How To Create An AWS EC2 Instance Using AWS CLI

1
# Create a VPC
2
AWS_VPC=$(aws ec2 create-vpc \
3
--cidr-block 10.0.0.0/16 \
4
--query 'Vpc.{VpcId:VpcId}' \
5
--output text)
6

7
# Add a name tag to the VPC
8
aws ec2 create-tags \
9
--resources $AWS_VPC \
10
--tags Key=Name,Value=DevOpsVPC

1
# Enable DNS hostnames
2
aws ec2 modify-vpc-attribute \
3
--vpc-id $AWS_VPC \
4
--enable-dns-hostnames "{\"Value\":true}"
5

6
# Enable DNS support
7
aws ec2 modify-vpc-attribute \
8
--vpc-id $AWS_VPC \
9
--enable-dns-support "{\"Value\":true}"

1
# Create a public subnet
2
AWS_PUBLIC_SUBNET=$(aws ec2 create-subnet \
3
--vpc-id $AWS_VPC \
4
--cidr-block 10.0.1.0/24 \
5
--availability-zone us-east-1a \
6
--query 'Subnet.{SubnetId:SubnetId}' \
7
--output text)
8

9
# Add a name tag to the public subnet
10
aws ec2 create-tags \
11
--resources $AWS_PUBLIC_SUBNET \
12
--tags Key=Name,Value=DevOpsPublicSubnet

1
# create a private subnet
2
AWS_PRIVATE_SUBNET=$(aws ec2 create-subnet \
3
--vpc-id $AWS_VPC \
4
--cidr-block 10.0.2.0/24 \
5
--availability-zone us-east-1a \
6
--query 'Subnet.{SubnetId:SubnetId}' \
7
--output text)
8

9
# Add a name tag to the private subnet
10
aws ec2 create-tags \
11
--resources $AWS_PRIVATE_SUBNET \
12
--tags Key=Name,Value=DevOpsPrivateSubnet

1
# Enable auto-assign public IP on the public subnet
2
aws ec2 modify-subnet-attribute \
3
--subnet-id $AWS_PUBLIC_SUBNET \
4
--map-public-ip-on-launch

1
AWS_INTERNET_GATEWAY=$(aws ec2 create-internet-gateway \
2
--query 'InternetGateway.{InternetGatewayId:InternetGatewayId}' \
3
--output text)
4

5
# Add a name tag to the Internet Gateway
6
aws ec2 create-tags \
7
--resources $AWS_INTERNET_GATEWAY \
8
--tags Key=Name,Value=DevOpsInternetGateway

1
# Get Elastic IP
2
AWS_ELASTIC_IP=$(aws ec2 allocate-address \
3
--domain vpc \
4
--query 'AllocationId' \
5
--output text)
6

7
# Create a NAT gateway
8
AWS_NAT_GATEWAY=$(aws ec2 create-nat-gateway \
9
--subnet-id $AWS_PUBLIC_SUBNET \
10
--allocation-id $AWS_ELASTIC_IP \
11
--query 'NatGateway.{NatGatewayId:NatGatewayId}' \
12
--output text)
13

14
# Add a name tag to the NAT gateway
15
aws ec2 create-tags \
16
--resources $AWS_NAT_GATEWAY \
17
--tags Key=Name,Value=DevOpsNATGateway

1
# Attach the Internet gateway to your VPC
2
aws ec2 attach-internet-gateway \
3
--vpc-id $AWS_VPC \
4
--internet-gateway-id $AWS_INTERNET_GATEWAY \
5
--query 'InternetGateway.{InternetGatewayId:InternetGatewayId}' \
6
--output text

1
# Create a custom route table
2
AWS_ROUTE_TABLE=$(aws ec2 create-route-table \
3
--vpc-id $AWS_VPC \
4
--query 'RouteTable.{RouteTableId:RouteTableId}' \
5
--output text)
6

7
# Add a name tag to the route table
8
aws ec2 create-tags \
9
--resources $AWS_ROUTE_TABLE \
10
--tags Key=Name,Value=DevOpsRouteTable

1
# Create a custom route table association
2
aws ec2 associate-route-table \
3
--route-table-id $AWS_ROUTE_TABLE \
4
--subnet-id $AWS_PUBLIC_SUBNET \
5
--output text

1
# Associate the subnet with route table, making it a public subnet
2
aws ec2 create-route \
3
--route-table-id $AWS_ROUTE_TABLE \
4
--destination-cidr-block 0.0.0.0/0 \
5
--gateway-id $AWS_INTERNET_GATEWAY \
6
--output text

1
# Associate the NAT gateway with the route table, making it a private subnet
2
aws ec2 create-route \
3
--route-table-id $AWS_ROUTE_TABLE \
4
--destination-cidr-block 10.2.0.0/24 \
5
--nat-gateway-id $AWS_NAT_GATEWAY \
6
--output text

1
# Create a security group
2
AWS_SECURITY_GROUP=$(aws ec2 create-security-group \
3
--group-name DevOpsSG \
4
--description "DevOps Security Group" \
5
--vpc-id $AWS_VPC \
6
--query 'GroupId' \
7
--output text)
8

9
# Add a name tag to the security group
10
aws ec2 create-tags \
11
--resources $AWS_SECURITY_GROUP \
12
--tags Key=Name,Value=DevOpsSG

1
# Add a rule to the security group
2

3
# Add SSH rule
4
aws ec2 authorize-security-group-ingress \
5
--group-id $AWS_SECURITY_GROUP \
6
--protocol tcp \
7
--port 22 \
8
--cidr 0.0.0.0/0 \
9
--output text
10

11
# Add HTTP rule
12
aws ec2 authorize-security-group-ingress \
13
--group-id $AWS_SECURITY_GROUP \
14
--protocol tcp \
15
--port 80 \
16
--cidr 0.0.0.0/0 \
17
--output text

1
# Get the latest AMI ID
2
AWS_AMI=$(aws ec2 describe-images \
3
  --owners 'amazon' \
4
  --filters 'Name=name,Values=amzn2-ami-hvm-2.0.*' \
5
  'Name=state,Values=available' \
6
  --query 'sort_by(Images, &CreationDate)[-1].[ImageId]' \
7
  --output 'text')

1
# Create a key pair
2
aws ec2 create-key-pair \
3
--key-name DevOpsKeyPair \
4
--query 'KeyMaterial' \
5
--output text > DevOpsKeyPair.pem
6

7
# Change the permission of the key pair
8
chmod 400 DevOpsKeyPair.pem

1
# Create a bash script to update packages, install git and clone the repo, and run the script
2
cat <<EOF > install.sh
3
#!/bin/bash
4

5
# Update packages
6
sudo yum update -y
7

8
# Install git
9
sudo yum install git -y
10

11
# Clone the repo
12
git clone https://github.com/MKAbuMattar/install-and-setup-wordpress-on-amazon-linux-2.git
13

14
# Run the script
15
bash install-and-setup-wordpress-on-amazon-linux-2/script.sh mkabumattar 121612 121612 wordpressdb wordpressuser password
16
EOF

1
# Create an EC2 instance
2
AWS_EC2_INSTANCE=$(aws ec2 run-instances \
3
--image-id $AWS_AMI \
4
--instance-type t2.micro \
5
--key-name DevOpsKeyPair \
6
--monitoring "Enabled=false" \
7
--security-group-ids $AWS_SECURITY_GROUP \
8
--subnet-id $AWS_PUBLIC_SUBNET \
9
--user-data file://install.sh \
10
--private-ip-address 10.0.1.10 \
11
--query 'Instances[0].InstanceId' \
12
--output text)
13

14
# Add a name tag to the EC2 instance
15
aws ec2 create-tags \
16
--resources $AWS_EC2_INSTANCE \
17
--tags "Key=Name,Value=DevOpsInstance"

1
# Check the status of the EC2 instance
2
aws ec2 describe-instances \
3
--instance-ids $AWS_EC2_INSTANCE \
4
--query 'Reservations[*].Instances[*].[InstanceId,State.Name,PublicIpAddress]' \
5
--output text

1
# Get the public ip address of your instance
2
AWS_PUBLIC_IP=$(aws ec2 describe-instances \
3
--instance-ids $AWS_EC2_INSTANCE \
4
--query 'Reservations[*].Instances[*].[PublicIpAddress]' \
5
--output text)
6

7
echo $AWS_PUBLIC_IP

1
# SSH into the EC2 instance
2
ssh -i DevOpsKeyPair.pem ec2-user@$AWS_PUBLIC_IP