{"id":463,"date":"2024-09-20T04:47:35","date_gmt":"2024-09-20T04:47:35","guid":{"rendered":"https:\/\/datadandies.nl\/?p=463"},"modified":"2025-06-05T06:31:07","modified_gmt":"2025-06-05T06:31:07","slug":"aws-cloudformation-project-an-ec2-instance-in-a-vpc","status":"publish","type":"post","link":"https:\/\/datadandies.nl\/index.php\/2024\/09\/20\/aws-cloudformation-project-an-ec2-instance-in-a-vpc\/","title":{"rendered":"AWS CloudFormation project: an EC2 instance in a VPC"},"content":{"rendered":"\n

I like learning new stuff.<\/p>\n\n\n\n

Which is why I invest time and moneys into courses.<\/p>\n\n\n\n

I really enjoy courses where you are forced into rolling up your own sleeves in order to create something. Recently a course I did allowed me to do a project in AWS CloudFormation.<\/p>\n\n\n\n

Using a YAML CloudFormation template, I created an Internet Gateway, and a VPC (Virtual Private Cloud) along with an EC2 (Elastic Compute) instance that resided within the VPC.<\/p>\n\n\n\n

A VPC <\/strong>with an EC2 instance<\/strong> and an Internet Gateway<\/strong> in AWS is commonly used to create a secure, scalable, and isolated network environment where resources like servers and databases can be hosted.<\/p>\n\n\n\n

The EC2 instance can be used to host a webserver for example, while the Internet Gateway allows access to the internet (so users can access for example a website hosted on the EC2 instance). The VPC allows you to control traffic to the EC2 instance.<\/p>\n\n\n\n

The courses I am following at this moment are from Emre Yilmaz, by the way. I highly recommend his courses, he takes you through content step by step at a perfect pace. They can be found at Udemy. For the record, I have no affiliation with him, I just really like his stuff.<\/p>\n\n\n\n

Template can be viewed below.<\/p>\n\n\n\n

<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
AWSTemplateFormatVersion<\/span>:<\/span> <\/span>"<\/span>2010-09-09<\/span>"<\/span><\/span>\n<\/span>\nDescription<\/span>:<\/span><\/span>\n  <\/span>An EC2 instance, in a security group, in a public subnet within a VPC.<\/span> <\/span><\/span>\n<\/span>\nResources<\/span>:<\/span><\/span>\n  <\/span># Creating a VPC.<\/span><\/span>\n  <\/span>MyVPC<\/span>:<\/span> <\/span># This is the ID\/name your VPC gets in the "Resources"-tab in your CloudFormation stack. Not the same as the name of the VPC (which is set in "Tags"). <\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::VPC<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span><\/span>\n      <\/span>CidrBlock<\/span>:<\/span> <\/span>192.168.0.0\/16<\/span><\/span>\n      <\/span>Tags<\/span>:<\/span> <\/span># This is how you name your VPC.<\/span><\/span>\n        <\/span>-<\/span> <\/span>Key<\/span>:<\/span> <\/span>Name<\/span><\/span>\n          <\/span>Value<\/span>:<\/span> <\/span>TheVPC<\/span><\/span>\n<\/span>\n  <\/span># Creating a subnet that is within the VPC.<\/span><\/span>\n  <\/span>MyPublicSubnet<\/span>:<\/span> <\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::Subnet<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span> <\/span><\/span>\n      <\/span>VpcId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyVPC<\/span><\/span>\n      <\/span>CidrBlock<\/span>:<\/span> <\/span>192.168.0.0\/24<\/span> <\/span># This must be within the range of the CidrBlock defined in the relevant VPC. I had 192.168.1.0\/24 here and this resulted in the EC2 instance not having a public IP address. <\/span><\/span>\n      <\/span>MapPublicIpOnLaunch<\/span>:<\/span> <\/span>true<\/span><\/span>\n      <\/span>Tags<\/span>:<\/span><\/span>\n        <\/span>-<\/span> <\/span>Key<\/span>:<\/span> <\/span>Name<\/span><\/span>\n          <\/span>Value<\/span>:<\/span> <\/span>TheSubnet<\/span><\/span>\n<\/span>\n  <\/span># Creating a route table that is within the VPC.<\/span><\/span>\n  <\/span>MyRouteTable<\/span>:<\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::RouteTable<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span><\/span>\n      <\/span>VpcId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyVPC<\/span><\/span>\n      <\/span>Tags<\/span>:<\/span><\/span>\n        <\/span>-<\/span> <\/span>Key<\/span>:<\/span> <\/span>Name<\/span><\/span>\n          <\/span>Value<\/span>:<\/span> <\/span>TheRouteTable<\/span><\/span>\n<\/span>\n  <\/span># Creating an association between MyRouteTable and MySubnet.<\/span><\/span>\n  <\/span>MyRouteTableAssociation<\/span>:<\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::SubnetRouteTableAssociation<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span><\/span>\n      <\/span>RouteTableId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyRouteTable<\/span><\/span>\n      <\/span>SubnetId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyPublicSubnet<\/span><\/span>\n<\/span>\n  <\/span># Creating an internet gateway. An internet gateway acts as a bridge between the VPC and the public internet. <\/span><\/span>\n  <\/span>MyInternetGateway<\/span>:<\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::InternetGateway<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span><\/span>\n      <\/span>Tags<\/span>:<\/span><\/span>\n        <\/span>-<\/span> <\/span>Key<\/span>:<\/span> <\/span>Name<\/span><\/span>\n          <\/span>Value<\/span>:<\/span> <\/span>TheInternetGateway<\/span><\/span>\n  <\/span><\/span>\n  <\/span># Attaching the internet gateway to the VPC. <\/span><\/span>\n  <\/span>MyInternetGatewayAttachment<\/span>:<\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::VPCGatewayAttachment<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span> <\/span><\/span>\n      <\/span>InternetGatewayId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyInternetGateway<\/span><\/span>\n      <\/span>VpcId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyVPC<\/span><\/span>\n<\/span>\n  <\/span># In order for a subnet in the VPC to be able to access the public internet, it must have a route table with a route with a destination CidrBlock 0.0.0.0\/0 (ALL IP addresses: the public internet ). <\/span><\/span>\n  <\/span># This route must be attached to the internet gateway. <\/span><\/span>\n<\/span>\n  <\/span># Adding a route to the route table for internet access using the internet gateway.<\/span><\/span>\n  <\/span>MyInternetRoute<\/span>:<\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::Route<\/span><\/span>\n    <\/span>DependsOn<\/span>:<\/span><\/span>\n      <\/span>-<\/span> <\/span>MyInternetGatewayAttachment<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span><\/span>\n      <\/span>GatewayId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyInternetGateway<\/span><\/span>\n      <\/span>RouteTableId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyRouteTable<\/span><\/span>\n      <\/span>DestinationCidrBlock<\/span>:<\/span> <\/span>0.0.0.0\/0<\/span><\/span>\n<\/span>\n  <\/span># Creating an EC2 instance<\/span><\/span>\n  <\/span>MyEC2Instance<\/span>:<\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::Instance<\/span><\/span>\n    <\/span>DependsOn<\/span>:<\/span> <\/span><\/span>\n      <\/span>-<\/span> <\/span>MyPublicSubnet<\/span><\/span>\n      <\/span>-<\/span> <\/span>MyRouteTableAssociation<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span><\/span>\n      <\/span>ImageId<\/span>:<\/span> <\/span>ami-0de02246788e4a354<\/span><\/span>\n      <\/span>InstanceType<\/span>:<\/span> <\/span>t2.micro<\/span><\/span>\n      <\/span>SubnetId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyPublicSubnet<\/span><\/span>\n      <\/span>SecurityGroupIds<\/span>:<\/span><\/span>\n        <\/span>-<\/span> <\/span>!Ref<\/span> <\/span>MySecurityGroup<\/span><\/span>\n      <\/span>Tags<\/span>:<\/span><\/span>\n        <\/span>-<\/span> <\/span>Key<\/span>:<\/span> <\/span>Name<\/span><\/span>\n          <\/span>Value<\/span>:<\/span> <\/span>TheEC2Instance<\/span><\/span>\n        <\/span>-<\/span> <\/span>Key<\/span>:<\/span> <\/span>Project<\/span><\/span>\n          <\/span>Value<\/span>:<\/span> <\/span>EC2 Instance within a security group that has access to the public internet<\/span><\/span>\n<\/span>\n  <\/span># Creating a security group in which the EC2 instance will be placed<\/span><\/span>\n  <\/span>MySecurityGroup<\/span>:<\/span> <\/span><\/span>\n    <\/span>Type<\/span>:<\/span> <\/span>AWS::EC2::SecurityGroup<\/span><\/span>\n    <\/span>Properties<\/span>:<\/span><\/span>\n      <\/span>GroupDescription<\/span>:<\/span> <\/span>Security group for EC2 instance<\/span><\/span>\n      <\/span>VpcId<\/span>:<\/span> <\/span>!Ref<\/span> <\/span>MyVPC<\/span><\/span>\n      <\/span>SecurityGroupIngress<\/span>:<\/span> <\/span><\/span>\n        <\/span>-<\/span> <\/span>CidrIp<\/span>:<\/span> <\/span>0.0.0.0\/0<\/span><\/span>\n          <\/span>IpProtocol<\/span>:<\/span> <\/span>icmp<\/span> <\/span><\/span>\n          <\/span>FromPort<\/span>:<\/span> <\/span>-1<\/span><\/span>\n          <\/span>ToPort<\/span>:<\/span> <\/span>-1<\/span><\/span><\/code><\/pre><\/div>\n","protected":false},"excerpt":{"rendered":"
I like learning new stuff. Which is why I invest time and moneys into courses. I really enjoy courses where you are forced into rolling up your own sleeves in order to create something. Recently a course I did allowed me to do a project in AWS CloudFormation. Using a YAML CloudFormation template, I created…<\/p>\n
Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[43,46,63,45],"class_list":["post-463","post","type-post","status-publish","format-standard","hentry","category-blog","tag-aws","tag-cloudformation","tag-project","tag-yaml"],"_links":{"self":[{"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/posts\/463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/comments?post=463"}],"version-history":[{"count":2,"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/posts\/463\/revisions"}],"predecessor-version":[{"id":465,"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/posts\/463\/revisions\/465"}],"wp:attachment":[{"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/media?parent=463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/categories?post=463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datadandies.nl\/index.php\/wp-json\/wp\/v2\/tags?post=463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}