cf-infra-us-west-2.yaml

Description: Test CloudFormation template for VPC infrastructure 

Parameters: 
  EnvironmentName:
    Description: Test
    Type: String
  
  VpcCIDR:
    Description: Please enter a subnet for your VPC
    Type: String
    Default: 10.30.0.0/16
  
  PublicSubnet1CIDR:
    Description: Please enter a subnet for your Public Subnet 1
    Type: String
    Default: 10.30.0.0/24

  PublicSubnet2CIDR:
    Description: Please enter a subnet for your Public Subnet 2
    Type: String
    Default: 10.30.1.0/24

  PublicSubnet3CIDR:
    Description: Please enter a subnet for your Public Subnet 3
    Type: String
    Default: 10.30.2.0/24

  PrivateSubnet1CIDR:
    Description: Please enter a subnet for your Private Subnet 1
    Type: String
    Default: 10.30.3.0/24

  PrivateSubnet2CIDR:
    Description: Please enter a subnet for your Private Subnet 2
    Type: String
    Default: 10.30.4.0/24 

  PrivateSubnet3CIDR:
    Description: Please enter a subnet for your Private Subnet 3
    Type: String
    Default: 10.30.5.0/24 

Resources:
  VPC:
    Type: AWS::EC2::VPC
    Properties:
      CidrBlock: !Ref VpcCIDR
      EnableDnsSupport: true
      EnableDnsHostnames: true
      Tags:
        - Key: Name
          Value: !Ref EnvironmentName

  InternetGateway:
    Type: AWS::EC2::InternetGateway
    Properties:
      Tags:
        - Key: Name
          Value: !Ref EnvironmentName

  InternetGatewayAttachment:
    Type: AWS::EC2::VPCGatewayAttachment
    Properties:
      InternetGatewayId: !Ref InternetGateway
      VpcId: !Ref VPC

  PublicSubnet1:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref VPC
      AvailabilityZone: !Select [ 0, !GetAZs '' ]
      CidrBlock: !Ref PublicSubnet1CIDR
      MapPublicIpOnLaunch: true
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Public Subnet (AZ1)

  PublicSubnet2:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref VPC
      AvailabilityZone: !Select [ 1, !GetAZs  '' ]
      CidrBlock: !Ref PublicSubnet2CIDR
      MapPublicIpOnLaunch: true
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Public Subnet (AZ2)

  PublicSubnet3:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref VPC
      AvailabilityZone: !Select [ 1, !GetAZs  '' ]
      CidrBlock: !Ref PublicSubnet3CIDR
      MapPublicIpOnLaunch: true
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Public Subnet (AZ3)

  PrivateSubnet1:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref VPC
      AvailabilityZone: !Select [ 0, !GetAZs  '' ]
      CidrBlock: !Ref PrivateSubnet1CIDR
      MapPublicIpOnLaunch: false
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Private Subnet (AZ1)

  PrivateSubnet2:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref VPC
      AvailabilityZone: !Select [ 1, !GetAZs  '' ]
      CidrBlock: !Ref PrivateSubnet2CIDR
      MapPublicIpOnLaunch: false
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Private Subnet (AZ2)

  PrivateSubnet3:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref VPC
      AvailabilityZone: !Select [ 1, !GetAZs  '' ]
      CidrBlock: !Ref PrivateSubnet3CIDR
      MapPublicIpOnLaunch: false
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Private Subnet (AZ3)

  #NatGateway1EIP:
  #  Type: AWS::EC2::EIP
  #  DependsOn: InternetGatewayAttachment
  #  Properties:
  #    Domain: vpc

  #NatGateway2EIP:
  #  Type: AWS::EC2::EIP
  #  DependsOn: InternetGatewayAttachment
  #  Properties:
  #    Domain: vpc
      
  #NatGateway3EIP:
  #  Type: AWS::EC2::EIP
  #  DependsOn: InternetGatewayAttachment
  #  Properties:
  #    Domain: vpc

  #NatGateway1:
  #  Type: AWS::EC2::NatGateway
  #  Properties:
  #    AllocationId: !GetAtt NatGateway1EIP.AllocationId
  #    SubnetId: !Ref PublicSubnet1

  #NatGateway2:
  #  Type: AWS::EC2::NatGateway
  #  Properties:
  #    AllocationId: !GetAtt NatGateway2EIP.AllocationId
  #    SubnetId: !Ref PublicSubnet2

  #NatGateway3:
  #  Type: AWS::EC2::NatGateway
  #  Properties:
  #    AllocationId: !GetAtt NatGateway3EIP.AllocationId
  #    SubnetId: !Ref PublicSubnet3

  PublicRouteTable:
    Type: AWS::EC2::RouteTable
    Properties:
      VpcId: !Ref VPC
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Public Routes

  DefaultPublicRoute:
    Type: AWS::EC2::Route
    DependsOn: InternetGatewayAttachment
    Properties:
      RouteTableId: !Ref PublicRouteTable
      DestinationCidrBlock: 0.0.0.0/0
      GatewayId: !Ref InternetGateway

  PublicSubnet1RouteTableAssociation:
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      RouteTableId: !Ref PublicRouteTable
      SubnetId: !Ref PublicSubnet1

  PublicSubnet2RouteTableAssociation:
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      RouteTableId: !Ref PublicRouteTable
      SubnetId: !Ref PublicSubnet2

  PrivateRouteTable1:
    Type: AWS::EC2::RouteTable
    Properties:
      VpcId: !Ref VPC
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Private Routes (AZ1)

  #DefaultPrivateRoute1:
  #  Type: AWS::EC2::Route
  #  Properties:
  #    RouteTableId: !Ref PrivateRouteTable1
  #    DestinationCidrBlock: 0.0.0.0/0
  #    NatGatewayId: !Ref NatGateway1

  PrivateSubnet1RouteTableAssociation:
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      RouteTableId: !Ref PrivateRouteTable1
      SubnetId: !Ref PrivateSubnet1

  PrivateRouteTable2:
    Type: AWS::EC2::RouteTable
    Properties:
      VpcId: !Ref VPC
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Private Routes (AZ2)

  #DefaultPrivateRoute2:
  #  Type: AWS::EC2::Route
  #  Properties:
  #    RouteTableId: !Ref PrivateRouteTable2
  #    DestinationCidrBlock: 0.0.0.0/0
  #    NatGatewayId: !Ref NatGateway2

  PrivateSubnet2RouteTableAssociation:
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      RouteTableId: !Ref PrivateRouteTable2
      SubnetId: !Ref PrivateSubnet2


  PrivateRouteTable3:
    Type: AWS::EC2::RouteTable
    Properties:
      VpcId: !Ref VPC
      Tags:
        - Key: Name
          Value: !Sub ${EnvironmentName} Private Routes (AZ3)

  #DefaultPrivateRoute3:
  #  Type: AWS::EC2::Route
  #  Properties:
  #    RouteTableId: !Ref PrivateRouteTable3
  #    DestinationCidrBlock: 0.0.0.0/0
  #    NatGatewayId: !Ref NatGateway3

  PrivateSubnet3RouteTableAssociation:
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      RouteTableId: !Ref PrivateRouteTable3
      SubnetId: !Ref PrivateSubnet3

  peeringRouteUsEast1:
    Type: AWS::EC2::Route
    Properties:
      RouteTableId:
         Ref: PrivateRouteTable1
      DestinationCidrBlock: 10.31.0.0/16
      VpcPeeringConnectionId: pcx-07bf0149f14c0922a

  peeringRouteUsEast2:
    Type: AWS::EC2::Route
    Properties:
      RouteTableId:
         Ref: PrivateRouteTable2
      DestinationCidrBlock: 10.31.0.0/16
      VpcPeeringConnectionId: pcx-07bf0149f14c0922a

  peeringRouteUsEast3:
    Type: AWS::EC2::Route
    Properties:
      RouteTableId:
         Ref: PrivateRouteTable3
      DestinationCidrBlock: 10.31.0.0/16
      VpcPeeringConnectionId: pcx-07bf0149f14c0922a

  peeringRouteEuWest1:
    Type: AWS::EC2::Route
    Properties:
      RouteTableId:
         Ref:  PrivateRouteTable1
      DestinationCidrBlock: 10.32.0.0/16
      VpcPeeringConnectionId: pcx-0d65cb9ba2a963f0a

  peeringRouteEuWest2:
    Type: AWS::EC2::Route
    Properties:
      RouteTableId:
         Ref:  PrivateRouteTable2
      DestinationCidrBlock: 10.32.0.0/16
      VpcPeeringConnectionId: pcx-0d65cb9ba2a963f0a

  peeringRouteEuWest3:
    Type: AWS::EC2::Route
    Properties:
      RouteTableId:
         Ref:  PrivateRouteTable3
      DestinationCidrBlock: 10.32.0.0/16
      VpcPeeringConnectionId: pcx-0d65cb9ba2a963f0a

  NoIngressSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupName: "no-ingress-sg"
      GroupDescription: "Security group with no ingress rule"
      VpcId: !Ref VPC

Outputs:
  VPC:
    Description: A reference to the created VPC
    Value: !Ref VPC

  PublicSubnets:
    Description: A list of the public subnets
    Value: !Join [ ",", [ !Ref PublicSubnet1, !Ref PublicSubnet2, !Ref PublicSubnet3 ]]

  PrivateSubnets:
    Description: A list of the private subnets
    Value: !Join [ ",", [ !Ref PrivateSubnet1, !Ref PrivateSubnet2, !Ref PrivateSubnet3 ]]

  PublicSubnet1:
    Description: A reference to the public subnet in the 1st Availability Zone
    Value: !Ref PublicSubnet1

  PublicSubnet2:
    Description: A reference to the public subnet in the 2nd Availability Zone
    Value: !Ref PublicSubnet2

  PublicSubnet3:
    Description: A reference to the public subnet in the 3rd Availability Zone
    Value: !Ref PublicSubnet3

  PrivateSubnet1:
    Description: A reference to the private subnet in the 1st Availability Zone
    Value: !Ref PrivateSubnet1

  PrivateSubnet2:
    Description: A reference to the private subnet in the 2nd Availability Zone
    Value: !Ref PrivateSubnet2

  PrivateSubnet3:
    Description: A reference to the private subnet in the 3rd Availability Zone
    Value: !Ref PrivateSubnet3

  NoIngressSecurityGroup:
    Description: Security group with no ingress rule
    Value: !Ref NoIngressSecurityGroup
  
  PrivateRTB1:
    Description: A reference to the route table for subnet 1
    Value: !Ref PrivateRouteTable1
  
  PrivateRTB2:
    Description: A reference to the route table for subnet 2
    Value: !Ref PrivateRouteTable2
  
  PrivateRTB3:
    Description: A reference to the route table for subnet 3
    Value: !Ref PrivateRouteTable3