cscb025_cloudformation_template.yml

AWSTemplateFormatVersion: '2010-09-09'
Description: 'AWS Cloudformation template to create LAMP Stack'
Parameters:
  KeyName:
    Description: Name of an existing EC2 KeyPair to enable SSH access to the instance
    Type: AWS::EC2::KeyPair::KeyName
    ConstraintDescription: must be the name of an existing EC2 KeyPair.
  DBName:
    Default: cscb025
    Description: MySQL database name
    Type: String
    MinLength: '1'
    MaxLength: '64'
    AllowedPattern: '[a-zA-Z][a-zA-Z0-9]*'
    ConstraintDescription: must begin with a letter and contain only alphanumeric
      characters.
  DBUser:
    NoEcho: 'true'
    Description: Username for MySQL database access
    Default: cscb025
    Type: String
    MinLength: '1'
    MaxLength: '16'
    AllowedPattern: '[a-zA-Z][a-zA-Z0-9]*'
    ConstraintDescription: must begin with a letter and contain only alphanumeric
      characters.
  DBPassword:
    NoEcho: 'true'
    Description: Password for MySQL database access
    Default: cscb025
    Type: String
    MinLength: '1'
    MaxLength: '41'
    AllowedPattern: '[a-zA-Z0-9]*'
    ConstraintDescription: must contain only alphanumeric characters.
  DBRootPassword:
    NoEcho: 'true'
    Description: Root password for MySQL
    Default: cscb025
    Type: String
    MinLength: '1'
    MaxLength: '41'
    AllowedPattern: '[a-zA-Z0-9]*'
    ConstraintDescription: must contain only alphanumeric characters.
  InstanceAmi:
    Description: AMI of your region Amazon Linux (HVM). Set for eu-west-1 by default.
    Type: String
    Default: ami-acd005d5
    AllowedPattern: (ami-[a-f0-9]+)
    ConstraintDescription: must be a valid AMI Image ID
  Repository:
    Default: 'https://github.com/miglen/CSCB025.git'
    Description: Location of the repository to be deployed
    Type: String
  SSHLocation:
    Description: ' The IP address range that can be used to SSH to the EC2 instances'
    Type: String
    MinLength: '9'
    MaxLength: '18'
    Default: 0.0.0.0/0
    AllowedPattern: (\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})/(\d{1,2})
    ConstraintDescription: must be a valid IP CIDR range of the form x.x.x.x/x.
Resources:
  WebServerInstance:
    Type: AWS::EC2::Instance
    Metadata:
      AWS::CloudFormation::Init:
        configSets:
          InstallAndRun:
          - Install
          - Configure
        Install:
          packages:
            yum:
              git: []
              mysql: []
              mysql-server: []
              mysql-libs: []
              httpd24: []
              php71: []
              php71-mysqlnd: []
          files:
            /etc/cfn/cfn-hup.conf:
              content: !Sub |
                [main]
                stack=${AWS::StackId}
                region=${AWS::Region}
              mode: '000400'
              owner: root
              group: root
            /etc/cfn/hooks.d/cfn-auto-reloader.conf:
              content: !Sub |
                [cfn-auto-reloader-hook]
                triggers=post.update
                path=Resources.WebServerInstance.Metadata.AWS::CloudFormation::Init
                action=/opt/aws/bin/cfn-init -v --stack ${AWS::StackName} --resource WebServerInstance --configsets InstallAndRun --region ${AWS::Region}
                runas=root
            /tmp/setup.sh:
              content: !Sub |
                #!/bin/bash
                # Reset MySQL root password
                sleep 5
                mysqladmin -u root password '${DBRootPassword}'
                # Create user and table
                mysql -u root --password='${DBRootPassword}' -e  "create database ${DBName};"
                mysql -u root --password='${DBRootPassword}' -e  "create user ${DBUser};"
                mysql -u root --password='${DBRootPassword}' -e  "grant all on ${DBName}.* to '${DBUser}'@'localhost' identified by '${DBPassword}';"
                # Clone the repository
                git clone ${Repository} /var/www/html/
                # Import the schema
                mysql ${DBName} -u root --password='${DBRootPassword}' < /var/www/html/schema.sql
                # Cleanup all files
                rm -f /var/www/html/schema.sql
                rm -f /tmp/setup.sh
              mode: '000400'
              owner: root
              group: root
          services:
            sysvinit:
              mysqld:
                enabled: 'true'
                ensureRunning: 'true'
              httpd:
                enabled: 'true'
                ensureRunning: 'true'
              cfn-hup:
                enabled: 'true'
                ensureRunning: 'true'
                files:
                - /etc/cfn/cfn-hup.conf
                - /etc/cfn/hooks.d/cfn-auto-reloader.conf
        Configure:
          commands:
            01_setup:
              command: "bash /tmp/setup.sh"
              test: "ls /var/www/html/index.php"
    Properties:
      ImageId: !Ref 'InstanceAmi'
      InstanceType: 't2.micro'
      SecurityGroups:
      - !Ref 'WebServerSecurityGroup'
      KeyName: !Ref 'KeyName'
      UserData:
        Fn::Base64: !Sub |
          #!/bin/bash -xe
          yum update -y aws-cfn-bootstrap
          # Install the files and packages from the metadata
          /opt/aws/bin/cfn-init -v --stack ${AWS::StackName} --resource WebServerInstance --configsets InstallAndRun --region ${AWS::Region}
          # Signal the status from cfn-init
          /opt/aws/bin/cfn-signal -e $? --stack ${AWS::StackName} --resource WebServerInstance --region ${AWS::Region}
    CreationPolicy:
      ResourceSignal:
        Timeout: PT5M
  WebServerSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: Enable HTTP access via port 80
      SecurityGroupIngress:
      - IpProtocol: tcp
        FromPort: '80'
        ToPort: '80'
        CidrIp: 0.0.0.0/0
      - IpProtocol: tcp
        FromPort: '22'
        ToPort: '22'
        CidrIp: !Ref 'SSHLocation'
Outputs:
  WebsiteURL:
    Description: URL for your web server
    Value: !Join ['', ['http://', !GetAtt [WebServerInstance, PublicDnsName]]]
  SSHCommand:
      Description: SSH Command
      Value: !Join ['', ['ssh -i ', !Ref KeyName, '.pem ',  'ec2-user@', !GetAtt [WebServerInstance, PublicIp]]]