【第40回】AWS CloudFormationを用いた基盤自動化(20)継続的インテグレーション環境の構築(1)¶

AWSTemplateFormatVersion: '2010-09-09'

# omit

Resources:
  ECSRole:
    Type: AWS::IAM::Role
    Properties:
      Path: /
      AssumeRolePolicyDocument:
        Statement:
          - Action: sts:AssumeRole
            Effect: Allow
            Principal:
              Service: ec2.amazonaws.com
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role
        - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore

# omit

PublicECSLaunchConfiguration:
  Type: AWS::AutoScaling::LaunchConfiguration
  Properties:
    ImageId: !Ref ECSAMI
    InstanceType: !FindInMap [PublicClusterDefinitionMap, Instance, InstanceType]
    IamInstanceProfile: !Ref IamInstanceProfile
    SecurityGroups:
      - Fn::ImportValue: !Sub ${VPCName}-SecurityGroupPublicEcsCluster
    AssociatePublicIpAddress: true
    UserData:
      Fn::Base64: !Sub |
        #!/bin/bash -xe
        echo ECS_CLUSTER=${PublicECSCluster} >> /etc/ecs/ecs.config
        yum install -y aws-cfn-bootstrap jq
        # Get the current region from the instance metadata
        region=$(curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | jq -r .region)
        # Install the SSM agent RPM
        yum install -y https://amazon-ssm-${AWS::Region}.s3.amazonaws.com/latest/linux_amd64/amazon-ssm-agent.rpm
        /opt/aws/bin/cfn-signal -e $? --stack ${AWS::StackName} --resource PublicECSAutoScalingGroup --region ${AWS::Region}

 # omit