EC2Instance:\n Type: AWS::EC2::Instance\n Properties:\n InstanceType:\n Ref: InstanceType\n SecurityGroups:\n - Ref: InstanceSecurityGroup\n KeyName:\n Ref: KeyName\n ImageId:\n Fn::FindInMap:\n - AWSRegionArch2AMI\n - Ref: AWS::Region\n - Fn::FindInMap:\n - AWSInstanceType2Arch\n - Ref: InstanceType\n - Arch\n<\/code><\/pre>\n\n\n\nV\u00ed d\u1ee5 n\u00e0y r\u1ea5t ph\u00f9 h\u1ee3p v\u1edbi t\u00e0i li\u1ec7u tham kh\u1ea3o template AWS CloudFormation v\u00e0 AWS Resource Types documentation v\u1ec1 AWS :: EC2 :: Instance. T\u00e0i li\u1ec7u tham kh\u1ea3o s\u1ebd tr\u1edf th\u00e0nh ng\u01b0\u1eddi b\u1ea1n t\u1ed1t nh\u1ea5t c\u1ee7a b\u1ea1n khi b\u1ea1n l\u00e0m vi\u1ec7c v\u1edbi CloudFormation.<\/p>\n\n\n\n
T\u00e0i nguy\u00ean EC2 Instance n\u00e0y tr\u00ecnh b\u00e0y m\u1ed9t v\u00e0i c\u00e1ch s\u1eed d\u1ee5ng Ref. Ref l\u00e0 m\u1ed9t c\u00e1ch \u0111\u1ec3 g\u1ecdi \u0111\u1ebfn c\u00e1c gi\u00e1 tr\u1ecb t\u1eeb c\u00e1c ph\u1ea7n kh\u00e1c c\u1ee7a m\u1eabu. V\u00ed d\u1ee5, Ref: InstanceSecurityGroup g\u1ecdi \u0111\u1ebfn \u0111\u1ebfn t\u00e0i nguy\u00ean duy nh\u1ea5t kh\u00e1c trong m\u1eabu n\u00e0y, nh\u00f3m SecurityGroup s\u1ebd \u0111\u01b0\u1ee3c t\u1ea1o. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 \u0111\u1ecbnh ngh\u0129a c\u1ee7a t\u00e0i nguy\u00ean \u0111\u00f3:<\/p>\n\n\n\n
InstanceSecurityGroup:\n Type: AWS::EC2::SecurityGroup\n Properties:\n GroupDescription: Enable SSH access via port 22\n SecurityGroupIngress:\n - IpProtocol: tcp\n FromPort: '22'\n ToPort: '22'\n CidrIp:\n Ref: SSHLocation\n\n<\/code><\/pre>\n\n\n\nRef: InstanceType<\/code> c\u0169ng \u0111\u1ec1 c\u1eadp \u0111\u1ebfn nh\u1eefng tham s\u1ed1 InstanceType c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c truy\u1ec1n v\u00e0o. Ph\u1ea7n Tham s\u1ed1 level cao nh\u1ea5t l\u00e0 n\u01a1i tham s\u1ed1 InstanceType \u0111\u1ebfn t\u1eeb \u0111\u00f3. H\u00e3y xem ph\u1ea7n \u0111\u00f3 c\u1ee7a m\u1ee5c Parameter:<\/p>\n\n\n\nParameters:\n KeyName:\n Description: Name of an existing EC2 KeyPair to enable SSH access to the instance\n Type: AWS::EC2::KeyPair::KeyName\n ConstraintDescription: must be the name of an existing EC2 KeyPair.\n InstanceType:\n Description: WebServer EC2 instance type\n Type: String\n Default: t2.small\n AllowedValues:\n - t1.micro\n - t2.nano\n - t2.micro\n - t2.small\n - t2.medium\n<\/code><\/pre>\n\n\n\nB\u1ea1n c\u00f3 th\u1ec3 th\u1ea5y r\u1eb1ng tham s\u1ed1 m\u1eb7c \u0111\u1ecbnh cho ki\u1ec3u Instance EC2 \u0111\u1ec3 kh\u1edfi t\u1ea1o l\u00e0 t2.small. B\u1ea1n c\u00f3 th\u1ec3 ghi \u0111\u00e8 gi\u00e1 tr\u1ecb n\u00e0y khi b\u1ea1n kh\u1edfi \u0111\u1ed9ng instance n\u1ebfu b\u1ea1n mu\u1ed1n. \u0110\u1ed1i v\u1edbi c\u00e1c tham s\u1ed1 c\u00f3 gi\u00e1 tr\u1ecb m\u1eb7c \u0111\u1ecbnh, b\u1ea1n kh\u00f4ng c\u1ea7n ph\u1ea3i cung c\u1ea5p tham s\u1ed1. \u0110\u1ed1i v\u1edbi c\u00e1c tham s\u1ed1 kh\u00f4ng c\u00f3 gi\u00e1 tr\u1ecb m\u1eb7c \u0111\u1ecbnh, b\u1ea1n s\u1ebd c\u1ea7n ph\u1ea3i cung c\u1ea5p gi\u00e1 tr\u1ecb. Trong template c\u1ee5 th\u1ec3 n\u00e0y, tham s\u1ed1 b\u1eaft bu\u1ed9c duy nh\u1ea5t l\u00e0 KeyName<\/code>. KeyName<\/code> l\u00e0 s\u1eed d\u1ee5ng ssh key \u0111\u1ec3 truy c\u1eadp v\u00e0o instance. B\u1ea1n c\u00f3 th\u1ec3 t\u1ea1o kh\u00f3a ssh b\u1eb1ng menu EC2 Console trong \u201cKey Pairs\u201d. V\u1edbi h\u01b0\u1edbng d\u1eabn n\u00e0y, t\u00f4i \u0111\u00e3 t\u1ea1o ra m\u1ed9t tutorial keypair v\u00e0 s\u1ebd s\u1eed d\u1ee5ng n\u00f3.<\/p>\n\n\n\nB\u1eadt Stack<\/h2>\n\n\n\n
Cu\u1ed1i c\u00f9ng, ta h\u00e3y c\u00f9ng nhau b\u1eadt stack l\u00ean th\u1eed xem sao!<\/p>\n\n\n\n
$ aws cloudformation create-stack --template-body file:\/\/templates\/single_instance.yml --stack-name single-instance --parameters ParameterKey=KeyName,ParameterValue=tutorial ParameterKey=InstanceType,ParameterValue=t2.micro\n<\/code><\/pre>\n\n\n\nSau khi b\u1eadt th\u00e0nh c\u00f4ng Stack CloudFormation, b\u1eadn s\u1ebd th\u1ea5y output gi\u1ed1ng nh\u01b0 sau:<\/p>\n\n\n\n
{\n \"StackId\": \"arn:aws:cloudformation:us-west-2:1606191131234:stack\/single-instance\/3401e900-3d83-11e7-bb7e-503f2a2cee4a\"\n}\n<\/code><\/pre>\n\n\n\n\u0110\u1ec3 ki\u1ec3m tra tr\u1ea1ng th\u00e1i c\u1ee7a stack m\u1edbi b\u1eadt, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng console c\u1ee7a AWS CloudFormation v\u00e0 \u1ea5n v\u00e0o Tab Events sau khi ch\u1ecdn t\u00ean Stack. N\u00f3 s\u1ebd gi\u1ed1ng nh\u01b0 sau:![\"\"](\"https:\/\/images.viblo.asia\/60351d35-05b5-4b1b-9983-e5712658d4ae.png\")
<\/p>\n\n\n\n
B\u1ea1n c\u00f3 th\u1ec3 th\u1ea5y r\u1eb1ng EC2 Instance v\u00e0 nh\u00f3m EC2 Security \u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o ch\u1ec9 trong v\u00f2ng kho\u1ea3ng m\u1ed9t ph\u00fat. Ti\u1ebfp theo, h\u00e3y t\u00ecm instance \u0111ang ch\u1ea1y \u0111\u1ec3 ta c\u00f3 th\u1ec3 l\u1ea5y public DNS \u0111\u1ec3 \u0111\u0103ng nh\u1eadp. Ta c\u00f3 th\u1ec3 t\u00ecm th\u1ea5y tr\u00ean Console EC2.![\"\"](\"https:\/\/images.viblo.asia\/3c699baa-8661-4f0e-906d-01383318a9ed.png\")
<\/p>\n\n\n\n
H\u00e3y ssh v\u00e0o instance s\u1eed d\u1ee5ng th\u00f4ng tin DNS \u1edf tr\u00ean<\/p>\n\n\n\n
$ ssh -i ~\/.ssh\/tutorial.pem ec2-user@ec2\u201354\u201371\u2013197\u2013155.us-west-2.compute.amazonaws.com\n$ uptime\n<\/code><\/pre>\n\n\n\nCh\u00fac m\u1eebng b\u1ea1n \u0111\u00e3 b\u1eadt th\u00e0nh c\u00f4ng instance EC2 CloudFormation v\u00e0 ssh \u0111\u01b0\u1ee3c v\u00e0o n\u00f3!<\/p>\n\n\n\n
Clean up<\/h2>\n\n\n\n
Ta h\u00e3y c\u00f9ng xo\u00e1 resource v\u1eeba t\u1ea1o, \u0111\u1ec3 b\u1ea1n kh\u00f4ng ph\u1ea3i m\u1ea5t th\u00eam kho\u1ea3n ti\u1ec1n n\u00e0o ch\u1ea1y n\u00f3 n\u1eefa. Vi\u1ec7c n\u00e0y r\u1ea5t \u0111\u01a1n gi\u1ea3n:<\/p>\n\n\n\n
aws cloudformation delete-stack --stack-name single-instance\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"Cloud formation l\u00e0 g\u00ec? C\u00e1ch d\u1ec5 nh\u1ea5t \u0111\u1ec3 m\u00f4 t\u1ea3 CloudFormation l\u00e0 n\u00f3 l\u00e0 m\u1ed9t c\u00f4ng c\u1ee5 t\u1eeb AWS cho ph\u00e9p b\u1ea1n kh\u1edfi t\u1ea1o t\u00e0i nguy\u00ean m\u1ed9t c\u00e1ch d\u1ec5 d\u00e0ng. B\u1ea1n x\u00e1c \u0111\u1ecbnh t\u1ea5t c\u1ea3 c\u00e1c t\u00e0i nguy\u00ean m\u00e0 b\u1ea1n mu\u1ed1n AWS b\u1eadt l\u00ean trong m\u1ed9t b\u1ea3n thi\u1ebft k\u1ebf chi ti\u1ebft, b\u1ea5m v\u00e0o m\u1ed9t n\u00fat, […]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[122,128,126],"tags":[172,152,131,171,130],"class_list":["post-2044","post","type-post","status-publish","format-standard","hentry","category-blog","category-tech","category-tutor","tag-automation","tag-aws","tag-cloud-computing","tag-cloudformation","tag-dien-toan-dam-may"],"_links":{"self":[{"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/posts\/2044"}],"collection":[{"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/comments?post=2044"}],"version-history":[{"count":1,"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/posts\/2044\/revisions"}],"predecessor-version":[{"id":2045,"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/posts\/2044\/revisions\/2045"}],"wp:attachment":[{"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/media?parent=2044"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/categories?post=2044"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/uetacad.com\/wp-json\/wp\/v2\/tags?post=2044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}