Chinaunix首页 | 论坛 | 博客

whenexpert1.blog.chinaunix.net

首页　| 　博文目录　| 　关于我

expert1

  • 博客访问： 1066130
  • 博文数量： 186
  • 博客积分： 4939
  • 博客等级： 上校
  • 技术积分： 2075
  • 用 户 组： 普通用户
  • 注册时间： 2010-04-08 17:15
文章分类

全部博文（186）

文章存档

2018年（1）

2017年（3）

2016年（11）

2015年（42）

2014年（21）

2013年（9）

2012年（18）

2011年（46）

2010年（35）

我的朋友
最近访客
推荐博文
相关博文
AWS:CloudFormation 一日速成

分类： 系统运维

2016-07-29 22:10:04

漫笔：
    1.  CloudFormation 官方啰嗦一大堆，其实就是根据amazon提供的API和规则编写json文件（stack)来实现自动创建各种资源如vpc/ec2/rds等。然后实现 infrastcture as code，就是把基础设施用code来实现，当然这是在云时代才可行的哦。BTW, 阿里云也推出了类似的工具叫资源编排(名字好奇怪啊），几乎是个拷贝，估计是方便AWS用户迁移到阿里云上吧，兼容性极好，学习起来也是零成本^_^。

    2. 好处：非常的方便，当然也包括删除资源，除非你后来手工做了改动比如加了某个Instance到自动创建的subnet,此时delete会报错（有依赖关系），不过当你手动删掉你之前手工创建的资源后，再次删除delete stack就可以了。建议既然用CF了，就不要人工的去做了。

    3. 所有的stack在console能实现的，都有对应的命令行工具。

    4. 当你创建了stack policy的时候某些资源做了限制。只有满足条件才能update等。

    5. changeset: 当stack执行完毕，若update,此时无需删除stack重来，只需修改tempalte,然后创建changset后执行即可，比如修改instance的type。但可能会造成中断等。

    6. stack分组，比如website/database,这样不影响，然后nested stack，比如把loadbalancer单独当做一个stack.如下

{
    "AWSTemplateFormatVersion" : "2010-09-09",
    "Resources" : {
        "myStackWithParams" : {
             "Type" : "AWS::CloudFormation::Stack",
           "Properties" : {
               "TemplateURL" : "https://s3.amazonaws.com/xxx/elb.template",
               "Parameters" : {
                   "InstanceType" : "t2.micro",
                   "KeyName" : "mykey"
               }
              }
        }
    }
}

##########  一个stack的大致结构  ########################
{
  "AWSTemplateFormatVersion" : "version date",

  "Description" : "JSON string",

  "Metadata" : {
    template metadata
  },

  "Parameters" : {  # 输入参数，有参数类型string等，default值，长度，以及[a-zA-Z0-9]来约束，多选，No echo(针对密码）等。还有一些aws-specfic
    set of parameters
  },

  "Mappings" : {    # 映射关系，太长懒得解释了，基本上就类似一个环境变量，多跟Fn::FindInMap结合，看官方文档吧，或者看我的代码。
    set of mappings
  },

  "Conditions" : {  # 比如你有2个环境dev/prod，假如prod的话可能需要多几个ec2，那么可以parameter来指定condition，然后resource来标记，多跟and/equals/if/not/or几个函数一起，不废话，看例子1
    set of conditions
  },

  "Resources" : {   # 这个必须有，不多说了，基本就是各种资源了比如AWS::EC2::Instance这种。
    set of resources
  },

  "Outputs" : {   # 顾名思义
    set of outputs
  }
}


例1:
{
  "AWSTemplateFormatVersion" : "2010-09-09",
  "Parameters" : {
    "EnvType" : {
      "Description" : "Environment type.",
      "Default" : "test",
      "Type" : "String",
      "AllowedValues" : ["prod", "test"],
      "ConstraintDescription" : "must specify prod or test."
    }
  },
 
  "Conditions" : {
    "CreateProdResources" : {"Fn::Equals" : [{"Ref" : "EnvType"}, "prod"]},
     "CreateDevResources" : {"Fn::Not": [{"Fn::Equals" : [{"Ref" : "DBSnapshotName"}, ""]}]}
  },

  },
 
  "Resources" : {
    "EC2Instance" : {
      "Type" : "AWS::EC2::Instance",
      #  省略7788的一堆
    },

  "xxxx":{

       "DBSnapshotIdentifier" : {
          "Fn::If" : [
            ""CreateDevResources" ",                  # 跟资源结合
            {"Ref" : "DBSnapshotName"},
          ]
        }
}
    
    "MountPoint" : {
      "Type" : "AWS::EC2::VolumeAttachment",
      "Condition" : "CreateProdResources",
      "Properties" : {
        "InstanceId" : { "Ref" : "EC2Instance" },
        "Device" : "/dev/sdh"
      }
    }
  }
}


故障排除：

用aws cli的时候需要传递一个list，需要转义

ParameterKey=CIDR,ParameterValue='10.10.0.0/16\,10.10.0.0/24\,10.10.1.0/24'

现在附上我写的一个,本意是创建一个vpc/2 subnets，若干securitygroup,internet gateway, route table。然后一个opsman和nat box这2个instance在public subnet, private subnet的通过nat box上网，还有ELB等资源。当然我添加了若干注释是没用到的，仅仅是为了做笔记，实际上json不允许有任何注释。

  1. {
  2.     "AWSTemplateFormatVersion": "2010-09-09",
  3.     "Description": "Initilize Network infrastructure which hosted OpsManger/natbox for China",
  4.     "Parameters": {
  5.         "KeyName": {
  6.             "Description": "Name of an existing EC2 KeyPair to enable SSH access to the instances",
  7.             "Type": "AWS::EC2::KeyPair::KeyName"
  8.         },
  9.         "SshFrom": {
  10.             "Description": "ip range that could be access OpsManager (default can be accessible anywhere)",
  11.             "Type": "String",
  12.             "MinLength": "9",
  13.             "MaxLength": "18",
  14.             "Default": "0.0.0.0/0",
  15.             "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
  16.             "ConstraintDescription": "must be a valid CIDR range of the form x.x.x.x/x."
  17.         },
  18.         "RdsDBName": {
  19.             "Type": "String",
  20.             "MinLength": "4",
  21.             "Default": "bosh",
  22.             "Description": "BOSH database name"
  23.         },
  24.         "RdsUsername": {
  25.             "Type": "String",
  26.             "Description": "BOSH database username"
  27.         },
  28.         "RdsPassword": {
  29.             "Type": "String",
  30.             "NoEcho": "true",
  31.             "MinLength": "8",
  32.             "Description": "BOSH database password"
  33.         },
  34.         "SSLCertARN": {
  35.             "Type": "String",
  36.             "Description": "ARN for pre-uploaded SSL certificate"
  37.         },
  38.         "NATInstanceType": {
  39.             "Description": "Nat Box EC2 instance type",
  40.             "Type": "String",
  41.             "Default": "m3.large",
  42.             "AllowedValues": [
  43.                 "t2.micro",
  44.                 "t2.small",
  45.                 "t2.medium",
  46.                 "t2.large",
  47.                 "m1.small",
  48.                 "m1.medium",
  49.                 "m1.large",
  50.                 "m1.xlarge",
  51.                 "m2.xlarge",
  52.                 "m2.2xlarge",
  53.                 "m2.4xlarge",
  54.                 "m3.medium",
  55.                 "m3.large",
  56.                 "m3.xlarge",
  57.                 "m3.2xlarge",
  58.                 "m4.large",
  59.                 "m4.xlarge",
  60.                 "m4.2xlarge",
  61.                 "m4.4xlarge",
  62.                 "m4.10xlarge",
  63.                 "c1.medium",
  64.                 "c1.xlarge",
  65.                 "c3.large",
  66.                 "c3.xlarge",
  67.                 "c3.2xlarge",
  68.                 "c3.4xlarge",
  69.                 "c3.8xlarge",
  70.                 "c4.large",
  71.                 "c4.xlarge",
  72.                 "c4.2xlarge",
  73.                 "c4.4xlarge",
  74.                 "c4.8xlarge",
  75.                 "g2.2xlarge",
  76.                 "g2.8xlarge",
  77.                 "r3.large",
  78.                 "r3.xlarge",
  79.                 "r3.2xlarge",
  80.                 "r3.4xlarge",
  81.                 "r3.8xlarge",
  82.                 "i2.xlarge",
  83.                 "i2.2xlarge",
  84.                 "i2.4xlarge",
  85.                 "i2.8xlarge",
  86.                 "d2.xlarge",
  87.                 "d2.2xlarge",
  88.                 "d2.4xlarge",
  89.                 "d2.8xlarge",
  90.                 "hi1.4xlarge",
  91.                 "hs1.8xlarge",
  92.                 "cr1.8xlarge",
  93.                 "cc2.8xlarge",
  94.                 "cg1.4xlarge"
  95.             ],
  96.             "ConstraintDescription": "must be a valid EC2 instance type."
  97.         },
  98.         "OpsmanInstanceType": {
  99.             "Description": "ops manager EC2 instance type",
  100.             "Type": "String",
  101.             "Default": "m3.large",
  102.             "AllowedValues": [
  103.                 "t2.micro",
  104.                 "t2.small",
  105.                 "t2.medium",
  106.                 "t2.large",
  107.                 "m1.small",
  108.                 "m1.medium",
  109.                 "m1.large",
  110.                 "m1.xlarge",
  111.                 "m2.xlarge",
  112.                 "m2.2xlarge",
  113.                 "m2.4xlarge",
  114.                 "m3.medium",
  115.                 "m3.large",
  116.                 "m3.xlarge",
  117.                 "m3.2xlarge",
  118.                 "m4.large",
  119.                 "m4.xlarge",
  120.                 "m4.2xlarge",
  121.                 "m4.4xlarge",
  122.                 "m4.10xlarge",
  123.                 "c1.medium",
  124.                 "c1.xlarge",
  125.                 "c3.large",
  126.                 "c3.xlarge",
  127.                 "c3.2xlarge",
  128.                 "c3.4xlarge",
  129.                 "c3.8xlarge",
  130.                 "c4.large",
  131.                 "c4.xlarge",
  132.                 "c4.2xlarge",
  133.                 "c4.4xlarge",
  134.                 "c4.8xlarge",
  135.                 "g2.2xlarge",
  136.                 "g2.8xlarge",
  137.                 "r3.large",
  138.                 "r3.xlarge",
  139.                 "r3.2xlarge",
  140.                 "r3.4xlarge",
  141.                 "r3.8xlarge",
  142.                 "i2.xlarge",
  143.                 "i2.2xlarge",
  144.                 "i2.4xlarge",
  145.                 "i2.8xlarge",
  146.                 "d2.xlarge",
  147.                 "d2.2xlarge",
  148.                 "d2.4xlarge",
  149.                 "d2.8xlarge",
  150.                 "hi1.4xlarge",
  151.                 "hs1.8xlarge",
  152.                 "cr1.8xlarge",
  153.                 "cc2.8xlarge",
  154.                 "cg1.4xlarge"
  155.             ],
  156.             "ConstraintDescription": "must be a valid EC2 instance type."
  157.         }
  158.     },
  159.     "Mappings": {
  160.         "Region2VPC": {
  161.             "us-east-1": {
  162.                 "VPC": "10.0.0.0/16",
  163.                 "Public": "10.0.10.0/24",
  164.                 "Private": "10.0.11.0/24"
  165.             },
  166.             "cn-north-1": {
  167.                 "VPC": "10.0.0.0/16",
  168.                 "Public": "10.0.10.0/24",
  169.                 "Private": "10.0.80.0/20",
  170.                 "Rds1": "10.0.3.0/24",
  171.                 "Rds2": "10.0.2.0/24"
  172.             }
  173.         },
  174.         "ArnSuffix": {
  175.             "us-east-1": {"Value": "aws"},
  176.             "cn-north-1": {"Value": "aws-cn"}
  177.         },
  178.         "AWSNATAMI": {
  179.             "us-east-1": {
  180.                 "AMI": "ami-c6699baf"
  181.             },
  182.             "us-west-2": {
  183.                 "AMI": "ami-52ff7262"
  184.             },
  185.             "us-west-1": {
  186.                 "AMI": "ami-3bcc9e7e"
  187.             },
  188.             "cn-north-1": {
  189.                 "AMI": "ami-1848da21"
  190.             }
  191.         },
  192.         "AWSInstanceType2Arch": {
  193.             "t1.micro": {
  194.                 "Arch": "64"
  195.             },
  196.             "m1.small": {
  197.                 "Arch": "64"
  198.             },
  199.             "m1.medium": {
  200.                 "Arch": "64"
  201.             },
  202.             "m1.large": {
  203.                 "Arch": "64"
  204.             },
  205.             "m1.xlarge": {
  206.                 "Arch": "64"
  207.             },
  208.             "m2.xlarge": {
  209.                 "Arch": "64"
  210.             },
  211.             "m2.2xlarge": {
  212.                 "Arch": "64"
  213.             },
  214.             "m2.4xlarge": {
  215.                 "Arch": "64"
  216.             },
  217.             "m3.large": {
  218.                 "Arch": "64"
  219.             },
  220.             "m3.xlarge": {
  221.                 "Arch": "64"
  222.             },
  223.             "m3.2xlarge": {
  224.                 "Arch": "64"
  225.             },
  226.             "c1.medium": {
  227.                 "Arch": "64"
  228.             },
  229.             "c1.xlarge": {
  230.                 "Arch": "64"
  231.             },
  232.             "cc1.4xlarge": {
  233.                 "Arch": "64Cluster"
  234.             },
  235.             "cc2.8xlarge": {
  236.                 "Arch": "64Cluster"
  237.             },
  238.             "cg1.4xlarge": {
  239.                 "Arch": "64GPU"
  240.             }
  241.         },
  242.         "AWSRegionArch2AMI": {
  243.             "us-east-1": {
  244.                 "32": "ami-a0cd60c9",
  245.                 "64": "ami-aecd60c7"
  246.             },
  247.             "us-west-2": {
  248.                 "32": "ami-46da5576",
  249.                 "64": "ami-48da5578"
  250.             },
  251.             "us-west-1": {
  252.                 "32": "ami-7d4c6938",
  253.                 "64": "ami-734c6936"
  254.             },
  255.             "cn-north-1": {
  256.                 "32": "N/A",
  257.                 "64": "ami-2e02c843"
  258.             }
  259.         }
  260.     },
  261.     "Resources": {
  262.         "VPC": {
  263.             "Type": "AWS::EC2::VPC",
  264.             "Properties": {
  265.                 "CidrBlock": {
  266.                     "Fn::FindInMap": [
  267.                         "Region2VPC",
  268.                         {
  269.                             "Ref": "AWS::Region"
  270.                         },
  271.                         "VPC"
  272.                     ]
  273.                 },
  274.                 "Tags": [
  275.                     {
  276.                         "Key": "Name",
  277.                         "Value": {
  278.                             "Ref": "AWS::StackName"
  279.                         }
  280.                     }
  281.                 ]
  282.             }
  283.         },
  284.         "PublicSubnet": {
  285.             "Type": "AWS::EC2::Subnet",
  286.             "Properties": {
  287.                 "VpcId": {
  288.                     "Ref": "VPC"
  289.                 },
  290.                 "CidrBlock": {
  291.                     "Fn::FindInMap": [
  292.                         "Region2VPC",
  293.                         {
  294.                             "Ref": "AWS::Region"
  295.                         },
  296.                         "Public"
  297.                     ]
  298.                 },
  299.                 "AvailabilityZone": {
  300.                     "Fn::Select": [
  301.                         "0",
  302.                         {
  303.                             "Fn::GetAZs": {
  304.                                 "Ref": "AWS::Region"
  305.                             }
  306.                         }
  307.                     ]
  308.                 },
  309.                 "Tags": [
  310.                     {
  311.                         "Key": "Name",
  312.                         "Value": {
  313.                             "Ref": "AWS::StackName"
  314.                         }
  315.                     },
  316.                     {
  317.                         "Key": "Network",
  318.                         "Value": "Public"
  319.                     }
  320.                 ]
  321.             }
  322.         },
  323.         "InternetGateway": {
  324.             "Type": "AWS::EC2::InternetGateway",
  325.             "Properties": {
  326.                 "Tags": [
  327.                     {
  328.                         "Key": "Name",
  329.                         "Value": {
  330.                             "Ref": "AWS::StackName"
  331.                         }
  332.                     },
  333.                     {
  334.                         "Key": "Network",
  335.                         "Value": "Public"
  336.                     }
  337.                 ]
  338.             }
  339.         },
  340.         "GatewayToInternet": {
  341.             "Type": "AWS::EC2::VPCGatewayAttachment",
  342.             "Properties": {
  343.                 "VpcId": {
  344.                     "Ref": "VPC"
  345.                 },
  346.                 "InternetGatewayId": {
  347.                     "Ref": "InternetGateway"
  348.                 }
  349.             }
  350.         },
  351.         "PublicRouteTable": {
  352.             "Type": "AWS::EC2::RouteTable",
  353.             "Properties": {
  354.                 "VpcId": {
  355.                     "Ref": "VPC"
  356.                 },
  357.                 "Tags": [
  358.                     {
  359.                         "Key": "Name",
  360.                         "Value": {
  361.                             "Ref": "AWS::StackName"
  362.                         }
  363.                     },
  364.                     {
  365.                         "Key": "Network",
  366.                         "Value": "Public"
  367.                     }
  368.                 ]
  369.             }
  370.         },
  371.         "PublicRoute": {
  372.             "Type": "AWS::EC2::Route",
  373.             "DependsOn": "GatewayToInternet",
  374.             "Properties": {
  375.                 "RouteTableId": {
  376.                     "Ref": "PublicRouteTable"
  377.                 },
  378.                 "DestinationCidrBlock": "0.0.0.0/0",
  379.                 "GatewayId": {
  380.                     "Ref": "InternetGateway"
  381.                 }
  382.             }
  383.         },
  384.         "PublicSubnetRouteTableAssociation": {
  385.             "Type": "AWS::EC2::SubnetRouteTableAssociation",
  386.             "Properties": {
  387.                 "SubnetId": {
  388.                     "Ref": "PublicSubnet"
  389.                 },
  390.                 "RouteTableId": {
  391.                     "Ref": "PublicRouteTable"
  392.                 }
  393.             }
  394.         },
  395.         "PrivateSubnet": {
  396.             "Type": "AWS::EC2::Subnet",
  397.             "Properties": {
  398.                 "VpcId": {
  399.                     "Ref": "VPC"
  400.                 },
  401.                 "CidrBlock": {
  402.                     "Fn::FindInMap": [
  403.                         "Region2VPC",
  404.                         {
  405.                             "Ref": "AWS::Region"
  406.                         },
  407.                         "Private"
  408.                     ]
  409.                 },
  410.                 "AvailabilityZone": {
  411.                     "Fn::Select": [
  412.                         "1",
  413.                         {
  414.                             "Fn::GetAZs": {
  415.                                 "Ref": "AWS::Region"
  416.                             }
  417.                         }
  418.                     ]
  419.                 },
  420.                 "Tags": [
  421.                     {
  422.                         "Key": "Name",
  423.                         "Value": {
  424.                             "Ref": "AWS::StackName"
  425.                         }
  426.                     },
  427.                     {
  428.                         "Key": "Network",
  429.                         "Value": "Private"
  430.                     }
  431.                 ]
  432.             }
  433.         },
  434.         "PrivateRouteTable": {
  435.             "Type": "AWS::EC2::RouteTable",
  436.             "Properties": {
  437.                 "VpcId": {
  438.                     "Ref": "VPC"
  439.                 },
  440.                 "Tags": [
  441.                     {
  442.                         "Key": "Name",
  443.                         "Value": {
  444.                             "Ref": "AWS::StackName"
  445.                         }
  446.                     },
  447.                     {
  448.                         "Key": "Network",
  449.                         "Value": "Private"
  450.                     }
  451.                 ]
  452.             }
  453.         },
  454.         "PrivateSubnetRouteTableAssociation": {
  455.             "Type": "AWS::EC2::SubnetRouteTableAssociation",
  456.             "Properties": {
  457.                 "SubnetId": {
  458.                     "Ref": "PrivateSubnet"
  459.                 },
  460.                 "RouteTableId": {
  461.                     "Ref": "PrivateRouteTable"
  462.                 }
  463.             }
  464.         },
  465.         "PrivateRoute": {
  466.             "Type": "AWS::EC2::Route",
  467.             "Properties": {
  468.                 "RouteTableId": {
  469.                     "Ref": "PrivateRouteTable"
  470.                 },
  471.                 "DestinationCidrBlock": "0.0.0.0/0",
  472.                 "InstanceId": {
  473.                     "Ref": "NatBox"
  474.                 }
  475.             }
  476.         },
  477.         "NATIPAddress": {
  478.             "Type": "AWS::EC2::EIP",
  479.             "DependsOn": "GatewayToInternet",
  480.             "Properties": {
  481.                 "Domain": "vpc",
  482.                 "InstanceId": {
  483.                     "Ref": "NatBox"
  484.                 }
  485.             }
  486.         },
  487.         "NatBox": {
  488.             "Type": "AWS::EC2::Instance",
  489.             "Properties": {
  490.                 "InstanceType": {
  491.                     "Ref": "NATInstanceType"
  492.                 },
  493.                 "KeyName": {
  494.                     "Ref": "KeyName"
  495.                 },
  496.                 "SubnetId": {
  497.                     "Ref": "PublicSubnet"
  498.                 },
  499.                 "SourceDestCheck": "false",
  500.                 "ImageId": {
  501.                     "Fn::FindInMap": [
  502.                         "AWSNATAMI",
  503.                         {
  504.                             "Ref": "AWS::Region"
  505.                         },
  506.                         "AMI"
  507.                     ]
  508.                 },
  509.                 "SecurityGroupIds": [
  510.                     {
  511.                         "Ref": "NATSecurityGroup"
  512.                     }
  513.                 ],
  514.                 "Tags": [
  515.                     {
  516.                         "Key": "Name",
  517.                         "Value": "Nat-Box-CN"
  518.                     }
  519.                 ]
  520.             }
  521.         },
  522.         "NATSecurityGroup": {
  523.             "Type": "AWS::EC2::SecurityGroup",
  524.             "Properties": {
  525.                 "GroupDescription": "Enable internal access to the NAT Box",
  526.                 "VpcId": {
  527.                     "Ref": "VPC"
  528.                 },
  529.                 "SecurityGroupIngress": [
  530.                     {
  531.                         "CidrIp": {
  532.                             "Fn::FindInMap": [
  533.                                 "Region2VPC",
  534.                                 {
  535.                                     "Ref": "AWS::Region"
  536.                                 },
  537.                                 "VPC"
  538.                             ]
  539.                         },
  540.                         "IpProtocol": "-1"
  541.                     }
  542.                 ]
  543.             }
  544.         },
  545.         "OpsManagerIPAddress": {
  546.             "Type": "AWS::EC2::EIP",
  547.             "DependsOn": "GatewayToInternet",
  548.             "Properties": {
  549.                 "Domain": "vpc",
  550.                 "InstanceId": {
  551.                     "Ref": "OpsMananger"
  552.                 }
  553.             }
  554.         },
  555.         "OpsMananger": {
  556.             "Type": "AWS::EC2::Instance",
  557. ######################################################### Metadata 被cfn-init 调用 #######################
  558.     "Metadata": {
  559.       "AWS::CloudFormation::Init": {
  560.         "configSets": {
  561.           "MyConfigSet": [
  562.             "Set1",
  563.             "Set2"
  564.           ]
  565.         },
  566.         "Set1": {
  567.           "packages": {
  568.             "yum": {
  569.               "php": [],
  570.               "mysql": []
  571.             }
  572.           },

  574.           "commands": {
  575.             "01command": {
  576.               "command": {
  577.                 "Fn::Join": [
  578.                   "",
  579.                   [
  580.                     {
  581.                       "Ref": "xxxxx"
  582.                     },
  583.                     "abcd"
  584.                   ]
  585.                 ]
  586.               },
  587.               "test": {}
  588.             }
  589.           },
  590.           "files": {
  591.             "File1": {
  592.               "content": {
  593.                 "Fn::Join": [
  594.                   "",
  595.                   [
  596.                     "ABC\n"
  597.                   ]
  598.                 ]
  599.               },
  600.               "mode": "000400",
  601.               "owner": "root",
  602.               "group": "root"
  603.             },
  604.             "File2": {
  605.      "source": {
  606.               "Fn::Join": [
  607.                 "",
  608.                 [
  609.                   "https://s3.amazonaws.com/",
  610.                   {
  611.                     "Ref": "PrivateBucket"
  612.                   },
  613.                   "/id_rsa.pub"
  614.                 ]
  615.               ]
  616.             },
  617.             "mode": "000500",
  618.             "owner": "root",
  619.             "group": "root",
  620.             "authentication": "S3AccessCreds"}
  621.           },
  622.           "services": {
  623.             "sysvinit": {
  624.               "Service1": {
  625.                 "enable": "true",
  626.                 "ensureRunning": "true",
  627.                 "files": [
  628.                   "file_confg"
  629.                 ]
  630.               }
  631.             }
  632.           }
  633.         },
  634.         "Set2": {},
  635.                     "AWS::CloudFormation::Authentication": {
  636.                         "S3AccessCreds": {
  637.                             "type": "S3",
  638.                             "accessKeyId": {
  639.                                 "Ref": "IamUserAccessKey"
  640.                             },
  641.                             "secretKey": {
  642.                                 "Fn::GetAtt": [
  643.                                     "IamUserAccessKey",
  644.                                     "SecretAccessKey"
  645.                                 ]
  646.                             },
  647.                             "buckets": [
  648.                                 {
  649.                                     "Ref": "PrivateBucket"
  650.                                 },
  651.                                 {
  652.                                     "Ref": "PublicBucket"
  653.                                 }
  654.                             ]
  655.                         }
  656.                     }
  657.       },
  658.       "Propterties": {
  659.         "KeyName": {
  660.           "Ref": "YourKeyName"
  661.         }

  663.       },

  665.     }
  666. ######################################################
  667.             "Properties": {
  668.                 "InstanceType": {
  669.                     "Ref": "OpsmanInstanceType"
  670.                 },
  671.                 "KeyName": {
  672.                     "Ref": "KeyName"
  673.                 },

  675. ###################################################
  676.         "UserData": {
  677.           "Fn::Base64": {
  678.             "Fn::Join": [
  679.               "",
  680.               [
  681.                 "#!/bin/bash -ex\n",
  682.                 "yum update -y aws-cfn-bootstrap\n",
  683.                 "/opt/aws/bin/cfn-init -v ",
  684.                 " --stack ",
  685.                 {
  686.                   "Ref": "AWS::StackName"
  687.                 },
  688.                 " --resource OpsMananger",
  689.                 " --configsets MyconfigSet",
  690.                 " --region ",
  691.                 {
  692.                   "Ref": "AWS::Region"
  693.                 },
  694.                 "\n",
  695.                 "/opt/aws/bin/cfn-signal -e $? ",
  696.                 " --stack ",
  697.                 {
  698.                   "Ref": "AWS::StackName"
  699.                 },
  700.                 " --resource OpsMananger",
  701.                 " --region ",
  702.                 {
  703.                   "Ref": "AWS::Region"
  704.                 },
  705.                 "\n"
  706.               ]
  707.             ]
  708.           }
  709.         }
  710. ####################################

  712.  cfn-init专门来安装、配置，启动服务等，定义在上面的metadata里面，详细的介绍看http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-init.html#aws-resource-init-sources
  713. ### createpolicy接受cf-signal的信号，或者timeout,可以确保资源成功创建。目前 AWS::AutoScaling::AutoScalingGroup, AWS::EC2::Instance, and AWS::CloudFormation::WaitCondition支持。

  715. EC2/Auto Scaling建议使用。还有个waitcondition跟这个类似，但具体区别看不明白，看文档官方以后要去掉waitcondition了吧。

  717.       "CreatePolicy": {
  718.         "ResourceSignal": {
  719.           "Timeout": "PT15M"
  720.         }
  721.       }
  722. ####################################
  723.                 "SubnetId": {
  724.                     "Ref": "PublicSubnet"
  725.                 },
  726.                 "ImageId": {
  727.                     "Fn::FindInMap": [
  728.                         "AWSRegionArch2AMI",
  729.                         {
  730.                             "Ref": "AWS::Region"
  731.                         },
  732.                         {
  733.                             "Fn::FindInMap": [
  734.                                 "AWSInstanceType2Arch",
  735.                                 {
  736.                                     "Ref": "OpsmanInstanceType"
  737.                                 },
  738.                                 "Arch"
  739.                             ]
  740.                         }
  741.                     ]
  742.                 },
  743.                 "Tags": [
  744.                     {
  745.                         "Key": "Name",
  746.                         "Value": "OpsManager"
  747.                     }
  748.                 ],
  749.                 "SecurityGroupIds": [
  750.                     {
  751.                         "Ref": "OpsManSecurityGroup"
  752.                     }
  753.                 ]
  754.             }
  755.         },
  756. ######################################## Auto Scaling ######################
  757.   "WebServerGroup": {
  758.     "Type": "AWS::AutoScaling::AutoScalingGroup",
  759.     "Properties": {
  760.       "AvailabilityZones": {
  761.         "Fn::GetAZs": ""
  762.       },
  763.       "LaunchConfigurationName": {
  764.         "Ref": "LaunchConfig"
  765.       },
  766.       "MinSize": "1",
  767.       "MaxSize": "5",
  768.       "DesiredCapacity": {
  769.         "Ref": "WebServerCapacity"
  770.       },
  771.       "LoadBalancerNames": [
  772.         {
  773.           "Ref": "PublicElasticLoadBalancer"
  774.         }
  775.       ]
  776.     },
  777.     "CreationPolicy": {
  778.       "ResourceSignal": {
  779.         "Timeout": "PT30M"
  780.       }
  781.     },
  782.     "UpdatePolicy": {
  783.       "AutoScalingRollingUpdate": {
  784.         "MinInstancesInService": "1",
  785.         "MaxBatchSize": "1",
  786.         "PauseTime": "PT30M",
  787.         "WaitOnResourceSignals": "true"
  788.       }
  789.     }
  790.   },
  791.   "LaunchConfig": {
  792.     "Type": "AWS::AutoScaling::LaunchConfiguration",
  793.     "Metadata": {
  794.       "AWS::CloudFormation::Init": { #也可以设置 metadata来初始化
  795.         "configSets": {
  796.           "xxxx": []
  797.         },
  798.         "xxx": {
  799.           "files": {}
  800.         }
  801.       }
  802.     },
  803. "Properties":{
  804.   "ImageId": {},
  805.   "InstanceType": {},
  806.   "SecurityGroups": [
  807.     {}
  808.   ],
  809.   "KeyName": {},
  810.   "UserData": {
  811.     "Fn::Base64": {
  812.       "Fn::Join": [
  813.         "",
  814.         [
  815.           "#!/bin/bash -xe\n",
  816.           "yum update -y aws-cfn-bootstrap\n",
  817.           "/opt/aws/bin/cfn-init -v ",
  818.           " --stack ",
  819.           {
  820.             "Ref": "AWS::StackId"
  821.           },
  822.           " --resource LaunchConfig ",
  823.           " --configsets full_install ",
  824.           " --region ",
  825.           {
  826.             "Ref": "AWS::Region"
  827.           },
  828.           "\n",
  829.           "/opt/aws/bin/cfn-signal -e $? ",
  830.           " --stack ",
  831.           {
  832.             "Ref": "AWS::StackId"
  833.           },
  834.           " --resource WebServerGroup ",
  835.           " --region ",
  836.           {
  837.             "Ref": "AWS::Region"
  838.           },
  839.           "\n"
  840.         ]
  841.       ]
  842.     }
  843.   }
  844. }
  845.   }
  846. ##################### Auto Scaling ##############

  848.         "OpsManSecurityGroup": {
  849.             "Type": "AWS::EC2::SecurityGroup",
  850.             "Properties": {
  851.                 "GroupDescription": "Enable access to the OpsManager ",
  852.                 "VpcId": {
  853.                     "Ref": "VPC"
  854.                 },
  855.                 "SecurityGroupIngress": [
  856.                     {
  857.                         "IpProtocol": "tcp",
  858.                         "FromPort": "22",
  859.                         "ToPort": "22",
  860.                         "CidrIp": {
  861.                             "Ref": "SshFrom"
  862.                         }
  863.                     },
  864.                     {
  865.                         "IpProtocol": "tcp",
  866.                         "FromPort": "80",
  867.                         "ToPort": "80",
  868.                         "CidrIp": {
  869.                             "Ref": "SshFrom"
  870.                         }
  871.                     },
  872.                     {
  873.                         "IpProtocol": "tcp",
  874.                         "FromPort": "443",
  875.                         "ToPort": "443",
  876.                         "CidrIp": {
  877.                             "Ref": "SshFrom"
  878.                         }
  879.                     },
  880.                     {
  881.                         "IpProtocol": "tcp",
  882.                         "FromPort": "25555",
  883.                         "ToPort": "25555",
  884.                         "CidrIp": {
  885.                             "Fn::FindInMap": [
  886.                                 "Region2VPC",
  887.                                 {
  888.                                     "Ref": "AWS::Region"
  889.                                 },
  890.                                 "VPC"
  891.                             ]
  892.                         }
  893.                     },
  894.                     {
  895.                         "IpProtocol": "tcp",
  896.                         "FromPort": "6868",
  897.                         "ToPort": "6868",
  898.                         "CidrIp": {
  899.                             "Fn::FindInMap": [
  900.                                 "Region2VPC",
  901.                                 {
  902.                                     "Ref": "AWS::Region"
  903.                                 },
  904.                                 "VPC"
  905.                             ]
  906.                         }
  907.                     }
  908.                 ]
  909.             }
  910.         },
  911.         "VmsSecurityGroup": {
  912.             "Type": "AWS::EC2::SecurityGroup",
  913.             "Properties": {
  914.                 "GroupDescription": "PCF VMs Security Group",
  915.                 "VpcId": {
  916.                     "Ref": "VPC"
  917.                 },
  918.                 "SecurityGroupIngress": [
  919.                     {
  920.                         "IpProtocol": "-1",
  921.                         "CidrIp": {
  922.                             "Fn::FindInMap": [
  923.                                 "Region2VPC",
  924.                                 {
  925.                                     "Ref": "AWS::Region"
  926.                                 },
  927.                                 "VPC"
  928.                             ]
  929.                         }
  930.                     }
  931.                 ]
  932.             }
  933.         },
  934.         "MysqlSecurityGroup": {
  935.             "Type": "AWS::EC2::SecurityGroup",
  936.             "Properties": {
  937.                 "GroupDescription": "PCF MySQL Security Group",
  938.                 "VpcId": {
  939.                     "Ref": "VPC"
  940.                 },
  941.                 "SecurityGroupIngress": [
  942.                     {
  943.                         "IpProtocol": "tcp",
  944.                         "FromPort": "3306",
  945.                         "ToPort": "3306",
  946.                         "CidrIp": {
  947.                             "Fn::FindInMap": [
  948.                                 "Region2VPC",
  949.                                 {
  950.                                     "Ref": "AWS::Region"
  951.                                 },
  952.                                 "VPC"
  953.                             ]
  954.                         }
  955.                     }
  956.                 ]
  957.             }
  958.         },
  959.         "PublicElasticLoadBalancer": {
  960.             "Type": "AWS::ElasticLoadBalancing::LoadBalancer",
  961.             "Properties": {
  962.                 "LoadBalancerName": "pcf-china",
  963.                 "CrossZone": true,
  964.                 "ConnectionSettings": {
  965.                     "IdleTimeout": 3600
  966.                 },
  967.                 "SecurityGroups": [
  968.                     {
  969.                         "Ref": "PublicLoadBalancerSecurityGroup"
  970.                     }
  971.                 ],
  972.                 "Subnets": [
  973.                     {
  974.                         "Ref": "PrivateSubnet"
  975.                     }
  976.                 ],
  977.                 "Listeners": [
  978.                     {
  979.                         "LoadBalancerPort": "80",
  980.                         "InstancePort": "80",
  981.                         "Protocol": "HTTP"
  982.                     },
  983.                     {
  984.                         "LoadBalancerPort": "443",
  985.                         "InstancePort": "80",
  986.                         "Protocol": "HTTPS",
  987.                         "SSLCertificateId": {
  988.                             "Ref": "SSLCertARN"
  989.                         }
  990.                     },
  991.                     {
  992.                         "LoadBalancerPort": "4443",
  993.                         "InstancePort": "443",
  994.                         "Protocol": "SSL",
  995.                         "SSLCertificateId": {
  996.                             "Ref": "SSLCertARN"
  997.                         }
  998.                     }
  999.                 ],
  1000.                 "HealthCheck": {
  1001.                     "Target": "TCP:80",
  1002.                     "HealthyThreshold": "10",
  1003.                     "UnhealthyThreshold": "2",
  1004.                     "Interval": "30",
  1005.                     "Timeout": "6"
  1006.                 }
  1007.             }
  1008.         },
  1009.         "PublicLoadBalancerSecurityGroup": {
  1010.             "Type": "AWS::EC2::SecurityGroup",
  1011.             "Properties": {
  1012.                 "GroupDescription": "Public ELB Security Group with HTTP access on port 80 from the internet",
  1013.                 "VpcId": {
  1014.                     "Ref": "VPC"
  1015.                 },
  1016.                 "SecurityGroupIngress": [
  1017.                     {
  1018.                         "IpProtocol": "tcp",
  1019.                         "FromPort": "80",
  1020.                         "ToPort": "80",
  1021.                         "CidrIp": "0.0.0.0/0"
  1022.                     },
  1023.                     {
  1024.                         "IpProtocol": "tcp",
  1025.                         "FromPort": "443",
  1026.                         "ToPort": "443",
  1027.                         "CidrIp": "0.0.0.0/0"
  1028.                     },
  1029.                     {
  1030.                         "IpProtocol": "tcp",
  1031.                         "FromPort": "4443",
  1032.                         "ToPort": "4443",
  1033.                         "CidrIp": "0.0.0.0/0"
  1034.                     }
  1035.                 ]
  1036.             }
  1037.         },
  1038.         "SSHElasticLoadBalancer": {
  1039.             "Type": "AWS::ElasticLoadBalancing::LoadBalancer",
  1040.             "Properties": {
  1041.                 "LoadBalancerName": "ssh-elb",
  1042.                 "CrossZone": true,
  1043.                 "ConnectionSettings": {
  1044.                     "IdleTimeout": 3600
  1045.                 },
  1046.                 "SecurityGroups": [
  1047.                     {
  1048.                         "Ref": "SSHLoadBalancerSecurityGroup"
  1049.                     }
  1050.                 ],
  1051.                 "Subnets": [
  1052.                     {
  1053.                         "Ref": "PrivateSubnet"
  1054.                     }
  1055.                 ],
  1056.                 "Listeners": [
  1057.                     {
  1058.                         "LoadBalancerPort": "2222",
  1059.                         "InstancePort": "2222",
  1060.                         "Protocol": "tcp"
  1061.                     }
  1062.                 ],
  1063.                 "HealthCheck": {
  1064.                     "Target": "TCP:2222",
  1065.                     "HealthyThreshold": "10",
  1066.                     "UnhealthyThreshold": "2",
  1067.                     "Interval": "30",
  1068.                     "Timeout": "6"
  1069.                 }
  1070.             }
  1071.         },
  1072.         "SSHLoadBalancerSecurityGroup": {
  1073.             "Type": "AWS::EC2::SecurityGroup",
  1074.             "Properties": {
  1075.                 "GroupDescription": "ssh ELB Security Group",
  1076.                 "VpcId": {
  1077.                     "Ref": "VPC"
  1078.                 },
  1079.                 "SecurityGroupIngress": [
  1080.                     {
  1081.                         "IpProtocol": "tcp",
  1082.                         "FromPort": "2222",
  1083.                         "ToPort": "2222",
  1084.                         "CidrIp": "0.0.0.0/0"
  1085.                     }
  1086.                 ]
  1087.             }
  1088.         },
  1089.         "RdsSubnet1": {
  1090.             "Type": "AWS::EC2::Subnet",
  1091.             "Properties": {
  1092.                 "AvailabilityZone": {
  1093.                     "Fn::Select": [
  1094.                         "0",
  1095.                         {
  1096.                             "Fn::GetAZs": {
  1097.                                 "Ref": "AWS::Region"
  1098.                             }
  1099.                         }
  1100.                     ]
  1101.                 },
  1102.                 "CidrBlock": {
  1103.                     "Fn::FindInMap": [
  1104.                         "Region2VPC",
  1105.                         {
  1106.                             "Ref": "AWS::Region"
  1107.                         },
  1108.                         "Rds1"
  1109.                     ]
  1110.                 },
  1111.                 "VpcId": {
  1112.                     "Ref": "VPC"
  1113.                 },
  1114.                 "Tags": [
  1115.                     {
  1116.                         "Key": "Name",
  1117.                         "Value": "rds-subnet-1"
  1118.                     }
  1119.                 ]
  1120.             }
  1121.         },
  1122.         "RdsSubnet2": {
  1123.             "Type": "AWS::EC2::Subnet",
  1124.             "Properties": {
  1125.                 "AvailabilityZone": {
  1126.                     "Fn::Select": [
  1127.                         "1",
  1128.                         {
  1129.                             "Fn::GetAZs": {
  1130.                                 "Ref": "AWS::Region"
  1131.                             }
  1132.                         }
  1133.                     ]
  1134.                 },
  1135.                 "CidrBlock": {
  1136.                     "Fn::FindInMap": [
  1137.                         "Region2VPC",
  1138.                         {
  1139.                             "Ref": "AWS::Region"
  1140.                         },
  1141.                         "Rds2"
  1142.                     ]
  1143.                 },
  1144.                 "VpcId": {
  1145.                     "Ref": "VPC"
  1146.                 },
  1147.                 "Tags": [
  1148.                     {
  1149.                         "Key": "Name",
  1150.                         "Value": "rds-subnet-2"
  1151.                     }
  1152.                 ]
  1153.             }
  1154.         },
  1155.         "RdsSubnet1tRouteTableAssociation": {
  1156.             "Type": "AWS::EC2::SubnetRouteTableAssociation",
  1157.             "Properties": {
  1158.                 "SubnetId": {
  1159.                     "Ref": "RdsSubnet1"
  1160.                 },
  1161.                 "RouteTableId": {
  1162.                     "Ref": "PublicRouteTable"
  1163.                 }
  1164.             }
  1165.         },
  1166.         "RdsSubnet2tRouteTableAssociation": {
  1167.             "Type": "AWS::EC2::SubnetRouteTableAssociation",
  1168.             "Properties": {
  1169.                 "SubnetId": {
  1170.                     "Ref": "RdsSubnet2"
  1171.                 },
  1172.                 "RouteTableId": {
  1173.                     "Ref": "PublicRouteTable"
  1174.                 }
  1175.             }
  1176.         },
  1177.         "OpsManS3Bucket": {
  1178.             "Type": "AWS::S3::Bucket",
  1179.             "Properties": {
  1180.                 "Tags": [
  1181.                     {
  1182.                         "Key": "Name",
  1183.                         "Value": "PCF Ops Manager S3 Bucket"
  1184.                     }
  1185.                 ]
  1186.             }
  1187.         },
  1188.         "IamUser": {
  1189.             "Type": "AWS::IAM::User",
  1190.             "DependsOn": [
  1191.                 "OpsManS3Bucket"
  1192.             ],
  1193.             "Properties": {
  1194.                 "Policies": [
  1195.                     {
  1196.                         "PolicyName": "Policy",
  1197.                         "PolicyDocument": {
  1198.                             "Version": "2012-10-17",
  1199.                             "Statement": [
  1200.                                 {
  1201.                                     "Effect": "Deny",
  1202.                                     "Action": [
  1203.                                         "iam:*"
  1204.                                     ],
  1205.                                     "Resource": [
  1206.                                         "*"
  1207.                                     ]
  1208.                                 },
  1209.                                 {
  1210.                                     "Sid": "OpsManS3Permissions",
  1211.                                     "Effect": "Allow",
  1212.                                     "Action": [
  1213.                                         "s3:*"
  1214.                                     ],
  1215.                                     "Resource": [
  1216.                                         {
  1217.                                             "Fn::Join": [
  1218.                                                 "",
  1219.                                                 [
  1220.                                                     "arn:",
  1221.                                                     {
  1222.                                                         "Fn::FindInMap": [
  1223.                                                             "ArnSuffix",
  1224.                                                             {"Ref": "AWS::Region"
  1225.                                                             },
  1226.                                                             "Value"
  1227.                                                         ]
  1228.                                                     },

  1230.                                                     ":s3:::",
  1231.                                                     {
  1232.                                                         "Ref": "OpsManS3Bucket"
  1233.                                                     }
  1234.                                                 ]
  1235.                                             ]
  1236.                                         },
  1237.                                         {
  1238.                                             "Fn::Join": [
  1239.                                                 "",
  1240.                                                 [
  1241.                                                     "arn:",
  1242.                                                     {
  1243.                                                         "Fn::FindInMap": [
  1244.                                                             "ArnSuffix",
  1245.                                                             {"Ref": "AWS::Region"
  1246.                                                             },
  1247.                                                             "Value"
  1248.                                                         ]
  1249.                                                     },

  1251.                                                     ":s3:::",
  1252.                                                     {
  1253.                                                         "Ref": "OpsManS3Bucket"
  1254.                                                     },
  1255.                                                     "/*"
  1256.                                                 ]
  1257.                                             ]
  1258.                                         }
  1259.                                     ]
  1260.                                 },
  1261.                                 {
  1262.                                     "Sid": "OpsManEc2Permissions",
  1263.                                     "Effect": "Allow",
  1264.                                     "Action": [
  1265.                                         "ec2:DescribeAccountAttributes",
  1266.                                         "ec2:DescribeAddresses",
  1267.                                         "ec2:AssociateAddress",
  1268.                                         "ec2:DisassociateAddress",
  1269.                                         "ec2:DescribeAvailabilityZones",
  1270.                                         "ec2:DescribeImages",
  1271.                                         "ec2:DescribeInstances",
  1272.                                         "ec2:RunInstances",
  1273.                                         "ec2:RebootInstances",
  1274.                                         "ec2:TerminateInstances",
  1275.                                         "ec2:DescribeKeypairs",
  1276.                                         "ec2:DescribeRegions",
  1277.                                         "ec2:DescribeSnapshots",
  1278.                                         "ec2:CreateSnapshot",
  1279.                                         "ec2:DeleteSnapshot",
  1280.                                         "ec2:DescribeSecurityGroups",
  1281.                                         "ec2:DescribeSubnets",
  1282.                                         "ec2:DescribeVpcs",
  1283.                                         "ec2:CreateTags",
  1284.                                         "ec2:DescribeVolumes",
  1285.                                         "ec2:CreateVolume",
  1286.                                         "ec2:AttachVolume",
  1287.                                         "ec2:DeleteVolume",
  1288.                                         "ec2:DetachVolume"
  1289.                                     ],
  1290.                                     "Resource": [
  1291.                                         "*"
  1292.                                     ]
  1293.                                 },
  1294.                                 {
  1295.                                     "Sid": "OpsManElbPermissions",
  1296.                                     "Effect": "Allow",
  1297.                                     "Action": [
  1298.                                         "elasticloadbalancing:DescribeLoadBalancers",
  1299.                                         "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
  1300.                                         "elasticloadbalancing:RegisterInstancesWithLoadBalancer"
  1301.                                     ],
  1302.                                     "Resource": [
  1303.                                         "*"
  1304.                                     ]
  1305.                                 }
  1306.                             ]
  1307.                         }
  1308.                     }
  1309.                 ]
  1310.             }
  1311.         },
  1312.         "IamUserAccessKey": {
  1313.             "Type": "AWS::IAM::AccessKey",
  1314.             "DependsOn": "IamUser",
  1315.             "Properties": {
  1316.                 "UserName": {
  1317.                     "Ref": "IamUser"
  1318.                 }
  1319.             }
  1320.         },
  1321.         "RdsSubnetGroup": {
  1322.             "Type": "AWS::RDS::DBSubnetGroup",
  1323.             "Properties": {
  1324.                 "DBSubnetGroupDescription": "PCF RDS Subnet Group",
  1325.                 "SubnetIds": [
  1326.                     {
  1327.                         "Ref": "RdsSubnet1"
  1328.                     },
  1329.                     {
  1330.                         "Ref": "RdsSubnet2"
  1331.                     }
  1332.                 ]
  1333.             }
  1334.         },
  1335.         "Rds": {
  1336.             "Type": "AWS::RDS::DBInstance",
  1337.             "Properties": {
  1338.                 "AllocatedStorage": "100",
  1339.                 "DBInstanceClass": "db.m3.large",
  1340.                 "Engine": "MySQL",
  1341.                 "EngineVersion": "5.6.22",
  1342.                 "MultiAZ": "True",
  1343.                 "DBName": {
  1344.                     "Ref": "RdsDBName"
  1345.                 },
  1346.                 "Iops": "1000",
  1347.                 "MasterUsername": {
  1348.                     "Ref": "RdsUsername"
  1349.                 },
  1350.                 "MasterUserPassword": {
  1351.                     "Ref": "RdsPassword"
  1352.                 },
  1353.                 "PubliclyAccessible": "False",
  1354.                 "VPCSecurityGroups": [
  1355.                     {
  1356.                         "Ref": "MysqlSecurityGroup"
  1357.                     }
  1358.                 ],
  1359.                 "DBSubnetGroupName": {
  1360.                     "Ref": "RdsSubnetGroup"
  1361.                 }
  1362.             }
  1363.         }
  1364.     },
  1365.     "Outputs": {
  1366.         "OpsManager": {
  1367.             "Description": "IP Address of the OpsManager host",
  1368.             "Value": {
  1369.                 "Ref": "OpsManagerIPAddress"
  1370.             }
  1371.         },
  1372.         "VmsSecurityGroup": {
  1373.             "Value": {
  1374.                 "Ref": "VmsSecurityGroup"
  1375.             }
  1376.         },
  1377.         "VPCId": {
  1378.             "Value": {
  1379.                 "Ref": "VPC"
  1380.             }
  1381.         },
  1382.         "PublicSubnet": {
  1383.             "Value": {
  1384.                 "Ref": "PublicSubnet"
  1385.             }
  1386.         },
  1387.         "IamUserName": {
  1388.             "Value": {
  1389.                 "Ref": "IamUser"
  1390.             }
  1391.         },
  1392.         "IamUserAccessKey": {
  1393.             "Value": {
  1394.                 "Ref": "IamUserAccessKey"
  1395.             }
  1396.         },
  1397.         "IamUserSecretAccessKey": {
  1398.             "Value": {
  1399.                 "Fn::GetAtt": [
  1400.                     "IamUserAccessKey",
  1401.                     "SecretAccessKey"
  1402.                 ]
  1403.             }
  1404.         },
  1405.         "S3Bucket": {
  1406.             "Value": {
  1407.                 "Ref": "OpsManS3Bucket"
  1408.             }
  1409.         },
  1410.         "PrivateSubnet": {
  1411.             "Value": {
  1412.                 "Ref": "PrivateSubnet"
  1413.             }
  1414.         },
  1415.         "PrivateSubnetAvailabilityZone": {
  1416.             "Value": {
  1417.                 "Fn::GetAtt": [
  1418.                     "PrivateSubnet",
  1419.                     "AvailabilityZone"
  1420.                 ]
  1421.             }
  1422.         },
  1423.         "PublicSubnetAvailabilityZone": {
  1424.             "Value": {
  1425.                 "Fn::GetAtt": [
  1426.                     "PublicSubnet",
  1427.                     "AvailabilityZone"
  1428.                 ]
  1429.             }
  1430.         },
  1431.         "RdsAddress": {
  1432.             "Value": {
  1433.                 "Fn::GetAtt": [
  1434.                     "Rds",
  1435.                     "Endpoint.Address"
  1436.                 ]
  1437.             }
  1438.         },
  1439.         "RdsPort": {
  1440.             "Value": {
  1441.                 "Fn::GetAtt": [
  1442.                     "Rds",
  1443.                     "Endpoint.Port"
  1444.                 ]
  1445.             }
  1446.         },
  1447.         "RdsUsername": {
  1448.             "Value": {
  1449.                 "Ref": "RdsUsername"
  1450.             }
  1451.         },
  1452.         "RdsPassword": {
  1453.             "Value": {
  1454.                 "Ref": "RdsPassword"
  1455.             }
  1456.         },
  1457.         "RdsDBName": {
  1458.             "Value": {
  1459.                 "Ref": "RdsDBName"
  1460.             }
  1461.         },
  1462.         "CidrBlock": {
  1463.             "Value": {
  1464.                 "Fn::FindInMap": [
  1465.                     "Region2VPC",
  1466.                     {
  1467.                         "Ref": "AWS::Region"
  1468.                     },
  1469.                     "Private"
  1470.                 ]
  1471.             }
  1472.         },
  1473.         "KeyPairName": {
  1474.             "Value": {
  1475.                 "Ref": "KeyName"
  1476.             }
  1477.         }
  1478.     }
  1479. }

  1481. 以下是跟DNS操作有观的，未验证，因为route53我没用到，拷贝为了参考备忘。

  1483. "HostedZone": {
  1484.             "Type": "AWS::Route53::HostedZone",
  1485.             "Properties": {
  1486.                 "HostedZoneConfig": {
  1487.                     "Comment": "Hosted zone for example.com"
  1488.                 },
  1489.                 "Name": "example.com",
  1490.                 "VPCs": [
  1491.                     {
  1492.                         "VPCId": {
  1493.                             "Ref": "VPC"
  1494.                         },
  1495.                         "VPCRegion": {
  1496.                             "Ref": "AWS::Region"
  1497.                         }
  1498.                     }
  1499.                 ]
  1500.             }
  1501.         },
  1502.         "PuppetMasterDNSRecord": {
  1503.             "Type": "AWS::Route53::RecordSet",
  1504.             "DependsOn": "HostedZone",
  1505.             "Properties": {
  1506.                 "HostedZoneId": {
  1507.                     "Fn::Join": [
  1508.                         "",
  1509.                         [
  1510.                             "/hostedzone/",
  1511.                             {
  1512.                                 "Ref": "HostedZone"
  1513.                             }
  1514.                         ]
  1515.                     ]
  1516.                 },
  1517.                 "Name": "puppet.example.com",
  1518.                 "Type": "A",
  1519.                 "TTL": "900",
  1520.                 "ResourceRecords": [
  1521.                     {
  1522.                         "Ref": "PuppetMasterIP"
  1523.                     }
  1524.                 ]
  1525.             }
  1526.         },
  1527.         "PuppetAgentLinuxDNSRecord": {
  1528.             "Type": "AWS::Route53::RecordSet",
  1529.             "Properties": {
  1530.                 "HostedZoneId": {
  1531.                     "Fn::Join": [
  1532.                         "",
  1533.                         [
  1534.                             "/hostedzone/",
  1535.                             {
  1536.                                 "Ref": "HostedZone"
  1537.                             }
  1538.                         ]
  1539.                     ]
  1540.                 },
  1541.                 "Name": "linuxagent.example.com",
  1542.                 "Type": "A",
  1543.                 "TTL": "900",
  1544.                 "ResourceRecords": [
  1545.                     {
  1546.                         "Ref": "PuppetAgentLinuxIP"
  1547.                     }
  1548.                 ]
  1549.             }
  1550.         },
  1551.         "PuppetAgentWindowsDNSRecord": {
  1552.             "Type": "AWS::Route53::RecordSet",
  1553.             "Properties": {
  1554.                 "HostedZoneId": {
  1555.                     "Fn::Join": [
  1556.                         "",
  1557.                         [
  1558.                             "/hostedzone/",
  1559.                             {
  1560.                                 "Ref": "HostedZone"
  1561.                             }
  1562.                         ]
  1563.                     ]
  1564.                 },
  1565.                 "Name": "windowsagent.example.com",
  1566.                 "Type": "A",
  1567.                 "TTL": "900",
  1568.                 "ResourceRecords": [
  1569.                     {
  1570.                         "Ref": "PuppetAgentWindowsIP"
  1571.                     }
  1572.                 ]
  1573.             }
  1574.         }


阅读(4012) | 评论(0) | 转发(0) |
0

上一篇：bash创建AWS的vpc/ec2等备忘 (**建议用CloudFormation**）

下一篇：统计AWS的ec2的ReservedInstance使用情况

给主人留下些什么吧！~~
关于我们 | 关于IT168 | 联系方式 | 广告合作 | 法律声明 | 免费注册

Copyright 2001-2010 ChinaUnix.net All Rights Reserved 北京皓辰网域网络信息技术有限公司. 版权所有

感谢所有关心和支持过ChinaUnix的朋友们

16024965号-6