private void ConfigureIAM(Configuration settings)
{
if (settings.ApplicationIAMRole.CreateNew)
{
AppIAMRole = new Role(this, nameof(AppIAMRole), InvokeCustomizeCDKPropsEvent(nameof(AppIAMRole), this, new RoleProps
{
AssumedBy = new ServicePrincipal("ec2.amazonaws.com"),
// https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/iam-instanceprofile.html
ManagedPolicies = new[]
{
ManagedPolicy.FromAwsManagedPolicyName("AWSElasticBeanstalkWebTier"),
ManagedPolicy.FromAwsManagedPolicyName("AWSElasticBeanstalkWorkerTier")
}
}));
}
else
{
if (string.IsNullOrEmpty(settings.ApplicationIAMRole.RoleArn))
{
throw new InvalidOrMissingConfigurationException("The provided Application IAM Role ARN is null or empty.");
}
AppIAMRole = Role.FromRoleArn(this, nameof(AppIAMRole), settings.ApplicationIAMRole.RoleArn);
}
Ec2InstanceProfile = new CfnInstanceProfile(this, nameof(Ec2InstanceProfile), InvokeCustomizeCDKPropsEvent(nameof(Ec2InstanceProfile), this, new CfnInstanceProfileProps
{
Roles = new[]
{
AppIAMRole.RoleName
}
}));
}
public InstanceProfile(Construct scope, string id, EcsInstanceRole batchInstanceRole) : base(scope, id)
{
this.scope = scope;
this.id = id;
this.CfnInstanceProfile = new CfnInstanceProfile(this, id, new CfnInstanceProfileProps {
InstanceProfileName = batchInstanceRole.Role.RoleName,
Roles = new string[] {
batchInstanceRole.Role.RoleName
}
});
}
internal EbDotnetLinuxStack(Construct scope, string id, IStackProps props = null) : base(scope, id, props)
{
var ebInstanceRole = new Role(this, "SampleApp-Role", new RoleProps
{
AssumedBy = new ServicePrincipal("ec2.amazonaws.com"),
ManagedPolicies = new[] { ManagedPolicy.FromAwsManagedPolicyName("AWSElasticBeanstalkWebTier") }
});
var instanceProfile = new CfnInstanceProfile(this, "SampleApp-InstanceProfile", new CfnInstanceProfileProps
{
InstanceProfileName = "SampleApp-InstanceProfile",
Roles = new[] { ebInstanceRole.RoleName }
});
var optionSettingProperties = new CfnEnvironment.OptionSettingProperty[] {
new CfnEnvironment.OptionSettingProperty {
Namespace = "aws:autoscaling:launchconfiguration",
OptionName = "InstanceType",
Value = "t3.small",
},
new CfnEnvironment.OptionSettingProperty {
Namespace = "aws:autoscaling:launchconfiguration",
OptionName = "IamInstanceProfile",
Value = instanceProfile.InstanceProfileName
}
};
var app = new CfnApplication(this, "SampleApp-App", new CfnApplicationProps
{
ApplicationName = "SampleApp"
});
var env = new CfnEnvironment(this, "SampleApp-Env", new CfnEnvironmentProps
{
EnvironmentName = "SampleAppEnvironment",
ApplicationName = app.ApplicationName,
// please check the latest platform name at https://docs.aws.amazon.com/elasticbeanstalk/latest/platforms/platforms-supported.html
SolutionStackName = "64bit Amazon Linux 2 v2.2.8 running .NET Core",
OptionSettings = optionSettingProperties
});
// to ensure the application is created before the environment
env.AddDependsOn(app);
}
internal AppStack(Construct scope, RecipeConfiguration <Configuration> recipeConfiguration, IStackProps props = null)
: base(scope, recipeConfiguration.StackName, props)
{
var settings = recipeConfiguration.Settings;
var asset = new Asset(this, "Asset", new AssetProps
{
Path = recipeConfiguration.DotnetPublishZipPath
});
CfnApplication application = null;
// Create an app version from the S3 asset defined above
// The S3 "putObject" will occur first before CF generates the template
var applicationVersion = new CfnApplicationVersion(this, "ApplicationVersion", new CfnApplicationVersionProps
{
ApplicationName = settings.BeanstalkApplication.ApplicationName,
SourceBundle = new CfnApplicationVersion.SourceBundleProperty
{
S3Bucket = asset.S3BucketName,
S3Key = asset.S3ObjectKey
}
});
if (settings.BeanstalkApplication.CreateNew)
{
application = new CfnApplication(this, "Application", new CfnApplicationProps
{
ApplicationName = settings.BeanstalkApplication.ApplicationName
});
applicationVersion.AddDependsOn(application);
}
IRole role;
if (settings.ApplicationIAMRole.CreateNew)
{
role = new Role(this, "Role", new RoleProps
{
AssumedBy = new ServicePrincipal("ec2.amazonaws.com"),
// https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/iam-instanceprofile.html
ManagedPolicies = new[]
{
ManagedPolicy.FromAwsManagedPolicyName("AWSElasticBeanstalkWebTier"),
ManagedPolicy.FromAwsManagedPolicyName("AWSElasticBeanstalkWorkerTier")
}
});
}
else
{
role = Role.FromRoleArn(this, "Role", settings.ApplicationIAMRole.RoleArn);
}
var instanceProfile = new CfnInstanceProfile(this, "InstanceProfile", new CfnInstanceProfileProps
{
Roles = new[]
{
role.RoleName
}
});
var optionSettingProperties = new List <CfnEnvironment.OptionSettingProperty> {
new CfnEnvironment.OptionSettingProperty {
Namespace = "aws:autoscaling:launchconfiguration",
OptionName = "IamInstanceProfile",
Value = instanceProfile.AttrArn
},
new CfnEnvironment.OptionSettingProperty {
Namespace = "aws:elasticbeanstalk:environment",
OptionName = "EnvironmentType",
Value = settings.EnvironmentType
}
};
if (!string.IsNullOrEmpty(settings.InstanceType))
{
optionSettingProperties.Add(new CfnEnvironment.OptionSettingProperty
{
Namespace = "aws:autoscaling:launchconfiguration",
OptionName = "InstanceType",
Value = settings.InstanceType
});
}
if (settings.EnvironmentType.Equals(ENVIRONMENTTYPE_LOADBALANCED))
{
optionSettingProperties.Add(
new CfnEnvironment.OptionSettingProperty
{
Namespace = "aws:elasticbeanstalk:environment",
OptionName = "LoadBalancerType",
Value = settings.LoadBalancerType
}
);
}
if (!string.IsNullOrEmpty(settings.EC2KeyPair))
{
optionSettingProperties.Add(
new CfnEnvironment.OptionSettingProperty
{
Namespace = "aws:autoscaling:launchconfiguration",
OptionName = "EC2KeyName",
Value = settings.EC2KeyPair
}
);
}
var environment = new CfnEnvironment(this, "Environment", new CfnEnvironmentProps
{
EnvironmentName = settings.EnvironmentName,
ApplicationName = settings.BeanstalkApplication.ApplicationName,
PlatformArn = settings.ElasticBeanstalkPlatformArn,
OptionSettings = optionSettingProperties.ToArray(),
// This line is critical - reference the label created in this same stack
VersionLabel = applicationVersion.Ref,
});
var output = new CfnOutput(this, "EndpointURL", new CfnOutputProps
{
Value = $"http://{environment.AttrEndpointUrl}/"
});
}