cf.json

{
  "AWSTemplateFormatVersion": "2010-09-09",

  "Description": "Resources for mosql-example.",

  "Parameters": {

    "LocalIP": {
      "Description": "Your local IP address.",
      "Type": "String",
      "AllowedPattern": "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}$",
      "MinLength": 8,
      "MaxLength": 16,
      "ConstraintDescription": "Must be a valid IP address."
    },

    "ChartioIP": {
      "Description": "Chartio's IP address.",
      "Type": "String",
      "AllowedPattern": "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}$",
      "MinLength": 8,
      "MaxLength": 16,
      "ConstraintDescription": "Must be a valid IP address.",
      "Default": "173.203.96.249"
    },

    "KeyName": {
      "Description" : "Name of an existing EC2 KeyPair to enable SSH access to workers",
      "Type": "AWS::EC2::KeyPair::KeyName",
      "ConstraintDescription" : "Must be the name of an existing EC2 KeyPair."
    }

  },

  "Mappings" : {

    "AWSRegion2AMI" : {
      "us-east-1"      : { "AMI": "ami-21630d44" },
      "us-west-2"      : { "AMI": "ami-cf3c21ff" },
      "eu-west-1"      : { "AMI": "ami-9d2f0fea" },
      "eu-central-1"   : { "AMI": "ami-6265657f" },
      "ap-southeast-1" : { "AMI": "ami-96c2c8c4" },
      "ap-southeast-2" : { "AMI": "ami-f32b64c9" },
      "ap-northeast-1" : { "AMI": "ami-0841ca08" }
    }

  },

  "Resources": {

    "VPC": {
      "Type": "AWS::EC2::VPC",
      "Properties": {
        "CidrBlock": "10.0.0.0/16",
        "EnableDnsSupport": true,
        "EnableDnsHostnames": true,
        "InstanceTenancy": "default",
        "Tags": [ {
          "Key": "Name",
          "Value": { "Fn::Join" : [ "-", [ { "Ref": "AWS::StackName" }, "VPC" ] ] }
        } ]
      }
    },

    "InternetGateway": {
      "Type": "AWS::EC2::InternetGateway",
      "Properties": {
        "Tags": [ {
          "Key": "Name",
          "Value": { "Fn::Join" : [ "-", [ { "Ref": "AWS::StackName" }, "InternetGateway" ] ] }
        } ]
      }
    },

    "InternetGatewayAttachment": {
      "Type": "AWS::EC2::VPCGatewayAttachment",
      "Properties": {
        "VpcId": { "Ref": "VPC" },
        "InternetGatewayId": { "Ref": "InternetGateway" }
      }
    },

    "Subnet": {
      "Type": "AWS::EC2::Subnet",
      "Properties": {
        "AvailabilityZone": {
          "Fn::Select": [ 0, { "Fn::GetAZs": { "Ref": "AWS::Region" } } ]
        },
        "CidrBlock": "10.0.0.0/24",
        "Tags": [ {
          "Key": "Name",
          "Value": { "Fn::Join" : [ "-", [ { "Ref": "AWS::StackName" }, "Subnet" ] ] }
        } ],
        "VpcId": { "Ref": "VPC" }
      }
    },

    "RouteTable": {
      "Type": "AWS::EC2::RouteTable",
      "Properties": {
        "VpcId": { "Ref": "VPC" },
        "Tags": [ {
          "Key": "Name",
          "Value": { "Fn::Join" : [ "-", [ { "Ref": "AWS::StackName" }, "RouteTable" ] ] }
        } ]
      }
    },

    "RouteTableRoute": {
      "Type": "AWS::EC2::Route",
      "Properties": {
        "RouteTableId": { "Ref": "RouteTable" },
        "DestinationCidrBlock": "0.0.0.0/0",
        "GatewayId": { "Ref": "InternetGateway" }
      }
    },

    "RouteTableSubnetAssociation": {
      "Type": "AWS::EC2::SubnetRouteTableAssociation",
      "Properties": {
        "RouteTableId": { "Ref": "RouteTable" },
        "SubnetId": { "Ref": "Subnet" }
      }
    },

    "SecurityGroup": {
      "Type": "AWS::EC2::SecurityGroup",
      "Properties": {
        "GroupDescription":  "Security group for mosql-example.",
        "SecurityGroupIngress": [
          {
            "IpProtocol": "tcp",
            "FromPort": 22,
            "ToPort": 22,
            "CidrIp": { "Fn::Join": [ "", [ { "Ref": "LocalIP" }, "/32" ] ] }
          },
          {
            "IpProtocol": "tcp",
            "FromPort": 5432,
            "ToPort": 5432,
            "CidrIp": { "Fn::Join": [ "", [ { "Ref": "LocalIP" }, "/32" ] ] }
          },
          {
            "IpProtocol": "tcp",
            "FromPort": 5432,
            "ToPort": 5432,
            "CidrIp": { "Fn::Join": [ "", [ { "Ref": "ChartioIP" }, "/32" ] ] }
          }
        ],
        "SecurityGroupEgress": [
          {
            "IpProtocol": "tcp",
            "FromPort": 0,
            "ToPort": 65535,
            "CidrIp": "0.0.0.0/0"
          }
        ],
        "Tags": [ {
          "Key": "Name",
          "Value": { "Fn::Join" : [ "-", [ { "Ref": "AWS::StackName" }, "SecurityGroup" ] ] }
        } ],
        "VpcId": { "Ref": "VPC" }
      }
    }

  },

  "Outputs": {

    "SubnetId": {
      "Description": "Subnet id",
      "Value": { "Ref": "Subnet" }
    },

    "SubnetAvailabilityZone": {
      "Description": "Subnet availability zone",
      "Value": { "Fn::GetAtt": [ "Subnet", "AvailabilityZone" ] }
    },

    "SecurityGroupId": {
      "Description": "Security group id",
      "Value": { "Ref": "SecurityGroup" }
    },

    "AMI": {
      "Description": "AMI",
      "Value": { "Fn::FindInMap" : [ "AWSRegion2AMI", { "Ref" : "AWS::Region" }, "AMI" ] }
    }

  }
}