AWSTemplateFormatVersion: "2010-09-09" Description: > Broken Labs - EC2 Lab 03. A web server is running on EC2 but the instance has no public IP address. Licensed under CC BY-NC-SA 4.0: https://creativecommons.org/licenses/by-nc-sa/4.0/ Developed by: Mark Schoonover Resources: LabVPC: Type: AWS::EC2::VPC Properties: CidrBlock: 10.0.0.0/16 EnableDnsSupport: true EnableDnsHostnames: true Tags: - Key: Name Value: brokenlabs-ec2-lab-03-vpc LabSubnet: Type: AWS::EC2::Subnet Properties: VpcId: !Ref LabVPC CidrBlock: 10.0.1.0/24 AvailabilityZone: !Select [0, !GetAZs ''] MapPublicIpOnLaunch: false Tags: - Key: Name Value: brokenlabs-ec2-lab-03-subnet LabIGW: Type: AWS::EC2::InternetGateway Properties: Tags: - Key: Name Value: brokenlabs-ec2-lab-03-igw LabIGWAttach: Type: AWS::EC2::VPCGatewayAttachment Properties: VpcId: !Ref LabVPC InternetGatewayId: !Ref LabIGW LabRouteTable: Type: AWS::EC2::RouteTable Properties: VpcId: !Ref LabVPC Tags: - Key: Name Value: brokenlabs-ec2-lab-03-rt LabRoute: Type: AWS::EC2::Route DependsOn: LabIGWAttach Properties: RouteTableId: !Ref LabRouteTable DestinationCidrBlock: 0.0.0.0/0 GatewayId: !Ref LabIGW LabSNAssoc: Type: AWS::EC2::SubnetRouteTableAssociation Properties: SubnetId: !Ref LabSubnet RouteTableId: !Ref LabRouteTable LabSG: Type: AWS::EC2::SecurityGroup Properties: GroupDescription: Broken Labs EC2 Lab 03 security group VpcId: !Ref LabVPC SecurityGroupIngress: - IpProtocol: tcp FromPort: 80 ToPort: 80 CidrIp: 0.0.0.0/0 - IpProtocol: tcp FromPort: 22 ToPort: 22 CidrIp: 0.0.0.0/0 Tags: - Key: Name Value: brokenlabs-ec2-lab-03-sg LabEIP: Type: AWS::EC2::EIP DependsOn: LabIGWAttach Properties: Domain: vpc Tags: - Key: Name Value: brokenlabs-ec2-lab-03-eip LabInstance: Type: AWS::EC2::Instance Properties: InstanceType: t2.micro ImageId: "{{resolve:ssm:/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64}}" SubnetId: !Ref LabSubnet SecurityGroupIds: - !Ref LabSG Tags: - Key: Name Value: brokenlabs-ec2-lab-03 UserData: Fn::Base64: | #!/bin/bash mkdir -p /var/www/html cat > /var/www/html/index.html << 'HTMLEOF' AWS Broken Labs

AWS Broken Labs

If you can read this, the lab is fixed.

Lab 03 — EC2 Elastic IP
www.cloudpathacademy.com
HTMLEOF cat > /etc/systemd/system/lab-web.service << 'EOF' [Unit] Description=Lab Web Server After=network.target [Service] ExecStart=/usr/bin/python3 -m http.server 80 --directory /var/www/html Restart=always User=root [Install] WantedBy=multi-user.target EOF sed -i 's/^ *//' /etc/systemd/system/lab-web.service systemctl enable lab-web systemctl start lab-web Outputs: InstanceId: Description: EC2 Instance ID Value: !Ref LabInstance ElasticIPAddress: Description: Elastic IP address allocated for this lab Value: !Ref LabEIP WebPageURL: Description: URL of the web page Value: !Sub "http://${LabEIP}/"