AWS-PrivateRDS-Cloudformation.yml

AWSTemplateFormatVersion: 2010-09-09
Description: The CloudFormation template for the Private & Public Subnets with RDS Database.

Parameters:
    Stage:
        Type: String
        Default: dev

Resources:
    # ======================= Private VPC Configuration ====================
    # Create a VPC
    VPC:
        Type: AWS::EC2::VPC
        Properties: 
            CidrBlock: 172.10.0.0/16
            EnableDnsHostnames: True
            EnableDnsSupport: True
            Tags:
                - 
                    Key: name
                    Value: !Join ['-', [!Ref Stage, !Ref 'AWS::AccountId', 'VPC']]
  
    # Create a Subnet
    PrivateSubnetA:
        Type: AWS::EC2::Subnet
        Properties:
            CidrBlock: 172.10.2.0/24
            VpcId: !Ref VPC
            AvailabilityZone: !Join ['', [!Ref "AWS::Region", 'a']]
            Tags:
                - 
                    Key: name
                    Value: !Join ['', [!Ref Stage, !Ref 'AWS::AccountId', 'PrivateSubnetA']]
  
    # Create a Subnet
    PrivateSubnetB:
        Type: AWS::EC2::Subnet
        Properties:
            CidrBlock: 172.10.1.0/24
            VpcId: !Ref VPC
            AvailabilityZone: !Join ['', [!Ref "AWS::Region", 'b']]
            Tags:
                - 
                    Key: name
                    Value: !Join ['', [!Ref Stage, !Ref 'AWS::AccountId', 'PrivateSubnetB']]
  
    # Create a Subnet
    PublicSubnetA:
        Type: AWS::EC2::Subnet
        Properties:
            CidrBlock: 172.10.3.0/24
            VpcId: !Ref VPC
            AvailabilityZone: !Join ['', [!Ref "AWS::Region", 'a']]
            Tags:
                - 
                    Key: name
                    Value: !Join ['', [!Ref Stage, !Ref 'AWS::AccountId', 'PublicSubnetA']]
  
    # Create a Route Table. This will contain a route out to Internet Gateway 
    PublicRouteTable:
        Type: AWS::EC2::RouteTable
        Properties:
            VpcId: !Ref VPC
  
    # Create a Route Table. This will contain a route out to NAT Gateway 
    PrivateRouteTable:
        Type: AWS::EC2::RouteTable
        Properties:
            VpcId: !Ref VPC
  
    # Attach Subnet to Route Table
    PrivateSubnetBPrivateRouteAssociation:
        Type: AWS::EC2::SubnetRouteTableAssociation
        Properties: 
            RouteTableId: !Ref PrivateRouteTable
            SubnetId: !Ref PrivateSubnetB
  
    # Attach Subnet to Route Table
    PrivateSubnetAPrivateRouteAssociation:
        Type: AWS::EC2::SubnetRouteTableAssociation
        Properties: 
            RouteTableId: !Ref PrivateRouteTable
            SubnetId: !Ref PrivateSubnetA
  
    # Attach Subnet to Route Table
    SubnetAPublicRouteAssociation:
        Type: AWS::EC2::SubnetRouteTableAssociation
        Properties: 
            RouteTableId: !Ref PublicRouteTable
            SubnetId: !Ref PublicSubnetA
  
    # Creat a security group and open port 80 and 443 in bound and out bound
    SecurityGroup:
        Type: AWS::EC2::SecurityGroup
        Properties:
            GroupDescription: !Join ['-', [!Ref Stage, !Ref 'AWS::AccountId', 'SecurityGroup']]
            VpcId: !Ref VPC
            SecurityGroupIngress:
                -   IpProtocol: tcp
                    FromPort: 80
                    ToPort: 80
                    CidrIp: 0.0.0.0/0
                -   IpProtocol: tcp
                    FromPort: 443
                    ToPort: 443
                    CidrIp: 0.0.0.0/0
            SecurityGroupEgress:
                -   IpProtocol: tcp
                    FromPort: 80
                    ToPort: 80
                    CidrIp: 0.0.0.0/0
                -   IpProtocol: tcp
                    FromPort: 443
                    ToPort: 443
                    CidrIp: 0.0.0.0/0
                -   IpProtocol: tcp
                    FromPort: 3306
                    ToPort: 3306
                    CidrIp: 0.0.0.0/0
      
    # Creat a security group for the database and open port 3306 for mysql access from EC2 Security Group
    DBSecurityGroup:
        DependsOn: SecurityGroup                                
        Type: AWS::EC2::SecurityGroup
        Properties:
            GroupDescription: !Join ['-', [!Ref Stage, !Ref 'AWS::AccountId', 'DBSecurityGroup']]
            VpcId: !Ref VPC
            SecurityGroupIngress:
                -   IpProtocol: tcp
                    FromPort: 3306
                    ToPort: 3306
                    SourceSecurityGroupId: !Ref SecurityGroup
            SecurityGroupEgress:
                -   IpProtocol: tcp
                    FromPort: 3306
                    ToPort: 3306
                    SourceSecurityGroupId: !Ref SecurityGroup
  
    # Create an Internet Gateway
    InternetGateway:
        Type: AWS::EC2::InternetGateway
  
    # Attach the internet gateway to the VPC
    VPCInternetGatewayAttachment:
        Type: AWS::EC2::VPCGatewayAttachment
        Properties: 
            InternetGatewayId: !Ref InternetGateway
            VpcId: !Ref VPC
  
    # Create a route out to Internet Gateway
    PublicRoute:
        Type: AWS::EC2::Route
        DependsOn: VPCInternetGatewayAttachment
        Properties:
            RouteTableId: !Ref PublicRouteTable
            DestinationCidrBlock: 0.0.0.0/0
            GatewayId: !Ref InternetGateway
    # ======================= Private VPC Configuration ====================

    # ======================= Database Configuration ====================
    DBSubnetGroup:
        Type: AWS::RDS::DBSubnetGroup
        Properties: 
            DBSubnetGroupDescription: !Join ['-', [!Ref Stage, !Ref 'AWS::AccountId', 'TestDBSubnetGroup']]
            DBSubnetGroupName: !Join ['-', [!Ref Stage, !Ref 'AWS::AccountId', 'TestDBSubnetGroup']]
            SubnetIds: 
                - !Ref PrivateSubnetA
                - !Ref PrivateSubnetB
  
    RDSDatabase:
        Type: AWS::RDS::DBInstance
        Properties:
            AllocatedStorage: 100
            DBInstanceClass : db.t2.micro
            Engine : MySQL
            Iops : 1000
            MasterUsername : admin
            MasterUserPassword : 12345678
            DBInstanceIdentifier: !Join ['-', [!Ref Stage, !Ref 'AWS::AccountId', 'TestDBInstance']]
            DBName: !Join ['', [!Ref Stage, !Ref 'AWS::AccountId', 'TestDB']]
            VPCSecurityGroups:
                - !Ref DBSecurityGroup
            DBSubnetGroupName: !Ref DBSubnetGroup
    # ======================= Database Configuration ====================