今話題の「ChatGPT」さんにCloudFormationテンプレートを作ってもらう

---
Parameters:
KeyName:
Description: EC2インスタンスのキーペア
Type: AWS::EC2::KeyPair::KeyName
InstanceType:
Description: EC2インスタンスのインスタンスタイプ
Type: String
Default: t2.micro
AllowedValues:
- t2.micro
- t2.small
- t2.medium
DBName:
Description: データベース名
Type: String
DBUser:
Description: データベースのユーザ名
Type: String
DBPassword:
Description: データベースのパスワード
Type: String
NoEcho: true

Resources:
# VPC作成
VPC:
Type: AWS::EC2::VPC
Properties:
CidrBlock: 10.0.0.0/16
Tags:
- Key: Name
Value: !Sub ${AWS::StackName}-VPC

# サブネット作成
PublicSubnet1:
Type: AWS::EC2::Subnet
Properties:
AvailabilityZone: ap-northeast-1a
CidrBlock: 10.0.1.0/24
VpcId: !Ref VPC
Tags:
- Key: Name
Value: !Sub ${AWS::StackName}-PublicSubnet1

# インターネットゲートウェイ作成
InternetGateway:
Type: AWS::EC2::InternetGateway
Properties:
Tags:
- Key: Name
Value: !Sub ${AWS::StackName}-InternetGateway

# VPCとインターネットゲートウェイを紐付け
VPCGatewayAttachment:
Type: AWS::EC2::VPCGatewayAttachment
Properties:
InternetGatewayId: !Ref InternetGateway
VpcId: !Ref VPC

# ルートテーブル作成
PublicRouteTable:
Type: AWS::EC2::RouteTable
Properties:
VpcId: !Ref VPC
Tags:
- Key: Name
Value: !Sub ${AWS::StackName}-PublicRouteTable

# サブネットとルートテーブルを紐付け
PublicSubnet1RouteTableAssociation:
Type: AWS::EC2::SubnetRouteTableAssociation
Properties:
SubnetId: !Ref PublicSubnet1
RouteTableId: !Ref PublicRouteTable

# インターネットに接続するためのルートを作成
PublicRoute:
Type: AWS::EC2::Route
DependsOn: VPCGatewayAttachment
Properties:
DestinationCidrBlock: 0.0.0.0/0
GatewayId: !Ref InternetGateway
RouteTableId: !Ref PublicRouteTable

# セキュリティグループ作成
WebSecurityGroup:
Type: AWS::EC2::SecurityGroup
Properties:
GroupDescription: Allow HTTP and SSH traffic
SecurityGroupIngress:
# HTTPのインバウンドアクセスを許可
- IpProtocol: tcp
FromPort: 80
ToPort: 80
CidrIp: 0.0.0.0/0
# SSHのインバウンドアクセスを許可
- IpProtocol: tcp
FromPort: 22
ToPort: 22
CidrIp: 0.0.0.0/0
VpcId: !Ref VPC
GroupName: !Sub ${AWS::StackName}-WebSecurityGroup
Tags:
- Key: Name
Value: !Sub ${AWS::StackName}-WebSecurityGroup

# EC2インスタンス作成
WebInstance:
Type: AWS::EC2::Instance
Properties:
ImageId: ami-0c55b159cbfafe1f0 # Amazon Linux 2 LTS
InstanceType: !Ref InstanceType
KeyName: !Ref KeyName
NetworkInterfaces:
- AssociatePublicIpAddress: true
DeviceIndex: 0
GroupSet:
- !Ref WebSecurityGroup
SubnetId: !Ref PublicSubnet1
UserData:
Fn::Base64: !Sub |
#!/bin/bash
yum update -y
yum install -y httpd24 php72 php72-mysqlnd
chkconfig httpd on
service httpd start
cd /var/www/html
echo "" > index.php
# phpMyAdminのインストール
cd /tmp
wget https://files.phpmyadmin.net/phpMyAdmin/5.1.0/phpMyAdmin-5.1.0-all-languages.tar.gz
tar xzf phpMyAdmin-5.1.0-all-languages.tar.gz
mv phpMyAdmin-5.1.0-all-languages /var/www/html/phpmyadmin
rm phpMyAdmin-5.1.0-all-languages.tar.gz
# config.inc.phpの作成
cd /var/www/html/phpmyadmin
cp config.sample.inc.php config.inc.php
sed -i "s/\$cfg\['Servers'\]\[\$i\]\['host'\] = 'localhost';/\$cfg['Servers'][\$i]['host'] = '${DBEndpoint}';/" config.inc.php
sed -i "s/\$cfg\['Servers'\]\[\$i\]\['user'\] = 'root';/\$cfg['Servers'][\$i]['user'] = '${DBUser}';/" config.inc.php
sed -i "s/\$cfg\['Servers'\]\[\$i\]\['password'\] = '';/\$cfg['Servers'][\$i]['password'] = '${DBPassword}';/" config.inc.php
sed -i "s/\$cfg\['Servers'\]\[\$i\]\['AllowNoPassword'\] = false;/\$cfg['Servers'][\$i]['AllowNoPassword'] = true;/" config.inc.php
# RDS作成
RDS:
Type: AWS::RDS::DBInstance
Properties:
DBInstanceClass: !Ref DBInstanceClass
Engine: mysql
MasterUsername: !Ref DBUser
MasterUserPassword: !Ref DBPassword
AllocatedStorage: !Ref DBAllocatedStorage
DBInstanceIdentifier: !Sub ${AWS::StackName}-rds
MultiAZ: false
StorageType: gp2
VPCSecurityGroups:
- !Ref DBSecurityGroup
DBSubnetGroupName: !Ref DBSubnetGroup
Tags:
- Key: Name
Value: !Sub ${AWS::StackName}-RDS

# RDSセキュリティグループ作成
DBSecurityGroup:
Type: AWS::RDS::DBSecurityGroup
Properties:
GroupDescription: Allow MySQL traffic
DBSecurityGroupIngress:
- EC2SecurityGroupName: !Ref WebSecurityGroup
EC2SecurityGroupOwnerId: !Ref AWS::AccountId
# WebサーバーからMySQLへのアクセスを許可
# Webサーバーのセキュリティグループを参照する
# ※EC2SecurityGroupOwnerIdには自身のアカウントIDを指定
Tags:
- Key: Name
Value: !Sub ${AWS::StackName}-DBSecurityGroup

# RDSサブネットグループ作成
DBSubnetGroup:
Type: AWS::RDS::DBSubnetGroup
Properties:
DBSubnetGroupDescription: Subnet group for RDS
SubnetIds:
- !Ref PrivateSubnet1
- !Ref PrivateSubnet2
Tags:
- Key: Name
Value: !Sub ${AWS::StackName}-DBSubnetGroup