 |       "MaxLength": "18",
 36 |       "Default": "0.0.0.0/0",
 37 |       "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
 38 |       "ConstraintDescription": "must be a valid IP CIDR range of the form x.x.x.x/x."
 39 |    }
 40 |   },
 41 | 
 42 |   "Mappings" : {
 43 |     "AWSInstanceType2Arch" : {
 44 |       "t1.micro"    : { "Arch" : "HVM64"  },
 45 |       "t2.nano"     : { "Arch" : "HVM64"  },
 46 |       "t2.micro"    : { "Arch" : "HVM64"  },
 47 |       "t2.small"    : { "Arch" : "HVM64"  },
 48 |       "t2.medium"   : { "Arch" : "HVM64"  },
 49 |       "t2.large"    : { "Arch" : "HVM64"  },
 50 |       "m1.small"    : { "Arch" : "HVM64"  },
 51 |       "m1.medium"   : { "Arch" : "HVM64"  },
 52 |       "m1.large"    : { "Arch" : "HVM64"  },
 53 |       "m1.xlarge"   : { "Arch" : "HVM64"  },
 54 |       "m2.xlarge"   : { "Arch" : "HVM64"  },
 55 |       "m2.2xlarge"  : { "Arch" : "HVM64"  },
 56 |       "m2.4xlarge"  : { "Arch" : "HVM64"  },
 57 |       "m3.medium"   : { "Arch" : "HVM64"  },
 58 |       "m3.large"    : { "Arch" : "HVM64"  },
 59 |       "m3.xlarge"   : { "Arch" : "HVM64"  },
 60 |       "m3.2xlarge"  : { "Arch" : "HVM64"  },
 61 |       "m4.large"    : { "Arch" : "HVM64"  },
 62 |       "m4.xlarge"   : { "Arch" : "HVM64"  },
 63 |       "m4.2xlarge"  : { "Arch" : "HVM64"  },
 64 |       "m4.4xlarge"  : { "Arch" : "HVM64"  },
 65 |       "m4.10xlarge" : { "Arch" : "HVM64"  },
 66 |       "c1.medium"   : { "Arch" : "HVM64"  },
 67 |       "c1.xlarge"   : { "Arch" : "HVM64"  },
 68 |       "c3.large"    : { "Arch" : "HVM64"  },
 69 |       "c3.xlarge"   : { "Arch" : "HVM64"  },
 70 |       "c3.2xlarge"  : { "Arch" : "HVM64"  },
 71 |       "c3.4xlarge"  : { "Arch" : "HVM64"  },
 72 |       "c3.8xlarge"  : { "Arch" : "HVM64"  },
 73 |       "c4.large"    : { "Arch" : "HVM64"  },
 74 |       "c4.xlarge"   : { "Arch" : "HVM64"  },
 75 |       "c4.2xlarge"  : { "Arch" : "HVM64"  },
 76 |       "c4.4xlarge"  : { "Arch" : "HVM64"  },
 77 |       "c4.8xlarge"  : { "Arch" : "HVM64"  },
 78 |       "g2.2xlarge"  : { "Arch" : "HVMG2"  },
 79 |       "g2.8xlarge"  : { "Arch" : "HVMG2"  },
 80 |       "r3.large"    : { "Arch" : "HVM64"  },
 81 |       "r3.xlarge"   : { "Arch" : "HVM64"  },
 82 |       "r3.2xlarge"  : { "Arch" : "HVM64"  },
 83 |       "r3.4xlarge"  : { "Arch" : "HVM64"  },
 84 |       "r3.8xlarge"  : { "Arch" : "HVM64"  },
 85 |       "i2.xlarge"   : { "Arch" : "HVM64"  },
 86 |       "i2.2xlarge"  : { "Arch" : "HVM64"  },
 87 |       "i2.4xlarge"  : { "Arch" : "HVM64"  },
 88 |       "i2.8xlarge"  : { "Arch" : "HVM64"  },
 89 |       "d2.xlarge"   : { "Arch" : "HVM64"  },
 90 |       "d2.2xlarge"  : { "Arch" : "HVM64"  },
 91 |       "d2.4xlarge"  : { "Arch" : "HVM64"  },
 92 |       "d2.8xlarge"  : { "Arch" : "HVM64"  },
 93 |       "hi1.4xlarge" : { "Arch" : "HVM64"  },
 94 |       "hs1.8xlarge" : { "Arch" : "HVM64"  },
 95 |       "cr1.8xlarge" : { "Arch" : "HVM64"  },
 96 |       "cc2.8xlarge" : { "Arch" : "HVM64"  }
 97 |     },
 98 | 
 99 |     "AWSInstanceType2NATArch" : {
100 |       "t1.micro"    : { "Arch" : "NATHVM64"  },
101 |       "t2.nano"     : { "Arch" : "NATHVM64"  },
102 |       "t2.micro"    : { "Arch" : "NATHVM64"  },
103 |       "t2.small"    : { "Arch" : "NATHVM64"  },
104 |       "t2.medium"   : { "Arch" : "NATHVM64"  },
105 |       "t2.large"    : { "Arch" : "NATHVM64"  },
106 |       "m1.small"    : { "Arch" : "NATHVM64"  },
107 |       "m1.medium"   : { "Arch" : "NATHVM64"  },
108 |       "m1.large"    : { "Arch" : "NATHVM64"  },
109 |       "m1.xlarge"   : { "Arch" : "NATHVM64"  },
110 |       "m2.xlarge"   : { "Arch" : "NATHVM64"  },
111 |       "m2.2xlarge"  : { "Arch" : "NATHVM64"  },
112 |       "m2.4xlarge"  : { "Arch" : "NATHVM64"  },
113 |       "m3.medium"   : { "Arch" : "NATHVM64"  },
114 |       "m3.large"    : { "Arch" : "NATHVM64"  },
115 |       "m3.xlarge"   : { "Arch" : "NATHVM64"  },
116 |       "m3.2xlarge"  : { "Arch" : "NATHVM64"  },
117 |       "m4.large"    : { "Arch" : "NATHVM64"  },
118 |       "m4.xlarge"   : { "Arch" : "NATHVM64"  },
119 |       "m4.2xlarge"  : { "Arch" : "NATHVM64"  },
120 |       "m4.4xlarge"  : { "Arch" : "NATHVM64"  },
121 |       "m4.10xlarge" : { "Arch" : "NATHVM64"  },
122 |       "c1.medium"   : { "Arch" : "NATHVM64"  },
123 |       "c1.xlarge"   : { "Arch" : "NATHVM64"  },
124 |       "c3.large"    : { "Arch" : "NATHVM64"  },
125 |       "c3.xlarge"   : { "Arch" : "NATHVM64"  },
126 |       "c3.2xlarge"  : { "Arch" : "NATHVM64"  },
127 |       "c3.4xlarge"  : { "Arch" : "NATHVM64"  },
128 |       "c3.8xlarge"  : { "Arch" : "NATHVM64"  },
129 |       "c4.large"    : { "Arch" : "NATHVM64"  },
130 |       "c4.xlarge"   : { "Arch" : "NATHVM64"  },
131 |       "c4.2xlarge"  : { "Arch" : "NATHVM64"  },
132 |       "c4.4xlarge"  : { "Arch" : "NATHVM64"  },
133 |       "c4.8xlarge"  : { "Arch" : "NATHVM64"  },
134 |       "g2.2xlarge"  : { "Arch" : "NATHVMG2"  },
135 |       "g2.8xlarge"  : { "Arch" : "NATHVMG2"  },
136 |       "r3.large"    : { "Arch" : "NATHVM64"  },
137 |       "r3.xlarge"   : { "Arch" : "NATHVM64"  },
138 |       "r3.2xlarge"  : { "Arch" : "NATHVM64"  },
139 |       "r3.4xlarge"  : { "Arch" : "NATHVM64"  },
140 |       "r3.8xlarge"  : { "Arch" : "NATHVM64"  },
141 |       "i2.xlarge"   : { "Arch" : "NATHVM64"  },
142 |       "i2.2xlarge"  : { "Arch" : "NATHVM64"  },
143 |       "i2.4xlarge"  : { "Arch" : "NATHVM64"  },
144 |       "i2.8xlarge"  : { "Arch" : "NATHVM64"  },
145 |       "d2.xlarge"   : { "Arch" : "NATHVM64"  },
146 |       "d2.2xlarge"  : { "Arch" : "NATHVM64"  },
147 |       "d2.4xlarge"  : { "Arch" : "NATHVM64"  },
148 |       "d2.8xlarge"  : { "Arch" : "NATHVM64"  },
149 |       "hi1.4xlarge" : { "Arch" : "NATHVM64"  },
150 |       "hs1.8xlarge" : { "Arch" : "NATHVM64"  },
151 |       "cr1.8xlarge" : { "Arch" : "NATHVM64"  },
152 |       "cc2.8xlarge" : { "Arch" : "NATHVM64"  }
153 |     }
154 | ,
155 |     "AWSRegionArch2AMI" : {
156 |       "us-east-1"        : {"HVM64" : "ami-0ff8a91507f77f867", "HVMG2" : "ami-0a584ac55a7631c0c"},
157 |       "us-west-2"        : {"HVM64" : "ami-a0cfeed8", "HVMG2" : "ami-0e09505bc235aa82d"},
158 |       "us-west-1"        : {"HVM64" : "ami-0bdb828fd58c52235", "HVMG2" : "ami-066ee5fd4a9ef77f1"},
159 |       "eu-west-1"        : {"HVM64" : "ami-047bb4163c506cd98", "HVMG2" : "ami-0a7c483d527806435"},
160 |       "eu-west-2"        : {"HVM64" : "ami-f976839e", "HVMG2" : "NOT_SUPPORTED"},
161 |       "eu-west-3"        : {"HVM64" : "ami-0ebc281c20e89ba4b", "HVMG2" : "NOT_SUPPORTED"},
162 |       "eu-central-1"     : {"HVM64" : "ami-0233214e13e500f77", "HVMG2" : "ami-06223d46a6d0661c7"},
163 |       "ap-northeast-1"   : {"HVM64" : "ami-06cd52961ce9f0d85", "HVMG2" : "ami-053cdd503598e4a9d"},
164 |       "ap-northeast-2"   : {"HVM64" : "ami-0a10b2721688ce9d2", "HVMG2" : "NOT_SUPPORTED"},
165 |       "ap-northeast-3"   : {"HVM64" : "ami-0d98120a9fb693f07", "HVMG2" : "NOT_SUPPORTED"},
166 |       "ap-southeast-1"   : {"HVM64" : "ami-08569b978cc4dfa10", "HVMG2" : "ami-0be9df32ae9f92309"},
167 |       "ap-southeast-2"   : {"HVM64" : "ami-09b42976632b27e9b", "HVMG2" : "ami-0a9ce9fecc3d1daf8"},
168 |       "ap-south-1"       : {"HVM64" : "ami-0912f71e06545ad88", "HVMG2" : "ami-097b15e89dbdcfcf4"},
169 |       "us-east-2"        : {"HVM64" : "ami-0b59bfac6be064b78", "HVMG2" : "NOT_SUPPORTED"},
170 |       "ca-central-1"     : {"HVM64" : "ami-0b18956f", "HVMG2" : "NOT_SUPPORTED"},
171 |       "sa-east-1"        : {"HVM64" : "ami-07b14488da8ea02a0", "HVMG2" : "NOT_SUPPORTED"},
172 |       "cn-north-1"       : {"HVM64" : "ami-0a4eaf6c4454eda75", "HVMG2" : "NOT_SUPPORTED"},
173 |       "cn-northwest-1"   : {"HVM64" : "ami-6b6a7d09", "HVMG2" : "NOT_SUPPORTED"}
174 |     }
175 | 
176 |   },
177 | 
178 |   "Resources" : {
179 |     "S3Bucket" : {
180 |         "Type" : "AWS::S3::Bucket",
181 |         "Properties" : {
182 |           "AccessControl" : "PublicRead"
183 |         }
184 |       },
185 |     "EC2Instance2" : {
186 |       "Type" : "AWS::EC2::Instance",
187 |       "Properties" : {
188 |         "SubnetId": { "Ref": "MySubnet" },
189 |         "InstanceType" : { "Ref" : "InstanceType" },
190 |         "SecurityGroupIds": [
191 |             {
192 |               "Ref": "InstanceSecurityGroup"
193 |             }
194 |         ],
195 |         "KeyName" : { "Ref" : "KeyName" },
196 |         "Tags" : [ {"Key" : "Name", "Value" : "Instance2"}],
197 |         "ImageId" : { "Fn::FindInMap" : [ "AWSRegionArch2AMI", { "Ref" : "AWS::Region" },
198 |                           { "Fn::FindInMap" : [ "AWSInstanceType2Arch", { "Ref" : "InstanceType" }, "Arch" ] } ] }
199 |       }
200 |     },
201 |    
202 |       "EC2Instance3" : {
203 |         "Type" : "AWS::EC2::Instance",
204 |         "Properties" : {
205 |           "SubnetId": { "Ref": "MySubnet" },
206 |           "InstanceType" : { "Ref" : "InstanceType" },
207 |           "SecurityGroupIds": [
208 |               {
209 |                 "Ref": "InstanceSecurityGroup"
210 |               }
211 |           ],
212 |           "KeyName" : { "Ref" : "KeyName" },
213 |           "Tags" : [ {"Key" : "Name", "Value" : "Instance3"}],
214 |           "ImageId" : { "Fn::FindInMap" : [ "AWSRegionArch2AMI", { "Ref" : "AWS::Region" },
215 |                             { "Fn::FindInMap" : [ "AWSInstanceType2Arch", { "Ref" : "InstanceType" }, "Arch" ] } ] }
216 |         }
217 |       },
218 |     "InstanceSecurityGroup" : {
219 |       "Type" : "AWS::EC2::SecurityGroup",
220 |       "Properties" : {
221 |         "GroupDescription" : "Enable SSH access via port 22",
222 |         "VpcId" : {"Ref" : "myVPC"},
223 |         "SecurityGroupIngress" : [ {
224 |           "IpProtocol" : "tcp",
225 |           "FromPort" : "22",
226 |           "ToPort" : "22",
227 |           "CidrIp" : { "Ref" : "SSHLocation"}
228 |           },
229 |           {
230 |             "CidrIp": "0.0.0.0/0",
231 |             "FromPort": 443,
232 |             "IpProtocol": "tcp",
233 |             "ToPort": 443
234 |           },
235 |           {
236 |             "FromPort": 443,
237 |             "IpProtocol": "tcp",
238 |             "ToPort": 443
239 |           },
240 |           {
241 |             "CidrIp": "0.0.0.0/0",
242 |             "FromPort": 80,
243 |             "IpProtocol": "tcp",
244 |             "ToPort": 80
245 |           },
246 |           {
247 |             "FromPort": 80,
248 |             "IpProtocol": "tcp",
249 |             "ToPort": 80
250 |           }
251 |          ]
252 |       }
253 |     }
254 |   },
255 | 
256 |   "Outputs" : {
257 |     "InstanceId" : {
258 |       "Description" : "InstanceId of the newly created EC2 instance",
259 |       "Value" : { "Ref" : "EC2Instance2" }
260 |     },
261 |     "AZ" : {
262 |       "Description" : "Availability Zone of the newly created EC2 instance",
263 |       "Value" : { "Fn::GetAtt" : [ "EC2Instance2", "AvailabilityZone" ] }
264 |     },
265 |     "PublicDNS" : {
266 |       "Description" : "Public DNSName of the newly created EC2 instance",
267 |       "Value" : { "Fn::GetAtt" : [ "EC2Instance2", "PublicDnsName" ] }
268 |     }
269 |   }
270 | }
271 | 


--------------------------------------------------------------------------------
/Drift Detection/ec24drift.json:
--------------------------------------------------------------------------------
  1 | {
  2 |   "AWSTemplateFormatVersion" : "2010-09-09",
  3 | 
  4 |   "Description" : "AWS CloudFormation Sample Template EC2InstanceWithSecurityGroupSample: Create an Amazon EC2 instance running the Amazon Linux AMI. The AMI is chosen based on the region in which the stack is run. This example creates an EC2 security group for the instance to give you SSH access. **WARNING** This template creates an Amazon EC2 instance. You will be billed for the AWS resources used if you create a stack from this template.",
  5 | 
  6 |   "Parameters" : {
  7 |     "KeyName": {
  8 |       "Description" : "Name of an existing EC2 KeyPair to enable SSH access to the instance",
  9 |       "Type": "AWS::EC2::KeyPair::KeyName",
 10 |       "ConstraintDescription" : "must be the name of an existing EC2 KeyPair."
 11 |     },
 12 | 
 13 |     "InstanceType" : {
 14 |       "Description" : "WebServer EC2 instance type",
 15 |       "Type" : "String",
 16 |       "Default" : "t2.small",
 17 |       "AllowedValues" : [ "t1.micro", "t2.nano", "t2.micro", "t2.small", "t2.medium", "t2.large", "m1.small", "m1.medium", "m1.large", "m1.xlarge", "m2.xlarge", "m2.2xlarge", "m2.4xlarge", "m3.medium", "m3.large", "m3.xlarge", "m3.2xlarge", "m4.large", "m4.xlarge", "m4.2xlarge", "m4.4xlarge", "m4.10xlarge", "c1.medium", "c1.xlarge", "c3.large", "c3.xlarge", "c3.2xlarge", "c3.4xlarge", "c3.8xlarge", "c4.large", "c4.xlarge", "c4.2xlarge", "c4.4xlarge", "c4.8xlarge", "g2.2xlarge", "g2.8xlarge", "r3.large", "r3.xlarge", "r3.2xlarge", "r3.4xlarge", "r3.8xlarge", "i2.xlarge", "i2.2xlarge", "i2.4xlarge", "i2.8xlarge", "d2.xlarge", "d2.2xlarge", "d2.4xlarge", "d2.8xlarge", "hi1.4xlarge", "hs1.8xlarge", "cr1.8xlarge", "cc2.8xlarge", "cg1.4xlarge"]
 18 | ,
 19 |       "ConstraintDescription" : "must be a valid EC2 instance type."
 20 |     },
 21 |     "myVPC": {
 22 |         "Description" : "Learning Activity Provided VPC",
 23 |         "Type"        : "String",
 24 |         "Default"     : "vpc-XXXXXXXX"
 25 |     },
 26 |     "MySubnet": {
 27 |         "Description" : "Learning Activity Provided subnet",
 28 |         "Type": "String",
 29 |         "Default": "subnet-XXXXXXXX"
 30 |     }, 
 31 |     "SSHLocation" : {
 32 |       "Description" : "The IP address range that can be used to SSH to the EC2 instances",
 33 |       "Type": "String",
 34 |       "MinLength": "9",
 35 |       "MaxLength": "18",
 36 |       "Default": "0.0.0.0/0",
 37 |       "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
 38 |       "ConstraintDescription": "must be a valid IP CIDR range of the form x.x.x.x/x."
 39 |    }
 40 |   },
 41 | 
 42 |   "Mappings" : {
 43 |     "AWSInstanceType2Arch" : {
 44 |       "t1.micro"    : { "Arch" : "HVM64"  },
 45 |       "t2.nano"     : { "Arch" : "HVM64"  },
 46 |       "t2.micro"    : { "Arch" : "HVM64"  },
 47 |       "t2.small"    : { "Arch" : "HVM64"  },
 48 |       "t2.medium"   : { "Arch" : "HVM64"  },
 49 |       "t2.large"    : { "Arch" : "HVM64"  },
 50 |       "m1.small"    : { "Arch" : "HVM64"  },
 51 |       "m1.medium"   : { "Arch" : "HVM64"  },
 52 |       "m1.large"    : { "Arch" : "HVM64"  },
 53 |       "m1.xlarge"   : { "Arch" : "HVM64"  },
 54 |       "m2.xlarge"   : { "Arch" : "HVM64"  },
 55 |       "m2.2xlarge"  : { "Arch" : "HVM64"  },
 56 |       "m2.4xlarge"  : { "Arch" : "HVM64"  },
 57 |       "m3.medium"   : { "Arch" : "HVM64"  },
 58 |       "m3.large"    : { "Arch" : "HVM64"  },
 59 |       "m3.xlarge"   : { "Arch" : "HVM64"  },
 60 |       "m3.2xlarge"  : { "Arch" : "HVM64"  },
 61 |       "m4.large"    : { "Arch" : "HVM64"  },
 62 |       "m4.xlarge"   : { "Arch" : "HVM64"  },
 63 |       "m4.2xlarge"  : { "Arch" : "HVM64"  },
 64 |       "m4.4xlarge"  : { "Arch" : "HVM64"  },
 65 |       "m4.10xlarge" : { "Arch" : "HVM64"  },
 66 |       "c1.medium"   : { "Arch" : "HVM64"  },
 67 |       "c1.xlarge"   : { "Arch" : "HVM64"  },
 68 |       "c3.large"    : { "Arch" : "HVM64"  },
 69 |       "c3.xlarge"   : { "Arch" : "HVM64"  },
 70 |       "c3.2xlarge"  : { "Arch" : "HVM64"  },
 71 |       "c3.4xlarge"  : { "Arch" : "HVM64"  },
 72 |       "c3.8xlarge"  : { "Arch" : "HVM64"  },
 73 |       "c4.large"    : { "Arch" : "HVM64"  },
 74 |       "c4.xlarge"   : { "Arch" : "HVM64"  },
 75 |       "c4.2xlarge"  : { "Arch" : "HVM64"  },
 76 |       "c4.4xlarge"  : { "Arch" : "HVM64"  },
 77 |       "c4.8xlarge"  : { "Arch" : "HVM64"  },
 78 |       "g2.2xlarge"  : { "Arch" : "HVMG2"  },
 79 |       "g2.8xlarge"  : { "Arch" : "HVMG2"  },
 80 |       "r3.large"    : { "Arch" : "HVM64"  },
 81 |       "r3.xlarge"   : { "Arch" : "HVM64"  },
 82 |       "r3.2xlarge"  : { "Arch" : "HVM64"  },
 83 |       "r3.4xlarge"  : { "Arch" : "HVM64"  },
 84 |       "r3.8xlarge"  : { "Arch" : "HVM64"  },
 85 |       "i2.xlarge"   : { "Arch" : "HVM64"  },
 86 |       "i2.2xlarge"  : { "Arch" : "HVM64"  },
 87 |       "i2.4xlarge"  : { "Arch" : "HVM64"  },
 88 |       "i2.8xlarge"  : { "Arch" : "HVM64"  },
 89 |       "d2.xlarge"   : { "Arch" : "HVM64"  },
 90 |       "d2.2xlarge"  : { "Arch" : "HVM64"  },
 91 |       "d2.4xlarge"  : { "Arch" : "HVM64"  },
 92 |       "d2.8xlarge"  : { "Arch" : "HVM64"  },
 93 |       "hi1.4xlarge" : { "Arch" : "HVM64"  },
 94 |       "hs1.8xlarge" : { "Arch" : "HVM64"  },
 95 |       "cr1.8xlarge" : { "Arch" : "HVM64"  },
 96 |       "cc2.8xlarge" : { "Arch" : "HVM64"  }
 97 |     },
 98 | 
 99 |     "AWSInstanceType2NATArch" : {
100 |       "t1.micro"    : { "Arch" : "NATHVM64"  },
101 |       "t2.nano"     : { "Arch" : "NATHVM64"  },
102 |       "t2.micro"    : { "Arch" : "NATHVM64"  },
103 |       "t2.small"    : { "Arch" : "NATHVM64"  },
104 |       "t2.medium"   : { "Arch" : "NATHVM64"  },
105 |       "t2.large"    : { "Arch" : "NATHVM64"  },
106 |       "m1.small"    : { "Arch" : "NATHVM64"  },
107 |       "m1.medium"   : { "Arch" : "NATHVM64"  },
108 |       "m1.large"    : { "Arch" : "NATHVM64"  },
109 |       "m1.xlarge"   : { "Arch" : "NATHVM64"  },
110 |       "m2.xlarge"   : { "Arch" : "NATHVM64"  },
111 |       "m2.2xlarge"  : { "Arch" : "NATHVM64"  },
112 |       "m2.4xlarge"  : { "Arch" : "NATHVM64"  },
113 |       "m3.medium"   : { "Arch" : "NATHVM64"  },
114 |       "m3.large"    : { "Arch" : "NATHVM64"  },
115 |       "m3.xlarge"   : { "Arch" : "NATHVM64"  },
116 |       "m3.2xlarge"  : { "Arch" : "NATHVM64"  },
117 |       "m4.large"    : { "Arch" : "NATHVM64"  },
118 |       "m4.xlarge"   : { "Arch" : "NATHVM64"  },
119 |       "m4.2xlarge"  : { "Arch" : "NATHVM64"  },
120 |       "m4.4xlarge"  : { "Arch" : "NATHVM64"  },
121 |       "m4.10xlarge" : { "Arch" : "NATHVM64"  },
122 |       "c1.medium"   : { "Arch" : "NATHVM64"  },
123 |       "c1.xlarge"   : { "Arch" : "NATHVM64"  },
124 |       "c3.large"    : { "Arch" : "NATHVM64"  },
125 |       "c3.xlarge"   : { "Arch" : "NATHVM64"  },
126 |       "c3.2xlarge"  : { "Arch" : "NATHVM64"  },
127 |       "c3.4xlarge"  : { "Arch" : "NATHVM64"  },
128 |       "c3.8xlarge"  : { "Arch" : "NATHVM64"  },
129 |       "c4.large"    : { "Arch" : "NATHVM64"  },
130 |       "c4.xlarge"   : { "Arch" : "NATHVM64"  },
131 |       "c4.2xlarge"  : { "Arch" : "NATHVM64"  },
132 |       "c4.4xlarge"  : { "Arch" : "NATHVM64"  },
133 |       "c4.8xlarge"  : { "Arch" : "NATHVM64"  },
134 |       "g2.2xlarge"  : { "Arch" : "NATHVMG2"  },
135 |       "g2.8xlarge"  : { "Arch" : "NATHVMG2"  },
136 |       "r3.large"    : { "Arch" : "NATHVM64"  },
137 |       "r3.xlarge"   : { "Arch" : "NATHVM64"  },
138 |       "r3.2xlarge"  : { "Arch" : "NATHVM64"  },
139 |       "r3.4xlarge"  : { "Arch" : "NATHVM64"  },
140 |       "r3.8xlarge"  : { "Arch" : "NATHVM64"  },
141 |       "i2.xlarge"   : { "Arch" : "NATHVM64"  },
142 |       "i2.2xlarge"  : { "Arch" : "NATHVM64"  },
143 |       "i2.4xlarge"  : { "Arch" : "NATHVM64"  },
144 |       "i2.8xlarge"  : { "Arch" : "NATHVM64"  },
145 |       "d2.xlarge"   : { "Arch" : "NATHVM64"  },
146 |       "d2.2xlarge"  : { "Arch" : "NATHVM64"  },
147 |       "d2.4xlarge"  : { "Arch" : "NATHVM64"  },
148 |       "d2.8xlarge"  : { "Arch" : "NATHVM64"  },
149 |       "hi1.4xlarge" : { "Arch" : "NATHVM64"  },
150 |       "hs1.8xlarge" : { "Arch" : "NATHVM64"  },
151 |       "cr1.8xlarge" : { "Arch" : "NATHVM64"  },
152 |       "cc2.8xlarge" : { "Arch" : "NATHVM64"  }
153 |     }
154 | ,
155 |     "AWSRegionArch2AMI" : {
156 |       "us-east-1"        : {"HVM64" : "ami-0ff8a91507f77f867", "HVMG2" : "ami-0a584ac55a7631c0c"},
157 |       "us-west-2"        : {"HVM64" : "ami-a0cfeed8", "HVMG2" : "ami-0e09505bc235aa82d"},
158 |       "us-west-1"        : {"HVM64" : "ami-0bdb828fd58c52235", "HVMG2" : "ami-066ee5fd4a9ef77f1"},
159 |       "eu-west-1"        : {"HVM64" : "ami-047bb4163c506cd98", "HVMG2" : "ami-0a7c483d527806435"},
160 |       "eu-west-2"        : {"HVM64" : "ami-f976839e", "HVMG2" : "NOT_SUPPORTED"},
161 |       "eu-west-3"        : {"HVM64" : "ami-0ebc281c20e89ba4b", "HVMG2" : "NOT_SUPPORTED"},
162 |       "eu-central-1"     : {"HVM64" : "ami-0233214e13e500f77", "HVMG2" : "ami-06223d46a6d0661c7"},
163 |       "ap-northeast-1"   : {"HVM64" : "ami-06cd52961ce9f0d85", "HVMG2" : "ami-053cdd503598e4a9d"},
164 |       "ap-northeast-2"   : {"HVM64" : "ami-0a10b2721688ce9d2", "HVMG2" : "NOT_SUPPORTED"},
165 |       "ap-northeast-3"   : {"HVM64" : "ami-0d98120a9fb693f07", "HVMG2" : "NOT_SUPPORTED"},
166 |       "ap-southeast-1"   : {"HVM64" : "ami-08569b978cc4dfa10", "HVMG2" : "ami-0be9df32ae9f92309"},
167 |       "ap-southeast-2"   : {"HVM64" : "ami-09b42976632b27e9b", "HVMG2" : "ami-0a9ce9fecc3d1daf8"},
168 |       "ap-south-1"       : {"HVM64" : "ami-0912f71e06545ad88", "HVMG2" : "ami-097b15e89dbdcfcf4"},
169 |       "us-east-2"        : {"HVM64" : "ami-0b59bfac6be064b78", "HVMG2" : "NOT_SUPPORTED"},
170 |       "ca-central-1"     : {"HVM64" : "ami-0b18956f", "HVMG2" : "NOT_SUPPORTED"},
171 |       "sa-east-1"        : {"HVM64" : "ami-07b14488da8ea02a0", "HVMG2" : "NOT_SUPPORTED"},
172 |       "cn-north-1"       : {"HVM64" : "ami-0a4eaf6c4454eda75", "HVMG2" : "NOT_SUPPORTED"},
173 |       "cn-northwest-1"   : {"HVM64" : "ami-6b6a7d09", "HVMG2" : "NOT_SUPPORTED"}
174 |     }
175 | 
176 |   },
177 | 
178 |   "Resources" : {
179 |     "S3Bucket" : {
180 |         "Type" : "AWS::S3::Bucket",
181 |         "Properties" : {
182 |           "AccessControl" : "PublicRead",
183 |           "WebsiteConfiguration" : {
184 |             "IndexDocument" : "index.html",
185 |             "ErrorDocument" : "error.html"
186 |            }
187 |         }
188 |       },
189 |     "EC2Instance" : {
190 |       "Type" : "AWS::EC2::Instance",
191 |       "Properties" : {
192 |         "SubnetId": { "Ref": "MySubnet" },
193 |         "InstanceType" : { "Ref" : "InstanceType" },
194 |         "SecurityGroupIds": [
195 |             {
196 |               "Ref": "InstanceSecurityGroup"
197 |             }
198 |         ],
199 |         "KeyName" : { "Ref" : "KeyName" },
200 |         "Tags" : [ {"Key" : "Name", "Value" : "Instance1"}],
201 |         "ImageId" : { "Fn::FindInMap" : [ "AWSRegionArch2AMI", { "Ref" : "AWS::Region" },
202 |                           { "Fn::FindInMap" : [ "AWSInstanceType2Arch", { "Ref" : "InstanceType" }, "Arch" ] } ] }
203 |       }
204 |     },
205 |     "EC2Instance2" : {
206 |         "Type" : "AWS::EC2::Instance",
207 |         "Properties" : {
208 |           "SubnetId": { "Ref": "MySubnet" },
209 |           "InstanceType" : { "Ref" : "InstanceType" },
210 |           "SecurityGroupIds": [
211 |               {
212 |                 "Ref": "InstanceSecurityGroup"
213 |               }
214 |           ],
215 |           "KeyName" : { "Ref" : "KeyName" },
216 |           "Tags" : [ {"Key" : "Name", "Value" : "Instance2"}],
217 |           "ImageId" : { "Fn::FindInMap" : [ "AWSRegionArch2AMI", { "Ref" : "AWS::Region" },
218 |                             { "Fn::FindInMap" : [ "AWSInstanceType2Arch", { "Ref" : "InstanceType" }, "Arch" ] } ] }
219 |         }
220 |       },
221 |       "EC2Instance3" : {
222 |         "Type" : "AWS::EC2::Instance",
223 |         "Properties" : {
224 |           "SubnetId": { "Ref": "MySubnet" },
225 |           "InstanceType" : { "Ref" : "InstanceType" },
226 |           "SecurityGroupIds": [
227 |               {
228 |                 "Ref": "InstanceSecurityGroup"
229 |               }
230 |           ],
231 |           "KeyName" : { "Ref" : "KeyName" },
232 |           "Tags" : [ {"Key" : "Name", "Value" : "Instance3"}],
233 |           "ImageId" : { "Fn::FindInMap" : [ "AWSRegionArch2AMI", { "Ref" : "AWS::Region" },
234 |                             { "Fn::FindInMap" : [ "AWSInstanceType2Arch", { "Ref" : "InstanceType" }, "Arch" ] } ] }
235 |         }
236 |       },
237 |     "InstanceSecurityGroup" : {
238 |       "Type" : "AWS::EC2::SecurityGroup",
239 |       "Properties" : {
240 |         "GroupDescription" : "Enable SSH access via port 22",
241 |         "VpcId" : {"Ref" : "myVPC"},
242 |         "SecurityGroupIngress" : [ {
243 |           "IpProtocol" : "tcp",
244 |           "FromPort" : "22",
245 |           "ToPort" : "22",
246 |           "CidrIp" : { "Ref" : "SSHLocation"}
247 |         } ]
248 |       }
249 |     }
250 |   },
251 | 
252 |   "Outputs" : {
253 |     "InstanceId" : {
254 |       "Description" : "InstanceId of the newly created EC2 instance",
255 |       "Value" : { "Ref" : "EC2Instance" }
256 |     },
257 |     "AZ" : {
258 |       "Description" : "Availability Zone of the newly created EC2 instance",
259 |       "Value" : { "Fn::GetAtt" : [ "EC2Instance", "AvailabilityZone" ] }
260 |     },
261 |     "PublicDNS" : {
262 |       "Description" : "Public DNSName of the newly created EC2 instance",
263 |       "Value" : { "Fn::GetAtt" : [ "EC2Instance", "PublicDnsName" ] }
264 |     }
265 |   }
266 | }
267 | 


--------------------------------------------------------------------------------
/Lambda Aliases/AWS Lambda Aliases Lab Commands.docx:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/natonic/DevOpsPro/49dd24c7fd26a35bfa9e5a8397940165f1aac83b/Lambda Aliases/AWS Lambda Aliases Lab Commands.docx


--------------------------------------------------------------------------------
/Lambda Aliases/amilookup.js:
--------------------------------------------------------------------------------
  1 | /**
  2 | * A sample Lambda function that looks up the latest AMI ID for a given region and architecture.
  3 | **/
  4 | 
  5 | // Map instance architectures to an AMI name pattern
  6 | var archToAMINamePattern = {
  7 |     "PV64": "amzn-ami-pv*x86_64-ebs",
  8 |     "HVM64": "amzn-ami-hvm*x86_64-gp2",
  9 |     "HVMG2": "amzn-ami-graphics-hvm*x86_64-ebs*"
 10 | };
 11 | var aws = require("aws-sdk");
 12 |  
 13 | exports.handler = function(event, context) {
 14 |  
 15 |     console.log("REQUEST RECEIVED:\n" + JSON.stringify(event));
 16 |     
 17 |     // For Delete requests, immediately send a SUCCESS response.
 18 |     if (event.RequestType == "Delete") {
 19 |         sendResponse(event, context, "SUCCESS");
 20 |         return;
 21 |     }
 22 |  
 23 |     var responseStatus = "FAILED";
 24 |     var responseData = {};
 25 |  
 26 |     var ec2 = new aws.EC2({region: event.ResourceProperties.Region});
 27 |     var describeImagesParams = {
 28 |         Filters: [{ Name: "name", Values: [archToAMINamePattern[event.ResourceProperties.Architecture]]}],
 29 |         Owners: [event.ResourceProperties.Architecture == "HVMG2" ? "679593333241" : "amazon"]
 30 |     };
 31 |  
 32 |     // Get AMI IDs with the specified name pattern and owner
 33 |     ec2.describeImages(describeImagesParams, function(err, describeImagesResult) {
 34 |         if (err) {
 35 |             responseData = {Error: "DescribeImages call failed"};
 36 |             console.log(responseData.Error + ":\n", err);
 37 |         }
 38 |         else {
 39 |             var images = describeImagesResult.Images;
 40 |             // Sort images by name in decscending order. The names contain the AMI version, formatted as YYYY.MM.Ver.
 41 |             images.sort(function(x, y) { return y.Name.localeCompare(x.Name); });
 42 |             for (var j = 0; j < images.length; j++) {
 43 |                 if (isBeta(images[j].Name)) continue;
 44 |                 responseStatus = "SUCCESS";
 45 |                 responseData["Id"] = images[j].ImageId;
 46 |                 break;
 47 |             }
 48 |         }
 49 |         sendResponse(event, context, responseStatus, responseData);
 50 |     });
 51 | };
 52 | 
 53 | // Check if the image is a beta or rc image. The Lambda function won't return any of those images.
 54 | function isBeta(imageName) {
 55 |     return imageName.toLowerCase().indexOf("beta") > -1 || imageName.toLowerCase().indexOf(".rc") > -1;
 56 | }
 57 | 
 58 | 
 59 | // Send response to the pre-signed S3 URL 
 60 | function sendResponse(event, context, responseStatus, responseData) {
 61 |  
 62 |     var responseBody = JSON.stringify({
 63 |         Status: responseStatus,
 64 |         Reason: "See the details in CloudWatch Log Stream: " + context.logStreamName,
 65 |         PhysicalResourceId: context.logStreamName,
 66 |         StackId: event.StackId,
 67 |         RequestId: event.RequestId,
 68 |         LogicalResourceId: event.LogicalResourceId,
 69 |         Data: responseData
 70 |     });
 71 |  
 72 |     console.log("RESPONSE BODY:\n", responseBody);
 73 |  
 74 |     var https = require("https");
 75 |     var url = require("url");
 76 |  
 77 |     var parsedUrl = url.parse(event.ResponseURL);
 78 |     var options = {
 79 |         hostname: parsedUrl.hostname,
 80 |         port: 443,
 81 |         path: parsedUrl.path,
 82 |         method: "PUT",
 83 |         headers: {
 84 |             "content-type": "",
 85 |             "content-length": responseBody.length
 86 |         }
 87 |     };
 88 |  
 89 |     console.log("SENDING RESPONSE...\n");
 90 |  
 91 |     var request = https.request(options, function(response) {
 92 |         console.log("STATUS: " + response.statusCode);
 93 |         console.log("HEADERS: " + JSON.stringify(response.headers));
 94 |         // Tell AWS Lambda that the function execution is done  
 95 |         context.done();
 96 |     });
 97 |  
 98 |     request.on("error", function(error) {
 99 |         console.log("sendResponse Error:" + error);
100 |         // Tell AWS Lambda that the function execution is done  
101 |         context.done();
102 |     });
103 |   
104 |     // write data to request body
105 |     request.write(responseBody);
106 |     request.end();
107 | }


--------------------------------------------------------------------------------
/Lambda/index.js:
--------------------------------------------------------------------------------
 1 | 
 2 | var time = require('time');
 3 | exports.handler = (event, context, callback) => {
 4 |     var currentTime = new time.Date(); 
 5 |     currentTime.setTimezone("America/Los_Angeles");
 6 |     callback(null, {
 7 |         statusCode: '200',
 8 |         body: 'The time in Los Angeles is: ' + currentTime.toString(),
 9 |     });
10 | };
11 | 


--------------------------------------------------------------------------------
/Lambda/readme:
--------------------------------------------------------------------------------
1 | Test
2 | 


--------------------------------------------------------------------------------
/Lambda/samTemplate.yaml:
--------------------------------------------------------------------------------
 1 | 
 2 | AWSTemplateFormatVersion: '2010-09-09'
 3 | Transform: AWS::Serverless-2016-10-31
 4 | Description: Outputs the time
 5 | Resources:
 6 |   TimeFunction:
 7 |     Type: AWS::Serverless::Function
 8 |     Properties:
 9 |       Handler: index.handler
10 |       Runtime: nodejs8.10
11 |       CodeUri: ./
12 |       Events:
13 |         MyTimeApi:
14 |           Type: Api
15 |           Properties:
16 |             Path: /TimeResource
17 |             Method: GET
18 | 


--------------------------------------------------------------------------------
/Nested Stacks/error.html:
--------------------------------------------------------------------------------
1 | <html>
2 |     <header><title>S3 Demo</title></header>
3 |     <body>
4 |     Error!
5 |     </body>
6 |     </html>


--------------------------------------------------------------------------------
/Nested Stacks/index.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 |   <head>
 4 |     <title>Elastic Beanstalk</title>
 5 |     <style>
 6 |       body {
 7 |         color: #ffffff;
 8 |         font-family: Arial, sans-serif;
 9 |         font-size:14px;
10 |         -moz-transition-property: text-shadow;
11 |         -moz-transition-duration: 4s;
12 |         -webkit-transition-property: text-shadow;
13 |         -webkit-transition-duration: 4s;
14 |         text-shadow: none;
15 |       }
16 |       body.blurry {
17 |         -moz-transition-property: text-shadow;
18 |         -moz-transition-duration: 4s;
19 |         -webkit-transition-property: text-shadow;
20 |         -webkit-transition-duration: 4s;
21 |         text-shadow: #fff 0px 0px 25px;
22 |       }
23 |       a {
24 |         color: #55aaff;
25 |       }
26 |       .textColumn, .linksColumn {
27 |         padding: 2em;
28 |       }
29 |       .textColumn {
30 |         position: absolute;
31 |         top: 0px;
32 |         right: 50%;
33 |         bottom: 0px;
34 |         left: 0px;
35 | 
36 |         text-align: right;
37 |         padding-top: 11em;
38 |         background-color: #73A53E;
39 | 
40 |       }
41 |       .textColumn p {
42 |         width: 75%;
43 |         float:right;
44 |       }
45 |       .linksColumn {
46 |         position: absolute;
47 |         top:0px;
48 |         right: 0px;
49 |         bottom: 0px;
50 |         left: 50%;
51 | 
52 |         background-color: #33342D;
53 |       }
54 | 
55 |       h1 {
56 |         color: #33342D;
57 |         font-size: 500%;
58 |         font-weight: normal;
59 |         margin-bottom: 0em;
60 |       }
61 |       h2 {
62 |         font-size: 200%;
63 |         font-weight: normal;
64 |         margin-bottom: 0em;
65 |       }
66 |       ul {
67 |         padding-left: 1em;
68 |         margin: 0px;
69 |       }
70 |       li {
71 |         margin: 1em 0em;
72 |       }
73 |     </style>
74 |   </head>
75 |   <body>
76 |     <div class="textColumn">
77 |       <h1>Congratulations</h1>
78 |       <p>Your first AWS Elastic Beanstalk Node.js application is now running on your own dedicated environment in the AWS Cloud</p>
79 |     </div>
80 |     <div class="linksColumn">
81 |       <h2>What's Next?</h2>
82 |       <ul>
83 |         <li><a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/Welcome.html">AWS Elastic Beanstalk overview</a></li>
84 |         <li><a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.html">AWS Elastic Beanstalk concepts</a></li>
85 |         <li><a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_nodejs_express.html">Deploy an Express Application to AWS Elastic Beanstalk</a></li>
86 |         <li><a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_nodejs_express_elasticache.html">Deploy an Express Application with Amazon ElastiCache to AWS Elastic Beanstalk</a></li>
87 |         <li><a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_nodejs_geddy_elasticache.html">Deploy a Geddy Application with Amazon ElastiCache to AWS Elastic Beanstalk </a></li>
88 |         <li><a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_nodejs_custom_container.html">Customizing and Configuring a Node.js Container </a></li>
89 |         <li><a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.loggingS3.title.html">Working with Logs</a></li>
90 |       </ul>
91 |     </div>
92 |   </body>
93 | </html>
94 | 


--------------------------------------------------------------------------------
/Nested Stacks/rootstack.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "AWSTemplateFormatVersion" : "2010-09-09",
 3 |     "Resources" : {
 4 |         "myStack" : {
 5 | 	       "Type" : "AWS::CloudFormation::Stack",
 6 | 	       "Properties" : {
 7 |               "TemplateURL" : "https://s3.amazonaws.com/nestedstack945/s3static.json",
 8 |               "TimeoutInMinutes" : "60"
 9 | 	       }
10 |         }
11 |     }
12 | }


--------------------------------------------------------------------------------
/Nested Stacks/s3static.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "AWSTemplateFormatVersion": "2010-09-09",
 3 |     "Resources": {
 4 |         "S3Bucket": {
 5 |             "Type": "AWS::S3::Bucket",
 6 |             "Properties": {
 7 |                 "AccessControl": "PublicRead",
 8 |                 "WebsiteConfiguration": {
 9 |                     "IndexDocument": "index.html",
10 |                     "ErrorDocument": "error.html"
11 |                 }
12 |             },
13 |             "DeletionPolicy": "Retain"
14 |         },
15 |         "BucketPolicy": {
16 |             "Type": "AWS::S3::BucketPolicy",
17 |             "Properties": {
18 |                 "PolicyDocument": {
19 |                     "Id": "MyPolicy",
20 |                     "Version": "2012-10-17",
21 |                     "Statement": [
22 |                         {
23 |                             "Sid": "PublicReadForGetBucketObjects",
24 |                             "Effect": "Allow",
25 |                             "Principal": "*",
26 |                             "Action": "s3:GetObject",
27 |                             "Resource": {
28 |                                 "Fn::Join": [
29 |                                     "",
30 |                                     [
31 |                                         "arn:aws:s3:::",
32 |                                         {
33 |                                             "Ref": "S3Bucket"
34 |                                         },
35 |                                         "/*"
36 |                                     ]
37 |                                 ]
38 |                             }
39 |                         }
40 |                     ]
41 |                 },
42 |                 "Bucket": {
43 |                     "Ref": "S3Bucket"
44 |                 }
45 |             }
46 |         }
47 |     },
48 |     "Outputs": {
49 |         "WebsiteURL": {
50 |             "Value": {
51 |                 "Fn::GetAtt": [
52 |                     "S3Bucket",
53 |                     "WebsiteURL"
54 |                 ]
55 |             },
56 |             "Description": "URL for website hosted on S3"
57 |         },
58 |         "S3BucketSecureURL": {
59 |             "Value": {
60 |                 "Fn::Join": [
61 |                     "",
62 |                     [
63 |                         "https://",
64 |                         {
65 |                             "Fn::GetAtt": [
66 |                                 "S3Bucket",
67 |                                 "DomainName"
68 |                             ]
69 |                         }
70 |                     ]
71 |                 ]
72 |             },
73 |             "Description": "Name of S3 bucket to hold website content"
74 |         }
75 |     }
76 | }


--------------------------------------------------------------------------------
/StackPolicies/stackpolicies.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "Statement" : [
 3 |       {
 4 |         "Effect" : "Allow",
 5 |         "Action" : "Update:*",
 6 |         "Principal": "*",
 7 |         "Resource" : "*"
 8 |       },
 9 |       {
10 |         "Effect" : "Deny",
11 |         "Action" : "Update:*",
12 |         "Principal": "*",
13 |         "Resource" : "LogicalResourceId/wordpressdb"
14 |       }
15 |     ]
16 |   }
17 | 
18 | 
19 |   {
20 |     "Statement" : [
21 |       {
22 |         "Effect" : "Deny_or_Allow",
23 |         "Action" : "update_actions",
24 |         "Principal" : "*",
25 |         "Resource" : "LogicalResourceId/resource_logical_ID",
26 |         "Condition" : {
27 |           "StringEquals_or_StringLike" : {
28 |             "ResourceType" : [resource_type, ...]
29 |           }
30 |         }
31 |       }  
32 |     ]
33 |   }
34 | 
35 | 
36 |   {
37 |     "Statement" : [
38 |     {
39 |       "Effect" : "Deny",
40 |       "Principal" : "*",
41 |       "Action" : "Update:*",
42 |       "Resource" : "*",
43 |       "Condition" : {
44 |         "StringEquals" : {
45 |           "ResourceType" : ["AWS::EC2::Instance", "AWS::RDS::DBInstance"]
46 |         }
47 |       }
48 |     },
49 |     {
50 |       "Effect" : "Allow",
51 |       "Principal" : "*",
52 |       "Action" : "Update:*",
53 |       "Resource" : "*"
54 |     }
55 |     ]
56 |   }
57 | 
58 | 


--------------------------------------------------------------------------------
/StackPolicies/wordpress-single-instance.yaml:
--------------------------------------------------------------------------------
  1 | AWSTemplateFormatVersion: '2010-09-09'
  2 | Description: 'AWS CloudFormation Sample Template WordPress_Single_Instance: WordPress 
  3 | is web software you can use to create a beautiful website or blog. This template
  4 | installs WordPress with a local MySQL database for storage. It demonstrates using
  5 | the AWS CloudFormation bootstrap scripts to deploy WordPress. **WARNING** This template
  6 | creates an Amazon EC2 instance. You will be billed for the AWS resources used if 
  7 | you create a stack from this template.'
  8 | Parameters:
  9 |   DBName:
 10 |     AllowedPattern: '[a-zA-Z][a-zA-Z0-9]*'
 11 |     ConstraintDescription: must begin with a letter and contain only alphanumeric characters.
 12 |     Description: The WordPress database name
 13 |     MaxLength: '64'
 14 |     MinLength: '1'
 15 |     Type: String
 16 |   DBPassword:
 17 |     AllowedPattern: '[a-zA-Z0-9]*'
 18 |     ConstraintDescription: must contain only alphanumeric characters.
 19 |     Description: The WordPress database admin account password
 20 |     MaxLength: '41'
 21 |     MinLength: '8'
 22 |     NoEcho: 'true'
 23 |     Type: String
 24 |   DBRootPassword:
 25 |     AllowedPattern: '[a-zA-Z0-9]*'
 26 |     ConstraintDescription: must contain only alphanumeric characters.
 27 |     Description: MySQL root password
 28 |     MaxLength: '41'
 29 |     MinLength: '8'
 30 |     NoEcho: 'true'
 31 |     Type: String
 32 |   DBUser:
 33 |     AllowedPattern: '[a-zA-Z][a-zA-Z0-9]*'
 34 |     ConstraintDescription: must begin with a letter and contain only alphanumeric characters.
 35 |     Description: The WordPress database admin account username
 36 |     MaxLength: '16'
 37 |     MinLength: '1'
 38 |     NoEcho: 'true'
 39 |     Type: String
 40 |   InstanceType:
 41 |     AllowedValues:
 42 |       - t1.micro
 43 |       - t2.nano
 44 |       - t2.micro
 45 |       - t2.small
 46 |       - t2.medium
 47 |       - t2.large
 48 |       - m1.small
 49 |       - m1.medium
 50 |       - m1.large
 51 |       - m1.xlarge
 52 |       - m2.xlarge
 53 |       - m2.2xlarge
 54 |       - m2.4xlarge
 55 |       - m3.medium
 56 |       - m3.large
 57 |       - m3.xlarge
 58 |       - m3.2xlarge
 59 |       - m4.large
 60 |       - m4.xlarge
 61 |       - m4.2xlarge
 62 |       - m4.4xlarge
 63 |       - m4.10xlarge
 64 |       - c1.medium
 65 |       - c1.xlarge
 66 |       - c3.large
 67 |       - c3.xlarge
 68 |       - c3.2xlarge
 69 |       - c3.4xlarge
 70 |       - c3.8xlarge
 71 |       - c4.large
 72 |       - c4.xlarge
 73 |       - c4.2xlarge
 74 |       - c4.4xlarge
 75 |       - c4.8xlarge
 76 |       - g2.2xlarge
 77 |       - g2.8xlarge
 78 |       - r3.large
 79 |       - r3.xlarge
 80 |       - r3.2xlarge
 81 |       - r3.4xlarge
 82 |       - r3.8xlarge
 83 |       - i2.xlarge
 84 |       - i2.2xlarge
 85 |       - i2.4xlarge
 86 |       - i2.8xlarge
 87 |       - d2.xlarge
 88 |       - d2.2xlarge
 89 |       - d2.4xlarge
 90 |       - d2.8xlarge
 91 |       - hi1.4xlarge
 92 |       - hs1.8xlarge
 93 |       - cr1.8xlarge
 94 |       - cc2.8xlarge
 95 |       - cg1.4xlarge
 96 |     ConstraintDescription: must be a valid EC2 instance type.
 97 |     Default: t2.small
 98 |     Description: WebServer EC2 instance type
 99 |     Type: String
100 |   KeyName:
101 |     ConstraintDescription: must be the name of an existing EC2 KeyPair.
102 |     Description: Name of an existing EC2 KeyPair to enable SSH access to the instances
103 |     Type: AWS::EC2::KeyPair::KeyName
104 |   SSHLocation:
105 |     AllowedPattern: (\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})/(\d{1,2})
106 |     ConstraintDescription: must be a valid IP CIDR range of the form x.x.x.x/x.
107 |     Default: 0.0.0.0/0
108 |     Description: The IP address range that can be used to SSH to the EC2 instances
109 |     MaxLength: '18'
110 |     MinLength: '9'
111 |     Type: String
112 | Mappings:
113 |   SubnetConfig:
114 |     VPC:
115 |       CIDR: 10.0.0.0/16
116 |     Public:
117 |       CIDR: 10.0.0.0/24
118 |     Public1:
119 |       CIDR: 10.0.1.0/24
120 |     Public2:
121 |       CIDR: 10.0.2.0/24
122 |   AWSInstanceType2Arch:
123 |     c1.medium:
124 |       Arch: PV64
125 |     c1.xlarge:
126 |       Arch: PV64
127 |     c3.2xlarge:
128 |       Arch: HVM64
129 |     c3.4xlarge:
130 |       Arch: HVM64
131 |     c3.8xlarge:
132 |       Arch: HVM64
133 |     c3.large:
134 |       Arch: HVM64
135 |     c3.xlarge:
136 |       Arch: HVM64
137 |     c4.2xlarge:
138 |       Arch: HVM64
139 |     c4.4xlarge:
140 |       Arch: HVM64
141 |     c4.8xlarge:
142 |       Arch: HVM64
143 |     c4.large:
144 |       Arch: HVM64
145 |     c4.xlarge:
146 |       Arch: HVM64
147 |     cc2.8xlarge:
148 |       Arch: HVM64
149 |     cr1.8xlarge:
150 |       Arch: HVM64
151 |     d2.2xlarge:
152 |       Arch: HVM64
153 |     d2.4xlarge:
154 |       Arch: HVM64
155 |     d2.8xlarge:
156 |       Arch: HVM64
157 |     d2.xlarge:
158 |       Arch: HVM64
159 |     g2.2xlarge:
160 |       Arch: HVMG2
161 |     g2.8xlarge:
162 |       Arch: HVMG2
163 |     hi1.4xlarge:
164 |       Arch: HVM64
165 |     hs1.8xlarge:
166 |       Arch: HVM64
167 |     i2.2xlarge:
168 |       Arch: HVM64
169 |     i2.4xlarge:
170 |       Arch: HVM64
171 |     i2.8xlarge:
172 |       Arch: HVM64
173 |     i2.xlarge:
174 |       Arch: HVM64
175 |     m1.large:
176 |       Arch: PV64
177 |     m1.medium:
178 |       Arch: PV64
179 |     m1.small:
180 |       Arch: PV64
181 |     m1.xlarge:
182 |       Arch: PV64
183 |     m2.2xlarge:
184 |       Arch: PV64
185 |     m2.4xlarge:
186 |       Arch: PV64
187 |     m2.xlarge:
188 |       Arch: PV64
189 |     m3.2xlarge:
190 |       Arch: HVM64
191 |     m3.large:
192 |       Arch: HVM64
193 |     m3.medium:
194 |       Arch: HVM64
195 |     m3.xlarge:
196 |       Arch: HVM64
197 |     m4.10xlarge:
198 |       Arch: HVM64
199 |     m4.2xlarge:
200 |       Arch: HVM64
201 |     m4.4xlarge:
202 |       Arch: HVM64
203 |     m4.large:
204 |       Arch: HVM64
205 |     m4.xlarge:
206 |       Arch: HVM64
207 |     r3.2xlarge:
208 |       Arch: HVM64
209 |     r3.4xlarge:
210 |       Arch: HVM64
211 |     r3.8xlarge:
212 |       Arch: HVM64
213 |     r3.large:
214 |       Arch: HVM64
215 |     r3.xlarge:
216 |       Arch: HVM64
217 |     t1.micro:
218 |       Arch: PV64
219 |     t2.large:
220 |       Arch: HVM64
221 |     t2.medium:
222 |       Arch: HVM64
223 |     t2.micro:
224 |       Arch: HVM64
225 |     t2.nano:
226 |       Arch: HVM64
227 |     t2.small:
228 |       Arch: HVM64
229 |   AWSInstanceType2NATArch:
230 |     c1.medium:
231 |       Arch: NATPV64
232 |     c1.xlarge:
233 |       Arch: NATPV64
234 |     c3.2xlarge:
235 |       Arch: NATHVM64
236 |     c3.4xlarge:
237 |       Arch: NATHVM64
238 |     c3.8xlarge:
239 |       Arch: NATHVM64
240 |     c3.large:
241 |       Arch: NATHVM64
242 |     c3.xlarge:
243 |       Arch: NATHVM64
244 |     c4.2xlarge:
245 |       Arch: NATHVM64
246 |     c4.4xlarge:
247 |       Arch: NATHVM64
248 |     c4.8xlarge:
249 |       Arch: NATHVM64
250 |     c4.large:
251 |       Arch: NATHVM64
252 |     c4.xlarge:
253 |       Arch: NATHVM64
254 |     cc2.8xlarge:
255 |       Arch: NATHVM64
256 |     cr1.8xlarge:
257 |       Arch: NATHVM64
258 |     d2.2xlarge:
259 |       Arch: NATHVM64
260 |     d2.4xlarge:
261 |       Arch: NATHVM64
262 |     d2.8xlarge:
263 |       Arch: NATHVM64
264 |     d2.xlarge:
265 |       Arch: NATHVM64
266 |     g2.2xlarge:
267 |       Arch: NATHVMG2
268 |     g2.8xlarge:
269 |       Arch: NATHVMG2
270 |     hi1.4xlarge:
271 |       Arch: NATHVM64
272 |     hs1.8xlarge:
273 |       Arch: NATHVM64
274 |     i2.2xlarge:
275 |       Arch: NATHVM64
276 |     i2.4xlarge:
277 |       Arch: NATHVM64
278 |     i2.8xlarge:
279 |       Arch: NATHVM64
280 |     i2.xlarge:
281 |       Arch: NATHVM64
282 |     m1.large:
283 |       Arch: NATPV64
284 |     m1.medium:
285 |       Arch: NATPV64
286 |     m1.small:
287 |       Arch: NATPV64
288 |     m1.xlarge:
289 |       Arch: NATPV64
290 |     m2.2xlarge:
291 |       Arch: NATPV64
292 |     m2.4xlarge:
293 |       Arch: NATPV64
294 |     m2.xlarge:
295 |       Arch: NATPV64
296 |     m3.2xlarge:
297 |       Arch: NATHVM64
298 |     m3.large:
299 |       Arch: NATHVM64
300 |     m3.medium:
301 |       Arch: NATHVM64
302 |     m3.xlarge:
303 |       Arch: NATHVM64
304 |     m4.10xlarge:
305 |       Arch: NATHVM64
306 |     m4.2xlarge:
307 |       Arch: NATHVM64
308 |     m4.4xlarge:
309 |       Arch: NATHVM64
310 |     m4.large:
311 |       Arch: NATHVM64
312 |     m4.xlarge:
313 |       Arch: NATHVM64
314 |     r3.2xlarge:
315 |       Arch: NATHVM64
316 |     r3.4xlarge:
317 |       Arch: NATHVM64
318 |     r3.8xlarge:
319 |       Arch: NATHVM64
320 |     r3.large:
321 |       Arch: NATHVM64
322 |     r3.xlarge:
323 |       Arch: NATHVM64
324 |     t1.micro:
325 |       Arch: NATPV64
326 |     t2.large:
327 |       Arch: NATHVM64
328 |     t2.medium:
329 |       Arch: NATHVM64
330 |     t2.micro:
331 |       Arch: NATHVM64
332 |     t2.nano:
333 |       Arch: NATHVM64
334 |     t2.small:
335 |       Arch: NATHVM64
336 |   AWSRegionArch2AMI:
337 |     ap-northeast-1:
338 |       HVM64: ami-383c1956
339 |       HVMG2: ami-08e5c166
340 |       PV64: ami-393c1957
341 |     ap-northeast-2:
342 |       HVM64: ami-249b554a
343 |       HVMG2: NOT_SUPPORTED
344 |       PV64: NOT_SUPPORTED
345 |     ap-southeast-1:
346 |       HVM64: ami-c9b572aa
347 |       HVMG2: ami-5a15d239
348 |       PV64: ami-34bd7a57
349 |     ap-southeast-2:
350 |       HVM64: ami-48d38c2b
351 |       HVMG2: ami-0c1a446f
352 |       PV64: ami-ced887ad
353 |     cn-north-1:
354 |       HVM64: ami-43a36a2e
355 |       HVMG2: NOT_SUPPORTED
356 |       PV64: ami-18ac6575
357 |     eu-central-1:
358 |       HVM64: ami-bc5b48d0
359 |       HVMG2: ami-ba1a09d6
360 |       PV64: ami-794a5915
361 |     eu-west-1:
362 |       HVM64: ami-bff32ccc
363 |       HVMG2: ami-83fd23f0
364 |       PV64: ami-95e33ce6
365 |     sa-east-1:
366 |       HVM64: ami-6817af04
367 |       HVMG2: NOT_SUPPORTED
368 |       PV64: ami-7d15ad11
369 |     us-east-1:
370 |       HVM64: ami-60b6c60a
371 |       HVMG2: ami-e998ea83
372 |       PV64: ami-5fb8c835
373 |     us-west-1:
374 |       HVM64: ami-d5ea86b5
375 |       HVMG2: ami-943956f4
376 |       PV64: ami-56ea8636
377 |     us-west-2:
378 |       HVM64: ami-f0091d91
379 |       HVMG2: ami-315f4850
380 |       PV64: ami-d93622b8
381 | Resources:
382 |   VPC:
383 |     Type: 'AWS::EC2::VPC'
384 |     Properties:
385 |       EnableDnsSupport: 'true'
386 |       EnableDnsHostnames: 'true'
387 |       CidrBlock: !FindInMap 
388 |         - SubnetConfig
389 |         - VPC
390 |         - CIDR
391 |       Tags:
392 |         - Key: Application
393 |           Value: !Ref 'AWS::StackName'
394 |         - Key: Network
395 |           Value: Public
396 |   WebServer:
397 |     Type: AWS::EC2::Instance
398 |     Properties:
399 |       SubnetId: '10.0.0.0/24'
400 |     CreationPolicy:
401 |       ResourceSignal:
402 |         Timeout: PT15M
403 |     Metadata:
404 |       AWS::CloudFormation::Init:
405 |         configSets:
406 |           wordpress_install:
407 |             - install_cfn
408 |             - install_wordpress
409 |             - configure_wordpress
410 |         configure_wordpress:
411 |           commands:
412 |             01_set_mysql_root_password:
413 |               command: !Sub |
414 |                 mysqladmin -u root password '${DBRootPassword}'
415 |               test: !Sub |
416 |                 $(mysql ${DBName} -u root --password='${DBRootPassword}' >/dev/null 2>&1 </dev/null); (( $? != 0 ))
417 |             02_create_database:
418 |               command: !Sub |
419 |                 mysql -u root --password='${DBRootPassword}' < /tmp/setup.mysql
420 |               test: !Sub |
421 |                 $(mysql ${DBName} -u root --password='${DBRootPassword}' >/dev/null 2>&1 </dev/null); (( $? !=0))
422 |             03_configure_wordpress:
423 |               command: /tmp/create-wp-config
424 |               cwd: /var/www/html/wordpress
425 |         install_cfn:
426 |           files:
427 |             /etc/cfn/cfn-hup.conf:
428 |               content: !Sub |
429 |                 [main]
430 |                 stack= ${AWS::StackId}
431 |                 region=${AWS::Region}
432 |               group: root
433 |               mode: '000400'
434 |               owner: root
435 |             /etc/cfn/hooks.d/cfn-auto-reloader.conf:
436 |               content: !Sub |
437 |                 [cfn-auto-reloader-hook]
438 |                 triggers=post.update
439 |                 path=Resources.WebServer.Metadata.AWS::CloudFormation::Init
440 |                 action=/opt/aws/bin/cfn-init -v --stack ${AWS::StackName} --resource WebServer --configsets wordpress_install --url https://stackbuilder.amazonaws.com
441 |               group: root
442 |               mode: '000400'
443 |               owner: root
444 |           services:
445 |             sysvinit:
446 |               cfn-hup:
447 |                 enabled: true
448 |                 ensureRunning: true
449 |                 files:
450 |                   - /etc/cfn/cfn-hup.conf
451 |                   - /etc/cfn/hooks.d/cfn-auto-reloader.conf
452 |         install_wordpress:
453 |           files:
454 |             /tmp/create-wp-config:
455 |               content: !Sub |
456 |                 #!/bin/bash -xe
457 |                 cp /var/www/html/wordpress/wp-config-sample.php /var/www/html/wordpress/wp-config.php
458 |                 sed -i "s/'database_name_here'/'${DBName}'/g" wp-config.php
459 |                 sed -i "s/'username_here'/'${DBUser}'/g" wp-config.php
460 |                 sed -i "s/'password_here'/'${DBPassword}'/g" wp-config.php                                    
461 |               group: root
462 |               mode: '000500'
463 |               owner: root
464 |             /tmp/setup.mysql:
465 |               content: !Sub |
466 |                 CREATE DATABASE ${DBName};
467 |                 CREATE USER '${DBUser}'@'localhost' IDENTIFIED BY '${DBPassword}';
468 |                 GRANT ALL ON ${DBName}.* TO '${DBUser}'@'localhost'; 
469 |                 FLUSH PRIVILEGES;
470 |               group: root
471 |               mode: '000400'
472 |               owner: root
473 |           packages:
474 |             yum:
475 |               httpd: []
476 |               mysql: []
477 |               mysql-devel: []
478 |               mysql-libs: []
479 |               mysql-server: []
480 |               php: []
481 |               php-mysql: []
482 |           services:
483 |             sysvinit:
484 |               httpd:
485 |                 enabled: true
486 |                 ensureRunning: true
487 |               mysqld:
488 |                 enabled: true
489 |                 ensureRunning: true
490 |           sources:
491 |             /var/www/html: http://wordpress.org/latest.tar.gz
492 |     Properties:
493 |       ImageId: !FindInMap [AWSRegionArch2AMI, !Ref 'AWS::Region', !FindInMap [AWSInstanceType2Arch, !Ref InstanceType, Arch]]
494 |       InstanceType: 
495 |         Ref: InstanceType
496 |       KeyName: 
497 |         Ref: KeyName
498 |       SecurityGroups:
499 |         - Ref: WebServerSecurityGroup
500 |       UserData: 
501 |         Fn::Base64: !Sub |
502 |           #!/bin/bash -xe
503 |           yum update -y aws-cfn-bootstrap
504 |           /opt/aws/bin/cfn-init -v --stack ${AWS::StackId} --resource WebServer --configsets wordpress_install --region ${AWS::Region}
505 |           /opt/aws/bin/cfn-signal -e $? --stack ${AWS::StackId} --resource WebServer --region ${AWS::Region}
506 |   WebServerSecurityGroup:
507 |     Type: AWS::EC2::SecurityGroup
508 |     Properties:
509 |       GroupDescription: "Enable HTTP access via port 80 locked down to the load balancer + SSH access"
510 |       SecurityGroupIngress:
511 |         - CidrIp: 0.0.0.0/0
512 |           FromPort: '80'
513 |           IpProtocol: tcp
514 |           ToPort: '80'
515 |         - CidrIp: !Ref SSHLocation
516 |           FromPort: '22'
517 |           IpProtocol: tcp
518 |           ToPort: '22'
519 | Outputs:
520 |   PublicIP:
521 |     Description: EC2 public IP
522 |     Value: !GetAtt WebServer.PublicIp
523 |   WebsiteURL:
524 |     Description: WordPress Website
525 |     Value: !Sub "http://${WebServer.PublicDnsName}/wordpress"


--------------------------------------------------------------------------------
/VPC Endpoints for S3/readme:
--------------------------------------------------------------------------------
1 | 
2 | 


--------------------------------------------------------------------------------
/lamp-stack-1478287817_1530269327 (3).json:
--------------------------------------------------------------------------------
  1 | {
  2 |   "AWSTemplateFormatVersion" : "2010-09-09",
  3 |   
  4 |   "Description" : "Create a LAMP stack using a single EC2 instance and a local MySQL database for storage. This template demonstrates using the AWS CloudFormation bootstrap scripts to install the packages and files necessary to deploy the Apache web server, PHP and MySQL at instance launch time.",
  5 |   
  6 |   "Parameters" : {
  7 |       
  8 |     "KeyName": {
  9 |       "Description" : "Name of an EC2 KeyPair to enable SSH access to the instance",
 10 |       "Type": "AWS::EC2::KeyPair::KeyName",
 11 |       "ConstraintDescription" : "must be the name of an existing EC2 KeyPair."
 12 |     },    
 13 | 
 14 |     "DBName": {
 15 |       "Default": "DatabaseNameExample",
 16 |       "Description" : "MySQL database name",
 17 |       "Type": "String",
 18 |       "MinLength": "1",
 19 |       "MaxLength": "64",
 20 |       "AllowedPattern" : "[a-zA-Z][a-zA-Z0-9]*",
 21 |       "ConstraintDescription" : "must begin with a letter and contain only alphanumeric characters."
 22 |     },
 23 | 
 24 |     "DBUser": {
 25 |       "NoEcho": "true",
 26 |       "Description" : "Username for MySQL database access",
 27 |       "Type": "String",
 28 |       "MinLength": "1",
 29 |       "MaxLength": "16",
 30 |       "AllowedPattern" : "[a-zA-Z][a-zA-Z0-9]*",
 31 |       "ConstraintDescription" : "must begin with a letter and contain only alphanumeric characters."
 32 |     },
 33 | 
 34 |     "DBPassword": {
 35 |       "NoEcho": "true",
 36 |       "Description" : "Password for MySQL database access",
 37 |       "Type": "String",
 38 |       "MinLength": "1",
 39 |       "MaxLength": "41",
 40 |       "AllowedPattern" : "[a-zA-Z0-9]*",
 41 |       "ConstraintDescription" : "must contain only alphanumeric characters."
 42 |     },
 43 | 
 44 |     "DBRootPassword": {
 45 |       "NoEcho": "true",
 46 |       "Description" : "Root password for MySQL",
 47 |       "Type": "String",
 48 |       "MinLength": "1",
 49 |       "MaxLength": "41",
 50 |       "AllowedPattern" : "[a-zA-Z0-9]*",
 51 |       "ConstraintDescription" : "must contain only alphanumeric characters."
 52 |     },
 53 | 
 54 |     "InstanceType" : {
 55 |       "Description" : "WebServer EC2 instance type",
 56 |       "Type" : "String",
 57 |       "Default" : "t2.micro",
 58 |       "AllowedValues" : ["t2.nano", "t2.micro", "t2.small", "t2.medium"],
 59 |       "ConstraintDescription" : "must be a valid EC2 instance type."
 60 |     },
 61 | 
 62 |     "SSHLocation" : {
 63 |       "Description" : "The IP address range that can be used to SSH to the EC2 instances",
 64 |       "Type": "String",
 65 |       "MinLength": "9",
 66 |       "MaxLength": "18",
 67 |       "Default": "0.0.0.0/0",
 68 |       "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
 69 |       "ConstraintDescription": "must be a valid IP CIDR range of the form x.x.x.x/x."
 70 |     } 
 71 |   },
 72 |   
 73 |   "Mappings" : {
 74 |     "AWSInstanceType2Arch" : {
 75 |       "t2.nano"     : { "Arch" : "HVM64"  },
 76 |       "t2.micro"    : { "Arch" : "HVM64"  },
 77 |       "t2.small"    : { "Arch" : "HVM64"  },
 78 |       "t2.medium"   : { "Arch" : "HVM64"  }
 79 |     },
 80 | 
 81 |     "AWSRegionArch2AMI" : {
 82 |       "us-east-1"        : {"PV64" : "ami-2a69aa47", "HVM64" : "ami-6869aa05", "HVMG2" : "ami-2e5e9c43"},
 83 |       "us-west-2"        : {"PV64" : "ami-7f77b31f", "HVM64" : "ami-7172b611", "HVMG2" : "ami-83b770e3"}
 84 |     },
 85 | 
 86 |     "SubnetConfig" : {
 87 |       "VPC"     : { "CIDR" : "10.0.0.0/16" },
 88 |       "Public"  : { "CIDR" : "10.0.0.0/24" }
 89 |     }
 90 | 
 91 |   },
 92 |     
 93 |   "Resources" : {     
 94 |       
 95 |     "WebServerInstance": {  
 96 |       "Type": "AWS::EC2::Instance",
 97 |       "Metadata" : {
 98 |         "AWS::CloudFormation::Init" : {
 99 |           "configSets" : {
100 |             "InstallAndRun" : [ "Install", "Configure" ]
101 |           },
102 | 
103 |           "Install" : {
104 |             "packages" : {
105 |               "yum" : {
106 |                 "mysql"        : [],
107 |                 "mysql-server" : [],
108 |                 "mysql-libs"   : [],
109 |                 "httpd"        : [],
110 |                 "php"          : [],
111 |                 "php-mysql"    : [],
112 |                 "git"          : []
113 |               }
114 |             },
115 | 
116 |             "files" : {
117 |               "/var/www/html/index.php" : {
118 |                 "content" : { "Fn::Join" : [ "", [
119 |                   "<html>\n",
120 |                   "  <head>\n",
121 |                   "    <title>AWS CloudFormation PHP Sample</title>\n",
122 |                   "    <meta http-equiv=\"Content-Type\" content=\"text/html; charset=ISO-8859-1\">\n",
123 |                   "  </head>\n",
124 |                   "  <body>\n",
125 |                   "    <h1>Welcome to the AWS CloudFormation PHP Sample</h1>\n",
126 |                   "    <p/>\n",
127 |                   "    <?php\n",
128 |                   "      // Print out the current data and time\n",
129 |                   "      print \"The Current Date and Time is: <br/>\";\n",
130 |                   "      print date(\"g:i A l, F j Y.\");\n",
131 |                   "    ?>\n",
132 |                   "    <p/>\n",
133 |                   "    <?php\n",
134 |                   "      $Database   = \"localhost\";\n",
135 |                   "      $DBUser     = \"", {"Ref" : "DBUser"}, "\";\n",
136 |                   "      $DBPassword = \"", {"Ref" : "DBPassword"}, "\";\n",
137 |                   "      print \"Database = \" . $Database . \"<br />\";\n",
138 |                   "      $dbconnection = mysql_connect($Database, $DBUser, $DBPassword)\n",
139 |                   "                      or die(\"Could not connect: \" . mysql_error());\n",
140 |                   "      print (\"Connected to $Database successfully\");\n",
141 |                   "      mysql_close($dbconnection);\n",
142 |                   "    ?>\n",
143 |                   "  </body>\n",
144 |                   "</html>\n"
145 |                 ]]},
146 |                 "mode"  : "000600",
147 |                 "owner" : "apache",
148 |                 "group" : "apache"
149 |               },
150 | 
151 |               "/tmp/setup.mysql" : {
152 |                 "content" : { "Fn::Join" : ["", [
153 |                   "CREATE DATABASE ", { "Ref" : "DBName" }, ";\n",
154 |                   "GRANT ALL ON ", { "Ref" : "DBName" }, ".* TO '", { "Ref" : "DBUser" }, "'@localhost IDENTIFIED BY '", { "Ref" : "DBPassword" }, "';\n"
155 |                   ]]},
156 |                 "mode"  : "000400",
157 |                 "owner" : "root",
158 |                 "group" : "root"
159 |               },
160 |               "/etc/cfn/cfn-hup.conf" : {
161 |                 "content" : { "Fn::Join" : ["", [
162 |                   "[main]\n",
163 |                   "stack=", { "Ref" : "AWS::StackId" }, "\n",
164 |                   "region=", { "Ref" : "AWS::Region" }, "\n",
165 |                   "interval=6", "\n"
166 |                 ]]},
167 |                 "mode"    : "000400",
168 |                 "owner"   : "root",
169 |                 "group"   : "root"
170 |               },
171 | 
172 |               "/etc/cfn/hooks.d/cfn-auto-reloader.conf" : {
173 |                 "content": { "Fn::Join" : ["", [
174 |                   "[cfn-auto-reloader-hook]\n",
175 |                   "triggers=post.update\n",
176 |                   "path=Resources.WebServerInstance.Metadata.AWS::CloudFormation::Init\n",
177 |                   "action=/opt/aws/bin/cfn-init -v ",
178 |                   "         --stack ", { "Ref" : "AWS::StackName" },
179 |                   "         --resource WebServerInstance ",
180 |                   "         --configsets InstallAndRun ",
181 |                   "         --region ", { "Ref" : "AWS::Region" }, "\n",
182 |                   "runas=root\n"
183 |                 ]]}
184 |               }
185 |             },
186 | 
187 |             "services" : {
188 |               "sysvinit" : {  
189 |                 "mysqld"  : { "enabled" : "true", "ensureRunning" : "true" },
190 |                 "httpd"   : { "enabled" : "true", "ensureRunning" : "true" },
191 |                 "cfn-hup" : { "enabled" : "true", "ensureRunning" : "true",
192 |                 "files" : ["/etc/cfn/cfn-hup.conf", "/etc/cfn/hooks.d/cfn-auto-reloader.conf"]}
193 |               }
194 |             }
195 |           },
196 | 
197 |           "Configure" : {
198 |             "commands" : {
199 |               "01_set_mysql_root_password" : {
200 |                 "command" : { "Fn::Join" : ["", ["mysqladmin -u root password '", { "Ref" : "DBRootPassword" }, "'"]]},
201 |                 "test" : { "Fn::Join" : ["", ["$(mysql ", { "Ref" : "DBName" }, " -u root --password='", { "Ref" : "DBRootPassword" }, "' >/dev/null 2>&1 </dev/null); (( $? != 0 ))"]]}
202 |               },
203 |               "02_create_database" : {
204 |                 "command" : { "Fn::Join" : ["", ["mysql -u root --password='", { "Ref" : "DBRootPassword" }, "' < /tmp/setup.mysql"]]},
205 |                 "test" : { "Fn::Join" : ["", ["$(mysql ", { "Ref" : "DBName" }, " -u root --password='", { "Ref" : "DBRootPassword" }, "' >/dev/null 2>&1 </dev/null); (( $? != 0 ))"]]}
206 |               }
207 |             }
208 |           }
209 |         }
210 |       },
211 |       "Properties": {
212 |         "ImageId" : { "Fn::FindInMap" : [ "AWSRegionArch2AMI", { "Ref" : "AWS::Region" },
213 |                           { "Fn::FindInMap" : [ "AWSInstanceType2Arch", { "Ref" : "InstanceType" }, "Arch" ] } ] },
214 |         "InstanceType"   : { "Ref" : "InstanceType" },
215 |         "KeyName"        : { "Ref" : "KeyName" },
216 |         "NetworkInterfaces" : [{
217 |           "GroupSet"                 : [{ "Ref" : "EC2SecurityGroup" }],
218 |            "PrivateIpAddress"    : "10.0.0.100",
219 |            "AssociatePublicIpAddress" : "true",
220 |           "DeviceIndex"              : "0",
221 |           "DeleteOnTermination"      : "true",
222 |           "SubnetId"                 : { "Ref" : "PublicSubnet" }
223 |         }],
224 |         "UserData"       : { "Fn::Base64" : { "Fn::Join" : ["", [
225 |              "#!/bin/bash -xe\n",
226 |              "yum update -y aws-cfn-bootstrap\n",
227 | 
228 |              "# Install the files and packages from the metadata\n",
229 |              "/opt/aws/bin/cfn-init -v ",
230 |              "         --stack ", { "Ref" : "AWS::StackName" },
231 |              "         --resource WebServerInstance ",
232 |              "         --configsets InstallAndRun ",
233 |              "         --region ", { "Ref" : "AWS::Region" }, "\n",
234 | 
235 |              "# Signal the status from cfn-init\n",
236 |              "/opt/aws/bin/cfn-signal -e $? ",
237 |              "         --stack ", { "Ref" : "AWS::StackName" },
238 |              "         --resource WebServerInstance ",
239 |              "         --region ", { "Ref" : "AWS::Region" }, "\n"
240 |         ]]}}        
241 |       },
242 |       "CreationPolicy" : {
243 |         "ResourceSignal" : {
244 |           "Timeout" : "PT5M"
245 |         }
246 |       }
247 |     },
248 | 
249 |     "VPC" : {
250 |       "Type" : "AWS::EC2::VPC",
251 |       "Properties" : {
252 |         "EnableDnsSupport" : "true",
253 |         "EnableDnsHostnames" : "true",
254 |         "CidrBlock" : { "Fn::FindInMap" : [ "SubnetConfig", "VPC", "CIDR" ]},
255 |         "Tags" : [
256 |           { "Key" : "Application", "Value" : { "Ref" : "AWS::StackName" } },
257 |           { "Key" : "Network", "Value" : "Public" }
258 |         ]
259 |       }
260 |     },
261 | 
262 |     "PublicSubnet" : {
263 |       "Type" : "AWS::EC2::Subnet",
264 |       "Properties" : {
265 |         "VpcId" : { "Ref" : "VPC" },
266 |          "AvailabilityZone": { "Fn::Select": [ "0", { "Fn::GetAZs": "" } ] },
267 |         "CidrBlock" : { "Fn::FindInMap" : [ "SubnetConfig", "Public", "CIDR" ]},
268 |         "Tags" : [
269 |           { "Key" : "Application", "Value" : { "Ref" : "AWS::StackName" } },
270 |           { "Key" : "Network", "Value" : "Public" }
271 |         ]
272 |       }
273 |     },
274 | 
275 | 
276 |     "InternetGateway" : {
277 |       "Type" : "AWS::EC2::InternetGateway",
278 |       "Properties" : {
279 |         "Tags" : [
280 |           { "Key" : "Application", "Value" : { "Ref" : "AWS::StackName" } },
281 |           { "Key" : "Network", "Value" : "Public" }
282 |         ]
283 |       }
284 |     },
285 | 
286 |     "GatewayToInternet" : {
287 |        "Type" : "AWS::EC2::VPCGatewayAttachment",
288 |        "Properties" : {
289 |          "VpcId" : { "Ref" : "VPC" },
290 |          "InternetGatewayId" : { "Ref" : "InternetGateway" }
291 |        }
292 |     },
293 | 
294 |     "PublicRouteTable" : {
295 |       "Type" : "AWS::EC2::RouteTable",
296 |       "Properties" : {
297 |         "VpcId" : { "Ref" : "VPC" },
298 |         "Tags" : [
299 |           { "Key" : "Application", "Value" : { "Ref" : "AWS::StackName" } },
300 |           { "Key" : "Network", "Value" : "Public" }
301 |         ]
302 |       }
303 |     },
304 | 
305 |     "PublicRoute" : {
306 |       "Type" : "AWS::EC2::Route",
307 |       "DependsOn" : "GatewayToInternet",
308 |       "Properties" : {
309 |         "RouteTableId" : { "Ref" : "PublicRouteTable" },
310 |         "DestinationCidrBlock" : "0.0.0.0/0",
311 |         "GatewayId" : { "Ref" : "InternetGateway" }
312 |       }
313 |     },
314 | 
315 |     "PublicSubnetRouteTableAssociation" : {
316 |       "Type" : "AWS::EC2::SubnetRouteTableAssociation",
317 |       "Properties" : {
318 |         "SubnetId" : { "Ref" : "PublicSubnet" },
319 |         "RouteTableId" : { "Ref" : "PublicRouteTable" }
320 |       }
321 |     },
322 | 
323 | 
324 | 
325 | 
326 | 
327 |     "PublicNetworkAcl" : {
328 |       "Type" : "AWS::EC2::NetworkAcl",
329 |       "Properties" : {
330 |         "VpcId" : { "Ref" : "VPC" },
331 |         "Tags" : [
332 |           { "Key" : "Application", "Value" : { "Ref" : "AWS::StackName" } },
333 |           { "Key" : "Network", "Value" : "Public" }
334 |         ]
335 |       }
336 |     },
337 | 
338 |     "InboundHTTPPublicNetworkAclEntry" : {
339 |       "Type" : "AWS::EC2::NetworkAclEntry",
340 |       "Properties" : {
341 |         "NetworkAclId" : { "Ref" : "PublicNetworkAcl" },
342 |         "RuleNumber" : "100",
343 |         "Protocol" : "6",
344 |         "RuleAction" : "allow",
345 |         "Egress" : "false",
346 |         "CidrBlock" : "0.0.0.0/0",
347 |         "PortRange" : { "From" : "80", "To" : "80" }
348 |       }
349 |     },
350 | 
351 |     "InboundHTTPSPublicNetworkAclEntry" : {
352 |       "Type" : "AWS::EC2::NetworkAclEntry",
353 |       "Properties" : {
354 |         "NetworkAclId" : { "Ref" : "PublicNetworkAcl" },
355 |         "RuleNumber" : "101",
356 |         "Protocol" : "6",
357 |         "RuleAction" : "allow",
358 |         "Egress" : "false",
359 |         "CidrBlock" : "0.0.0.0/0",
360 |         "PortRange" : { "From" : "443", "To" : "443" }
361 |       }
362 |     },
363 | 
364 |     "InboundSSHPublicNetworkAclEntry" : {
365 |       "Type" : "AWS::EC2::NetworkAclEntry",
366 |       "Properties" : {
367 |         "NetworkAclId" : { "Ref" : "PublicNetworkAcl" },
368 |         "RuleNumber" : "102",
369 |         "Protocol" : "6",
370 |         "RuleAction" : "allow",
371 |         "Egress" : "false",
372 |         "CidrBlock" : "0.0.0.0/0",
373 |         "PortRange" : { "From" : "22", "To" : "22" }
374 |       }
375 |     },
376 | 
377 |     "InboundEmphemeralPublicNetworkAclEntry" : {
378 |       "Type" : "AWS::EC2::NetworkAclEntry",
379 |       "Properties" : {
380 |         "NetworkAclId" : { "Ref" : "PublicNetworkAcl" },
381 |         "RuleNumber" : "103",
382 |         "Protocol" : "6",
383 |         "RuleAction" : "allow",
384 |         "Egress" : "false",
385 |         "CidrBlock" : "0.0.0.0/0",
386 |         "PortRange" : { "From" : "1024", "To" : "65535" }
387 |       }
388 |     },
389 | 
390 |     "OutboundPublicNetworkAclEntry" : {
391 |       "Type" : "AWS::EC2::NetworkAclEntry",
392 |       "Properties" : {
393 |         "NetworkAclId" : { "Ref" : "PublicNetworkAcl" },
394 |         "RuleNumber" : "100",
395 |         "Protocol" : "6",
396 |         "RuleAction" : "allow",
397 |         "Egress" : "true",
398 |         "CidrBlock" : "0.0.0.0/0",
399 |         "PortRange" : { "From" : "0", "To" : "65535" }
400 |       }
401 |     },
402 | 
403 |     "PublicSubnetNetworkAclAssociation" : {
404 |       "Type" : "AWS::EC2::SubnetNetworkAclAssociation",
405 |       "Properties" : {
406 |         "SubnetId" : { "Ref" : "PublicSubnet" },
407 |         "NetworkAclId" : { "Ref" : "PublicNetworkAcl" }
408 |       }
409 |     },
410 | 
411 | 
412 |    
413 | 
414 |     "EC2SecurityGroup" : {
415 |       "Type" : "AWS::EC2::SecurityGroup",
416 |       "Properties" : {
417 |         "GroupDescription" : "Enable access to the EC2 host",
418 |         "VpcId" : { "Ref" : "VPC" },
419 |         "SecurityGroupIngress" : [
420 |           { "IpProtocol" : "tcp", "FromPort" : "22",  "ToPort" : "22",  "CidrIp" : "0.0.0.0/0" },
421 |           { "IpProtocol" : "tcp", "FromPort" : "80",  "ToPort" : "80",  "CidrIp" : "0.0.0.0/0" },
422 |           { "IpProtocol" : "tcp", "FromPort" : "443",  "ToPort" : "443",  "CidrIp" : "0.0.0.0/0" },
423 |           { "IpProtocol" : "icmp", "FromPort" : "-1",  "ToPort" : "-1",  "CidrIp" : "0.0.0.0/0" }
424 |         ]
425 |       }
426 |     },
427 |    "SGBaseIngress": {
428 |       "Type": "AWS::EC2::SecurityGroupIngress",
429 |       "Properties": {
430 |         "GroupId": { "Ref": "EC2SecurityGroup" },
431 |         "IpProtocol": "tcp",
432 |         "FromPort": "80",
433 |         "ToPort": "80",
434 |         "SourceSecurityGroupId": { "Ref": "EC2SecurityGroup" }
435 |       }
436 |     }          
437 |   },
438 |   
439 |   "Outputs" : {
440 |     "WebsiteURL" : {
441 |       "Description" : "URL for newly created LAMP stack",
442 |       "Value" : { "Fn::Join" : ["", ["http://", { "Fn::GetAtt" : [ "WebServerInstance", "PublicDnsName" ]}]] }
443 |     }
444 |   }
445 | }
446 | 


--------------------------------------------------------------------------------
/lifecyclehooks/userdataForLifeCycleHooks.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | yum update -y && \
 3 | yum install -y httpd && \
 4 | service httpd start && \
 5 | chkconfig httpd on && \
 6 | echo "<h1>Welcome to your application</h1>" > /var/www/html/index.html && \
 7 | chmod 644 /var/www/html/index.html && \
 8 | chown root:root /var/www/html/index.html && \
 9 | INSTANCE_ID="`wget -q -O - http://instance-data/latest/meta-data/instance-id`" && \
10 | aws autoscaling complete-lifecycle-action --lifecycle-action-result CONTINUE --instance-id $INSTANCE_ID --lifecycle-hook-name devops-pro-hook --auto-scaling-group-name devopsASG --region us-east-1 || \
11 | aws autoscaling complete-lifecycle-action --lifecycle-action-result ABANDON --instance-id $INSTANCE_ID --lifecycle-hook-name devops-pro-hook --auto-scaling-group-name devopsASG --region us-east-1


--------------------------------------------------------------------------------
/userdataForLifeCycleHooks.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | yum update -y && \
 3 | yum install -y httpd && \
 4 | service httpd start && \
 5 | chkconfig httpd on && \
 6 | echo "<h1>Welcome to your application</h1>" > /var/www/html/index.html && \
 7 | chmod 644 /var/www/html/index.html && \
 8 | chown root:root /var/www/html/index.html && \
 9 | INSTANCE_ID="`wget -q -O - http://instance-data/latest/meta-data/instance-id`" && \
10 | aws autoscaling complete-lifecycle-action --lifecycle-action-result CONTINUE --instance-id $INSTANCE_ID --lifecycle-hook-name devops-pro-hook --auto-scaling-group-name devopsASG --region us-east-1 || \
11 | aws autoscaling complete-lifecycle-action --lifecycle-action-result ABANDON --instance-id $INSTANCE_ID --lifecycle-hook-name devops-pro-hook --auto-scaling-group-name devopsASG --region us-east-1


--------------------------------------------------------------------------------