AWS CloudFormation template to create Ubuntu 16.04 t2.micro EC2 instance with security group

AWS CloudFormation

AWS CloudFormation gives developers and systems administrators an easy way to create and manage a collection of related AWS resources, provisioning and updating them in an orderly and predictable fashion.

You can use AWS CloudFormation’s sample templates or create your own templates to describe the AWS resources, and any associated dependencies or runtime parameters, required to run your application. You don’t need to figure out the order for provisioning AWS services or the subtleties of making those dependencies work. CloudFormation takes care of this for you. After the AWS resources are deployed, you can modify and update them in a controlled and predictable way, in effect applying version control to your AWS infrastructure the same way you do with your software. You can also visualize your templates as diagrams and edit them using a drag-and-drop interface with the AWS CloudFormation Designer.

You can deploy and update a template and its associated collection of resources (called a stack) by using the AWS Management Console, AWS Command Line Interface, or APIs. CloudFormation is available at no additional charge, and you pay only for the AWS resources needed to run your applications.

Prerequisite:

1. An AWS Account.

2. Public and Private SSH key to connect to VM.

Steps:

1. Import the SSH public key into Key Pairs section of network and security.

2. Create file containing parameters for instance:

{

  "AWSTemplateFormatVersion" : "2017-30-04",

  "Description" : "AWS CloudFormation Sample Template EC2InstanceWithSecurityGroupSample: Create an Amazon EC2 instance running the Amazon Linux AMI. The AMI is chosen based on the region in which the stack is run. This example creates an EC2 security group for the instance to give you SSH access. **WARNING** This template creates an Amazon EC2 instance. You will be billed for the AWS resources used if you create a stack from this template.",

  "Parameters" : {

    "KeyName": {

      "Description" : "Name of an existing EC2 KeyPair to enable SSH access to the instance",

      "Type": "AWS::EC2::KeyPair::KeyName",

      "ConstraintDescription" : "must be the name of an existing EC2 KeyPair."

    },

    "InstanceType" : {

      "Description" : "General purpose",

      "Type" : "String",

      "Default" : "t2.micro",

      "AllowedValues" : [ "t2.micro"]

,

      "ConstraintDescription" : "must be a valid EC2 instance type."

    },

    "SSHLocation" : {

      "Description" : "The IP address range that can be used to SSH to the EC2 instances",

      "Type": "String",

      "MinLength": "9",

      "MaxLength": "18",

      "Default": "0.0.0.0/0",

      "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",

      "ConstraintDescription": "must be a valid IP CIDR range of the form x.x.x.x/x."

   }

  },

  

  "Mappings" : {

    "AWSInstanceType2Arch" : {"t2.micro"    : { "Arch" : "HVM64"  }},

"AWSInstanceType2NATArch" : {"t2.micro"    : { "Arch" : "NATHVM64"  }},

"AWSRegionArch2AMI" : {"us-west-2"        : {"PV64" : "ami-7f77b31f", "HVM64" : "ami-efd0428f", "HVMG2" : "ami-54d44234"}}

},

  "Resources" : {

    "EC2Instance" : {

      "Type" : "AWS::EC2::Instance",

      "Properties" : {

        "InstanceType" : { "Ref" : "InstanceType" },

        "SecurityGroups" : [ { "Ref" : "InstanceSecurityGroup" } ],

        "KeyName" : { "Ref" : "KeyName" },

        "ImageId" : { "Fn::FindInMap" : [ "AWSRegionArch2AMI", { "Ref" : "AWS::Region" },

                          { "Fn::FindInMap" : [ "AWSInstanceType2Arch", { "Ref" : "InstanceType" }, "Arch" ] } ] }

      }

    },

    "InstanceSecurityGroup" : {

      "Type" : "AWS::EC2::SecurityGroup",

      "Properties" : {

        "GroupDescription" : "Enable SSH access via port 22",

        "SecurityGroupIngress" : [ {

          "IpProtocol" : "tcp",

          "FromPort" : "22",

          "ToPort" : "22",

          "CidrIp" : { "Ref" : "SSHLocation"}

        } ]

      }

    }

  },

  "Outputs" : {

    "InstanceId" : {

      "Description" : "InstanceId of the newly created EC2 instance",

      "Value" : { "Ref" : "EC2Instance" }

    },

    "AZ" : {

      "Description" : "Availability Zone of the newly created EC2 instance",

      "Value" : { "Fn::GetAtt" : [ "EC2Instance", "AvailabilityZone" ] }

    },

    "PublicDNS" : {

      "Description" : "Public DNSName of the newly created EC2 instance",

      "Value" : { "Fn::GetAtt" : [ "EC2Instance", "PublicDnsName" ] }

    },

    "PublicIP" : {

      "Description" : "Public IP address of the newly created EC2 instance",

      "Value" : { "Fn::GetAtt" : [ "EC2Instance", "PublicIp" ] }

    }

  }

}

3. Create new stack. Upload template file to amazon S3.

4. Fill the details. Select the key which imported in first step.

5. Submit the template. You can see the status on CloudFormation Dashboard. 

Thank you!!!