-
Notifications
You must be signed in to change notification settings - Fork 0
/
infra-template.yml
112 lines (98 loc) · 2.66 KB
/
infra-template.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
AWSTemplateFormatVersion: "2010-09-09"
Description: Base infra
Parameters:
VpcCidr:
Description: VPC CIDR block
Type: String
Default: 10.192.0.0/16
Resources:
VPC:
Type: AWS::EC2::VPC
Properties:
CidrBlock: !Ref VpcCidr
EnableDnsSupport: true
EnableDnsHostnames: true
Tags:
- Key: Name
Value: Airflow VPC
InternetGateway:
Type: AWS::EC2::InternetGateway
Properties:
Tags:
- Key: Name
Value: Airflow IG
InternetGatewayAttachment:
Type: AWS::EC2::VPCGatewayAttachment
Properties:
InternetGatewayId: !Ref InternetGateway
VpcId: !Ref VPC
InfraBucket:
Type: AWS::S3::Bucket
Properties:
BucketName: !Sub infra.${AWS::Region}.${AWS::AccountId}
VersioningConfiguration:
Status: Enabled
PublicAccessBlockConfiguration:
BlockPublicAcls: true
BlockPublicPolicy: true
IgnorePublicAcls: true
RestrictPublicBuckets: true
DataLakeBucket:
Type: AWS::S3::Bucket
Properties:
BucketName: !Sub data-lake.${AWS::Region}.${AWS::AccountId}
VersioningConfiguration:
Status: Enabled
PublicAccessBlockConfiguration:
BlockPublicAcls: true
BlockPublicPolicy: true
IgnorePublicAcls: true
RestrictPublicBuckets: true
BucketWritePolicy:
Type: AWS::IAM::ManagedPolicy
DependsOn: InfraBucket
Properties:
PolicyDocument:
Version: 2012-10-17
Statement:
- Effect: Allow
Action:
- s3:PutObject*
- s3:DeleteObject
- s3:GetBucketLocation
- s3:GetObject
- s3:ListBucket
Resource:
- !GetAtt InfraBucket.Arn
- !Sub ${InfraBucket.Arn}/*
Outputs:
VpcId:
Description: Main VPC id
Value: !Ref VPC
Export:
Name: !Sub ${AWS::StackName}-VpcId
InternetGatewayId:
Description: Main internet gateway id
Value: !Ref InternetGateway
Export:
Name: !Sub ${AWS::StackName}-InternetGatewayId
InfraBucketName:
Description: Infra bucket name
Value: !Ref InfraBucket
Export:
Name: !Sub ${AWS::StackName}-InfraBucketName
InfraBucketArn:
Description: Infra bucket ARN
Value: !GetAtt InfraBucket.Arn
Export:
Name: !Sub ${AWS::StackName}-InfraBucketArn
DataLakeBucketName:
Description: Data lake bucket name
Value: !Ref DataLakeBucket
Export:
Name: !Sub ${AWS::StackName}-DataLakeBucketName
DataLakeBucketArn:
Description: Data lake bucket ARN
Value: !GetAtt DataLakeBucket.Arn
Export:
Name: !Sub ${AWS::StackName}-DataLakeBucketArn