vpc-fullstack-01.yaml

# Network Design Patterns
# 1 tier, single subnet, public
# 1 tier, single subnet, private, 1 nat
# 2 tier, two subnets, public + private, 1 nat
# 2 tier, two subnets, public + private, 2 nat
# 3 tier, three subnets, public + private + database, 1 nat
# 3 tier, three subnets, public + private + database, 2 nat

AWSTemplateFormatVersion: 2010-09-09

Description: Creates VPC, Subnets, Internet Gateway, Nat Gateways, RouteTables, Security Groups and more.

Metadata:
  Authors:
    Description: Paul Bartocillo (pebartocillo@apper.ph) - Apper Digital Inc.
  License:
    Description:
      "Copyright 2020 Amazon.com, Inc. and its affiliates. All Rights Reserved.
      SPDX-License-Identifier: MIT-0"
  AWS::CloudFormation::Interface:
    ParameterGroups:
      - Label:
          default: Amazon VPC Parameters
        Parameters:
          - EnvironmentName
          - NetworkDesignPatterns
          - VpcCidr
          - SubnetsCidrBlock
    ParameterLabels:
      EnvironmentName:
        default: Environment Name
      NetworkDesignPatterns:
        default: Network Design Patterns
      VpcCidr:
        default: VPC CIDR Block
      SubnetsCidrBlock:
        default: Subnets CIDR Blocks
Parameters:
  EnvironmentName:
    Description: The name of environment for the current stack (e.g. dev, test, staging, beta, production).
    Type: String
  NetworkDesignPatterns:
    Description: The design pattern of the current vpc network architecture based from industry standards and cost tradeoffs
    Type: String
    AllowedValues:
      - "1 tier | 1 subnet | public"
      - "1 tier | 2 subnets | public"
      - "2 tier | 2 subnets public | 2 subnets private | 1 nat"
      - "2 tier | 2 subnets public | 2 subnets private | 2 nat"
      - "3 tier | 2 subnets public | 2 subnets private | 2 subnets database | 1 nat"
      - "3 tier | 2 subnets public | 2 subnets private | 2 subnets database | 2 nat"
    Default: "1 tier | 1 subnet | public"
  VpcCidr:
    AllowedPattern: "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\\/(1[6-9]|2[0-8]))$"
    ConstraintDescription: CIDR block parameter must be in the form x.x.x.x/16-28
    Default: 10.0.0.0/16
    Description: CIDR block for the VPC
    Type: String
  SubnetsCidrBlock:
    Description: |
      Comma-delimited list of CIDR blocks for subnets located in AZ's within the current AWS Regions (e.g. 10.0.1.0/24, 10.0.2.0/24, 10.0.3.0/24).
      Note: The logical order is preserved and must be greater than or equal to the number of subnet selected in the network design pattern field.
    Type: CommaDelimitedList
    Default: "10.0.1.0/24, 10.0.2.0/24, 10.0.3.0/24"

Conditions:
  # parameter conditionals
  1Tier1SubPublic: !Equals [!Ref NetworkDesignPatterns, "1 tier | 1 subnet | public"]
  1Tier2SubPublic: !Equals [!Ref NetworkDesignPatterns, "1 tier | 2 subnets | public"]
  2Tier2SubPublicPrivate1Nat: !Equals [!Ref NetworkDesignPatterns, "2 tier | 2 subnets public | 2 subnets private | 1 nat"]
  2Tier2SubPublicPrivate2Nat: !Equals [!Ref NetworkDesignPatterns, "2 tier | 2 subnets public | 2 subnets private | 2 nat"]
  3Tier2SubPublicPrivateDatabase1Nat: !Equals [!Ref NetworkDesignPatterns, "3 tier | 2 subnets public | 2 subnets private | 2 subnets database | 1 nat"]
  3Tier2SubPublicPrivateDatabase2Nat: !Equals [!Ref NetworkDesignPatterns, "3 tier | 2 subnets public | 2 subnets private | 2 subnets database | 2 nat"]
  # template conditionals
  1Subnet: !Or
    - !Condition 1Tier1SubPublic
    - !Condition 1Tier2SubPublic
    - !Condition 2Tier2SubPublicPrivate1Nat
    - !Condition 2Tier2SubPublicPrivate2Nat
    - !Condition 3Tier2SubPublicPrivateDatabase1Nat
    - !Condition 3Tier2SubPublicPrivateDatabase2Nat
  2Subnet: !Or
    - !Condition 1Tier2SubPublic
    - !Condition 2Tier2SubPublicPrivate1Nat
    - !Condition 2Tier2SubPublicPrivate2Nat
    - !Condition 3Tier2SubPublicPrivateDatabase1Nat
    - !Condition 3Tier2SubPublicPrivateDatabase2Nat
  1Nat: !Or
    - !Condition 2Tier2SubPublicPrivate1Nat
    - !Condition 3Tier2SubPublicPrivateDatabase1Nat
  2Nat: !Or
    - !Condition 2Tier2SubPublicPrivate2Nat
    - !Condition 3Tier2SubPublicPrivateDatabase2Nat

Resources:
  Vpc:
    Type: AWS::EC2::VPC
    Properties:
      CidrBlock: !Ref VpcCidr
      EnableDnsHostnames: true
      EnableDnsSupport: true
      Tags:
        - Key: Name
          Value: !Sub "${EnvironmentName}-vpc-${AWS::StackName}"
        - Key: Environment
          Value: !Ref EnvironmentName
        - Key: Type
          Value: "Managed by AWS Cloudformation"
  InternetGateway:
    Type: AWS::EC2::InternetGateway
    Properties:
      Tags:
        - Key: Name
          Value: !Sub "${EnvironmentName}-igw-${AWS::StackName}"
        - Key: Environment
          Value: !Ref EnvironmentName
        - Key: Type
          Value: "Managed by AWS Cloudformation"
  AttachInternetGateway:
    Type: AWS::EC2::VPCGatewayAttachment
    Properties:
      InternetGatewayId: !Ref InternetGateway
      VpcId: !Ref Vpc
  
  # VPC ROUTES
  PublicRoute:
    Type: AWS::EC2::Route
    DependsOn: AttachInternetGateway
    Properties:
      RouteTableId: !Ref PublicRouteTable
      DestinationCidrBlock: 0.0.0.0/0
      GatewayId: !Ref InternetGateway
  
  # SUBNETS
  PublicAZASubnet:
    Condition: 1Subnet
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref Vpc
      AvailabilityZone: !Select [0, Fn::GetAZs: !Ref "AWS::Region"]
      CidrBlock: !Select [0, !Ref SubnetsCidrBlock]
      MapPublicIpOnLaunch: true
      Tags:
        - Key: Name
          Value: !Sub "${EnvironmentName}-public-sub1-${AWS::StackName}"
        - Key: Environment
          Value: !Ref EnvironmentName
        - Key: Type
          Value: "Managed by AWS Cloudformation"
  PublicAZBSubnet:
    Condition: 2Subnet
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref Vpc
      AvailabilityZone: !Select [1, Fn::GetAZs: !Ref "AWS::Region"]
      CidrBlock: !Select [1, !Ref SubnetsCidrBlock]
      MapPublicIpOnLaunch: true
      Tags:
        - Key: Name
          Value: !Sub "${EnvironmentName}-public-sub2-${AWS::StackName}"
        - Key: Environment
          Value: !Ref EnvironmentName
        - Key: Type
          Value: "Managed by AWS Cloudformation"
  
  # ROUTE TABLE
  PublicRouteTable:
    Type: AWS::EC2::RouteTable
    Properties:
      VpcId: !Ref Vpc
      Tags:
        - Key: Name
          Value: !Sub "${EnvironmentName}-public-rt-${AWS::StackName}"
        - Key: Environment
          Value: !Ref EnvironmentName
        - Key: Type
          Value: "Managed by AWS Cloudformation"
        
  # ROUTE ASSOC
  PublicRouteTableAssociation1:
    Condition: 1Subnet
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      SubnetId: !Ref PublicAZASubnet
      RouteTableId: !Ref PublicRouteTable
  PublicRouteTableAssociation2:
    Condition: 2Subnet
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      SubnetId: !Ref PublicAZBSubnet
      RouteTableId: !Ref PublicRouteTable

Outputs:
  Vpc:
    Value: !Ref Vpc
  VpcCidr:
    Value: !Ref VpcCidr
  SubnetsCidrBlock:
    Value: !Join
      - ","
      - !Ref SubnetsCidrBlock
  PublicAZASubnet:
    Condition: 1Subnet
    Value: !Ref PublicAZASubnet
  PublicAZBSubnet:
    Condition: 2Subnet
    Value: !Ref PublicAZBSubnet