使用 Amazon CloudFormation 构建 CI/CD 管道以改进 IaC

# go to the root folder of the repo and run following

$ cd 3-tier-app/
$ wget https://raw.githubusercontent.com/build-on-aws/ci-cd-iac-aws-cloudformation/main/cloudformation-templates/VPC_AutoScaling_With_Public_IPs.json

# check git status
$ git status

# add changed files, commit and push to the git repo
$ git add . -A
$ git commit -m "Uploading first CloudFormation template"
$ git push

$ git status
On branch main
Your branch is up to date with 'origin/main'.

Untracked files:
 (use "git add <file>..." to include in what will be committed)
 VPC_AutoScaling_With_Public_IPs.json

nothing added to commit but untracked files present (use "git add" to track)

$ git add .
$ git commit -m "Uploading first CloudFormation template"
[main eca3764] Uploading first CloudFormation template
 1 file changed, 560 insertions(+)
 create mode 100644 VPC_AutoScaling_With_Public_IPs.json

$ git push
Enumerating objects: 4, done.
Counting objects: 100% (4/4), done.
Delta compression using up to 2 threads
Compressing objects: 100% (3/3), done.
Writing objects: 100% (3/3), 4.59 KiB | 4.59 MiB/s, done.
Total 3 (delta 0), reused 0 (delta 0), pack-reused 0
remote: Validating objects: 100%
To https://git.us-west-2.codecatalyst.aws/v1/CloudFormation-CodeCatalyst/ThreeTierApp/3-tier-app
 cbbfab7..eca3764 main -> main

# go to the root folder of the repo and run following

mkdir -p .codecatalyst/workflows
touch .codecatalyst/workflows/main_branch.yaml

Name: Main_Branch_Workflow
SchemaVersion: "1.0"

# Optional - Set automatic triggers.
Triggers:
 - Type: Push
 Branches:
 - main

# Required - Define action configurations.
Actions:
 DeployAWSCloudFormationstack_7c:
 Identifier: aws/cfn-deploy@v1
 Configuration:
 parameter-overrides: SSHLocation=54.10.10.2/32,WebServerInstanceType=t2.micro
 capabilities: CAPABILITY_IAM,CAPABILITY_NAMED_IAM,CAPABILITY_AUTO_EXPAND
 template: VPC_AutoScaling_With_Public_IPs.json
 region: us-west-2
 name: PreProdEnvStack
 Timeout: 10
 Environment:
 Connections:
 - Role: main_branch_IAM_role
 Name: "123456789012"
 Name: PreProdEnv
 Inputs:
 Sources:
 - WorkflowSource

$ git add . -A
$ git commit -m "Adding main branch workflow"
$ git push

$ git add . -A
$ git commit -m "Adding main branch workflow"
[main 5677f67] Adding main branch workflow
 1 file changed, 28 insertions(+)
 create mode 100644 .codecatalyst/workflows/main_branch.yaml
$ git push
Enumerating objects: 6, done.
Counting objects: 100% (6/6), done.
Delta compression using up to 2 threads
Compressing objects: 100% (3/3), done.
Writing objects: 100% (5/5), 911 bytes | 455.00 KiB/s, done.
Total 5 (delta 0), reused 0 (delta 0), pack-reused 0
remote: Validating objects: 100%
To https://git.us-west-2.codecatalyst.aws/v1/CloudFormation-CodeCatalyst/ThreeTierApp/3-tier-app
 eca3764..5677f67 main -> main

Name: PR_Branch_Workflow
SchemaVersion: "1.0"

# Optional - Set automatic triggers.
Triggers:
 - Type: PULLREQUEST
 Branches:
 - main
 Events:
 - OPEN
 - REVISION

# Required - Define action configurations.
Actions:
 Super-Linter_0d:
 # Identifies the action. Do not modify this value.
 Identifier: aws/github-actions-runner@v1

 # Specifies the source and/or artifacts to pass to the action as input.
 Inputs:
 # Optional
 Sources:
 - WorkflowSource # This specifies that the action requires this Workflow as a source

 # Defines the action's properties.
 Configuration:
 # Required - Steps are sequential instructions that run shell commands
 # Action URL: https://github.com/marketplace/actions/super-linter
 # Please visit the action URL to look for examples on the action usage.
 # Be aware that a new version of the action could be available on GitHub.
 Steps:
 - name: Lint Code Base
 uses: github/super-linter@v4
 env:
 VALIDATE_CLOUDFORMATION: "true"
 CreateChangeSet:
 Identifier: aws/cfn-deploy@v1
 DependsOn: 
 - Super-Linter_0d 
 Configuration:
 parameter-overrides: SSHLocation=54.10.10.2/32,WebServerInstanceType=t2.micro
 capabilities: CAPABILITY_IAM,CAPABILITY_NAMED_IAM,CAPABILITY_AUTO_EXPAND
 no-execute-changeset: "1"
 template: VPC_AutoScaling_With_Public_IPs.json
 region: us-west-2
 name: PreProdEnvStack
 Timeout: 10
 Environment:
 Connections:
 - Role: pr_branch_IAM_role
 Name: "123456789012"
 Name: PreProdEnv
 Inputs:
 Sources:
 - WorkflowSource

$ git add . -A
$ git commit -m "Adding PR branch workflow"
$ git push

$ git add . -A
$ git commit -m "Adding PR branch workflow"
[main e844b70] Adding PR branch workflow
 1 file changed, 1 insertion(+), 1 deletion(-)
$ git push
Enumerating objects: 9, done.
Counting objects: 100% (9/9), done.
Delta compression using up to 2 threads
Compressing objects: 100% (4/4), done.
Writing objects: 100% (5/5), 451 bytes | 225.00 KiB/s, done.
Total 5 (delta 2), reused 0 (delta 0), pack-reused 0
remote: Validating objects: 100%
To https://git.us-west-2.codecatalyst.aws/v1/CloudFormation-CodeCatalyst/ThreeTierApp/3-tier-app
 d410f15..e844b70 main -> main

$ git checkout -b test-pr-workflow
Switched to a new branch 'test-pr-workflow'

"PublicSubnet3" : {
 "Type" : "AWS::EC2::Subnet",
 "Properties" : {
 "VpcId" : { "Ref" : "VPC" },
 "CidrBlock" : { "Fn::FindInMap" : [ "SubnetConfig", "Public3", "CIDR" ]},
 "AvailabilityZone" : {"Fn::Select": [2, {"Fn::GetAZs": ""}]},
 "Tags" : [
 { "Key" : "Application", "Value" : { "Ref" : "AWS::StackId" } },
 { "Key" : "Network", "Value" : "Public" }
 ]
 }
 },
 "PublicSubnetRouteTableAssociation3" : {
 "Type" : "AWS::EC2::SubnetRouteTableAssociation",
 "Properties" : {
 "SubnetId" : { "Ref" : "PublicSubnet3" },
 "RouteTableId" : { "Ref" : "PublicRouteTable" }
 }
 },
 "PublicSubnetNetworkAclAssociation3" : {
 "Type" : "AWS::EC2::SubnetNetworkAclAssociation",
 "Properties" : {
 "SubnetId" : { "Ref" : "PublicSubnet3" },
 "NetworkAclId" : { "Ref" : "PublicNetworkAcl" }
 }
 },

"Mappings" : {
 "SubnetConfig" : {
 "VPC" : { "CIDR" : "10.0.0.0/16" },
 "Public1" : { "CIDR" : "10.0.0.0/24" },
 "Public2" : { "CIDR" : "10.0.1.0/24" },
 "Public3" : { "CIDR" : "10.0.2.0/24" } 
 },

"WebServerFleet" : {
 "Type" : "AWS::AutoScaling::AutoScalingGroup",
 "DependsOn" : "PublicRoute",
 "Properties" : {
 "VPCZoneIdentifier" : [{ "Ref" : "PublicSubnet1" }, { "Ref" : "PublicSubnet2" }, { "Ref" : "PublicSubnet3" }],

"PublicApplicationLoadBalancer" : {
 "Type" : "AWS::ElasticLoadBalancingV2::LoadBalancer",
 "Properties" : {
 "Subnets" : [ { "Ref" : "PublicSubnet1"}, { "Ref" : "PublicSubnet2" }, { "Ref" : "PublicSubnet3" } ],
 "SecurityGroups" : [ { "Ref" : "PublicLoadBalancerSecurityGroup" } ]
 }
 },

$ git add .
$ git commit -m "Added third public subnet to VPC, RouteTable, NACL, LoadBalancer and ASG"
$ git push --set-upstream origin test-pr-workflow

$ git status
On branch test-pr-workflow
Changes not staged for commit:
 (use "git add <file>..." to update what will be committed)
 (use "git restore <file>..." to discard changes in working directory)
 modified: VPC_AutoScaling_With_Public_IPs.json

no changes added to commit (use "git add" and/or "git commit -a")

$ git add .
$ git commit -m "Added third public subnet to VPC, RouteTable, NACL, LoadBalancer and ASG"
[test-pr-workflow e1a1d0e] Added third public subnet to VPC, RouteTable, NACL, LoadBalancer and ASG
 1 file changed, 33 insertions(+), 4 deletions(-)

$ git push --set-upstream origin test-pr-workflow
Enumerating objects: 5, done.
Counting objects: 100% (5/5), done.
Delta compression using up to 2 threads
Compressing objects: 100% (3/3), done.
Writing objects: 100% (3/3), 467 bytes | 467.00 KiB/s, done.
Total 3 (delta 2), reused 0 (delta 0), pack-reused 0
remote: Validating objects: 100%
To https://git.us-west-2.codecatalyst.aws/v1/CloudFormation-CodeCatalyst/ThreeTierApp/3-tier-app
 * [new branch] test-pr-workflow -> test-pr-workflow
branch 'test-pr-workflow' set up to track 'origin/test-pr-workflow'.

[INFO] --------------------------------------------
[INFO] Gathering user validation information...
[INFO] - Validating ALL files in code base...
[INFO] ----------------------------------------------
[INFO] Linting [CLOUDFORMATION] files...
[INFO] ----------------------------------------------
[INFO] File:[/github/workspace/VPC_AutoScaling_With_Public_IPs.json]
[ERROR] Found errors in [cfn-lint] linter!
[ERROR] Error code: 4. Command output:
------
W7001 Mapping 'AWSInstanceType2NATArch' is defined but not used
/github/workspace/VPC_AutoScaling_With_Public_IPs.json:56:5
------
[INFO] ----------------------------------------------
[INFO] The script has completed
[INFO] ----------------------------------------------
[ERROR] ERRORS FOUND in CLOUDFORMATION:[1]
[FATAL] Exiting with errors found!

"AWSInstanceType2NATArch" : {
 "t1.micro" : { "Arch" : "NATHVM64" },
 "t2.nano" : { "Arch" : "NATHVM64" },
 "t2.micro" : { "Arch" : "NATHVM64" },
 "t2.small" : { "Arch" : "NATHVM64" },
 "t2.medium" : { "Arch" : "NATHVM64" },
 "t2.large" : { "Arch" : "NATHVM64" },
 "m4.large" : { "Arch" : "NATHVM64" },
 "m4.xlarge" : { "Arch" : "NATHVM64" },
 "c1.medium" : { "Arch" : "NATHVM64" }
 },

$ git add .
$ git commit -m "Removed unused AWSInstanceType2NATArch mapping"
$ git push --set-upstream origin test-pr-workflow

$ git add .
$ git commit -m "Removed unused AWSInstanceType2NATArch mapping"
[test-pr-workflow 64a27b5] Removed unused AWSInstanceType2NATArch mapping
 1 file changed, 1 insertion(+), 11 deletions(-)
$ git push --set-upstream origin test-pr-workflow
Enumerating objects: 5, done.
Counting objects: 100% (5/5), done.
Delta compression using up to 2 threads
Compressing objects: 100% (3/3), done.
Writing objects: 100% (3/3), 319 bytes | 159.00 KiB/s, done.
Total 3 (delta 2), reused 0 (delta 0), pack-reused 0
remote: Validating objects: 100%
To https://git.us-west-2.codecatalyst.aws/v1/CloudFormation-CodeCatalyst/ThreeTierApp/3-tier-app
 1f8e97d..64a27b5 test-pr-workflow -> test-pr-workflow
branch 'test-pr-workflow' set up to track 'origin/test-pr-workflow'.

[INFO] --------------------------------------------
[INFO] Gathering user validation information...
[INFO] - Validating ALL files in code base...
[INFO] ----------------------------------------------
[INFO] Linting [CLOUDFORMATION] files...
[INFO] ----------------------------------------------
[INFO] File:[/github/workspace/VPC_AutoScaling_With_Public_IPs.json]
[INFO] - File:[VPC_AutoScaling_With_Public_IPs.json] was linted
[INFO] ----------------------------------------------
[INFO] The script has completed
[INFO] ----------------------------------------------
[NOTICE] All file(s) linted successfully with no errors detected