DEV Community

robot254
robot254 Subscriber

Posted on • Edited on

Implementing CloudFormation to deploy infrastructure

#cloud #aws #devops

Challenge Question: Automating Infrastructure Deployment on AWS

This weeks Challenge is to create AWS Cloud Resources using a Cloudformation template and CLI tools.

The Resources Created are:

  • A VPC with a public and Private Subnet
  • An internet Gateway
  • A security Group
  • An EC2 instance that boots up with a sample web application

The CloudFormation Template

we would be using a .yaml file template
Start Creating the stack with

AWSTemplateFormatVersion: '2010-09-09' Description: CloudForce 004 Resources:
Enter fullscreen mode Exit fullscreen mode

Now we are going to specify the resources

To Create a VPC

  • The Properties specified are for the CIDR Block and enabling DNS with the name of the VPC as CloudForceVPC 
 CloudForceVPC: Type: AWS::EC2::VPC Properties: CidrBlock: 172.16.0.0/16 EnableDnsSupport: true EnableDnsHostnames: true Tags: - Key: Name Value: CloudForceVPC
Enter fullscreen mode Exit fullscreen mode

My key pair 

 MyKeyPair: Type: AWS::EC2::KeyPair Properties: KeyName: my-key-pair
Enter fullscreen mode Exit fullscreen mode

The Subnets

  • My public and Private divided into 2 cidr blocks and AZs of US-East-1a.
  • Also references from the Created VPC 
 CloudForcePublic: Type: AWS::EC2::Subnet Properties: VpcId: !Ref CloudForceVPC CidrBlock: 172.16.0.0/20 AvailabilityZone: us-east-1a MapPublicIpOnLaunch: true Tags: - Key: Name Value: CloudForcePublic CloudForcePrivate: Type: AWS::EC2::Subnet Properties: VpcId: !Ref CloudForceVPC CidrBlock: 172.16.128.0/20 AvailabilityZone: us-east-1a MapPublicIpOnLaunch: false Tags: - Key: Name Value: CloudForcePrivate
Enter fullscreen mode Exit fullscreen mode

The Internet Gateway 

 InternetGateway: Type: AWS::EC2::InternetGateway Properties: Tags: - Key: Name Value: CloudForceIG
Enter fullscreen mode Exit fullscreen mode

Attach the Internet Gateway 

 AttachGateway: Type: AWS::EC2::VPCGatewayAttachment Properties: VpcId: !Ref CloudForceVPC InternetGatewayId: !Ref InternetGateway
Enter fullscreen mode Exit fullscreen mode

Create a route table 

 RouteTablePublic: Type: AWS::EC2::RouteTable Properties: VpcId: !Ref CloudForceVPC Tags: - Key: Name Value: PublicRouteTable
Enter fullscreen mode Exit fullscreen mode

Create a Public Route 

 PublicRoute1: Type: AWS::EC2::Route Properties: RouteTableId: !Ref RouteTablePublic DestinationCidrBlock: 0.0.0.0/0 GatewayId: !Ref InternetGateway
Enter fullscreen mode Exit fullscreen mode

Associate the Route to the public subnet 

 AssociatePublic1: Type: AWS::EC2::SubnetRouteTableAssociation Properties: SubnetId: !Ref CloudForcePublic RouteTableId: !Ref RouteTablePublic
Enter fullscreen mode Exit fullscreen mode

Now Create the Instance 

 MyInstance: Type: AWS::EC2::Instance Properties: ImageId: ami-02396cdd13e9a1257 InstanceType: t2.micro SecurityGroupIds: - !Ref InstanceSecurityGroup KeyName: my-key-pair UserData: !Base64 | #!/bin/bash yum update -y yum install -y httpd git systemctl start httpd systemctl enable httpd cd /var/www/html rm -rf * git clone https://github.com/lewisawe/cloudForceWebSawe.git . systemctl restart httpd Tags: - Key: Name Value: CloudForceEC2
Enter fullscreen mode Exit fullscreen mode

With the Instance security Group 

 InstanceSecurityGroup: Type: 'AWS::EC2::SecurityGroup' Properties: GroupDescription: Enable SSH and HTTP access via port 22 and SecurityGroupIngress: - IpProtocol: tcp FromPort: 22 ToPort: 22 CidrIp: 0.0.0.0/0 - IpProtocol: tcp FromPort: 80 ToPort: 80 CidrIp: 0.0.0.0/0
Enter fullscreen mode Exit fullscreen mode

Deploy the template with CLI 

aws cloudformation create-stack --stack-name CloudForceStack --template-body file://CloudForce/challenge004/challenge.yaml
Enter fullscreen mode Exit fullscreen mode

Confirm it works

CloudForce Sky Website

Delete The stack 

aws cloudformation delete-stack \ --stack-name CloudForceStack
Enter fullscreen mode Exit fullscreen mode

References

GitHub Cloudformation Template

https://github.com/lewisawe/CloudForce/blob/main/challenge004

Sample CloudForce Sky Website Code

https://github.com/lewisawe/cloudForceWebSawe

Top comments (0)