上記、「Setting up a Redis Cluster for scalability and high availabilit」 をAWS CLIでやってみる
CloudShellから実施
CloudShellはタブを２つ使用
タブ１：AWS構築用
タブ２：EC2操作用 (Session Manager接続)
VPC作成
ハンズオン用のVPCを作成
変数 (タブ1)
コマンド
# VPC名
VPC_NAME="handson-vpc" \
&& echo ${VPC_NAME}
# サブネット名
SUBNET_NAME_0="handson-pub-1a" \
&& echo ${SUBNET_NAME_1}
SUBNET_NAME_1="handson-pri-1a" \
&& echo ${SUBNET_NAME_1}
SUBNET_NAME_2="handson-pri-1c" \
&& echo ${SUBNET_NAME_2}
SUBNET_NAME_3="handson-pri-1d" \
&& echo ${SUBNET_NAME_3}
# VPC CIDR block
VPC_CIDR_BLOCK="10.0.0.0/16" \
&& echo ${VPC_CIDR_BLOCK}
# サブネット CIDR block
CIDR_BLOCK_0="10.0.0.0/24" \
&& echo ${CIDR_BLOCK_0}
CIDR_BLOCK_1="10.0.1.0/24" \
&& echo ${CIDR_BLOCK_1}
CIDR_BLOCK_2="10.0.2.0/24" \
&& echo ${CIDR_BLOCK_2}
CIDR_BLOCK_3="10.0.3.0/24" \
&& echo ${CIDR_BLOCK_3}
# アベイラビリティーゾーン
AZ_1="ap-northeast-1a" \
&& echo ${AZ_1}
AZ_2="ap-northeast-1c" \
&& echo ${AZ_1}
AZ_3="ap-northeast-1d" \
&& echo ${AZ_1}
# インターネットゲートウェイ名
IGW_NAME='handson-igw' \
&& echo ${IGW_NAME}
# ルートテーブル名
RT_NAME='Public Route Table' \
&& echo ${RT_NAME}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # VPC名
[cloudshell-user@ip-10-132-88-239 ~]$ VPC_NAME="handson-vpc" \
> && echo ${VPC_NAME}
handson-vpc
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # サブネット名
[cloudshell-user@ip-10-132-88-239 ~]$ SUBNET_NAME_0="handson-pub-1a" \
> && echo ${SUBNET_NAME_1}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ SUBNET_NAME_1="handson-pri-1a" \
> && echo ${SUBNET_NAME_1}
handson-pri-1a
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ SUBNET_NAME_2="handson-pri-1c" \
> && echo ${SUBNET_NAME_2}
handson-pri-1c
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ SUBNET_NAME_3="handson-pri-1d" \
> && echo ${SUBNET_NAME_3}
handson-pri-1d
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # VPC CIDR block
[cloudshell-user@ip-10-132-88-239 ~]$ VPC_CIDR_BLOCK="10.0.0.0/16" \
> && echo ${VPC_CIDR_BLOCK}
10.0.0.0/16
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # サブネット CIDR block
[cloudshell-user@ip-10-132-88-239 ~]$ CIDR_BLOCK_0="10.0.0.0/24" \
> && echo ${CIDR_BLOCK_0}
10.0.0.0/24
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ CIDR_BLOCK_1="10.0.1.0/24" \
> && echo ${CIDR_BLOCK_1}
10.0.1.0/24
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ CIDR_BLOCK_2="10.0.2.0/24" \
> && echo ${CIDR_BLOCK_2}
10.0.2.0/24
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ CIDR_BLOCK_3="10.0.3.0/24" \
> && echo ${CIDR_BLOCK_3}
10.0.3.0/24
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # アベイラビリティーゾーン
[cloudshell-user@ip-10-132-88-239 ~]$ AZ_1="ap-northeast-1a" \
> && echo ${AZ_1}
ap-northeast-1a
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ AZ_2="ap-northeast-1c" \
> && echo ${AZ_1}
ap-northeast-1a
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ AZ_3="ap-northeast-1d" \
> && echo ${AZ_1}
ap-northeast-1a
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インターネットゲートウェイ名
[cloudshell-user@ip-10-132-88-239 ~]$ IGW_NAME='handson-igw' \
> && echo ${IGW_NAME}
handson-igw
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # ルートテーブル名
[cloudshell-user@ip-10-132-88-239 ~]$ RT_NAME='Public Route Table' \
> && echo ${RT_NAME}
Public Route Table
VPC作成 (タブ1)
コマンド
# VPC作成
aws ec2 create-vpc \
--cidr-block ${VPC_CIDR_BLOCK} \
--tag-specifications "ResourceType=vpc,Tags=[{Key=Name,Value=${VPC_NAME}}]"
# VPC ID取得
VPC_ID=$(
aws ec2 describe-vpcs \
--filters "Name=tag:Name,Values=${VPC_NAME}" \
--query "Vpcs[].VpcId" \
--output text
)\
&& echo ${VPC_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # VPC作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-vpc \
> --cidr-block ${VPC_CIDR_BLOCK} \
> --tag-specifications "ResourceType=vpc,Tags=[{Key=Name,Value=${VPC_NAME}}]"
{
"Vpc": {
"CidrBlock": "10.0.0.0/16",
"DhcpOptionsId": "dopt-0e7d97fbb33a62ce1",
"State": "pending",
"VpcId": "vpc-0a881866df4d0e38b",
"OwnerId": "999999999999",
"InstanceTenancy": "default",
"Ipv6CidrBlockAssociationSet": [],
"CidrBlockAssociationSet": [
{
"AssociationId": "vpc-cidr-assoc-046caaf47a5880148",
"CidrBlock": "10.0.0.0/16",
"CidrBlockState": {
"State": "associated"
}
}
],
"IsDefault": false,
"Tags": [
{
"Key": "Name",
"Value": "handson-vpc"
}
]
}
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # VPC ID取得
[cloudshell-user@ip-10-132-88-239 ~]$ VPC_ID=$(
> aws ec2 describe-vpcs \
> --filters "Name=tag:Name,Values=${VPC_NAME}" \
> --query "Vpcs[].VpcId" \
> --output text
> )\
> && echo ${VPC_ID}
vpc-0a881866df4d0e38b
サブネット作成 (タブ1)
コマンド
# サブネット作成
aws ec2 create-subnet \
--vpc-id ${VPC_ID} \
--cidr-block ${CIDR_BLOCK_0} \
--availability-zone ${AZ_1} \
--tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${SUBNET_NAME_0}}]"
aws ec2 create-subnet \
--vpc-id ${VPC_ID} \
--cidr-block ${CIDR_BLOCK_1} \
--availability-zone ${AZ_1} \
--tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${SUBNET_NAME_1}}]"
aws ec2 create-subnet \
--vpc-id ${VPC_ID} \
--cidr-block ${CIDR_BLOCK_2} \
--availability-zone ${AZ_2} \
--tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${SUBNET_NAME_2}}]"
aws ec2 create-subnet \
--vpc-id ${VPC_ID} \
--cidr-block ${CIDR_BLOCK_3} \
--availability-zone ${AZ_3} \
--tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${SUBNET_NAME_3}}]"
# サブネットID取得
SUBNET_ID_0=$(
aws ec2 describe-subnets \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${SUBNET_NAME_0}" \
--query "Subnets[].SubnetId" \
--output text
) \
&& echo ${SUBNET_ID_0}
SUBNET_ID_1=$(
aws ec2 describe-subnets \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${SUBNET_NAME_1}" \
--query "Subnets[].SubnetId" \
--output text
) \
&& echo ${SUBNET_ID_1}
SUBNET_ID_2=$(
aws ec2 describe-subnets \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${SUBNET_NAME_2}" \
--query "Subnets[].SubnetId" \
--output text
) \
&& echo ${SUBNET_ID_2}
SUBNET_ID_3=$(
aws ec2 describe-subnets \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${SUBNET_NAME_3}" \
--query "Subnets[].SubnetId" \
--output text
) \
&& echo ${SUBNET_ID_3}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # サブネット作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-subnet \
> --vpc-id ${VPC_ID} \
> --cidr-block ${CIDR_BLOCK_0} \
> --availability-zone ${AZ_1} \
> --tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${SUBNET_NAME_0}}]"
{
"Subnet": {
"AvailabilityZone": "ap-northeast-1a",
"AvailabilityZoneId": "apne1-az4",
"AvailableIpAddressCount": 251,
"CidrBlock": "10.0.0.0/24",
"DefaultForAz": false,
"MapPublicIpOnLaunch": false,
"State": "available",
"SubnetId": "subnet-0fa74f1d9d3e9ab54",
"VpcId": "vpc-0a881866df4d0e38b",
"OwnerId": "999999999999",
"AssignIpv6AddressOnCreation": false,
"Ipv6CidrBlockAssociationSet": [],
"Tags": [
{
"Key": "Name",
"Value": "handson-pub-1a"
}
],
"SubnetArn": "arn:aws:ec2:ap-northeast-1:999999999999:subnet/subnet-0fa74f1d9d3e9ab54",
"EnableDns64": false,
"Ipv6Native": false,
"PrivateDnsNameOptionsOnLaunch": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
}
}
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-subnet \
> --vpc-id ${VPC_ID} \
> --cidr-block ${CIDR_BLOCK_1} \
> --availability-zone ${AZ_1} \
> --tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${SUBNET_NAME_1}}]"
{
"Subnet": {
"AvailabilityZone": "ap-northeast-1a",
"AvailabilityZoneId": "apne1-az4",
"AvailableIpAddressCount": 251,
"CidrBlock": "10.0.1.0/24",
"DefaultForAz": false,
"MapPublicIpOnLaunch": false,
"State": "available",
"SubnetId": "subnet-0c54d7148977035d9",
"VpcId": "vpc-0a881866df4d0e38b",
"OwnerId": "999999999999",
"AssignIpv6AddressOnCreation": false,
"Ipv6CidrBlockAssociationSet": [],
"Tags": [
{
"Key": "Name",
"Value": "handson-pri-1a"
}
],
"SubnetArn": "arn:aws:ec2:ap-northeast-1:999999999999:subnet/subnet-0c54d7148977035d9",
"EnableDns64": false,
"Ipv6Native": false,
"PrivateDnsNameOptionsOnLaunch": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
}
}
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-subnet \
> --vpc-id ${VPC_ID} \
> --cidr-block ${CIDR_BLOCK_2} \
> --availability-zone ${AZ_2} \
> --tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${SUBNET_NAME_2}}]"
{
"Subnet": {
"AvailabilityZone": "ap-northeast-1c",
"AvailabilityZoneId": "apne1-az1",
"AvailableIpAddressCount": 251,
"CidrBlock": "10.0.2.0/24",
"DefaultForAz": false,
"MapPublicIpOnLaunch": false,
"State": "available",
"SubnetId": "subnet-091579df7fe24dd39",
"VpcId": "vpc-0a881866df4d0e38b",
"OwnerId": "999999999999",
"AssignIpv6AddressOnCreation": false,
"Ipv6CidrBlockAssociationSet": [],
"Tags": [
{
"Key": "Name",
"Value": "handson-pri-1c"
}
],
"SubnetArn": "arn:aws:ec2:ap-northeast-1:999999999999:subnet/subnet-091579df7fe24dd39",
"EnableDns64": false,
"Ipv6Native": false,
"PrivateDnsNameOptionsOnLaunch": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
}
}
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-subnet \
> --vpc-id ${VPC_ID} \
> --cidr-block ${CIDR_BLOCK_3} \
> --availability-zone ${AZ_3} \
> --tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${SUBNET_NAME_3}}]"
{
"Subnet": {
"AvailabilityZone": "ap-northeast-1d",
"AvailabilityZoneId": "apne1-az2",
"AvailableIpAddressCount": 251,
"CidrBlock": "10.0.3.0/24",
"DefaultForAz": false,
"MapPublicIpOnLaunch": false,
"State": "available",
"SubnetId": "subnet-029225d81f72ef86b",
"VpcId": "vpc-0a881866df4d0e38b",
"OwnerId": "999999999999",
"AssignIpv6AddressOnCreation": false,
"Ipv6CidrBlockAssociationSet": [],
"Tags": [
{
"Key": "Name",
"Value": "handson-pri-1d"
}
],
"SubnetArn": "arn:aws:ec2:ap-northeast-1:999999999999:subnet/subnet-029225d81f72ef86b",
"EnableDns64": false,
"Ipv6Native": false,
"PrivateDnsNameOptionsOnLaunch": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
}
}
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # サブネットID取得
[cloudshell-user@ip-10-132-88-239 ~]$ SUBNET_ID_0=$(
> aws ec2 describe-subnets \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${SUBNET_NAME_0}" \
> --query "Subnets[].SubnetId" \
> --output text
> ) \
> && echo ${SUBNET_ID_0}
subnet-0fa74f1d9d3e9ab54
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ SUBNET_ID_1=$(
> aws ec2 describe-subnets \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${SUBNET_NAME_1}" \
> --query "Subnets[].SubnetId" \
> --output text
> ) \
> && echo ${SUBNET_ID_1}
subnet-0c54d7148977035d9
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ SUBNET_ID_2=$(
> aws ec2 describe-subnets \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${SUBNET_NAME_2}" \
> --query "Subnets[].SubnetId" \
> --output text
> ) \
> && echo ${SUBNET_ID_2}
subnet-091579df7fe24dd39
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ SUBNET_ID_3=$(
> aws ec2 describe-subnets \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${SUBNET_NAME_3}" \
> --query "Subnets[].SubnetId" \
> --output text
> ) \
> && echo ${SUBNET_ID_3}
subnet-029225d81f72ef86b
インターネットゲートウェイ作成 (タブ1)
コマンド
# インターネットゲートウェイ作成
aws ec2 create-internet-gateway \
--tag-specifications "ResourceType=internet-gateway,Tags=[{Key=Name,Value=${IGW_NAME}}]"
# インターネットゲートウェイID取得
IGW_ID=$(
aws ec2 describe-internet-gateways \
--filters Name=tag:Name,Values=${IGW_NAME} \
--query "InternetGateways[].InternetGatewayId" \
--output text
) \
&& echo ${IGW_ID}
# インターネットゲートウェイをVPCにアタッチ
aws ec2 attach-internet-gateway \
--vpc-id ${VPC_ID} \
--internet-gateway-id ${IGW_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # インターネットゲートウェイ作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-internet-gateway \
> --tag-specifications "ResourceType=internet-gateway,Tags=[{Key=Name,Value=${IGW_NAME}}]"
{
"InternetGateway": {
"Attachments": [],
"InternetGatewayId": "igw-0dd10a292d894eb7b",
"OwnerId": "999999999999",
"Tags": [
{
"Key": "Name",
"Value": "handson-igw"
}
]
}
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インターネットゲートウェイID取得
[cloudshell-user@ip-10-132-88-239 ~]$ IGW_ID=$(
> aws ec2 describe-internet-gateways \
> --filters Name=tag:Name,Values=${IGW_NAME} \
> --query "InternetGateways[].InternetGatewayId" \
> --output text
> ) \
> && echo ${IGW_ID}
igw-0dd10a292d894eb7b
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インターネットゲートウェイをVPCにアタッチ
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 attach-internet-gateway \
> --vpc-id ${VPC_ID} \
> --internet-gateway-id ${IGW_ID}
ルートテーブル作成 (タブ1)
コマンド
# ルートテーブル作成
aws ec2 create-route-table \
--vpc-id ${VPC_ID} \
--tag-specifications "ResourceType=route-table,Tags=[{Key=Name,Value=${RT_NAME}}]"
# ルートテーブルID取得
RT_ID=$(
aws ec2 describe-route-tables \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${RT_NAME}" \
--query "RouteTables[].RouteTableId" \
--output text
) \
&& echo ${RT_ID}
# デフォルトルート作成
aws ec2 create-route \
--route-table-id ${RT_ID} \
--destination-cidr-block 0.0.0.0/0 \
--gateway-id ${IGW_ID}
# サブネット関連付け
aws ec2 associate-route-table \
--subnet-id ${SUBNET_ID_0} \
--route-table-id ${RT_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # ルートテーブル作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-route-table \
> --vpc-id ${VPC_ID} \
> --tag-specifications "ResourceType=route-table,Tags=[{Key=Name,Value=${RT_NAME}}]"
{
"RouteTable": {
"Associations": [],
"PropagatingVgws": [],
"RouteTableId": "rtb-036fa398f9ccf973c",
"Routes": [
{
"DestinationCidrBlock": "10.0.0.0/16",
"GatewayId": "local",
"Origin": "CreateRouteTable",
"State": "active"
}
],
"Tags": [
{
"Key": "Name",
"Value": "Public Route Table"
}
],
"VpcId": "vpc-0a881866df4d0e38b",
"OwnerId": "999999999999"
},
"ClientToken": "07a2d034-b016-4e8d-8cff-adfd106bc373"
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # ルートテーブルID取得
[cloudshell-user@ip-10-132-88-239 ~]$ RT_ID=$(
> aws ec2 describe-route-tables \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${RT_NAME}" \
> --query "RouteTables[].RouteTableId" \
> --output text
> ) \
> && echo ${RT_ID}
rtb-036fa398f9ccf973c
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # デフォルトルート作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-route \
> --route-table-id ${RT_ID} \
> --destination-cidr-block 0.0.0.0/0 \
> --gateway-id ${IGW_ID}
{
"Return": true
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # サブネット関連付け
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 associate-route-table \
> --subnet-id ${SUBNET_ID_0} \
> --route-table-id ${RT_ID}
{
"AssociationId": "rtbassoc-0edda772aa8a79a02",
"AssociationState": {
"State": "associated"
}
}
EC2インスタンスの準備
IAM関連の準備 (タブ1)
変数
コマンド
# IAMロール名
IAM_ROLE_NAME="handson-ec2-role" \
&& echo ${IAM_ROLE_NAME}
# アタッチポリシー名
IAM_ATTACH_POLICY_NAME="AmazonSSMManagedInstanceCore" \
&& echo ${IAM_ATTACH_POLICY_NAME}
# アタッチポリシーARN
IAM_POLICY_ARN="arn:aws:iam::aws:policy/${IAM_ATTACH_POLICY_NAME}" \
&& echo ${IAM_POLICY_ARN}
# インスタンスプロファイル名
IAM_INSTANCE_PROFILE_NAME="handson-ec2-profile" \
&& echo ${IAM_INSTANCE_PROFILE_NAME}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # IAMロール名
[cloudshell-user@ip-10-132-88-239 ~]$ IAM_ROLE_NAME="handson-ec2-role" \
> && echo ${IAM_ROLE_NAME}
handson-ec2-role
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # アタッチポリシー名
[cloudshell-user@ip-10-132-88-239 ~]$ IAM_ATTACH_POLICY_NAME="AmazonSSMManagedInstanceCore" \
> && echo ${IAM_ATTACH_POLICY_NAME}
AmazonSSMManagedInstanceCore
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # アタッチポリシーARN
[cloudshell-user@ip-10-132-88-239 ~]$ IAM_POLICY_ARN="arn:aws:iam::aws:policy/${IAM_ATTACH_POLICY_NAME}" \
> && echo ${IAM_POLICY_ARN}
arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インスタンスプロファイル名
[cloudshell-user@ip-10-132-88-239 ~]$ IAM_INSTANCE_PROFILE_NAME="handson-ec2-profile" \
> && echo ${IAM_INSTANCE_PROFILE_NAME}
handson-ec2-profile
IAMロールの作成
コマンド
# 信頼関係ポリシードキュメントの作成
ASSUME_ROLE_POLICY_DOCUMENT=$(cat << EOF
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": "ec2.amazonaws.com"
},
"Action": "sts:AssumeRole"
}
]
}
EOF
) \
&& echo ${ASSUME_ROLE_POLICY_DOCUMENT}
# JSONフォーマットの確認
echo ${ASSUME_ROLE_POLICY_DOCUMENT} | python -m json.tool
# IAMロールの作成
aws iam create-role \
--role-name ${IAM_ROLE_NAME} \
--assume-role-policy-document "${ASSUME_ROLE_POLICY_DOCUMENT}"
# ARN取得
IAM_ROLE_ARN=$(
aws iam get-role \
--role-name ${IAM_ROLE_NAME} \
--query 'Role.Arn' \
--output text
) \
&& echo ${IAM_ROLE_ARN}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # 信頼関係ポリシードキュメントの作成
[cloudshell-user@ip-10-132-88-239 ~]$ ASSUME_ROLE_POLICY_DOCUMENT=$(cat << EOF
> {
> "Version": "2012-10-17",
> "Statement": [
> {
> "Effect": "Allow",
> "Principal": {
> "Service": "ec2.amazonaws.com"
> },
> "Action": "sts:AssumeRole"
> }
> ]
> }
> EOF
> ) \
> && echo ${ASSUME_ROLE_POLICY_DOCUMENT}
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Service": "ec2.amazonaws.com" }, "Action": "sts:AssumeRole" } ] }
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # JSONフォーマットの確認
[cloudshell-user@ip-10-132-88-239 ~]$ echo ${ASSUME_ROLE_POLICY_DOCUMENT} | python -m json.tool
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": "ec2.amazonaws.com"
},
"Action": "sts:AssumeRole"
}
]
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # IAMロールの作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws iam create-role \
> --role-name ${IAM_ROLE_NAME} \
> --assume-role-policy-document "${ASSUME_ROLE_POLICY_DOCUMENT}"
{
"Role": {
"Path": "/",
"RoleName": "handson-ec2-role",
"RoleId": "AROAWFKRCMKOQPJ664SUB",
"Arn": "arn:aws:iam::999999999999:role/handson-ec2-role",
"CreateDate": "2024-08-12T03:46:17+00:00",
"AssumeRolePolicyDocument": {
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": "ec2.amazonaws.com"
},
"Action": "sts:AssumeRole"
}
]
}
}
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # ARN取得
[cloudshell-user@ip-10-132-88-239 ~]$ IAM_ROLE_ARN=$(
> aws iam get-role \
> --role-name ${IAM_ROLE_NAME} \
> --query 'Role.Arn' \
> --output text
> ) \
> && echo ${IAM_ROLE_ARN}
arn:aws:iam::999999999999:role/handson-ec2-role
IAMポリシーのアタッチ
コマンド
# IAMロールにポリシーをアタッチ
aws iam attach-role-policy \
--role-name ${IAM_ROLE_NAME} \
--policy-arn ${IAM_POLICY_ARN}
# インスタンスプロファイル作成
aws iam create-instance-profile \
--instance-profile-name ${IAM_INSTANCE_PROFILE_NAME}
# インスタンスプロファイルへのロールのアタッチ
aws iam add-role-to-instance-profile \
--instance-profile-name ${IAM_INSTANCE_PROFILE_NAME} \
--role-name ${IAM_ROLE_NAME}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # IAMロールにポリシーをアタッチ
[cloudshell-user@ip-10-132-88-239 ~]$ aws iam attach-role-policy \
> --role-name ${IAM_ROLE_NAME} \
> --policy-arn ${IAM_POLICY_ARN}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インスタンスプロファイル作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws iam create-instance-profile \
> --instance-profile-name ${IAM_INSTANCE_PROFILE_NAME}
{
"InstanceProfile": {
"Path": "/",
"InstanceProfileName": "handson-ec2-profile",
"InstanceProfileId": "AIPAWFKRCMKORF7EJ34BX",
"Arn": "arn:aws:iam::999999999999:instance-profile/handson-ec2-profile",
"CreateDate": "2024-08-12T03:47:12+00:00",
"Roles": []
}
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インスタンスプロファイルへのロールのアタッチ
[cloudshell-user@ip-10-132-88-239 ~]$ aws iam add-role-to-instance-profile \
> --instance-profile-name ${IAM_INSTANCE_PROFILE_NAME} \
> --role-name ${IAM_ROLE_NAME}
EC2の作成 (タブ1)
変数
コマンド
# 名前
EC2_NAME="handson-ec2" \
&& echo ${EC2_NAME}
# インスタンスタイプ
EC2_INSTANCE_TYPE="t2.micro" \
&& echo ${EC2_INSTANCE_TYPE}
# Amazon マシンイメージ (AMI)
EC2_IMAGE_ID="resolve:ssm:/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64" \
&& echo ${EC2_IMAGE_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # 名前
[cloudshell-user@ip-10-132-88-239 ~]$ EC2_NAME="handson-ec2" \
> && echo ${EC2_NAME}
handson-ec2
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インスタンスタイプ
[cloudshell-user@ip-10-132-88-239 ~]$ EC2_INSTANCE_TYPE="t2.micro" \
> && echo ${EC2_INSTANCE_TYPE}
t2.micro
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # Amazon マシンイメージ (AMI)
[cloudshell-user@ip-10-132-88-239 ~]$ EC2_IMAGE_ID="resolve:ssm:/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64" \
> && echo ${EC2_IMAGE_ID}
resolve:ssm:/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64
EC2作成
コマンド
# EC2インスタンス作成
aws ec2 run-instances \
--image-id ${EC2_IMAGE_ID} \
--instance-type ${EC2_INSTANCE_TYPE} \
--associate-public-ip-address \
--subnet-id ${SUBNET_ID_0} \
--iam-instance-profile Name=${IAM_INSTANCE_PROFILE_NAME} \
--tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=${EC2_NAME}}]" \
--no-cli-pager
# インスタンスID
EC2_INSTANCE_ID=$( \
aws ec2 describe-instances \
--filters Name=tag:Name,Values=${EC2_NAME} \
--query "Reservations[*].Instances[*].[InstanceId]" \
--output text
) \
&& echo ${EC2_INSTANCE_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # EC2インスタンス作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 run-instances \
> --image-id ${EC2_IMAGE_ID} \
> --instance-type ${EC2_INSTANCE_TYPE} \
> --associate-public-ip-address \
> --subnet-id ${SUBNET_ID_0} \
> --iam-instance-profile Name=${IAM_INSTANCE_PROFILE_NAME} \
> --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=${EC2_NAME}}]" \
> --no-cli-pager
{
"Groups": [],
"Instances": [
{
"AmiLaunchIndex": 0,
"ImageId": "ami-0091f05e4b8ee6709",
"InstanceId": "i-0af0985750c6c13b7",
"InstanceType": "t2.micro",
"LaunchTime": "2024-08-12T04:25:47+00:00",
"Monitoring": {
"State": "disabled"
},
"Placement": {
"AvailabilityZone": "ap-northeast-1a",
"GroupName": "",
"Tenancy": "default"
},
"PrivateDnsName": "ip-10-0-0-139.ap-northeast-1.compute.internal",
"PrivateIpAddress": "10.0.0.139",
"ProductCodes": [],
"PublicDnsName": "",
"State": {
"Code": 0,
"Name": "pending"
},
"StateTransitionReason": "",
"SubnetId": "subnet-0fa74f1d9d3e9ab54",
"VpcId": "vpc-0a881866df4d0e38b",
"Architecture": "x86_64",
"BlockDeviceMappings": [],
"ClientToken": "d770016e-9be5-4e5d-8b1e-2331c2b474e7",
"EbsOptimized": false,
"EnaSupport": true,
"Hypervisor": "xen",
"IamInstanceProfile": {
"Arn": "arn:aws:iam::999999999999:instance-profile/handson-ec2-profile",
"Id": "AIPAWFKRCMKORF7EJ34BX"
},
"NetworkInterfaces": [
{
"Attachment": {
"AttachTime": "2024-08-12T04:25:47+00:00",
"AttachmentId": "eni-attach-002ee0e22e6eca983",
"DeleteOnTermination": true,
"DeviceIndex": 0,
"Status": "attaching",
"NetworkCardIndex": 0
},
"Description": "",
"Groups": [
{
"GroupName": "default",
"GroupId": "sg-04e6fb134ba17e4db"
}
],
"Ipv6Addresses": [],
"MacAddress": "06:73:fb:1e:82:95",
"NetworkInterfaceId": "eni-0476d34717abd921c",
"OwnerId": "999999999999",
"PrivateIpAddress": "10.0.0.139",
"PrivateIpAddresses": [
{
"Primary": true,
"PrivateIpAddress": "10.0.0.139"
}
],
"SourceDestCheck": true,
"Status": "in-use",
"SubnetId": "subnet-0fa74f1d9d3e9ab54",
"VpcId": "vpc-0a881866df4d0e38b",
"InterfaceType": "interface"
}
],
"RootDeviceName": "/dev/xvda",
"RootDeviceType": "ebs",
"SecurityGroups": [
{
"GroupName": "default",
"GroupId": "sg-04e6fb134ba17e4db"
}
],
"SourceDestCheck": true,
"StateReason": {
"Code": "pending",
"Message": "pending"
},
"Tags": [
{
"Key": "Name",
"Value": "handson-ec2"
}
],
"VirtualizationType": "hvm",
"CpuOptions": {
"CoreCount": 1,
"ThreadsPerCore": 1
},
"CapacityReservationSpecification": {
"CapacityReservationPreference": "open"
},
"MetadataOptions": {
"State": "pending",
"HttpTokens": "required",
"HttpPutResponseHopLimit": 2,
"HttpEndpoint": "enabled",
"HttpProtocolIpv6": "disabled",
"InstanceMetadataTags": "disabled"
},
"EnclaveOptions": {
"Enabled": false
},
"BootMode": "uefi-preferred",
"PrivateDnsNameOptions": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
},
"MaintenanceOptions": {
"AutoRecovery": "default"
},
"CurrentInstanceBootMode": "legacy-bios"
}
],
"OwnerId": "999999999999",
"ReservationId": "r-0dc6091b9dd9d0e44"
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インスタンスID
[cloudshell-user@ip-10-132-88-239 ~]$ EC2_INSTANCE_ID=$( \
> aws ec2 describe-instances \
> --filters Name=tag:Name,Values=${EC2_NAME} \
> --query "Reservations[*].Instances[*].[InstanceId]" \
> --output text
> ) \
> && echo ${EC2_INSTANCE_ID}
i-0af0985750c6c13b7
Redis クライアントインストール (タブ2)
Session Managerでサーバログイン
EC2_INSTANCE_IDは適宜変更
コマンド
EC2_INSTANCE_ID=i-06f2f251320455696
aws ssm start-session \
--target ${EC2_INSTANCE_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ EC2_INSTANCE_ID=i-06f2f251320455696
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ aws ssm start-session \
> --target ${EC2_INSTANCE_ID}
Starting session with SessionId: admin-rbjc4yfg4y37iht2omwv4252je
sh-5.2$
Redis クライアント
下記はAmazon Linux 2023の場合
コマンド
sudo yum install redis6 -y
出力
sh-5.2$ sudo yum install redis6 -y
Last metadata expiration check: 0:02:20 ago on Mon Aug 12 04:26:41 2024.
Dependencies resolved.
===========================================================================================================================================================================================================================================================================================
Package Architecture Version Repository Size
===========================================================================================================================================================================================================================================================================================
Installing:
redis6 x86_64 6.2.14-1.amzn2023.0.1 amazonlinux 1.3 M
Transaction Summary
===========================================================================================================================================================================================================================================================================================
Install 1 Package
Total download size: 1.3 M
Installed size: 4.7 M
Downloading Packages:
redis6-6.2.14-1.amzn2023.0.1.x86_64.rpm 6.2 MB/s | 1.3 MB 00:00
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 4.3 MB/s | 1.3 MB 00:00
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: redis6-6.2.14-1.amzn2023.0.1.x86_64 1/1
Installing : redis6-6.2.14-1.amzn2023.0.1.x86_64 1/1
Running scriptlet: redis6-6.2.14-1.amzn2023.0.1.x86_64 1/1
Verifying : redis6-6.2.14-1.amzn2023.0.1.x86_64 1/1
Installed:
redis6-6.2.14-1.amzn2023.0.1.x86_64
Complete!
Redis クラスター作成
セキュリティグループ作成 (タブ1)
変数
コマンド
# セキュリティグループ名
ELC_SG_NAME='handson-elc-sg' \
&& echo ${ELC_SG_NAME}
# セキュリティグループ説明
ELC_SG_DESC='handson-elc-sg' \
&& echo ${ELC_SG_DESC}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # セキュリティグループ名
[cloudshell-user@ip-10-132-88-239 ~]$ ELC_SG_NAME='handson-elc-sg' \
> && echo ${ELC_SG_NAME}
handson-elc-sg
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # セキュリティグループ説明
[cloudshell-user@ip-10-132-88-239 ~]$ ELC_SG_DESC='handson-elc-sg' \
> && echo ${ELC_SG_DESC}
handson-elc-sg
セキュリティグループ作成
コマンド
# セキュリティグループ作成
aws ec2 create-security-group \
--group-name ${ELC_SG_NAME} \
--description "${ELC_SG_DESC}" \
--vpc-id ${VPC_ID}
# ID取得
ELC_SG_ID=$( \
aws ec2 describe-security-groups \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=group-name,Values=${ELC_SG_NAME} \
--query "SecurityGroups[].GroupId" \
--output text
) \
&& echo ${ELC_SG_ID}
# ルール追加
aws ec2 authorize-security-group-ingress \
--group-id ${ELC_SG_ID} \
--protocol tcp \
--port 6379 \
--cidr ${CIDR_BLOCK_0}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # セキュリティグループ作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 create-security-group \
> --group-name ${ELC_SG_NAME} \
> --description "${ELC_SG_DESC}" \
> --vpc-id ${VPC_ID}
{
"GroupId": "sg-0249aafd6f095e741"
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # ID取得
[cloudshell-user@ip-10-132-88-239 ~]$ ELC_SG_ID=$( \
> aws ec2 describe-security-groups \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=group-name,Values=${ELC_SG_NAME} \
> --query "SecurityGroups[].GroupId" \
> --output text
> ) \
> && echo ${ELC_SG_ID}
sg-0249aafd6f095e741
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # ルール追加
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 authorize-security-group-ingress \
> --group-id ${ELC_SG_ID} \
> --protocol tcp \
> --port 6379 \
> --cidr ${CIDR_BLOCK_0}
{
"Return": true,
"SecurityGroupRules": [
{
"SecurityGroupRuleId": "sgr-0f850c96881e79369",
"GroupId": "sg-0249aafd6f095e741",
"GroupOwnerId": "999999999999",
"IsEgress": false,
"IpProtocol": "tcp",
"FromPort": 6379,
"ToPort": 6379,
"CidrIpv4": "10.0.0.0/24"
}
]
}
キャッシュサブネットグループ作成 (タブ1)
コマンド
CACHESUBNETGROUPNAME="elc-tutorial-subnet" \
&& echo ${CACHESUBNETGROUPNAME}
CACHESUBNETGROUPDESCRIPTION="Tutorial Subnet Group" \
&& echo ${CACHESUBNETGROUPDESCRIPTION}
aws elasticache create-cache-subnet-group \
--cache-subnet-group-name ${CACHESUBNETGROUPNAME} \
--cache-subnet-group-description "${CACHESUBNETGROUPDESCRIPTION}" \
--subnet-ids ${SUBNET_ID_1} ${SUBNET_ID_2} ${SUBNET_ID_3}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ CACHESUBNETGROUPNAME="elc-tutorial-subnet" \
> && echo ${CACHESUBNETGROUPNAME}
elc-tutorial-subnet
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ CACHESUBNETGROUPDESCRIPTION="Tutorial Subnet Group" \
> && echo ${CACHESUBNETGROUPDESCRIPTION}
Tutorial Subnet Group
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ aws elasticache create-cache-subnet-group \
> --cache-subnet-group-name ${CACHESUBNETGROUPNAME} \
> --cache-subnet-group-description "${CACHESUBNETGROUPDESCRIPTION}" \
> --subnet-ids ${SUBNET_ID_1} ${SUBNET_ID_2} ${SUBNET_ID_3}
{
"CacheSubnetGroup": {
"CacheSubnetGroupName": "elc-tutorial-subnet",
"CacheSubnetGroupDescription": "Tutorial Subnet Group",
"VpcId": "vpc-0a881866df4d0e38b",
"Subnets": [
{
"SubnetIdentifier": "subnet-0c54d7148977035d9",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1a"
},
"SupportedNetworkTypes": [
"ipv4"
]
},
{
"SubnetIdentifier": "subnet-091579df7fe24dd39",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1c"
},
"SupportedNetworkTypes": [
"ipv4"
]
},
{
"SubnetIdentifier": "subnet-029225d81f72ef86b",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1d"
},
"SupportedNetworkTypes": [
"ipv4"
]
}
],
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:subnetgroup:elc-tutorial-subnet",
"SupportedNetworkTypes": [
"ipv4"
]
}
}
Redis クラスター作成 (タブ1)
コマンド
# キャッシュの名前
REPLICATION_GROUP_ID="elc-tutorial" \
&& echo ${REPLICATION_GROUP_ID}
# キャッシュの説明
REPLICATION_GROUP_DESC="Tutorial example" \
&& echo ${REPLICATION_GROUP_DESC}
# クラスターシャード数
NUM_NODE_GROUPS=3 \
&& echo ${NUM_NODE_GROUPS}
# クラスターノードタイプ
CACHE_NODE_TYPE="cache.t3.micro" \
&& echo ${CACHE_NODE_TYPE}
# クラスターパラメータグループ
CACHE_PARAMETER_GROUP="default.redis7.cluster.on" \
&& echo ${CACHE_PARAMETER_GROUP}
# クラスターエンジンバージョン
ENGINE_VERSION="7.1" \
&& echo ${ENGINE_VERSION}
# Redis クラスター作成
aws elasticache create-replication-group \
--replication-group-id ${REPLICATION_GROUP_ID} \
--replication-group-description "${REPLICATION_GROUP_DESC}" \
--num-node-groups ${NUM_NODE_GROUPS} \
--cache-node-type ${CACHE_NODE_TYPE} \
--cache-parameter-group ${CACHE_PARAMETER_GROUP} \
--engine redis \
--engine-version ${ENGINE_VERSION} \
--cache-subnet-group-name ${CACHESUBNETGROUPNAME} \
--security-group-ids ${ELC_SG_ID} \
--automatic-failover-enabled \
--multi-az-enabled \
--cluster-mode enabled \
--snapshot-retention-limit 0 \
--no-auto-minor-version-upgrade \
--node-group-configuration \
"ReplicaCount=2,PrimaryAvailabilityZone='ap-northeast-1a',ReplicaAvailabilityZones='ap-northeast-1c','ap-northeast-1d',Slots=0-5461" \
"ReplicaCount=2,PrimaryAvailabilityZone='ap-northeast-1c',ReplicaAvailabilityZones='ap-northeast-1d','ap-northeast-1a',Slots=5462-10922" \
"ReplicaCount=2,PrimaryAvailabilityZone='ap-northeast-1d',ReplicaAvailabilityZones='ap-northeast-1a','ap-northeast-1c',Slots=10923-16383"
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # キャッシュの名前
[cloudshell-user@ip-10-132-88-239 ~]$ REPLICATION_GROUP_ID="elc-tutorial" \
> && echo ${REPLICATION_GROUP_ID}
elc-tutorial
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # キャッシュの説明
[cloudshell-user@ip-10-132-88-239 ~]$ REPLICATION_GROUP_DESC="Tutorial example" \
> && echo ${REPLICATION_GROUP_DESC}
Tutorial example
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # クラスターシャード数
[cloudshell-user@ip-10-132-88-239 ~]$ NUM_NODE_GROUPS=3 \
> && echo ${NUM_NODE_GROUPS}
3
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # クラスターノードタイプ
[cloudshell-user@ip-10-132-88-239 ~]$ CACHE_NODE_TYPE="cache.t3.micro" \
> && echo ${CACHE_NODE_TYPE}
cache.t3.micro
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # クラスターパラメータグループ
[cloudshell-user@ip-10-132-88-239 ~]$ CACHE_PARAMETER_GROUP="default.redis7.cluster.on" \
> && echo ${CACHE_PARAMETER_GROUP}
default.redis7.cluster.on
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # クラスターエンジンバージョン
[cloudshell-user@ip-10-132-88-239 ~]$ ENGINE_VERSION="7.1" \
> && echo ${ENGINE_VERSION}
7.1
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # Redis クラスター作成
[cloudshell-user@ip-10-132-88-239 ~]$ aws elasticache create-replication-group \
> --replication-group-id ${REPLICATION_GROUP_ID} \
> --replication-group-description "${REPLICATION_GROUP_DESC}" \
> --num-node-groups ${NUM_NODE_GROUPS} \
> --cache-node-type ${CACHE_NODE_TYPE} \
> --cache-parameter-group ${CACHE_PARAMETER_GROUP} \
> --engine redis \
> --engine-version ${ENGINE_VERSION} \
> --cache-subnet-group-name ${CACHESUBNETGROUPNAME} \
> --security-group-ids ${ELC_SG_ID} \
> --automatic-failover-enabled \
> --multi-az-enabled \
> --cluster-mode enabled \
> --snapshot-retention-limit 0 \
> --no-auto-minor-version-upgrade \
> --node-group-configuration \
> "ReplicaCount=2,PrimaryAvailabilityZone='ap-northeast-1a',ReplicaAvailabilityZones='ap-northeast-1c','ap-northeast-1d',Slots=0-5461" \
> "ReplicaCount=2,PrimaryAvailabilityZone='ap-northeast-1c',ReplicaAvailabilityZones='ap-northeast-1d','ap-northeast-1a',Slots=5462-10922" \
> "ReplicaCount=2,PrimaryAvailabilityZone='ap-northeast-1d',ReplicaAvailabilityZones='ap-northeast-1a','ap-northeast-1c',Slots=10923-16383"
{
"ReplicationGroup": {
"ReplicationGroupId": "elc-tutorial",
"Description": "Tutorial example",
"GlobalReplicationGroupInfo": {},
"Status": "creating",
"PendingModifiedValues": {},
"MemberClusters": [
"elc-tutorial-0001-001",
"elc-tutorial-0001-002",
"elc-tutorial-0001-003",
"elc-tutorial-0002-001",
"elc-tutorial-0002-002",
"elc-tutorial-0002-003",
"elc-tutorial-0003-001",
"elc-tutorial-0003-002",
"elc-tutorial-0003-003"
],
"AutomaticFailover": "enabled",
"MultiAZ": "enabled",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"ClusterEnabled": true,
"CacheNodeType": "cache.t3.micro",
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:replicationgroup:elc-tutorial",
"LogDeliveryConfigurations": [],
"ReplicationGroupCreateTime": "2024-08-12T06:09:58.680000+00:00",
"DataTiering": "disabled",
"AutoMinorVersionUpgrade": false,
"NetworkType": "ipv4",
"IpDiscovery": "ipv4",
"ClusterMode": "enabled"
}
}
Redis クラスター作成完了までおよそ15分かかる
以後の作業は作成完了後に実施
Redis クラスター確認 (タブ1)
コマンド
# レプリケーショングループの詳細
aws elasticache describe-replication-groups \
--replication-group-id ${REPLICATION_GROUP_ID} \
--no-cli-pager
# クラスターの詳細
aws elasticache describe-cache-clusters \
--no-cli-pager
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # レプリケーショングループの詳細
[cloudshell-user@ip-10-132-88-239 ~]$ aws elasticache describe-replication-groups \
> --replication-group-id ${REPLICATION_GROUP_ID} \
> --no-cli-pager
{
"ReplicationGroups": [
{
"ReplicationGroupId": "elc-tutorial",
"Description": "Tutorial example",
"GlobalReplicationGroupInfo": {},
"Status": "available",
"PendingModifiedValues": {},
"MemberClusters": [
"elc-tutorial-0001-001",
"elc-tutorial-0001-002",
"elc-tutorial-0001-003",
"elc-tutorial-0002-001",
"elc-tutorial-0002-002",
"elc-tutorial-0002-003",
"elc-tutorial-0003-001",
"elc-tutorial-0003-002",
"elc-tutorial-0003-003"
],
"NodeGroups": [
{
"NodeGroupId": "0001",
"Status": "available",
"Slots": "0-5461",
"NodeGroupMembers": [
{
"CacheClusterId": "elc-tutorial-0001-001",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1a"
},
{
"CacheClusterId": "elc-tutorial-0001-002",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1c"
},
{
"CacheClusterId": "elc-tutorial-0001-003",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1d"
}
]
},
{
"NodeGroupId": "0002",
"Status": "available",
"Slots": "5462-10922",
"NodeGroupMembers": [
{
"CacheClusterId": "elc-tutorial-0002-001",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1c"
},
{
"CacheClusterId": "elc-tutorial-0002-002",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1d"
},
{
"CacheClusterId": "elc-tutorial-0002-003",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1a"
}
]
},
{
"NodeGroupId": "0003",
"Status": "available",
"Slots": "10923-16383",
"NodeGroupMembers": [
{
"CacheClusterId": "elc-tutorial-0003-001",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1d"
},
{
"CacheClusterId": "elc-tutorial-0003-002",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1a"
},
{
"CacheClusterId": "elc-tutorial-0003-003",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1c"
}
]
}
],
"AutomaticFailover": "enabled",
"MultiAZ": "enabled",
"ConfigurationEndpoint": {
"Address": "elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com",
"Port": 6379
},
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"ClusterEnabled": true,
"CacheNodeType": "cache.t3.micro",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:replicationgroup:elc-tutorial",
"LogDeliveryConfigurations": [],
"ReplicationGroupCreateTime": "2024-08-12T06:09:58.680000+00:00",
"DataTiering": "disabled",
"AutoMinorVersionUpgrade": false,
"NetworkType": "ipv4",
"IpDiscovery": "ipv4",
"ClusterMode": "enabled"
}
]
}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # クラスターの詳細
[cloudshell-user@ip-10-132-88-239 ~]$ aws elasticache describe-cache-clusters \
> --no-cli-pager
{
"CacheClusters": [
{
"CacheClusterId": "elc-tutorial-0001-001",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1a",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0001-001",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
},
{
"CacheClusterId": "elc-tutorial-0001-002",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1c",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0001-002",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
},
{
"CacheClusterId": "elc-tutorial-0001-003",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1d",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0001-003",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
},
{
"CacheClusterId": "elc-tutorial-0002-001",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1c",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0002-001",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
},
{
"CacheClusterId": "elc-tutorial-0002-002",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1d",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0002-002",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
},
{
"CacheClusterId": "elc-tutorial-0002-003",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1a",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0002-003",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
},
{
"CacheClusterId": "elc-tutorial-0003-001",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1d",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0003-001",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
},
{
"CacheClusterId": "elc-tutorial-0003-002",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1a",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0003-002",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
},
{
"CacheClusterId": "elc-tutorial-0003-003",
"ClientDownloadLandingPage": "https://console.aws.amazon.com/elasticache/home#client-download:",
"CacheNodeType": "cache.t3.micro",
"Engine": "redis",
"EngineVersion": "7.1.0",
"CacheClusterStatus": "available",
"NumCacheNodes": 1,
"PreferredAvailabilityZone": "ap-northeast-1c",
"CacheClusterCreateTime": "2024-08-12T06:24:51.255000+00:00",
"PreferredMaintenanceWindow": "fri:13:00-fri:14:00",
"PendingModifiedValues": {},
"CacheSecurityGroups": [],
"CacheParameterGroup": {
"CacheParameterGroupName": "default.redis7.cluster.on",
"ParameterApplyStatus": "in-sync",
"CacheNodeIdsToReboot": []
},
"CacheSubnetGroupName": "elc-tutorial-subnet",
"AutoMinorVersionUpgrade": false,
"SecurityGroups": [
{
"SecurityGroupId": "sg-0249aafd6f095e741",
"Status": "active"
}
],
"ReplicationGroupId": "elc-tutorial",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"AuthTokenEnabled": false,
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:cluster:elc-tutorial-0003-003",
"ReplicationGroupLogDeliveryEnabled": false,
"LogDeliveryConfigurations": [],
"NetworkType": "ipv4",
"IpDiscovery": "ipv4"
}
]
}
Redisに接続する
設定エンドポイント確認 (タブ1)
コマンド
# 設定エンドポイント
ELC_ENDPOINT_ADDRESS=$(
aws elasticache describe-replication-groups \
--replication-group-id ${REPLICATION_GROUP_ID} \
--query ReplicationGroups[].ConfigurationEndpoint.Address \
--output text
) \
&& echo ${ELC_ENDPOINT_ADDRESS}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # 設定エンドポイント
[cloudshell-user@ip-10-132-88-239 ~]$ ELC_ENDPOINT_ADDRESS=$(
> aws elasticache describe-replication-groups \
> --replication-group-id ${REPLICATION_GROUP_ID} \
> --query ReplicationGroups[].ConfigurationEndpoint.Address \
> --output text
> ) \
> && echo ${ELC_ENDPOINT_ADDRESS}
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com
Redis ノードに接続 (タブ2)
ELC_ENDPOINT_ADDRESSは適宜変更
コマンド
ELC_ENDPOINT_ADDRESS=elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com
redis6-cli -c -h ${ELC_ENDPOINT_ADDRESS}
出力
sh-5.2$ ELC_ENDPOINT_ADDRESS=elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com
sh-5.2$
sh-5.2$ redis6-cli -c -h ${ELC_ENDPOINT_ADDRESS}
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379>
PING で接続をテスト (タブ2)
コマンド
PING
出力
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> PING
PONG
ノードの役割を確認 (タブ2)
masterに接続できるまで、繰り返す
コマンド
ROLE
出力
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> ROLE
1) "master"
2) (integer) 118260
3) 1) 1) "10.3.0.204"
2) "6379"
3) "118207"
2) 1) "10.3.2.44"
2) "6379"
3) "118207"
slaveの場合は切断し、再度接続し確認する
出力
sh-5.2$ redis6-cli -c -h ${ELC_ENDPOINT_ADDRESS}
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> ROLE
1) "slave"
2) "10.0.2.252"
3) (integer) 6379
4) "connected"
5) (integer) 106345
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> exit
出力
sh-5.2$ redis6-cli -c -h ${ELC_ENDPOINT_ADDRESS}
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> ROLE
1) "slave"
2) "10.0.3.124"
3) (integer) 6379
4) "connected"
5) (integer) 116363
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> exit
クラスター状態確認 (タブ2)
コマンド
CLUSTER NODES
出力
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> CLUSTER NODES
1636e354bbf6713d9701ecb95429399941a617c1 10.0.2.193:6379@1122 slave d431563c766ed92b2d5646cdb8f52b62597593b8 0 1723446053959 4 connected
c75cc2cc2e645af26bc968673fa7347624f769bc 10.0.3.219:6379@1122 slave 5242c2cff3261d1c51fc7018ff89f24ecebe0d79 0 1723446051000 3 connected
1c27220f86015cd7105f7054283f77202aa307e1 10.0.1.253:6379@1122 slave 5242c2cff3261d1c51fc7018ff89f24ecebe0d79 0 1723446048000 3 connected
5242c2cff3261d1c51fc7018ff89f24ecebe0d79 10.0.2.252:6379@1122 myself,master - 0 1723446047000 3 connected 5462-10922
c5e82a9ccea6302255070cb2ae6d6def953e40d0 10.0.3.51:6379@1122 slave d6ad0b175cce649d69439776bdd898c60cc7d122 0 1723446051942 0 connected
d431563c766ed92b2d5646cdb8f52b62597593b8 10.0.3.124:6379@1122 master - 0 1723446049925 4 connected 10923-16383
5c5416879180f6487ef7d71d8385c192c7a73850 10.0.1.232:6379@1122 slave d431563c766ed92b2d5646cdb8f52b62597593b8 0 1723446050935 4 connected
d6ad0b175cce649d69439776bdd898c60cc7d122 10.0.1.38:6379@1122 master - 0 1723446049000 0 connected 0-5461
c6eac875f799806b09f945bb6ab09f02bea05903 10.0.2.172:6379@1122 slave d6ad0b175cce649d69439776bdd898c60cc7d122 0 1723446052951 0 connected
フェイルオーバーをトリガー (タブ1)
コマンド
aws elasticache test-failover \
--replication-group-id ${REPLICATION_GROUP_ID} \
--node-group-id 0001 \
--no-cli-pager
出力
[cloudshell-user@ip-10-132-88-239 ~]$ aws elasticache test-failover \
> --replication-group-id ${REPLICATION_GROUP_ID} \
> --node-group-id 0001 \
> --no-cli-pager
{
"ReplicationGroup": {
"ReplicationGroupId": "elc-tutorial",
"Description": "Tutorial example",
"GlobalReplicationGroupInfo": {},
"Status": "available",
"PendingModifiedValues": {},
"MemberClusters": [
"elc-tutorial-0001-001",
"elc-tutorial-0001-002",
"elc-tutorial-0001-003",
"elc-tutorial-0002-001",
"elc-tutorial-0002-002",
"elc-tutorial-0002-003",
"elc-tutorial-0003-001",
"elc-tutorial-0003-002",
"elc-tutorial-0003-003"
],
"NodeGroups": [
{
"NodeGroupId": "0001",
"Status": "available",
"Slots": "0-5461",
"NodeGroupMembers": [
{
"CacheClusterId": "elc-tutorial-0001-001",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1a"
},
{
"CacheClusterId": "elc-tutorial-0001-002",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1c"
},
{
"CacheClusterId": "elc-tutorial-0001-003",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1d"
}
]
},
{
"NodeGroupId": "0002",
"Status": "available",
"Slots": "5462-10922",
"NodeGroupMembers": [
{
"CacheClusterId": "elc-tutorial-0002-001",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1c"
},
{
"CacheClusterId": "elc-tutorial-0002-002",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1d"
},
{
"CacheClusterId": "elc-tutorial-0002-003",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1a"
}
]
},
{
"NodeGroupId": "0003",
"Status": "available",
"Slots": "10923-16383",
"NodeGroupMembers": [
{
"CacheClusterId": "elc-tutorial-0003-001",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1d"
},
{
"CacheClusterId": "elc-tutorial-0003-002",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1a"
},
{
"CacheClusterId": "elc-tutorial-0003-003",
"CacheNodeId": "0001",
"PreferredAvailabilityZone": "ap-northeast-1c"
}
]
}
],
"AutomaticFailover": "enabled",
"MultiAZ": "enabled",
"ConfigurationEndpoint": {
"Address": "elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com",
"Port": 6379
},
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"ClusterEnabled": true,
"CacheNodeType": "cache.t3.micro",
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:replicationgroup:elc-tutorial",
"LogDeliveryConfigurations": [],
"ReplicationGroupCreateTime": "2024-08-12T06:09:58.680000+00:00",
"DataTiering": "disabled",
"AutoMinorVersionUpgrade": false,
"NetworkType": "ipv4",
"IpDiscovery": "ipv4",
"ClusterMode": "enabled"
}
}
フェイルオーバー時のクラスター状態 (タブ2)
コマンド
CLUSTER NODES
出力
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> CLUSTER NODES
1636e354bbf6713d9701ecb95429399941a617c1 10.0.2.193:6379@1122 slave d431563c766ed92b2d5646cdb8f52b62597593b8 0 1723447100914 4 connected
c75cc2cc2e645af26bc968673fa7347624f769bc 10.0.3.219:6379@1122 slave 5242c2cff3261d1c51fc7018ff89f24ecebe0d79 0 1723447099906 3 connected
1c27220f86015cd7105f7054283f77202aa307e1 10.0.1.253:6379@1122 slave 5242c2cff3261d1c51fc7018ff89f24ecebe0d79 0 1723447099000 3 connected
5242c2cff3261d1c51fc7018ff89f24ecebe0d79 10.0.2.252:6379@1122 myself,master - 0 1723447100000 3 connected 5462-10922
c5e82a9ccea6302255070cb2ae6d6def953e40d0 10.0.3.51:6379@1122 master - 0 1723447095875 5 connected 0-5461
d431563c766ed92b2d5646cdb8f52b62597593b8 10.0.3.124:6379@1122 master - 0 1723447101922 4 connected 10923-16383
5c5416879180f6487ef7d71d8385c192c7a73850 10.0.1.232:6379@1122 slave d431563c766ed92b2d5646cdb8f52b62597593b8 0 1723447099000 4 connected
d6ad0b175cce649d69439776bdd898c60cc7d122 10.0.1.38:6379@1122 master,fail - 1723447084761 1723447080718 0 connected
c6eac875f799806b09f945bb6ab09f02bea05903 10.0.2.172:6379@1122 slave c5e82a9ccea6302255070cb2ae6d6def953e40d0 0 1723447102930 5 connected
出力
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> CLUSTER NODES
a6a51ee7f47638996c889af9dd39378938a8e3a0 10.0.1.38:6379@1122 slave c5e82a9ccea6302255070cb2ae6d6def953e40d0 0 1723447839000 5 connected
1636e354bbf6713d9701ecb95429399941a617c1 10.0.2.193:6379@1122 slave d431563c766ed92b2d5646cdb8f52b62597593b8 0 1723447842252 4 connected
c75cc2cc2e645af26bc968673fa7347624f769bc 10.0.3.219:6379@1122 slave 5242c2cff3261d1c51fc7018ff89f24ecebe0d79 0 1723447841243 3 connected
1c27220f86015cd7105f7054283f77202aa307e1 10.0.1.253:6379@1122 slave 5242c2cff3261d1c51fc7018ff89f24ecebe0d79 0 1723447840235 3 connected
5242c2cff3261d1c51fc7018ff89f24ecebe0d79 10.0.2.252:6379@1122 myself,master - 0 1723447841000 3 connected 5462-10922
c5e82a9ccea6302255070cb2ae6d6def953e40d0 10.0.3.51:6379@1122 master - 0 1723447842000 5 connected 0-5461
d431563c766ed92b2d5646cdb8f52b62597593b8 10.0.3.124:6379@1122 master - 0 1723447839226 4 connected 10923-16383
5c5416879180f6487ef7d71d8385c192c7a73850 10.0.1.232:6379@1122 slave d431563c766ed92b2d5646cdb8f52b62597593b8 0 1723447841000 4 connected
c6eac875f799806b09f945bb6ab09f02bea05903 10.0.2.172:6379@1122 slave c5e82a9ccea6302255070cb2ae6d6def953e40d0 0 1723447843260 5 connected
イベントを確認 (タブ1)
コマンド
aws elasticache describe-events
出力
[cloudshell-user@ip-10-132-88-239 ~]$ aws elasticache describe-events
{
"Events": [
{
"SourceIdentifier": "elc-tutorial-0001-001",
"SourceType": "cache-cluster",
"Message": "Finished recovery for cache nodes 0001",
"Date": "2024-08-12T07:27:47.977000+00:00"
},
{
"SourceIdentifier": "elc-tutorial-0001-001",
"SourceType": "cache-cluster",
"Message": "Recovering cache nodes 0001",
"Date": "2024-08-12T07:20:05.186000+00:00"
},
{
"SourceIdentifier": "elc-tutorial",
"SourceType": "replication-group",
"Message": "Failover to replica node elc-tutorial-0001-003 completed",
"Date": "2024-08-12T07:18:45.005000+00:00"
},
{
"SourceIdentifier": "elc-tutorial",
"SourceType": "replication-group",
"Message": "Test Failover API called for node group 0001",
"Date": "2024-08-12T07:18:01.417000+00:00"
}
]
}
Session Manager切断 (タブ2)
コマンド
exit
exit
出力
elc-tutorial.veuk10.clustercfg.apne1.cache.amazonaws.com:6379> exit
sh-5.2$ exit
exit
Exiting session with sessionId: admin-rbjc4yfg4y37iht2omwv4252je.
削除
Redis クラスター削除 (タブ1)
コマンド
# Redis クラスター削除
aws elasticache delete-replication-group \
--replication-group-id ${REPLICATION_GROUP_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # Redis クラスター削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws elasticache delete-replication-group \
> --replication-group-id ${REPLICATION_GROUP_ID}
{
"ReplicationGroup": {
"ReplicationGroupId": "elc-tutorial",
"Description": "Tutorial example",
"GlobalReplicationGroupInfo": {},
"Status": "deleting",
"PendingModifiedValues": {},
"AutomaticFailover": "enabled",
"MultiAZ": "enabled",
"SnapshotRetentionLimit": 0,
"SnapshotWindow": "18:30-19:30",
"TransitEncryptionEnabled": false,
"AtRestEncryptionEnabled": false,
"ARN": "arn:aws:elasticache:ap-northeast-1:999999999999:replicationgroup:elc-tutorial",
"LogDeliveryConfigurations": [],
"ReplicationGroupCreateTime": "2024-08-12T06:09:58.680000+00:00",
"DataTiering": "disabled",
"AutoMinorVersionUpgrade": false,
"NetworkType": "ipv4",
"IpDiscovery": "ipv4",
"ClusterMode": "enabled"
}
}
Redis クラスター削除完了までおよそ10分かかる
以後の作業は作成完了後に実施
コマンド
# キャッシュサブネットグループ削除
aws elasticache delete-cache-subnet-group \
--cache-subnet-group-name ${CACHESUBNETGROUPNAME}
# セキュリティグループ削除
aws ec2 delete-security-group \
--group-id ${ELC_SG_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # キャッシュサブネットグループ削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws elasticache delete-cache-subnet-group \
> --cache-subnet-group-name ${CACHESUBNETGROUPNAME}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # セキュリティグループ削除
[cloudshell-user@ip-10-132-88-239
EC2インスタンス削除 (タブ1)
コマンド
# EC2インスタンス削除
aws ec2 terminate-instances \
--instance-ids ${EC2_INSTANCE_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # EC2インスタンス削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 terminate-instances \
> --instance-ids ${EC2_INSTANCE_ID}
{
"TerminatingInstances": [
{
"CurrentState": {
"Code": 32,
"Name": "shutting-down"
},
"InstanceId": "i-0af0985750c6c13b7",
"PreviousState": {
"Code": 16,
"Name": "running"
}
}
]
}
IAM関連の削除 (タブ1)
コマンド
# IAMプロファイルのデタッチ
aws iam remove-role-from-instance-profile \
--instance-profile-name ${IAM_INSTANCE_PROFILE_NAME}\
--role-name ${IAM_ROLE_NAME}
# インスタンスプロファイル削除
aws iam delete-instance-profile \
--instance-profile-name ${IAM_INSTANCE_PROFILE_NAME}
# ロールにアタッチされているポリシーをリスト
IAM_POLICIES_LIST=$(
aws iam list-attached-role-policies \
--role-name ${IAM_ROLE_NAME} \
--query 'AttachedPolicies[*].PolicyArn' \
--output text
) \
&& echo ${IAM_POLICIES_LIST}
# リスト内のポリシーをデタッチする
for POLICY in ${IAM_POLICIES_LIST}; do
aws iam detach-role-policy \
--role-name ${IAM_ROLE_NAME} \
--policy-arn ${POLICY}
done
# IAMロールの削除
aws iam delete-role \
--role-name ${IAM_ROLE_NAME}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ aws iam remove-role-from-instance-profile \
> --instance-profile-name ${IAM_INSTANCE_PROFILE_NAME}\
> --role-name ${IAM_ROLE_NAME}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インスタンスプロファイル削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws iam delete-instance-profile \
> --instance-profile-name ${IAM_INSTANCE_PROFILE_NAME}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # ロールにアタッチされているポリシーをリスト
[cloudshell-user@ip-10-132-88-239 ~]$ IAM_POLICIES_LIST=$(
> aws iam list-attached-role-policies \
> --role-name ${IAM_ROLE_NAME} \
> --query 'AttachedPolicies[*].PolicyArn' \
> --output text
> ) \
> && echo ${IAM_POLICIES_LIST}
arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # リスト内のポリシーをデタッチする
[cloudshell-user@ip-10-132-88-239 ~]$ for POLICY in ${IAM_POLICIES_LIST}; do
> aws iam detach-role-policy \
> --role-name ${IAM_ROLE_NAME} \
> --policy-arn ${POLICY}
> done
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # IAMロールの削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws iam delete-role \
> --role-name ${IAM_ROLE_NAME}
VPC削除 (タブ1)
コマンド
# サブネット削除
aws ec2 delete-subnet --subnet-id ${SUBNET_ID_0}
aws ec2 delete-subnet --subnet-id ${SUBNET_ID_1}
aws ec2 delete-subnet --subnet-id ${SUBNET_ID_2}
aws ec2 delete-subnet --subnet-id ${SUBNET_ID_3}
# ルートテーブル削除
aws ec2 delete-route-table --route-table-id ${RT_ID}
# インターネットゲートウェイデタッチ
aws ec2 detach-internet-gateway \
--internet-gateway-id ${IGW_ID} \
--vpc-id ${VPC_ID}
# インターネットゲートウェイ削除
aws ec2 delete-internet-gateway --internet-gateway-id ${IGW_ID}
# VPC削除
aws ec2 delete-vpc --vpc-id ${VPC_ID}
出力
[cloudshell-user@ip-10-132-88-239 ~]$ # サブネット削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 delete-subnet --subnet-id ${SUBNET_ID_0}
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 delete-subnet --subnet-id ${SUBNET_ID_1}
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 delete-subnet --subnet-id ${SUBNET_ID_2}
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 delete-subnet --subnet-id ${SUBNET_ID_3}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # ルートテーブル削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 delete-route-table --route-table-id ${RT_ID}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インターネットゲートウェイデタッチ
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 detach-internet-gateway \
> --internet-gateway-id ${IGW_ID} \
> --vpc-id ${VPC_ID}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # インターネットゲートウェイ削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 delete-internet-gateway --internet-gateway-id ${IGW_ID}
[cloudshell-user@ip-10-132-88-239 ~]$
[cloudshell-user@ip-10-132-88-239 ~]$ # VPC削除
[cloudshell-user@ip-10-132-88-239 ~]$ aws ec2 delete-vpc --vpc-id ${VPC_ID}