AWS CDKを使用したAmazon EC2上でのEthereumノードバリデーターの自動展開

# Install TypeScript globally for CDK
npm i -g typescript

# If you are running these commands in Cloud9 or already have CDK installed, then
# skip this command
npm i -g aws-cdk

# Clone the demo CDK application code
git clone https://github.com/aws-samples/cdk-rocketpool-validator-node

# Change directory
cd cdk-rocketpool-validator-node

# Install the CDK application
npm install

   // Create the instance 
    const ec2Instance = new ec2.Instance(this, 'Instance', {
      vpc,
      instanceType: ec2.InstanceType.of(ec2.InstanceClass.C6G, ec2.InstanceSize.XLARGE2),
      machineImage: ami,
      securityGroup: securityGroup,
      role: role,
      blockDevices: [rootVolume]
    });

# Bootstrap the CDK application for first time
cdk bootstrap

# Deploy the CDK application
cdk deploy


➜ rocketpool-blog git:(main) cdk deploy
This deployment will make potentially sensitive changes according to your current security approval level (—require-approval broadening).
Please confirm you intend to make the following modifications:

IAM Statement Changes
┌───┬──────────────────────────────────┬────────┬──────────────────────────────────┬──────────────────────────────────┬───────────┐
│ │ Resource │ Effect │ Action │ Principal │ Condition │
├───┼──────────────────────────────────┼────────┼──────────────────────────────────┼──────────────────────────────────┼───────────┤
│ + │ ${ec2Role.Arn} │ Allow │ sts:AssumeRole │ Service:ec2.${AWS::URLSuffix} │ │
├───┼──────────────────────────────────┼────────┼──────────────────────────────────┼──────────────────────────────────┼───────────┤
│ + │ arn:${AWS::Partition}:s3:::{"Fn: │ Allow │ s3:GetBucket* │ AWS:${ec2Role} │ │
│ │ :Sub":"cdk-hnb659fds-assets-${AW │ │ s3:GetObject* │ │ │
│ │ S::AccountId}-${AWS::Region}"} │ │ s3:List* │ │ │
│ │ arn:${AWS::Partition}:s3:::{"Fn: │ │ │ │ │
│ │ :Sub":"cdk-hnb659fds-assets-${AW │ │ │ │ │
│ │ S::AccountId}-${AWS::Region}"}/* │ │ │ │ │
└───┴──────────────────────────────────┴────────┴──────────────────────────────────┴──────────────────────────────────┴───────────┘
IAM Policy Changes
┌───┬────────────┬────────────────────────────────────────────────────────────────────┐
│ │ Resource │ Managed Policy ARN │
├───┼────────────┼────────────────────────────────────────────────────────────────────┤
│ + │ ${ec2Role} │ arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore │
└───┴────────────┴────────────────────────────────────────────────────────────────────┘
Security Group Changes
┌───┬──────────────────────────┬─────┬────────────┬─────────────────┐
│ │ Group │ Dir │ Protocol │ Peer │
├───┼──────────────────────────┼─────┼────────────┼─────────────────┤
│ + │ ${SecurityGroup.GroupId} │ In │ TCP 22 │ Everyone (IPv4) │
│ + │ ${SecurityGroup.GroupId} │ Out │ Everything │ Everyone (IPv4) │
└───┴──────────────────────────┴─────┴────────────┴─────────────────┘
(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)

Do you wish to deploy these changes (y/n)? y

CdkRocketpoolValidatorStack: deploying...
[0%] start: Publishing 1e05055f04e0f731f0605c1138bcef8f9b37398dac16b3c617b743b9e9ff1b36:current_account-current_region
[50%] success: Published 1e05055f04e0f731f0605c1138bcef8f9b37398dac16b3c617b743b9e9ff1b36:current_account-current_region
[50%] start: Publishing 83d98b3d48439ff5155c3381d7bb65e8e94aff567b80132f374e41e033c588c9:current_account-current_region
[100%] success: Published 83d98b3d48439ff5155c3381d7bb65e8e94aff567b80132f374e41e033c588c9:current_account-current_region
CdkRocketpoolValidatorStack: creating CloudFormation changeset...
[··························································] (0/18)

10:17:23 PM | CREATE_IN_PROGRESS | AWS::CloudFormation::Stack | CdkRocketpoolValidatorStack

✅ CdkRocketpoolValidatorStack 

Outputs: 
CdkRocketpoolValidatorStack.IPAddress = 3.92.48.208 
CdkRocketpoolValidatorStack.sshcommand = aws ssm start-session --target i-03deeff4f403fa189 —document-name SSM-RocketPoolConfiguration 

Stack ARN:arn:aws:cloudformation:us-east-1:1218594674:stack/CdkRocketpoolValidatorStack/4d31dd40-7979-11ec-a7cb-12

aws ssm start-session --target i-03deeff403fa189 —document-name SSM-RocketPoolConfiguration

Starting session with SessionId: <>
cd ~ && bash
sh-4.2$ cd ~ && bash
[ec2-user@ip-10-0-0-16 ~]$ 

rocketpool service start

rocketpool service config

cdk destroy CdkRocketpoolValidatorStack