This reference architecture creates an AWS Service Catalog Portfolio called "Service Catalog EC2 Reference Architecture" with associated products. The AWS Service Catalog Product references cloudformation templates for the Amazon EC2 Linux and Windows instances which can be launched by end users through AWS Service Catalog. The AWS Service Catalog EC2 product creates either an Amazon Linux or Microsoft Windows EC2 instance in the VPC and Subnets selected by the end user. A Amazon Simple Systems Manager patch baseline, maintenance window and task are created to allow for automated patching of the Amazon Linux and Microsoft Windows operating systems. The Portfolio also includes a Linux webserver Product with either Apache or NGINX versions.
Launch the EC2 portfolio stack:
* If you have already run the VPC template, then you will put the output.LaunchRoleName from the completed LaunchConstraintRole stack in the LaunchRoleName field (default is SCEC2LaunchRole).
Be aware, running this service as demonstrated here is non-SSL http. In production you must protect all web traffic with SSL.
The example templates here cannot create and manage SSL for you, so it must be done as an additional task in your account.
- clone this git repo:
git clone [email protected]:aws-samples/aws-service-catalog-reference-architectures.git - Copy everything in the repo to an S3 bucket:
cd aws-service-catalog-reference-architectures
aws s3 cp . s3://[YOUR-BUCKET-NAME-HERE] --exclude "*" --include "*.json" --include "*.yml" --recursive - In the AWS CloudFormation console choose "Create Stack" and supply the Portfolio S3 url:
https://s3.amazonaws.com/[YOUR-BUCKET-NAME-HERE]/ec2/sc-portfolio-ec2.json - If this is the first portfolio you are creating, then leave LaunchRoleName blank to allow CloudFormation to create the launchconstraint role for you.
- If you have already run the VPC template, then you will put the output.LaunchRoleName from the completed LaunchConstraintRole stack in the LaunchRoleName field (default is SCEC2LaunchRole).
- Set the LinkedRole1 and LinkedRole2 parameters to any additional end user roles you may want to link to the Portfolio.
- Set the CreateEndUsers parameter to No if you have already run a Portfolio stack from this repo (ServiceCatalogEndusers already exists).
- Change the RepoRootURL parameter to your bucket's root url:
https://s3.amazonaws.com/[YOUR-BUCKET-NAME-HERE]/
