AWSTemplateFormatVersion: "2010-09-09" Description: > Broken Labs - EC2 Lab 04. An EC2 instance has no IAM role attached and cannot be accessed via Session Manager. Licensed under CC BY-NC-SA 4.0: https://creativecommons.org/licenses/by-nc-sa/4.0/ Developed by: Mark Schoonover Resources: LabVPC: Type: AWS::EC2::VPC Properties: CidrBlock: 10.0.0.0/16 EnableDnsSupport: true EnableDnsHostnames: true Tags: - Key: Name Value: brokenlabs-ec2-lab-04-vpc LabSubnet: Type: AWS::EC2::Subnet Properties: VpcId: !Ref LabVPC CidrBlock: 10.0.1.0/24 AvailabilityZone: !Select [0, !GetAZs ''] MapPublicIpOnLaunch: true Tags: - Key: Name Value: brokenlabs-ec2-lab-04-subnet LabIGW: Type: AWS::EC2::InternetGateway Properties: Tags: - Key: Name Value: brokenlabs-ec2-lab-04-igw LabIGWAttach: Type: AWS::EC2::VPCGatewayAttachment Properties: VpcId: !Ref LabVPC InternetGatewayId: !Ref LabIGW LabRouteTable: Type: AWS::EC2::RouteTable Properties: VpcId: !Ref LabVPC Tags: - Key: Name Value: brokenlabs-ec2-lab-04-rt LabRoute: Type: AWS::EC2::Route DependsOn: LabIGWAttach Properties: RouteTableId: !Ref LabRouteTable DestinationCidrBlock: 0.0.0.0/0 GatewayId: !Ref LabIGW LabSNAssoc: Type: AWS::EC2::SubnetRouteTableAssociation Properties: SubnetId: !Ref LabSubnet RouteTableId: !Ref LabRouteTable LabSG: Type: AWS::EC2::SecurityGroup Properties: GroupDescription: Broken Labs EC2 Lab 04 security group VpcId: !Ref LabVPC SecurityGroupIngress: - IpProtocol: tcp FromPort: 80 ToPort: 80 CidrIp: 0.0.0.0/0 - IpProtocol: tcp FromPort: 22 ToPort: 22 CidrIp: 0.0.0.0/0 Tags: - Key: Name Value: brokenlabs-ec2-lab-04-sg LabInstance: Type: AWS::EC2::Instance Properties: InstanceType: t2.micro ImageId: "{{resolve:ssm:/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64}}" SubnetId: !Ref LabSubnet SecurityGroupIds: - !Ref LabSG Tags: - Key: Name Value: brokenlabs-ec2-lab-04 UserData: Fn::Base64: | #!/bin/bash dnf install -y httpd systemctl enable httpd systemctl start httpd cat > /var/www/html/index.html << 'HTMLEOF' AWS Broken Labs

AWS Broken Labs

If you can read this, the lab is working.

Lab 04 — EC2 Session Connectivity
www.cloudpathacademy.com
HTMLEOF Outputs: InstanceId: Description: EC2 Instance ID Value: !Ref LabInstance InstancePublicIP: Description: Public IP address of the instance Value: !GetAtt LabInstance.PublicIp WebPageURL: Description: URL of the web page (loads correctly — the break is Session Manager access) Value: !Sub "http://${LabInstance.PublicIp}/"