DEV Community

LEWIS SAWE
LEWIS SAWE

Posted on

Implementing CloudFormation to deploy infrastructure

#cloud #aws #devops

Challenge Question: Automating Infrastructure Deployment on AWS

This weeks Challenge is to create AWS Cloud Resources using a Cloudformation template and CLI tools.

The Resources Created are:

  • A VPC with a public and Private Subnet
  • An internet Gateway
  • A security Group
  • An EC2 instance that boots up with a sample web application

The CloudFormation Template

we would be using a .yaml file template
Start Creating the stack with

AWSTemplateFormatVersion: '2010-09-09'
Description: CloudForce 004

Resources:
Enter fullscreen mode Exit fullscreen mode

Now we are going to specify the resources

To Create a VPC

  • The Properties specified are for the CIDR Block and enabling DNS with the name of the VPC as CloudForceVPC 
  CloudForceVPC:
    Type: AWS::EC2::VPC
    Properties:
      CidrBlock: 172.16.0.0/16
      EnableDnsSupport: true
      EnableDnsHostnames: true
      Tags:
        - Key: Name
          Value: CloudForceVPC
Enter fullscreen mode Exit fullscreen mode

My key pair 

  MyKeyPair:
    Type: AWS::EC2::KeyPair
    Properties:
      KeyName: my-key-pair
Enter fullscreen mode Exit fullscreen mode

The Subnets

  • My public and Private divided into 2 cidr blocks and AZs of US-East-1a.
  • Also references from the Created VPC 
  CloudForcePublic:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref CloudForceVPC
      CidrBlock: 172.16.0.0/20
      AvailabilityZone: us-east-1a
      MapPublicIpOnLaunch: true
      Tags:
        - Key: Name
          Value: CloudForcePublic

  CloudForcePrivate:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref CloudForceVPC
      CidrBlock: 172.16.128.0/20
      AvailabilityZone: us-east-1a
      MapPublicIpOnLaunch: false
      Tags:
        - Key: Name
          Value: CloudForcePrivate
Enter fullscreen mode Exit fullscreen mode

The Internet Gateway 

  InternetGateway:
    Type: AWS::EC2::InternetGateway
    Properties:
      Tags:
        - Key: Name
          Value: CloudForceIG
Enter fullscreen mode Exit fullscreen mode

Attach the Internet Gateway 

  AttachGateway:
    Type: AWS::EC2::VPCGatewayAttachment
    Properties:
      VpcId: !Ref CloudForceVPC
      InternetGatewayId: !Ref InternetGateway
Enter fullscreen mode Exit fullscreen mode

Create a route table 

  RouteTablePublic:
    Type: AWS::EC2::RouteTable
    Properties:
      VpcId: !Ref CloudForceVPC
      Tags:
        - Key: Name
          Value: PublicRouteTable
Enter fullscreen mode Exit fullscreen mode

Create a Public Route 

  PublicRoute1:
    Type: AWS::EC2::Route
    Properties:
      RouteTableId: !Ref RouteTablePublic
      DestinationCidrBlock: 0.0.0.0/0
      GatewayId: !Ref InternetGateway
Enter fullscreen mode Exit fullscreen mode

Associate the Route to the public subnet 

  AssociatePublic1:
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      SubnetId: !Ref CloudForcePublic
      RouteTableId: !Ref RouteTablePublic
Enter fullscreen mode Exit fullscreen mode

Now Create the Instance 

  MyInstance:
    Type: AWS::EC2::Instance
    Properties:
      ImageId: ami-02396cdd13e9a1257
      InstanceType: t2.micro
      SecurityGroupIds:
        - !Ref InstanceSecurityGroup
      KeyName: my-key-pair
      UserData: !Base64 | 
        #!/bin/bash
        yum update -y
        yum install -y httpd git
        systemctl start httpd
        systemctl enable httpd
        cd /var/www/html
        rm -rf *
        git clone https://github.com/lewisawe/cloudForceWebSawe.git .
        systemctl restart httpd
      Tags:
        - Key: Name
          Value: CloudForceEC2
Enter fullscreen mode Exit fullscreen mode

With the Instance security Group 

  InstanceSecurityGroup:
    Type: 'AWS::EC2::SecurityGroup'
    Properties:
      GroupDescription: Enable SSH and HTTP access via port 22 and
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: 0.0.0.0/0
Enter fullscreen mode Exit fullscreen mode

Deploy the template with CLI 

aws cloudformation create-stack --stack-name CloudForceStack --template-body file://CloudForce/challenge004/challenge.yaml
Enter fullscreen mode Exit fullscreen mode

Confirm it works

CloudForce Sky Website

Delete The stack 

aws cloudformation delete-stack \
    --stack-name CloudForceStack
Enter fullscreen mode Exit fullscreen mode

References

GitHub Cloudformation Template

https://github.com/lewisawe/CloudForce/blob/main/challenge004

Sample CloudForce Sky Website Code

https://github.com/lewisawe/cloudForceWebSawe

Top comments (0)

Read next

danial profile image

Effective Strategies for Application Monitoring in AWS

Danial Ranjha -

hana_sato profile image

Talend vs. Apache Kafka: Which Data Tool Drives Better Business Insights?

Hana Sato -

bhaveshgohel profile image

🚀 Key Takeaways from Dr. Werner Vogels' Keynote at AWS re:Invent 2024 🌍

Bhavesh Gohel -

bhatnagargargee profile image

Streaming of Desktop Applications Securely on Web Browser Using Amazon AppStream 2.0

GargeeBhatnagar -