Membuat sumber daya Amazon ECS menggunakan AWS CLI perintah untuk AWS CloudFormation

Tutorial berikut menunjukkan bagaimana Anda dapat menggunakan AWS CLI untuk membuat sumber daya Amazon ECS dengan AWS CloudFormation template.

Prasyarat

• Langkah-langkah di Siapkan untuk menggunakan Amazon ECS telah diselesaikan.

• Pengguna IAM Anda memiliki izin yang diperlukan yang ditentukan dalam contoh kebijakan Amazonecs_ FullAccess IAM.

Langkah 1: Buat tumpukan

Untuk membuat tumpukan menggunakan AWS CLI, ikuti langkah-langkah ini.

1. Menggunakan editor teks pilihan Anda, buat file bernamaecs-tutorial-template.yaml.

2. Dalam ecs-tutorial-template.yaml file, tempel template berikut dan simpan perubahannya.

   AWSTemplateFormatVersion: 2010-09-09
   Description: A template that deploys an application that is built on an Apache web server Docker image by creating an Amazon ECS cluster, task definition, and service. The template also creates networking and logging resources, and an Amazon ECS task execution role.
   Parameters:
     ClusterName:
       Type: String
       Default: CFNCluster
       Description: Name of the ECS Cluster
     TaskFamily:
       Type: String
       Default: task-definition-cfn
       Description: Family name for the Task Definition
     ServiceName:
       Type: String
       Default: cfn-service
       Description: Name of the ECS Service
     ContainerImage:
       Type: String
       Default: public.ecr.aws/docker/library/httpd:2.4
       Description: Container image to use for the task
     TaskCpu:
       Type: Number
       Default: 256
       AllowedValues: [256, 512, 1024, 2048, 4096]
       Description: CPU units for the task
     TaskMemory:
       Type: Number
       Default: 512
       AllowedValues: [512, 1024, 2048, 4096, 8192, 16384]
       Description: Memory (in MiB) for the task
     DesiredCount:
       Type: Number
       Default: 1
       Description: Desired number of tasks to run
     LogGroupName:
       Type: String
       Default: /ecs/fargate-task-definition
       Description: CloudWatch Log Group name
     VpcCidr:
       Type: String
       Default: 10.0.0.0/16
       Description: CIDR block for the VPC
     PublicSubnet1Cidr:
       Type: String
       Default: 10.0.0.0/24
       Description: CIDR block for public subnet 1
     PublicSubnet2Cidr:
       Type: String
       Default: 10.0.1.0/24
       Description: CIDR block for public subnet 2
   Resources:
     # VPC and Networking Resources
     VPC:
       Type: AWS::EC2::VPC
       Properties:
         CidrBlock: !Ref VpcCidr
         EnableDnsSupport: true
         EnableDnsHostnames: true
         Tags:
           - Key: Name
             Value: !Sub ${AWS::StackName}-VPC
     InternetGateway:
       Type: AWS::EC2::InternetGateway
       Properties:
         Tags:
           - Key: Name
             Value: !Sub ${AWS::StackName}-IGW
     InternetGatewayAttachment:
       Type: AWS::EC2::VPCGatewayAttachment
       Properties:
         InternetGatewayId: !Ref InternetGateway
         VpcId: !Ref VPC
     PublicSubnet1:
       Type: AWS::EC2::Subnet
       Properties:
         VpcId: !Ref VPC
         AvailabilityZone: !Select [0, !GetAZs '']
         CidrBlock: !Ref PublicSubnet1Cidr
         MapPublicIpOnLaunch: true
         Tags:
           - Key: Name
             Value: !Sub ${AWS::StackName}-PublicSubnet1
     PublicSubnet2:
       Type: AWS::EC2::Subnet
       Properties:
         VpcId: !Ref VPC
         AvailabilityZone: !Select [1, !GetAZs '']
         CidrBlock: !Ref PublicSubnet2Cidr
         MapPublicIpOnLaunch: true
         Tags:
           - Key: Name
             Value: !Sub ${AWS::StackName}-PublicSubnet2
     PublicRouteTable:
       Type: AWS::EC2::RouteTable
       Properties:
         VpcId: !Ref VPC
         Tags:
           - Key: Name
             Value: !Sub ${AWS::StackName}-PublicRouteTable
     DefaultPublicRoute:
       Type: AWS::EC2::Route
       DependsOn: InternetGatewayAttachment
       Properties:
         RouteTableId: !Ref PublicRouteTable
         DestinationCidrBlock: 0.0.0.0/0
         GatewayId: !Ref InternetGateway
     PublicSubnet1RouteTableAssociation:
       Type: AWS::EC2::SubnetRouteTableAssociation
       Properties:
         RouteTableId: !Ref PublicRouteTable
         SubnetId: !Ref PublicSubnet1
     PublicSubnet2RouteTableAssociation:
       Type: AWS::EC2::SubnetRouteTableAssociation
       Properties:
         RouteTableId: !Ref PublicRouteTable
         SubnetId: !Ref PublicSubnet2
     # Security Group
     ECSSecurityGroup:
       Type: AWS::EC2::SecurityGroup
       Properties:
         GroupDescription: Security group for ECS tasks
         VpcId: !Ref VPC
         SecurityGroupIngress:
           - IpProtocol: tcp
             FromPort: 80
             ToPort: 80
             CidrIp: 0.0.0.0/0
           - IpProtocol: tcp
             FromPort: 443
             ToPort: 443
             CidrIp: 0.0.0.0/0
     # IAM Roles
     ECSTaskExecutionRole:
       Type: AWS::IAM::Role
       Properties:
         AssumeRolePolicyDocument:
           Version: '2012-10-17'
           Statement:
             - Effect: Allow
               Principal:
                 Service: ecs-tasks.amazonaws.com
               Action: sts:AssumeRole
         ManagedPolicyArns:
           - arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy
     # CloudWatch Logs
     TaskLogGroup:
       Type: AWS::Logs::LogGroup
       DeletionPolicy: Retain
       UpdateReplacePolicy: Retain
       Properties:
         LogGroupName: !Ref LogGroupName
         RetentionInDays: 30
     # ECS Resources
     ECSCluster:
       Type: AWS::ECS::Cluster
       Properties:
         ClusterName: !Ref ClusterName
     ECSTaskDefinition:
       Type: AWS::ECS::TaskDefinition
       Properties:
         ContainerDefinitions:
           - Command:
               - >-
                 /bin/sh -c "echo '<html> <head> <title>Amazon ECS Sample
                 App</title> <style>body {margin-top: 40px; background-color:
                 #333;} </style> </head><body> <div
                 style=color:white;text-align:center> <h1>Amazon ECS Sample
                 App</h1> <h2>Congratulations!</h2> <p>Your application is now
                 running on a container in Amazon ECS.</p> </div></body></html>' > 
                 /usr/local/apache2/htdocs/index.html && httpd-foreground"s
             EntryPoint:
               - sh
               - '-c'
             Essential: true
             Image: !Ref ContainerImage
             LogConfiguration:
               LogDriver: awslogs
               Options:
                 mode: non-blocking
                 max-buffer-size: 25m
                 awslogs-create-group: 'true'
                 awslogs-group: !Ref LogGroupName
                 awslogs-region: !Ref 'AWS::Region'
                 awslogs-stream-prefix: ecs
             Name: sample-fargate-app
             PortMappings:
               - ContainerPort: 80
                 HostPort: 80
                 Protocol: tcp
         Cpu: !Ref TaskCpu
         ExecutionRoleArn: !GetAtt ECSTaskExecutionRole.Arn
         Family: !Ref TaskFamily
         Memory: !Ref TaskMemory
         NetworkMode: awsvpc
         RequiresCompatibilities:
           - FARGATE
         RuntimePlatform:
           OperatingSystemFamily: LINUX
     ECSService:
       Type: AWS::ECS::Service
       DependsOn: 
         - PublicSubnet1RouteTableAssociation
         - PublicSubnet2RouteTableAssociation
       Properties:
         ServiceName: !Ref ServiceName
         Cluster: !Ref ECSCluster
         DesiredCount: !Ref DesiredCount
         LaunchType: FARGATE
         NetworkConfiguration:
           AwsvpcConfiguration:
             AssignPublicIp: ENABLED
             SecurityGroups:
               - !Ref ECSSecurityGroup
             Subnets:
               - !Ref PublicSubnet1
               - !Ref PublicSubnet2
         TaskDefinition: !Ref ECSTaskDefinition
   Outputs:
     ClusterName:
       Description: The name of the ECS cluster
       Value: !Ref ECSCluster    
     TaskDefinitionArn:
       Description: The ARN of the task definition
       Value: !Ref ECSTaskDefinition  
     ServiceName:
       Description: The name of the ECS service
       Value: !Ref ECSService  
     VpcId:
       Description: The ID of the VPC
       Value: !Ref VPC
     PublicSubnet1:
       Description: The ID of public subnet 1
       Value: !Ref PublicSubnet1 
     PublicSubnet2:
       Description: The ID of public subnet 2
       Value: !Ref PublicSubnet2
     SecurityGroup:
       Description: The ID of the security group
       Value: !Ref ECSSecurityGroup
     ExecutionRoleArn:
       Description: The ARN of the task execution role
       Value: !GetAtt ECSTaskExecutionRole.Arn

3. Setelah membuat file template, gunakan perintah berikut untuk membuat tumpukan. --capabilitiesBendera diperlukan untuk membuat peran eksekusi tugas Amazon ECS seperti yang ditentukan dalam template. Anda juga dapat menentukan --parameters bendera untuk menyesuaikan parameter template.

   aws cloudformation create-stack \
         --stack-name ecs-stack \
         --template-body file://ecs-tutorial-template.yaml \
         --capabilities CAPABILITY_IAM
   

Langkah 2: Verifikasi pembuatan sumber daya

Untuk memastikan bahwa sumber daya dibuat dengan benar, ikuti langkah-langkah ini. Anda juga dapat memeriksa konsol Amazon ECS.

1. Jalankan perintah berikut untuk mencantumkan semua definisi tugas dalam an Wilayah AWS.

   aws ecs list-task-definitions

   Perintah mengembalikan daftar definisi tugas Amazon Resource Name (ARN) s. ARN definisi tugas yang Anda buat menggunakan template akan ditampilkan dalam format berikut.

   {
       "taskDefinitionArns": [
        .....
           "arn:aws:ecs:aws-region:111122223333:task-definition/task-definition-cfn:1",
        .....   
       ]
   }

2. Jalankan perintah berikut untuk mencantumkan semua cluster dalam file Wilayah AWS.

   aws ecs list-clusters

   Perintah mengembalikan daftar cluster ARNs. ARN dari cluster yang Anda buat menggunakan template akan ditampilkan dalam format berikut.

   {
       "clusterArns": [
           .....
           "arn:aws:ecs:aws-region:111122223333:cluster/CFNCluster",
           .....
       ]
   }

3. Jalankan perintah berikut untuk daftar semua layanan di clusterCFNCluster.

   aws ecs list-services \
         --cluster CFNCluster

   Perintah mengembalikan daftar layanan ARNs. ARN layanan yang Anda buat menggunakan template akan ditampilkan dalam format berikut.

   {
       "serviceArns": [
           "arn:aws:ecs:aws-region:111122223333:service/CFNCluster/cfn-service"
       ]
   }

Langkah 3: Bersihkan

Untuk membersihkan sumber daya yang Anda buat, jalankan perintah berikut.

aws cloudformation delete-stack \
      --stack-name ecs-stack

delete-stackPerintah memulai penghapusan AWS CloudFormation tumpukan yang dibuat dalam tutorial ini, menghapus semua sumber daya di tumpukan. Untuk memverifikasi penghapusan, Anda dapat mengulangi prosedur di. Langkah 2: Verifikasi pembuatan sumber daya Daftar ARNs dalam output tidak akan lagi menyertakan definisi tugas yang disebut task-definition-cfn atau cluster yang disebutCFNCLuster. list-servicesPanggilan akan gagal.