sc-portfolio-vpc.json

{
    "AWSTemplateFormatVersion": "2010-09-09",
    "Description": "VPC Portfolio for Service Catalog. (fdp-1p4da46pn)",
    "Metadata": {
        "AWS::CloudFormation::Interface": {
            "ParameterGroups": [
                {
                    "Label": {
                        "default": "Portfolio Information"
                    },
                    "Parameters": [
                        "PortfolioName",
                        "PortfolioProvider",
                        "PortfolioDescription"
                    ]
                },
                {
                    "Label": {
                        "default": "IAM Settings"
                    },
                    "Parameters": [
                        "LaunchRoleName",
                        "LinkedRole1",
                        "LinkedRole2",
                        "CreateEndUsers"
                    ]
                } ,
                {
                    "Label": {
                        "default": "Product Settings"
                    },
                    "Parameters": [
                        "RepoRootURL"
                    ]
                }
            ]
        }
    },
    "Parameters":
      {
        "PortfolioProvider": {
            "Type":"String",
            "Description":"Provider Name",
            "Default":"IT Services"
        },
       "PortfolioName": {
            "Type":"String",
            "Description":"Portfolio Name",
            "Default":"Service Catalog VPC Reference Architecture"
        },
        "PortfolioDescription": {
            "Type":"String",
            "Description":"Portfolio Description",
            "Default":"Service Catalog Portfolio that contains reference architecture products for Amazon Virtual Private Cloud."
        },
        "LaunchRoleName": {
            "Type":"String",
            "Description":"Name of the launch constraint role for VPC products. leave this blank to create the role."            
        },
       "LinkedRole1": {
            "Type":"String",
            "Description":"(Optional) The name of a role which can execute products in this portfolio."
        },       
        "LinkedRole2": {
            "Type":"String",
            "Description":"(Optional) The name of a second role which can execute products in this portfolio."
        },
        "RepoRootURL": {
            "Type":"String",
            "Description":"Root url for the repo containing the product templates.",
            "Default":"https://s3.amazonaws.com/aws-service-catalog-reference-architectures/"
        },
        "CreateEndUsers":{
            "Type":"String",
            "Description":"Select Yes to Create the ServiceCatalogEndusers IAM group. No if you have already created the group",
             "AllowedValues": ["Yes","No"],
             "Default":"Yes" 
        }
      },
      "Conditions":{
        "CreateLaunchConstraint" : {"Fn::Equals" : [{"Ref" : "LaunchRoleName"}, ""]},
        "CondCreateEndUsers" : {"Fn::Equals" : [{"Ref" : "CreateEndUsers"}, "Yes"]},
        "CondLinkRole1" : {"Fn::Not" : [ {"Fn::Equals" : [{"Ref" : "LinkedRole1"}, ""]} ]},
        "CondLinkRole2" : {"Fn::Not" : [ {"Fn::Equals" : [{"Ref" : "LinkedRole2"}, ""]} ]}            
    },
    "Resources": {
        "SCVPCportfolio": {
          "Type" : "AWS::ServiceCatalog::Portfolio",
          "Properties" : {
            "ProviderName": {"Ref":"PortfolioProvider"},
            "Description" : {"Ref":"PortfolioDescription"},
            "DisplayName" : {"Ref":"PortfolioName"}
          }
        },
        "addrole1":{
          "Type" : "AWS::ServiceCatalog::PortfolioPrincipalAssociation",
          "Condition":"CondLinkRole1",
          "Properties" : {
            "PrincipalARN" : {"Fn::Sub": "arn:aws:iam::${AWS::AccountId}:role/${LinkedRole1}"},
            "PortfolioId" : {"Ref":"SCVPCportfolio"},
            "PrincipalType" : "IAM"
          }
        },
        "addrole2":{
          "Type" : "AWS::ServiceCatalog::PortfolioPrincipalAssociation",
          "Condition":"CondLinkRole2",
          "Properties" : {
            "PrincipalARN" : {"Fn::Sub": "arn:aws:iam::${AWS::AccountId}:role/${LinkedRole2}" },
            "PortfolioId" : {"Ref":"SCVPCportfolio"},
            "PrincipalType" : "IAM"
          }
        },        
        "stackServiceCatalogEndusers": {
          "Type" : "AWS::CloudFormation::Stack",
          "Condition":"CondCreateEndUsers",
          "Properties" : {
            "TemplateURL" : {"Fn::Sub": "${RepoRootURL}iam/sc-enduser-iam.yml"},
            "TimeoutInMinutes" : 5
          }
        },        
        "LinkEndusersRole":{
          "Type" : "AWS::ServiceCatalog::PortfolioPrincipalAssociation",
          "Properties" : {
            "PrincipalARN" : 
                {"Fn::If" : [
                    "CondCreateEndUsers",
                    {"Fn::GetAtt":["stackServiceCatalogEndusers","Outputs.EndUserRoleArn"]},
                    {"Fn::Sub": "arn:aws:iam::${AWS::AccountId}:role/ServiceCatalogEndusers" }
                ]},
            "PortfolioId" : {"Ref":"SCVPCportfolio"},
            "PrincipalType" : "IAM"
          }
        },
        "LinkEndusersGroup":{
          "Type" : "AWS::ServiceCatalog::PortfolioPrincipalAssociation",
          "Properties" : {
            "PrincipalARN" : 
                {"Fn::If" : [
                    "CondCreateEndUsers",
                    {"Fn::GetAtt":["stackServiceCatalogEndusers","Outputs.EndUserGroupArn"]},
                    {"Fn::Sub": "arn:aws:iam::${AWS::AccountId}:group/ServiceCatalogEndusers" }
                ]},
            "PortfolioId" : {"Ref":"SCVPCportfolio"},
            "PrincipalType" : "IAM"
          }
        },
        "LaunchConstraintRole": {
          "Type" : "AWS::CloudFormation::Stack",
          "Condition":"CreateLaunchConstraint",
          "Properties" : {
            "TemplateURL" : {"Fn::Sub": "${RepoRootURL}iam/sc-ec2vpc-launchrole.yml"},
            "TimeoutInMinutes" : 5
          }
        },        
        "vpcproduct": {
          "Type" : "AWS::CloudFormation::Stack",
          "Properties" : {
            "Parameters" : {         
                "PortfolioProvider": {"Ref":"PortfolioProvider"},
                "LaunchConstraintRole": {"Fn::If" : [
                    "CreateLaunchConstraint",
                    {"Fn::GetAtt":["LaunchConstraintRole","Outputs.LaunchRoleName"]},
                    {"Ref": "LaunchRoleName"}
                ]},
                "PortfolioId":{"Ref":"SCVPCportfolio"},
                "RepoRootURL":{"Ref":"RepoRootURL"}
            },
            "TemplateURL" : {"Fn::Sub": "${RepoRootURL}vpc/sc-product-vpc.json"},
            "TimeoutInMinutes" : 5
          }
        }
        
    },  
    "Outputs": {
        "LaunchConstraintRoleARN":{
          "Condition":"CreateLaunchConstraint",
          "Value": { "Fn::GetAtt":["LaunchConstraintRole", "Outputs.LaunchRoleArn"] } 
        },
        "LaunchConstraintRoleName":{
          "Condition":"CreateLaunchConstraint",
          "Value": { "Fn::GetAtt":["LaunchConstraintRole", "Outputs.LaunchRoleName"] } 
        },
        "vpcproductId":{"Value": { "Fn::GetAtt":["vpcproduct","Outputs.ProductId"]} }
    }
}