上記、「AWS Hands-on for Beginners 〜 スケーラブルウェブサイト構築編 〜」 をAWS CLIでやってみる
ハンズオンから引用
02 Amazon VPCの作成 ～ WordPress用Webサーバ・データベースを配置するための仮想ネットワークを作成する ～
変数設定
コマンド
# VPC名
VPC_NAME="handson-user1" \
&& echo ${VPC_NAME}
# 第1アベイラビリティーゾーンのパブリックサブネット名
AZ1_PUB_NAME="パブリックサブネット-1a" \
&& echo ${AZ1_PUB_NAME}
# 第2アベイラビリティーゾーンのパブリックサブネット名
AZ2_PUB_NAME="パブリックサブネット-1c" \
&& echo ${AZ2_PUB_NAME}
# 第1アベイラビリティーゾーンのプライベートサブネット名
AZ1_PRI_NAME="プライベートサブネット-1a" \
&& echo ${AZ1_PRI_NAME}
# 第2アベイラビリティーゾーンのプライベートサブネット名
AZ2_PRI_NAME="プライベートサブネット-1c" \
&& echo ${AZ2_PRI_NAME}
# IPv4 CIDR ブロック
VPC_CIDR_BLOCK="10.0.0.0/16" \
&& echo ${VPC_CIDR_BLOCK}
# 第1アベイラビリティーゾーンのパブリックサブネットCIDRブロック
AZ1_PUB_CIDR_BLOCK="10.0.0.0/24" \
&& echo ${AZ1_PUB_CIDR_BLOCK}
# 第2アベイラビリティーゾーンのパブリックサブネットCIDRブロック
AZ2_PUB_CIDR_BLOCK="10.0.1.0/24" \
&& echo ${AZ2_PUB_CIDR_BLOCK}
# 第1アベイラビリティーゾーンのプライベートサブネットCIDRブロック
AZ1_PRI_CIDR_BLOCK="10.0.2.0/24" \
&& echo ${AZ1_PRI_CIDR_BLOCK}
# 第2アベイラビリティーゾーンのプライベートサブネットCIDRブロック
AZ2_PRI_CIDR_BLOCK="10.0.3.0/24" \
&& echo ${AZ2_PRI_CIDR_BLOCK}
# アベイラビリティーゾーン
AZ_1="ap-northeast-1a" \
&& echo ${AZ_1}
AZ_2="ap-northeast-1c" \
&& echo ${AZ_1}
# インターネットゲートウェイ名
IGW_NAME=${VPC_NAME}-igw \
&& echo ${IGW_NAME}
# パブリックルートテーブル名
PUB_RT_NAME=${VPC_NAME}-rtb-public \
&& echo ${PUB_RT_NAME}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # VPC名
[cloudshell-user@ip-10-132-84-39 ~]$ VPC_NAME="handson-user1" \
> && echo ${VPC_NAME}
handson-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第1アベイラビリティーゾーンのパブリックサブネット名
[cloudshell-user@ip-10-132-84-39 ~]$ AZ1_PUB_NAME="パブリックサブネット-1a" \
> && echo ${AZ1_PUB_NAME}
パブリックサブネット-1a
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第2アベイラビリティーゾーンのパブリックサブネット名
[cloudshell-user@ip-10-132-84-39 ~]$ AZ2_PUB_NAME="パブリックサブネット-1c" \
> && echo ${AZ2_PUB_NAME}
パブリックサブネット-1c
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第1アベイラビリティーゾーンのプライベートサブネット名
[cloudshell-user@ip-10-132-84-39 ~]$ AZ1_PRI_NAME="プライベートサブネット-1a" \
> && echo ${AZ1_PRI_NAME}
プライベートサブネット-1a
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第2アベイラビリティーゾーンのプライベートサブネット名
[cloudshell-user@ip-10-132-84-39 ~]$ AZ2_PRI_NAME="プライベートサブネット-1c" \
> && echo ${AZ2_PRI_NAME}
プライベートサブネット-1c
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # IPv4 CIDR ブロック
[cloudshell-user@ip-10-132-84-39 ~]$ VPC_CIDR_BLOCK="10.0.0.0/16" \
> && echo ${VPC_CIDR_BLOCK}
10.0.0.0/16
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第1アベイラビリティーゾーンのパブリックサブネットCIDRブロック
[cloudshell-user@ip-10-132-84-39 ~]$ AZ1_PUB_CIDR_BLOCK="10.0.0.0/24" \
> && echo ${AZ1_PUB_CIDR_BLOCK}
10.0.0.0/24
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第2アベイラビリティーゾーンのパブリックサブネットCIDRブロック
[cloudshell-user@ip-10-132-84-39 ~]$ AZ2_PUB_CIDR_BLOCK="10.0.1.0/24" \
> && echo ${AZ2_PUB_CIDR_BLOCK}
10.0.1.0/24
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第1アベイラビリティーゾーンのプライベートサブネットCIDRブロック
[cloudshell-user@ip-10-132-84-39 ~]$ AZ1_PRI_CIDR_BLOCK="10.0.2.0/24" \
> && echo ${AZ1_PRI_CIDR_BLOCK}
10.0.2.0/24
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第2アベイラビリティーゾーンのプライベートサブネットCIDRブロック
[cloudshell-user@ip-10-132-84-39 ~]$ AZ2_PRI_CIDR_BLOCK="10.0.3.0/24" \
> && echo ${AZ2_PRI_CIDR_BLOCK}
10.0.3.0/24
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # アベイラビリティーゾーン
[cloudshell-user@ip-10-132-84-39 ~]$ AZ_1="ap-northeast-1a" \
> && echo ${AZ_1}
ap-northeast-1a
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ AZ_2="ap-northeast-1c" \
> && echo ${AZ_1}
ap-northeast-1a
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インターネットゲートウェイ名
[cloudshell-user@ip-10-132-84-39 ~]$ IGW_NAME=${VPC_NAME}-igw \
> && echo ${IGW_NAME}
handson-user1-igw
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # パブリックルートテーブル名
[cloudshell-user@ip-10-132-84-39 ~]$ PUB_RT_NAME=${VPC_NAME}-rtb-public \
> && echo ${PUB_RT_NAME}
handson-user1-rtb-public
VPC作成
作成
コマンド
# VPC作成
aws ec2 create-vpc \
--cidr-block ${VPC_CIDR_BLOCK} \
--tag-specifications "ResourceType=vpc,Tags=[{Key=Name,Value=${VPC_NAME}}]"
# ID取得
VPC_ID=$(
aws ec2 describe-vpcs \
--filters "Name=tag:Name,Values=${VPC_NAME}" \
--query "Vpcs[0].VpcId" \
--output text\
)\
&& echo ${VPC_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # VPC作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-vpc \
> --cidr-block ${VPC_CIDR_BLOCK} \
> --tag-specifications "ResourceType=vpc,Tags=[{Key=Name,Value=${VPC_NAME}}]"
{
"Vpc": {
"CidrBlock": "10.0.0.0/16",
"DhcpOptionsId": "dopt-0e7d97fbb33a62ce1",
"State": "pending",
"VpcId": "vpc-02b5fbe797028d4e8",
"OwnerId": "999999999999",
"InstanceTenancy": "default",
"Ipv6CidrBlockAssociationSet": [],
"CidrBlockAssociationSet": [
{
"AssociationId": "vpc-cidr-assoc-0a45cdae866f69969",
"CidrBlock": "10.0.0.0/16",
"CidrBlockState": {
"State": "associated"
}
}
],
"IsDefault": false,
"Tags": [
{
"Key": "Name",
"Value": "handson-user1"
}
]
}
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ID取得
[cloudshell-user@ip-10-132-84-39 ~]$ VPC_ID=$(
> aws ec2 describe-vpcs \
> --filters "Name=tag:Name,Values=${VPC_NAME}" \
> --query "Vpcs[0].VpcId" \
> --output text\
> )\
> && echo ${VPC_ID}
vpc-02b5fbe797028d4e8
サブネット作成
コマンド
# 第1アベイラビリティーゾーンのパブリックサブネット
aws ec2 create-subnet \
--vpc-id ${VPC_ID} \
--cidr-block ${AZ1_PUB_CIDR_BLOCK} \
--availability-zone ${AZ_1} \
--tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${AZ1_PUB_NAME}}]"
# 第2アベイラビリティーゾーンのパブリックサブネット
aws ec2 create-subnet \
--vpc-id ${VPC_ID} \
--cidr-block ${AZ2_PUB_CIDR_BLOCK} \
--availability-zone ${AZ_2} \
--tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${AZ2_PUB_NAME}}]"
# 第1アベイラビリティーゾーンのプライベートサブネット
aws ec2 create-subnet \
--vpc-id ${VPC_ID} \
--cidr-block ${AZ1_PRI_CIDR_BLOCK} \
--availability-zone ${AZ_1} \
--tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${AZ1_PRI_NAME}}]"
# 第2アベイラビリティーゾーンのプライベートサブネット
aws ec2 create-subnet \
--vpc-id ${VPC_ID} \
--cidr-block ${AZ2_PRI_CIDR_BLOCK} \
--availability-zone ${AZ_2} \
--tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${AZ2_PRI_NAME}}]"
# ID取得
# 第1アベイラビリティーゾーンのパブリックサブネット
AZ1_PUB_ID=$( \
aws ec2 describe-subnets \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${AZ1_PUB_NAME}" \
--query "Subnets[].SubnetId" \
--output text \
) \
&& echo ${AZ1_PUB_ID}
# 第2アベイラビリティーゾーンのパブリックサブネット
AZ2_PUB_ID=$( \
aws ec2 describe-subnets \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${AZ2_PUB_NAME}" \
--query "Subnets[].SubnetId" \
--output text \
) \
&& echo ${AZ2_PUB_ID}
# 第1アベイラビリティーゾーンのプライベートサブネット
AZ1_PRI_ID=$( \
aws ec2 describe-subnets \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${AZ1_PRI_NAME}" \
--query "Subnets[].SubnetId" \
--output text \
) \
&& echo ${AZ1_PRI_ID}
# 第2アベイラビリティーゾーンのプライベートサブネット
AZ2_PRI_ID=$( \
aws ec2 describe-subnets \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${AZ2_PRI_NAME}" \
--query "Subnets[].SubnetId" \
--output text \
) \
&& echo ${AZ2_PRI_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # 第1アベイラビリティーゾーンのパブリックサブネット
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-subnet \
> --vpc-id ${VPC_ID} \
> --cidr-block ${AZ1_PUB_CIDR_BLOCK} \
> --availability-zone ${AZ_1} \
> --tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${AZ1_PUB_NAME}}]"
{
"Subnet": {
"AvailabilityZone": "ap-northeast-1a",
"AvailabilityZoneId": "apne1-az4",
"AvailableIpAddressCount": 251,
"CidrBlock": "10.0.0.0/24",
"DefaultForAz": false,
"MapPublicIpOnLaunch": false,
"State": "available",
"SubnetId": "subnet-09ce509c9397d5932",
"VpcId": "vpc-02b5fbe797028d4e8",
"OwnerId": "999999999999",
"AssignIpv6AddressOnCreation": false,
"Ipv6CidrBlockAssociationSet": [],
"Tags": [
{
"Key": "Name",
"Value": "パブリックサブネット-1a"
}
],
"SubnetArn": "arn:aws:ec2:ap-northeast-1:999999999999:subnet/subnet-09ce509c9397d5932",
"EnableDns64": false,
"Ipv6Native": false,
"PrivateDnsNameOptionsOnLaunch": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
}
}
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第2アベイラビリティーゾーンのパブリックサブネット
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-subnet \
> --vpc-id ${VPC_ID} \
> --cidr-block ${AZ2_PUB_CIDR_BLOCK} \
> --availability-zone ${AZ_2} \
> --tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${AZ2_PUB_NAME}}]"
{
"Subnet": {
"AvailabilityZone": "ap-northeast-1c",
"AvailabilityZoneId": "apne1-az1",
"AvailableIpAddressCount": 251,
"CidrBlock": "10.0.1.0/24",
"DefaultForAz": false,
"MapPublicIpOnLaunch": false,
"State": "available",
"SubnetId": "subnet-0d31beb3e7dd1140d",
"VpcId": "vpc-02b5fbe797028d4e8",
"OwnerId": "999999999999",
"AssignIpv6AddressOnCreation": false,
"Ipv6CidrBlockAssociationSet": [],
"Tags": [
{
"Key": "Name",
"Value": "パブリックサブネット-1c"
}
],
"SubnetArn": "arn:aws:ec2:ap-northeast-1:999999999999:subnet/subnet-0d31beb3e7dd1140d",
"EnableDns64": false,
"Ipv6Native": false,
"PrivateDnsNameOptionsOnLaunch": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
}
}
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第1アベイラビリティーゾーンのプライベートサブネット
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-subnet \
> --vpc-id ${VPC_ID} \
> --cidr-block ${AZ1_PRI_CIDR_BLOCK} \
> --availability-zone ${AZ_1} \
> --tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${AZ1_PRI_NAME}}]"
{
"Subnet": {
"AvailabilityZone": "ap-northeast-1a",
"AvailabilityZoneId": "apne1-az4",
"AvailableIpAddressCount": 251,
"CidrBlock": "10.0.2.0/24",
"DefaultForAz": false,
"MapPublicIpOnLaunch": false,
"State": "available",
"SubnetId": "subnet-04ef02ee504c79f77",
"VpcId": "vpc-02b5fbe797028d4e8",
"OwnerId": "999999999999",
"AssignIpv6AddressOnCreation": false,
"Ipv6CidrBlockAssociationSet": [],
"Tags": [
{
"Key": "Name",
"Value": "プライベートサブネット-1a"
}
],
"SubnetArn": "arn:aws:ec2:ap-northeast-1:999999999999:subnet/subnet-04ef02ee504c79f77",
"EnableDns64": false,
"Ipv6Native": false,
"PrivateDnsNameOptionsOnLaunch": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
}
}
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第2アベイラビリティーゾーンのプライベートサブネット
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-subnet \
> --vpc-id ${VPC_ID} \
> --cidr-block ${AZ2_PRI_CIDR_BLOCK} \
> --availability-zone ${AZ_2} \
> --tag-specifications "ResourceType=subnet,Tags=[{Key=Name,Value=${AZ2_PRI_NAME}}]"
{
"Subnet": {
"AvailabilityZone": "ap-northeast-1c",
"AvailabilityZoneId": "apne1-az1",
"AvailableIpAddressCount": 251,
"CidrBlock": "10.0.3.0/24",
"DefaultForAz": false,
"MapPublicIpOnLaunch": false,
"State": "available",
"SubnetId": "subnet-06ddf6a468a549ff8",
"VpcId": "vpc-02b5fbe797028d4e8",
"OwnerId": "999999999999",
"AssignIpv6AddressOnCreation": false,
"Ipv6CidrBlockAssociationSet": [],
"Tags": [
{
"Key": "Name",
"Value": "プライベートサブネット-1c"
}
],
"SubnetArn": "arn:aws:ec2:ap-northeast-1:999999999999:subnet/subnet-06ddf6a468a549ff8",
"EnableDns64": false,
"Ipv6Native": false,
"PrivateDnsNameOptionsOnLaunch": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
}
}
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ID取得
[cloudshell-user@ip-10-132-84-39 ~]$ # 第1アベイラビリティーゾーンのパブリックサブネット
[cloudshell-user@ip-10-132-84-39 ~]$ AZ1_PUB_ID=$( \
> aws ec2 describe-subnets \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${AZ1_PUB_NAME}" \
> --query "Subnets[].SubnetId" \
> --output text \
> ) \
> && echo ${AZ1_PUB_ID}
subnet-09ce509c9397d5932
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第2アベイラビリティーゾーンのパブリックサブネット
[cloudshell-user@ip-10-132-84-39 ~]$ AZ2_PUB_ID=$( \
> aws ec2 describe-subnets \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${AZ2_PUB_NAME}" \
> --query "Subnets[].SubnetId" \
> --output text \
> ) \
> && echo ${AZ2_PUB_ID}
subnet-0d31beb3e7dd1140d
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第1アベイラビリティーゾーンのプライベートサブネット
[cloudshell-user@ip-10-132-84-39 ~]$ AZ1_PRI_ID=$( \
> aws ec2 describe-subnets \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${AZ1_PRI_NAME}" \
> --query "Subnets[].SubnetId" \
> --output text \
> ) \
> && echo ${AZ1_PRI_ID}
subnet-04ef02ee504c79f77
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 第2アベイラビリティーゾーンのプライベートサブネット
[cloudshell-user@ip-10-132-84-39 ~]$ AZ2_PRI_ID=$( \
> aws ec2 describe-subnets \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${AZ2_PRI_NAME}" \
> --query "Subnets[].SubnetId" \
> --output text \
> ) \
> && echo ${AZ2_PRI_ID}
subnet-06ddf6a468a549ff8
インターネットゲートウェイ作成
コマンド
# インターネットゲートウェイ作成
aws ec2 create-internet-gateway \
--tag-specifications "ResourceType=internet-gateway,Tags=[{Key=Name,Value=${IGW_NAME}}]"
# インターネットゲートウェイID取得
IGW_ID=$(
aws ec2 describe-internet-gateways \
--filters Name=tag:Name,Values=${IGW_NAME} \
--query "InternetGateways[].InternetGatewayId" \
--output text
) \
&& echo ${IGW_ID}
# インターネットゲートウェイをVPCにアタッチ
aws ec2 attach-internet-gateway \
--vpc-id ${VPC_ID} \
--internet-gateway-id ${IGW_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # インターネットゲートウェイ作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-internet-gateway \
> --tag-specifications "ResourceType=internet-gateway,Tags=[{Key=Name,Value=${IGW_NAME}}]"
{
"InternetGateway": {
"Attachments": [],
"InternetGatewayId": "igw-0bc2bedb86a7c059b",
"OwnerId": "999999999999",
"Tags": [
{
"Key": "Name",
"Value": "handson-user1-igw"
}
]
}
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インターネットゲートウェイID取得
[cloudshell-user@ip-10-132-84-39 ~]$ IGW_ID=$(
> aws ec2 describe-internet-gateways \
> --filters Name=tag:Name,Values=${IGW_NAME} \
> --query "InternetGateways[].InternetGatewayId" \
> --output text
> ) \
> && echo ${IGW_ID}
igw-0bc2bedb86a7c059b
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インターネットゲートウェイをVPCにアタッチ
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 attach-internet-gateway \
> --vpc-id ${VPC_ID} \
> --internet-gateway-id ${IGW_ID}
ルートテーブル作成
コマンド
# ルートテーブル作成
aws ec2 create-route-table \
--vpc-id ${VPC_ID} \
--tag-specifications "ResourceType=route-table,Tags=[{Key=Name,Value=${PUB_RT_NAME}}]"
# ルートテーブルID取得
PUB_RT_ID=$(
aws ec2 describe-route-tables \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=tag:Name,Values="${PUB_RT_NAME}" \
--query "RouteTables[].RouteTableId" \
--output text
) \
&& echo ${PUB_RT_ID}
# デフォルトルート作成
aws ec2 create-route \
--route-table-id ${PUB_RT_ID} \
--destination-cidr-block 0.0.0.0/0 \
--gateway-id ${IGW_ID}
# サブネット関連付け
aws ec2 associate-route-table \
--subnet-id ${AZ1_PUB_ID} \
--route-table-id ${PUB_RT_ID}
aws ec2 associate-route-table \
--subnet-id ${AZ2_PUB_ID} \
--route-table-id ${PUB_RT_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ルートテーブル作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-route-table \
> --vpc-id ${VPC_ID} \
> --tag-specifications "ResourceType=route-table,Tags=[{Key=Name,Value=${PUB_RT_NAME}}]"
{
"RouteTable": {
"Associations": [],
"PropagatingVgws": [],
"RouteTableId": "rtb-051e6d5d9d55a2d2a",
"Routes": [
{
"DestinationCidrBlock": "10.0.0.0/16",
"GatewayId": "local",
"Origin": "CreateRouteTable",
"State": "active"
}
],
"Tags": [
{
"Key": "Name",
"Value": "handson-user1-rtb-public"
}
],
"VpcId": "vpc-02b5fbe797028d4e8",
"OwnerId": "999999999999"
},
"ClientToken": "1649375e-0e85-4830-b5d4-a4852f2e27eb"
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ルートテーブルID取得
[cloudshell-user@ip-10-132-84-39 ~]$ PUB_RT_ID=$(
> aws ec2 describe-route-tables \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=tag:Name,Values="${PUB_RT_NAME}" \
> --query "RouteTables[].RouteTableId" \
> --output text
> ) \
> && echo ${PUB_RT_ID}
rtb-051e6d5d9d55a2d2a
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # デフォルトルート作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-route \
> --route-table-id ${PUB_RT_ID} \
> --destination-cidr-block 0.0.0.0/0 \
> --gateway-id ${IGW_ID}
{
"Return": true
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # サブネット関連付け
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 associate-route-table \
> --subnet-id ${AZ1_PUB_ID} \
> --route-table-id ${PUB_RT_ID}
{
"AssociationId": "rtbassoc-06a12f53a757f34d7",
"AssociationState": {
"State": "associated"
}
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 associate-route-table \
> --subnet-id ${AZ2_PUB_ID} \
> --route-table-id ${PUB_RT_ID}
{
"AssociationId": "rtbassoc-0e33b19b48ec49eec",
"AssociationState": {
"State": "associated"
}
}
2. 03 Amazon EC2の作成 ～ WordPressがインストールされたWebサーバを作成する ～
変数
コマンド
# EC2インスタンス名 1
EC2_NAME_1="webserver#1-user1" \
&& echo ${EC2_NAME_1}
# インスタンスタイプ
EC2_INSTANCE_TYPE="t2.micro" \
&& echo ${EC2_INSTANCE_TYPE}
# Amazon マシンイメージ (AMI)
EC2_IMAGE_ID="resolve:ssm:/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2" \
&& echo ${EC2_IMAGE_ID}
# EC2セキュリティグループ名
EC2_SECURITY_GROUP_NAME='web-user1' \
&& echo ${EC2_SECURITY_GROUP_NAME}
# EC2セキュリティグループ説明
EC2_SECURITY_GROUP_DESCRIPTION='web-user1' \
&& echo ${EC2_SECURITY_GROUP_DESCRIPTION}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # EC2インスタンス名 1
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_NAME_1="webserver#1-user1" \
> && echo ${EC2_NAME_1}
webserver#1-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インスタンスタイプ
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_INSTANCE_TYPE="t2.micro" \
> && echo ${EC2_INSTANCE_TYPE}
t2.micro
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # Amazon マシンイメージ (AMI)
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_IMAGE_ID="resolve:ssm:/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2" \
> && echo ${EC2_IMAGE_ID}
resolve:ssm:/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # EC2セキュリティグループ名
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_SECURITY_GROUP_NAME='web-user1' \
> && echo ${EC2_SECURITY_GROUP_NAME}
web-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # EC2セキュリティグループ説明
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_SECURITY_GROUP_DESCRIPTION='web-user1' \
> && echo ${EC2_SECURITY_GROUP_DESCRIPTION}
web-user1
セキュリティグループ作成
セキュリティグループ作成
コマンド
# セキュリティグループ作成
aws ec2 create-security-group \
--group-name ${EC2_SECURITY_GROUP_NAME} \
--description ${EC2_SECURITY_GROUP_DESCRIPTION} \
--vpc-id ${VPC_ID}
# ID取得
EC2_SECURITY_GROUP_ID=$( \
aws ec2 describe-security-groups \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=group-name,Values=${EC2_SECURITY_GROUP_NAME} \
--query "SecurityGroups[].GroupId" \
--output text \
) \
&& echo ${EC2_SECURITY_GROUP_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # セキュリティグループ作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-security-group \
> --group-name ${EC2_SECURITY_GROUP_NAME} \
> --description ${EC2_SECURITY_GROUP_DESCRIPTION} \
> --vpc-id ${VPC_ID}
{
"GroupId": "sg-0f13aa5ebac4e8118"
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ID取得
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_SECURITY_GROUP_ID=$( \
> aws ec2 describe-security-groups \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=group-name,Values=${EC2_SECURITY_GROUP_NAME} \
> --query "SecurityGroups[].GroupId" \
> --output text \
> ) \
> && echo ${EC2_SECURITY_GROUP_ID}
sg-0f13aa5ebac4e8118
ルール追加
コマンド
# ルール追加
aws ec2 authorize-security-group-ingress \
--group-id ${EC2_SECURITY_GROUP_ID} \
--protocol tcp \
--port 22 \
--cidr 0.0.0.0/0
aws ec2 authorize-security-group-ingress \
--group-id ${EC2_SECURITY_GROUP_ID} \
--protocol tcp \
--port 80 \
--cidr 0.0.0.0/0
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ルール追加
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 authorize-security-group-ingress \
> --group-id ${EC2_SECURITY_GROUP_ID} \
> --protocol tcp \
> --port 22 \
> --cidr 0.0.0.0/0
{
"Return": true,
"SecurityGroupRules": [
{
"SecurityGroupRuleId": "sgr-07ceea7e3395ffb73",
"GroupId": "sg-0f13aa5ebac4e8118",
"GroupOwnerId": "999999999999",
"IsEgress": false,
"IpProtocol": "tcp",
"FromPort": 22,
"ToPort": 22,
"CidrIpv4": "0.0.0.0/0"
}
]
}
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 authorize-security-group-ingress \
> --group-id ${EC2_SECURITY_GROUP_ID} \
> --protocol tcp \
> --port 80 \
> --cidr 0.0.0.0/0
{
"Return": true,
"SecurityGroupRules": [
{
"SecurityGroupRuleId": "sgr-021c732d1c3d1cb17",
"GroupId": "sg-0f13aa5ebac4e8118",
"GroupOwnerId": "999999999999",
"IsEgress": false,
"IpProtocol": "tcp",
"FromPort": 80,
"ToPort": 80,
"CidrIpv4": "0.0.0.0/0"
}
]
}
EC2作成
ユーザーデータ作成(ヒアドキュメント)
※スクリプトはハンズオンから引用
コマンド
cat << 'EOF' > user_data.txt
#!/bin/bash
yum -y update
yum -y install php httpd mysql
PHP_VERSION=`php -v | head -n 1 | awk '{print $2}' | awk -F "." '{print $1}'`
while [ ${PHP_VERSION} -ne 7 ]
do
amazon-linux-extras install php7.4 -y
PHP_VERSION=`php -v | head -n 1 | awk '{print $2}' | awk -F "." '{print $1}'`
done
yum -y install php-mbstring php-xml
wget http://ja.wordpress.org/latest-ja.tar.gz -P /tmp/
tar zxvf /tmp/latest-ja.tar.gz -C /tmp
cp -r /tmp/wordpress/* /var/www/html/
chown apache:apache -R /var/www/html
systemctl enable httpd.service
systemctl start httpd.service
EOF
出力
[cloudshell-user@ip-10-132-84-39 ~]$ cat << 'EOF' > user_data.txt
> #!/bin/bash
>
> yum -y update
> yum -y install php httpd mysql
>
> PHP_VERSION=`php -v | head -n 1 | awk '{print $2}' | awk -F "." '{print $1}'`
> while [ ${PHP_VERSION} -ne 7 ]
> do
> amazon-linux-extras install php7.4 -y
> PHP_VERSION=`php -v | head -n 1 | awk '{print $2}' | awk -F "." '{print $1}'`
> done
>
> yum -y install php-mbstring php-xml
>
> wget http://ja.wordpress.org/latest-ja.tar.gz -P /tmp/
> tar zxvf /tmp/latest-ja.tar.gz -C /tmp
> cp -r /tmp/wordpress/* /var/www/html/
> chown apache:apache -R /var/www/html
>
> systemctl enable httpd.service
> systemctl start httpd.service
> EOF
EC2作成
コマンド
# EC2インスタンス作成
aws ec2 run-instances \
--image-id ${EC2_IMAGE_ID} \
--instance-type ${EC2_INSTANCE_TYPE} \
--security-group-ids ${EC2_SECURITY_GROUP_ID} \
--subnet-id ${AZ1_PUB_ID} \
--associate-public-ip-address \
--user-data file://user_data.txt \
--tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=${EC2_NAME_1}}]" \
--no-cli-pager
# インスタンスID
EC2_ID_1=$( \
aws ec2 describe-instances \
--filters Name=tag:Name,Values=${EC2_NAME_1} \
--query "Reservations[*].Instances[*].[InstanceId]" \
--output text
) \
&& echo ${EC2_ID_1}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # EC2インスタンス作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 run-instances \
> --image-id ${EC2_IMAGE_ID} \
> --instance-type ${EC2_INSTANCE_TYPE} \
> --security-group-ids ${EC2_SECURITY_GROUP_ID} \
> --subnet-id ${AZ1_PUB_ID} \
> --associate-public-ip-address \
> --user-data file://user_data.txt \
> --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=${EC2_NAME_1}}]" \
> --no-cli-pager
{
"Groups": [],
"Instances": [
{
"AmiLaunchIndex": 0,
"ImageId": "ami-07281c2a30e5bc1ab",
"InstanceId": "i-0ed3b54d25b834102",
"InstanceType": "t2.micro",
"LaunchTime": "2024-08-25T09:30:45+00:00",
"Monitoring": {
"State": "disabled"
},
"Placement": {
"AvailabilityZone": "ap-northeast-1a",
"GroupName": "",
"Tenancy": "default"
},
"PrivateDnsName": "ip-10-0-0-6.ap-northeast-1.compute.internal",
"PrivateIpAddress": "10.0.0.6",
"ProductCodes": [],
"PublicDnsName": "",
"State": {
"Code": 0,
"Name": "pending"
},
"StateTransitionReason": "",
"SubnetId": "subnet-09ce509c9397d5932",
"VpcId": "vpc-02b5fbe797028d4e8",
"Architecture": "x86_64",
"BlockDeviceMappings": [],
"ClientToken": "d47d36a4-8ec1-4a44-a809-5f8958c4f5d1",
"EbsOptimized": false,
"EnaSupport": true,
"Hypervisor": "xen",
"NetworkInterfaces": [
{
"Attachment": {
"AttachTime": "2024-08-25T09:30:45+00:00",
"AttachmentId": "eni-attach-07f3f68205eb1c46b",
"DeleteOnTermination": true,
"DeviceIndex": 0,
"Status": "attaching",
"NetworkCardIndex": 0
},
"Description": "",
"Groups": [
{
"GroupName": "web-user1",
"GroupId": "sg-0f13aa5ebac4e8118"
}
],
"Ipv6Addresses": [],
"MacAddress": "06:96:9d:da:85:7b",
"NetworkInterfaceId": "eni-0f0b55cacbdf977b8",
"OwnerId": "999999999999",
"PrivateIpAddress": "10.0.0.6",
"PrivateIpAddresses": [
{
"Primary": true,
"PrivateIpAddress": "10.0.0.6"
}
],
"SourceDestCheck": true,
"Status": "in-use",
"SubnetId": "subnet-09ce509c9397d5932",
"VpcId": "vpc-02b5fbe797028d4e8",
"InterfaceType": "interface"
}
],
"RootDeviceName": "/dev/xvda",
"RootDeviceType": "ebs",
"SecurityGroups": [
{
"GroupName": "web-user1",
"GroupId": "sg-0f13aa5ebac4e8118"
}
],
"SourceDestCheck": true,
"StateReason": {
"Code": "pending",
"Message": "pending"
},
"Tags": [
{
"Key": "Name",
"Value": "webserver#1-user1"
}
],
"VirtualizationType": "hvm",
"CpuOptions": {
"CoreCount": 1,
"ThreadsPerCore": 1
},
"CapacityReservationSpecification": {
"CapacityReservationPreference": "open"
},
"MetadataOptions": {
"State": "pending",
"HttpTokens": "optional",
"HttpPutResponseHopLimit": 1,
"HttpEndpoint": "enabled",
"HttpProtocolIpv6": "disabled",
"InstanceMetadataTags": "disabled"
},
"EnclaveOptions": {
"Enabled": false
},
"PrivateDnsNameOptions": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
},
"MaintenanceOptions": {
"AutoRecovery": "default"
},
"CurrentInstanceBootMode": "legacy-bios"
}
],
"OwnerId": "999999999999",
"ReservationId": "r-0c5a6693ae8fcc07e"
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インスタンスID
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_ID_1=$( \
> aws ec2 describe-instances \
> --filters Name=tag:Name,Values=${EC2_NAME_1} \
> --query "Reservations[*].Instances[*].[InstanceId]" \
> --output text
> ) \
> && echo ${EC2_ID_1}
i-0ed3b54d25b834102
3. 04 Amazon RDSの作成 ～ WordPress用のMySQLデータベースを作成する～
変数設定
コマンド
# DBセキュリティグループ名
# DBセキュリティグループ名
RDS_SG_NAME='db-user1' \
&& echo ${RDS_SG_NAME}
# DBセキュリティグループ説明
RDS_SG_DESC='RDS for MySQL' \
&& echo ${RDS_SG_DESC}
# サブネットグループ名
DB_SUBNET_GROUP_NAME='db-subnet-user1' \
&& echo ${DB_SUBNET_GROUP_NAME}
# サブネットグループ説明
DB_SUBNET_GROUP_DESC='RDS for MySQL' \
&& echo ${DB_SUBNET_GROUP_DESC}
# DB インスタンス識別子
DB_INSTANCE_IDENTIFIER='db-user1' \
&& echo ${DB_INSTANCE_IDENTIFIER}
# 最初のデータベース名
DB_NAME="wordpress" \
&& echo ${DB_NAME}
# インスタンスクラス
DB_INSTANCE_CLASS="db.t3.micro" \
&& echo ${DB_INSTANCE_CLASS}
# エンジンのタイプ
ENGINE="mysql" \
&& echo ${ENGINE}
# マスターユーザー名
MASTER_USERNAME="admin" \
&& echo ${MASTER_USERNAME}
# マスターパスワード
MASTER_USER_PASSWORD=$(< /dev/urandom tr -dc 'A-Za-z0-9' | head -c12) \
&& echo ${MASTER_USER_PASSWORD}
# ストレージ割り当て
ALLOCATED_STORAGE=20 \
&& echo ${ALLOCATED_STORAGE}
# 最大ストレージしきい値
MAX_ALLOCATED_STORAGE=1000 \
&& echo ${MAX_ALLOCATED_STORAGE}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # DBセキュリティグループ名
[cloudshell-user@ip-10-132-84-39 ~]$ RDS_SG_NAME='db-user1' \
> && echo ${RDS_SG_NAME}
db-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # DBセキュリティグループ説明
[cloudshell-user@ip-10-132-84-39 ~]$ RDS_SG_DESC='RDS for MySQL' \
> && echo ${RDS_SG_DESC}
RDS for MySQL
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # サブネットグループ名
[cloudshell-user@ip-10-132-84-39 ~]$ DB_SUBNET_GROUP_NAME='db-subnet-user1' \
> && echo ${DB_SUBNET_GROUP_NAME}
db-subnet-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # サブネットグループ説明
[cloudshell-user@ip-10-132-84-39 ~]$ DB_SUBNET_GROUP_DESC='RDS for MySQL' \
> && echo ${DB_SUBNET_GROUP_DESC}
RDS for MySQL
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # DB インスタンス識別子
[cloudshell-user@ip-10-132-84-39 ~]$ DB_INSTANCE_IDENTIFIER='db-user1' \
> && echo ${DB_INSTANCE_IDENTIFIER}
db-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 最初のデータベース名
[cloudshell-user@ip-10-132-84-39 ~]$ DB_NAME="wordpress" \
> && echo ${DB_NAME}
wordpress
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インスタンスクラス
[cloudshell-user@ip-10-132-84-39 ~]$ DB_INSTANCE_CLASS="db.t3.micro" \
> && echo ${DB_INSTANCE_CLASS}
db.t3.micro
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # エンジンのタイプ
[cloudshell-user@ip-10-132-84-39 ~]$ ENGINE="mysql" \
> && echo ${ENGINE}
mysql
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # マスターユーザー名
[cloudshell-user@ip-10-132-84-39 ~]$ MASTER_USERNAME="admin" \
> && echo ${MASTER_USERNAME}
admin
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # マスターパスワード
[cloudshell-user@ip-10-132-84-39 ~]$ MASTER_USER_PASSWORD=$(< /dev/urandom tr -dc 'A-Za-z0-9' | head -c12) \
> && echo ${MASTER_USER_PASSWORD}
AjO5PqEZI6IX
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ストレージ割り当て
[cloudshell-user@ip-10-132-84-39 ~]$ ALLOCATED_STORAGE=20 \
> && echo ${ALLOCATED_STORAGE}
20
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # 最大ストレージしきい値
[cloudshell-user@ip-10-132-84-39 ~]$ MAX_ALLOCATED_STORAGE=1000 \
> && echo ${MAX_ALLOCATED_STORAGE}
1000
セキュリティグループ作成
セキュリティグループ作成
コマンド
# セキュリティグループ作成
aws ec2 create-security-group \
--group-name ${RDS_SG_NAME} \
--description "${RDS_SG_DESC}" \
--vpc-id ${VPC_ID}
# ID取得
RDS_SG_ID=$( \
aws ec2 describe-security-groups \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=group-name,Values=${RDS_SG_NAME} \
--query "SecurityGroups[].GroupId" \
--output text
) \
&& echo ${RDS_SG_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # セキュリティグループ作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-security-group \
> --group-name ${RDS_SG_NAME} \
> --description "${RDS_SG_DESC}" \
> --vpc-id ${VPC_ID}
{
"GroupId": "sg-08c2854a9b34f089b"
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ID取得
[cloudshell-user@ip-10-132-84-39 ~]$ RDS_SG_ID=$( \
> aws ec2 describe-security-groups \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=group-name,Values=${RDS_SG_NAME} \
> --query "SecurityGroups[].GroupId" \
> --output text
> ) \
> && echo ${RDS_SG_ID}
sg-08c2854a9b34f089b
ルール追加
コマンド
# ルール追加
aws ec2 authorize-security-group-ingress \
--group-id ${RDS_SG_ID} \
--protocol tcp \
--port 3306 \
--source-group ${EC2_SECURITY_GROUP_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ルール追加
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 authorize-security-group-ingress \
> --group-id ${RDS_SG_ID} \
> --protocol tcp \
> --port 3306 \
> --source-group ${EC2_SECURITY_GROUP_ID}
{
"Return": true,
"SecurityGroupRules": [
{
"SecurityGroupRuleId": "sgr-00e4182d98008e519",
"GroupId": "sg-08c2854a9b34f089b",
"GroupOwnerId": "999999999999",
"IsEgress": false,
"IpProtocol": "tcp",
"FromPort": 3306,
"ToPort": 3306,
"ReferencedGroupInfo": {
"GroupId": "sg-0f13aa5ebac4e8118",
"UserId": "999999999999"
}
}
]
}
サブネットグループ作成
コマンド
aws rds create-db-subnet-group \
--db-subnet-group-name ${DB_SUBNET_GROUP_NAME} \
--db-subnet-group-description "${DB_SUBNET_GROUP_DESC}" \
--subnet-ids ${AZ1_PRI_ID} ${AZ2_PRI_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds create-db-subnet-group \
> --db-subnet-group-name ${DB_SUBNET_GROUP_NAME} \
> --db-subnet-group-description "${DB_SUBNET_GROUP_DESC}" \
> --subnet-ids ${AZ1_PRI_ID} ${AZ2_PRI_ID}
{
"DBSubnetGroup": {
"DBSubnetGroupName": "db-subnet-user1",
"DBSubnetGroupDescription": "RDS for MySQL",
"VpcId": "vpc-02b5fbe797028d4e8",
"SubnetGroupStatus": "Complete",
"Subnets": [
{
"SubnetIdentifier": "subnet-04ef02ee504c79f77",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1a"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-06ddf6a468a549ff8",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1c"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
}
],
"DBSubnetGroupArn": "arn:aws:rds:ap-northeast-1:999999999999:subgrp:db-subnet-user1",
"SupportedNetworkTypes": [
"IPV4"
]
}
}
RDS作成
コマンド
aws rds create-db-instance \
--db-name ${DB_NAME} \
--db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
--allocated-storage ${ALLOCATED_STORAGE} \
--db-instance-class ${DB_INSTANCE_CLASS} \
--engine ${ENGINE} \
--master-username ${MASTER_USERNAME} \
--master-user-password ${MASTER_USER_PASSWORD} \
--vpc-security-group-ids ${RDS_SG_ID} \
--availability-zone ${AZ_1} \
--db-subnet-group-name ${DB_SUBNET_GROUP_NAME} \
--backup-retention-period 0 \
--no-publicly-accessible \
--max-allocated-storage ${MAX_ALLOCATED_STORAGE} \
--storage-encrypted \
--no-cli-pager
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds create-db-instance \
> --db-name ${DB_NAME} \
> --db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
> --allocated-storage ${ALLOCATED_STORAGE} \
> --db-instance-class ${DB_INSTANCE_CLASS} \
> --engine ${ENGINE} \
> --master-username ${MASTER_USERNAME} \
> --master-user-password ${MASTER_USER_PASSWORD} \
> --vpc-security-group-ids ${RDS_SG_ID} \
> --availability-zone ${AZ_1} \
> --db-subnet-group-name ${DB_SUBNET_GROUP_NAME} \
> --backup-retention-period 0 \
> --no-publicly-accessible \
> --max-allocated-storage ${MAX_ALLOCATED_STORAGE} \
> --storage-encrypted \
> --no-cli-pager
{
"DBInstance": {
"DBInstanceIdentifier": "db-user1",
"DBInstanceClass": "db.t3.micro",
"Engine": "mysql",
"DBInstanceStatus": "creating",
"MasterUsername": "admin",
"DBName": "wordpress",
"AllocatedStorage": 20,
"PreferredBackupWindow": "13:43-14:13",
"BackupRetentionPeriod": 0,
"DBSecurityGroups": [],
"VpcSecurityGroups": [
{
"VpcSecurityGroupId": "sg-08c2854a9b34f089b",
"Status": "active"
}
],
"DBParameterGroups": [
{
"DBParameterGroupName": "default.mysql8.0",
"ParameterApplyStatus": "in-sync"
}
],
"AvailabilityZone": "ap-northeast-1a",
"DBSubnetGroup": {
"DBSubnetGroupName": "db-subnet-user1",
"DBSubnetGroupDescription": "RDS for MySQL",
"VpcId": "vpc-02b5fbe797028d4e8",
"SubnetGroupStatus": "Complete",
"Subnets": [
{
"SubnetIdentifier": "subnet-04ef02ee504c79f77",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1a"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-06ddf6a468a549ff8",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1c"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
}
]
},
"PreferredMaintenanceWindow": "sun:15:03-sun:15:33",
"PendingModifiedValues": {
"MasterUserPassword": "****"
},
"MultiAZ": false,
"EngineVersion": "8.0.35",
"AutoMinorVersionUpgrade": true,
"ReadReplicaDBInstanceIdentifiers": [],
"LicenseModel": "general-public-license",
"OptionGroupMemberships": [
{
"OptionGroupName": "default:mysql-8-0",
"Status": "in-sync"
}
],
"PubliclyAccessible": false,
"StorageType": "gp2",
"DbInstancePort": 0,
"StorageEncrypted": true,
"KmsKeyId": "arn:aws:kms:ap-northeast-1:999999999999:key/951b3fa0-aedb-4215-a2e6-9b7c2f5292e5",
"DbiResourceId": "db-JLWEZ2TQ2U6TEYZGZWHYZ7R3L4",
"CACertificateIdentifier": "rds-ca-rsa2048-g1",
"DomainMemberships": [],
"CopyTagsToSnapshot": false,
"MonitoringInterval": 0,
"DBInstanceArn": "arn:aws:rds:ap-northeast-1:999999999999:db:db-user1",
"IAMDatabaseAuthenticationEnabled": false,
"PerformanceInsightsEnabled": false,
"DeletionProtection": false,
"AssociatedRoles": [],
"MaxAllocatedStorage": 1000,
"TagList": [],
"CustomerOwnedIpEnabled": false,
"BackupTarget": "region",
"NetworkType": "IPV4",
"StorageThroughput": 0,
"CertificateDetails": {
"CAIdentifier": "rds-ca-rsa2048-g1"
},
"DedicatedLogVolume": false,
"EngineLifecycleSupport": "open-source-rds-extended-support"
}
}
確認
詳細
コマンド
# 詳細
aws rds describe-db-instances \
--db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
--no-cli-pager
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # 詳細
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds describe-db-instances \
> --db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
> --no-cli-pager
{
"DBInstances": [
{
"DBInstanceIdentifier": "db-user1",
"DBInstanceClass": "db.t3.micro",
"Engine": "mysql",
"DBInstanceStatus": "available",
"MasterUsername": "admin",
"DBName": "wordpress",
"Endpoint": {
"Address": "db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com",
"Port": 3306,
"HostedZoneId": "Z24O6O9L7SGTNB"
},
"AllocatedStorage": 20,
"InstanceCreateTime": "2024-08-25T09:35:37.302000+00:00",
"PreferredBackupWindow": "13:43-14:13",
"BackupRetentionPeriod": 0,
"DBSecurityGroups": [],
"VpcSecurityGroups": [
{
"VpcSecurityGroupId": "sg-08c2854a9b34f089b",
"Status": "active"
}
],
"DBParameterGroups": [
{
"DBParameterGroupName": "default.mysql8.0",
"ParameterApplyStatus": "in-sync"
}
],
"AvailabilityZone": "ap-northeast-1a",
"DBSubnetGroup": {
"DBSubnetGroupName": "db-subnet-user1",
"DBSubnetGroupDescription": "RDS for MySQL",
"VpcId": "vpc-02b5fbe797028d4e8",
"SubnetGroupStatus": "Complete",
"Subnets": [
{
"SubnetIdentifier": "subnet-04ef02ee504c79f77",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1a"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-06ddf6a468a549ff8",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1c"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
}
]
},
"PreferredMaintenanceWindow": "sun:15:03-sun:15:33",
"PendingModifiedValues": {},
"MultiAZ": false,
"EngineVersion": "8.0.35",
"AutoMinorVersionUpgrade": true,
"ReadReplicaDBInstanceIdentifiers": [],
"LicenseModel": "general-public-license",
"OptionGroupMemberships": [
{
"OptionGroupName": "default:mysql-8-0",
"Status": "in-sync"
}
],
"PubliclyAccessible": false,
"StorageType": "gp2",
"DbInstancePort": 0,
"StorageEncrypted": true,
"KmsKeyId": "arn:aws:kms:ap-northeast-1:999999999999:key/951b3fa0-aedb-4215-a2e6-9b7c2f5292e5",
"DbiResourceId": "db-JLWEZ2TQ2U6TEYZGZWHYZ7R3L4",
"CACertificateIdentifier": "rds-ca-rsa2048-g1",
"DomainMemberships": [],
"CopyTagsToSnapshot": false,
"MonitoringInterval": 0,
"DBInstanceArn": "arn:aws:rds:ap-northeast-1:999999999999:db:db-user1",
"IAMDatabaseAuthenticationEnabled": false,
"PerformanceInsightsEnabled": false,
"DeletionProtection": false,
"AssociatedRoles": [],
"MaxAllocatedStorage": 1000,
"TagList": [],
"CustomerOwnedIpEnabled": false,
"ActivityStreamStatus": "stopped",
"BackupTarget": "region",
"NetworkType": "IPV4",
"StorageThroughput": 0,
"CertificateDetails": {
"CAIdentifier": "rds-ca-rsa2048-g1",
"ValidTill": "2025-08-25T09:34:46+00:00"
},
"DedicatedLogVolume": false,
"IsStorageConfigUpgradeAvailable": false,
"EngineLifecycleSupport": "open-source-rds-extended-support"
}
]
}
エンドポイントアドレス
コマンド
# エンドポイントアドレス
aws rds describe-db-instances \
--db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
--query DBInstances[].Endpoint.Address \
--output text
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # エンドポイントアドレス
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds describe-db-instances \
> --db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
> --query DBInstances[].Endpoint.Address \
> --output text
db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com
05 ELB の作成 ～ 負荷分散用のロードバランサーを作成する ～
変数
コマンド
# ELBセキュリティグループ名
ELB_SECURITY_GROUP_NAME='elb-user1' \
&& echo ${ELB_SECURITY_GROUP_NAME}
# DBセキュリティグループ説明
ELB_SECURITY_GROUP_DESCRIPTION='elb-user1' \
&& echo ${ELB_SECURITY_GROUP_DESCRIPTION}
# ターゲットタイプ
Target_GROUP_TYPE="instance" \
&& echo ${Target_GROUP_TYPE}
# ターゲットグループ名
Target_GROUP_NAME="target-user1" \
&& echo ${Target_GROUP_NAME}
# ターゲットグループ プロトコル
Target_GROUP_PROTOCOL="HTTP" \
&& echo ${Target_GROUP_PROTOCOL}
# ターゲットグループ ポート
Target_GROUP_PORT="80" \
&& echo ${Target_GROUP_PORT}
# ターゲットグループ プロトコルバージョン
Target_GROUP_PROTOCOLVERSION="HTTP1" \
&& echo ${Target_GROUP_PROTOCOLVERSION}
# ヘルスチェックプロトコル
HEALTH_CHECK_PROTOCOL="HTTP" \
&& echo ${HEALTH_CHECK_PROTOCOL}
# ヘルスチェックパス
HEALTH_CHECK_PATH="/wp-includes/images/blank.gif" \
&& echo ${HEALTH_CHECK_PATH}
# ロードバランサー名
LB_NAME="elb-user1" \
&& echo ${LB_NAME}
# リスナー プロトコル
LISTENER_PROTOCOL="HTTP" \
&& echo ${LISTENER_PROTOCOL}
# リスナー ポート
LISTENER_PORT="80" \
&& echo ${LISTENER_PORT}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ELBセキュリティグループ名
[cloudshell-user@ip-10-132-84-39 ~]$ ELB_SECURITY_GROUP_NAME='elb-user1' \
> && echo ${ELB_SECURITY_GROUP_NAME}
elb-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # DBセキュリティグループ説明
[cloudshell-user@ip-10-132-84-39 ~]$ ELB_SECURITY_GROUP_DESCRIPTION='elb-user1' \
> && echo ${ELB_SECURITY_GROUP_DESCRIPTION}
elb-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットタイプ
[cloudshell-user@ip-10-132-84-39 ~]$ Target_GROUP_TYPE="instance" \
> && echo ${Target_GROUP_TYPE}
instance
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ名
[cloudshell-user@ip-10-132-84-39 ~]$ Target_GROUP_NAME="target-user1" \
> && echo ${Target_GROUP_NAME}
target-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ プロトコル
[cloudshell-user@ip-10-132-84-39 ~]$ Target_GROUP_PROTOCOL="HTTP" \
> && echo ${Target_GROUP_PROTOCOL}
HTTP
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ ポート
[cloudshell-user@ip-10-132-84-39 ~]$ Target_GROUP_PORT="80" \
> && echo ${Target_GROUP_PORT}
80
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ プロトコルバージョン
[cloudshell-user@ip-10-132-84-39 ~]$ Target_GROUP_PROTOCOLVERSION="HTTP1" \
> && echo ${Target_GROUP_PROTOCOLVERSION}
HTTP1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ヘルスチェックプロトコル
[cloudshell-user@ip-10-132-84-39 ~]$ HEALTH_CHECK_PROTOCOL="HTTP" \
> && echo ${HEALTH_CHECK_PROTOCOL}
HTTP
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ヘルスチェックパス
[cloudshell-user@ip-10-132-84-39 ~]$ HEALTH_CHECK_PATH="/wp-includes/images/blank.gif" \
> && echo ${HEALTH_CHECK_PATH}
/wp-includes/images/blank.gif
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ロードバランサー名
[cloudshell-user@ip-10-132-84-39 ~]$ LB_NAME="elb-user1" \
> && echo ${LB_NAME}
elb-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # リスナー プロトコル
[cloudshell-user@ip-10-132-84-39 ~]$ LISTENER_PROTOCOL="HTTP" \
> && echo ${LISTENER_PROTOCOL}
HTTP
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # リスナー ポート
[cloudshell-user@ip-10-132-84-39 ~]$ LISTENER_PORT="80" \
> && echo ${LISTENER_PORT}
80
セキュリティグループ作成
セキュリティグループ作成
コマンド
# セキュリティグループ作成
aws ec2 create-security-group \
--group-name ${ELB_SECURITY_GROUP_NAME} \
--description ${ELB_SECURITY_GROUP_DESCRIPTION} \
--vpc-id ${VPC_ID}
# ID取得
ELB_SECURITY_GROUP_ID=$( \
aws ec2 describe-security-groups \
--filters Name=vpc-id,Values=${VPC_ID} \
Name=group-name,Values=${ELB_SECURITY_GROUP_NAME} \
--query "SecurityGroups[].GroupId" \
--output text \
) \
&& echo ${ELB_SECURITY_GROUP_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # セキュリティグループ作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-security-group \
> --group-name ${ELB_SECURITY_GROUP_NAME} \
> --description ${ELB_SECURITY_GROUP_DESCRIPTION} \
> --vpc-id ${VPC_ID}
{
"GroupId": "sg-07b48cc330643f5ad"
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ID取得
[cloudshell-user@ip-10-132-84-39 ~]$ ELB_SECURITY_GROUP_ID=$( \
> aws ec2 describe-security-groups \
> --filters Name=vpc-id,Values=${VPC_ID} \
> Name=group-name,Values=${ELB_SECURITY_GROUP_NAME} \
> --query "SecurityGroups[].GroupId" \
> --output text \
> ) \
> && echo ${ELB_SECURITY_GROUP_ID}
sg-07b48cc330643f5ad
ルール追加
コマンド
# ルール追加
aws ec2 authorize-security-group-ingress \
--group-id ${ELB_SECURITY_GROUP_ID} \
--protocol tcp \
--port 80 \
--cidr 0.0.0.0/0
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ルール追加
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 authorize-security-group-ingress \
> --group-id ${ELB_SECURITY_GROUP_ID} \
> --protocol tcp \
> --port 80 \
> --cidr 0.0.0.0/0
{
"Return": true,
"SecurityGroupRules": [
{
"SecurityGroupRuleId": "sgr-0dc1cd74abcc810af",
"GroupId": "sg-07b48cc330643f5ad",
"GroupOwnerId": "999999999999",
"IsEgress": false,
"IpProtocol": "tcp",
"FromPort": 80,
"ToPort": 80,
"CidrIpv4": "0.0.0.0/0"
}
]
}
ターゲットグループ作成
ターゲットグループ作成
コマンド
# ターゲットグループ作成
aws elbv2 create-target-group \
--name ${Target_GROUP_NAME} \
--protocol ${Target_GROUP_PROTOCOL} \
--port ${Target_GROUP_PORT} \
--vpc-id ${VPC_ID} \
--target-type ${Target_GROUP_TYPE} \
--health-check-protocol ${HEALTH_CHECK_PROTOCOL} \
--health-check-path ${HEALTH_CHECK_PATH}
# ARN取得
TARGET_GROUP_ARN=$(
aws elbv2 describe-target-groups \
--names ${Target_GROUP_NAME} \
--query 'TargetGroups[*].TargetGroupArn' \
--output text
) \
&& echo ${TARGET_GROUP_ARN}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 create-target-group \
> --name ${Target_GROUP_NAME} \
> --protocol ${Target_GROUP_PROTOCOL} \
> --port ${Target_GROUP_PORT} \
> --vpc-id ${VPC_ID} \
> --target-type ${Target_GROUP_TYPE} \
> --health-check-protocol ${HEALTH_CHECK_PROTOCOL} \
> --health-check-path ${HEALTH_CHECK_PATH}
{
"TargetGroups": [
{
"TargetGroupArn": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:targetgroup/target-user1/a8bc1528bb902b2e",
"TargetGroupName": "target-user1",
"Protocol": "HTTP",
"Port": 80,
"VpcId": "vpc-02b5fbe797028d4e8",
"HealthCheckProtocol": "HTTP",
"HealthCheckPort": "traffic-port",
"HealthCheckEnabled": true,
"HealthCheckIntervalSeconds": 30,
"HealthCheckTimeoutSeconds": 5,
"HealthyThresholdCount": 5,
"UnhealthyThresholdCount": 2,
"HealthCheckPath": "/wp-includes/images/blank.gif",
"Matcher": {
"HttpCode": "200"
},
"TargetType": "instance",
"ProtocolVersion": "HTTP1",
"IpAddressType": "ipv4"
}
]
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ARN取得
[cloudshell-user@ip-10-132-84-39 ~]$ TARGET_GROUP_ARN=$(
> aws elbv2 describe-target-groups \
> --names ${Target_GROUP_NAME} \
> --query 'TargetGroups[*].TargetGroupArn' \
> --output text
> ) \
> && echo ${TARGET_GROUP_ARN}
arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:targetgroup/target-user1/a8bc1528bb902b2e
ターゲットの登録
コマンド
# ターゲットの登録
aws elbv2 register-targets \
--target-group-arn ${TARGET_GROUP_ARN} \
--targets Id=${EC2_ID_1}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットの登録
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 register-targets \
> --target-group-arn ${TARGET_GROUP_ARN} \
> --targets Id=${EC2_ID_1}
ロードバランサー作成
ロードバランサー作成
コマンド
# ロードバランサー作成
aws elbv2 create-load-balancer \
--name ${LB_NAME} \
--type application \
--scheme internet-facing \
--ip-address-type ipv4 \
--subnets ${AZ1_PUB_ID} ${AZ2_PUB_ID} \
--security-groups ${ELB_SECURITY_GROUP_ID}
# ARN取得
LB_ARN=$(
aws elbv2 describe-load-balancers \
--names ${LB_NAME} \
--query 'LoadBalancers[*].LoadBalancerArn' \
--output text
) \
&& echo ${LB_ARN}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ロードバランサー作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 create-load-balancer \
> --name ${LB_NAME} \
> --type application \
> --scheme internet-facing \
> --ip-address-type ipv4 \
> --subnets ${AZ1_PUB_ID} ${AZ2_PUB_ID} \
> --security-groups ${ELB_SECURITY_GROUP_ID}
{
"LoadBalancers": [
{
"LoadBalancerArn": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:loadbalancer/app/elb-user1/ebb545cf60231bce",
"DNSName": "elb-user1-154512834.ap-northeast-1.elb.amazonaws.com",
"CanonicalHostedZoneId": "Z14GRHDCWA56QT",
"CreatedTime": "2024-08-25T09:41:49.814000+00:00",
"LoadBalancerName": "elb-user1",
"Scheme": "internet-facing",
"VpcId": "vpc-02b5fbe797028d4e8",
"State": {
"Code": "provisioning"
},
"Type": "application",
"AvailabilityZones": [
{
"ZoneName": "ap-northeast-1a",
"SubnetId": "subnet-09ce509c9397d5932",
"LoadBalancerAddresses": []
},
{
"ZoneName": "ap-northeast-1c",
"SubnetId": "subnet-0d31beb3e7dd1140d",
"LoadBalancerAddresses": []
}
],
"SecurityGroups": [
"sg-07b48cc330643f5ad"
],
"IpAddressType": "ipv4"
}
]
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ARN取得
[cloudshell-user@ip-10-132-84-39 ~]$ LB_ARN=$(
> aws elbv2 describe-load-balancers \
> --names ${LB_NAME} \
> --query 'LoadBalancers[*].LoadBalancerArn' \
> --output text
> ) \
> && echo ${LB_ARN}
arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:loadbalancer/app/elb-user1/ebb545cf60231bce
リスナーの追加
コマンド
# リスナーの追加
aws elbv2 create-listener \
--load-balancer-arn ${LB_ARN} \
--protocol ${LISTENER_PROTOCOL} \
--port ${LISTENER_PORT} \
--default-actions Type=forward,TargetGroupArn=${TARGET_GROUP_ARN}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # リスナーの追加
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 create-listener \
> --load-balancer-arn ${LB_ARN} \
> --protocol ${LISTENER_PROTOCOL} \
> --port ${LISTENER_PORT} \
> --default-actions Type=forward,TargetGroupArn=${TARGET_GROUP_ARN}
{
"Listeners": [
{
"ListenerArn": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:listener/app/elb-user1/ebb545cf60231bce/eb993c4a74201432",
"LoadBalancerArn": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:loadbalancer/app/elb-user1/ebb545cf60231bce",
"Port": 80,
"Protocol": "HTTP",
"DefaultActions": [
{
"Type": "forward",
"TargetGroupArn": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:targetgroup/target-user1/a8bc1528bb902b2e",
"ForwardConfig": {
"TargetGroups": [
{
"TargetGroupArn": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:targetgroup/target-user1/a8bc1528bb902b2e",
"Weight": 1
}
],
"TargetGroupStickinessConfig": {
"Enabled": false
}
}
}
]
}
]
}
確認
ELB（詳細）
コマンド
# ELB（詳細）
aws elbv2 describe-load-balancers --names ${LB_NAME}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ELB（詳細）
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 describe-load-balancers --names ${LB_NAME}
{
"LoadBalancers": [
{
"LoadBalancerArn": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:loadbalancer/app/elb-user1/ebb545cf60231bce",
"DNSName": "elb-user1-154512834.ap-northeast-1.elb.amazonaws.com",
"CanonicalHostedZoneId": "Z14GRHDCWA56QT",
"CreatedTime": "2024-08-25T09:41:49.814000+00:00",
"LoadBalancerName": "elb-user1",
"Scheme": "internet-facing",
"VpcId": "vpc-02b5fbe797028d4e8",
"State": {
"Code": "active"
},
"Type": "application",
"AvailabilityZones": [
{
"ZoneName": "ap-northeast-1a",
"SubnetId": "subnet-09ce509c9397d5932",
"LoadBalancerAddresses": []
},
{
"ZoneName": "ap-northeast-1c",
"SubnetId": "subnet-0d31beb3e7dd1140d",
"LoadBalancerAddresses": []
}
],
"SecurityGroups": [
"sg-07b48cc330643f5ad"
],
"IpAddressType": "ipv4"
}
]
}
ELB（DNS名）
コマンド
# ELB（DNS名）
aws elbv2 describe-load-balancers \
--names ${LB_NAME} \
--query LoadBalancers[].DNSName \
--output text
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ELB（DNS名）
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 describe-load-balancers \
> --names ${LB_NAME} \
> --query LoadBalancers[].DNSName \
> --output text
elb-user1-154512834.ap-northeast-1.elb.amazonaws.com
ターゲットグループ（詳細）
コマンド
# ターゲットグループ（詳細）
aws elbv2 describe-target-groups --names ${Target_GROUP_NAME}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ（詳細）
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 describe-target-groups --names ${Target_GROUP_NAME}
{
"TargetGroups": [
{
"TargetGroupArn": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:targetgroup/target-user1/a8bc1528bb902b2e",
"TargetGroupName": "target-user1",
"Protocol": "HTTP",
"Port": 80,
"VpcId": "vpc-02b5fbe797028d4e8",
"HealthCheckProtocol": "HTTP",
"HealthCheckPort": "traffic-port",
"HealthCheckEnabled": true,
"HealthCheckIntervalSeconds": 30,
"HealthCheckTimeoutSeconds": 5,
"HealthyThresholdCount": 5,
"UnhealthyThresholdCount": 2,
"HealthCheckPath": "/wp-includes/images/blank.gif",
"Matcher": {
"HttpCode": "200"
},
"LoadBalancerArns": [
"arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:loadbalancer/app/elb-user1/ebb545cf60231bce"
],
"TargetType": "instance",
"ProtocolVersion": "HTTP1",
"IpAddressType": "ipv4"
}
]
}
ターゲットグループ（ステータス）
コマンド
# ターゲットグループ（ステータス）
aws elbv2 describe-target-health \
--target-group-arn ${TARGET_GROUP_ARN}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ（ステータス）
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 describe-target-health \
> --target-group-arn ${TARGET_GROUP_ARN}
{
"TargetHealthDescriptions": [
{
"Target": {
"Id": "i-0ed3b54d25b834102",
"Port": 80
},
"HealthCheckPort": "80",
"TargetHealth": {
"State": "healthy"
}
}
]
}
06 WordPressの初期設定 ～ WordPressの初期設定を行い簡単なブログを作る ～
EC2 Instance Connect を使用して接続
コマンド
aws ec2-instance-connect ssh --instance-id ${EC2_ID_1}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2-instance-connect ssh --instance-id ${EC2_ID_1}
The authenticity of host '3.112.34.36 (3.112.34.36)' can't be established.
ED25519 key fingerprint is SHA256:JW9Kmz/CN/UURjH30gRGFlNygLNUdzpUcCVhsJ0cQ1o.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '3.112.34.36' (ED25519) to the list of known hosts.
, #_
~\_ ####_ Amazon Linux 2
~~ \_#####\
~~ \###| AL2 End of Life is 2025-06-30.
~~ \#/ ___
~~ V~' '->
~~~ / A newer version of Amazon Linux is available!
~~._. _/
_/ _/ Amazon Linux 2023, GA and supported until 2028-03-15.
_/m/' https://aws.amazon.com/linux/amazon-linux-2023/
[ec2-user@ip-10-0-0-6 ~]$
WP-CLIのインストール
コマンド
curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
php wp-cli.phar --info
chmod +x wp-cli.phar
sudo mv wp-cli.phar /usr/local/bin/wp
wp --info
出力
[ec2-user@ip-10-0-0-6 ~]$ curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 6882k 100 6882k 0 0 17.6M 0 --:--:-- --:--:-- --:--:-- 17.6M
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ php wp-cli.phar --info
OS: Linux 4.14.350-266.564.amzn2.x86_64 #1 SMP Sat Aug 10 09:56:03 UTC 2024 x86_64
Shell: /bin/bash
PHP binary: /usr/bin/php
PHP version: 7.4.33
php.ini used: /etc/php.ini
MySQL binary: /usr/bin/mysql
MySQL version: mysql Ver 15.1 Distrib 5.5.68-MariaDB, for Linux (x86_64) using readline 5.1
SQL modes:
WP-CLI root dir: phar://wp-cli.phar/vendor/wp-cli/wp-cli
WP-CLI vendor dir: phar://wp-cli.phar/vendor
WP_CLI phar path: /home/ec2-user
WP-CLI packages dir:
WP-CLI cache dir: /home/ec2-user/.wp-cli/cache
WP-CLI global config:
WP-CLI project config:
WP-CLI version: 2.11.0
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ chmod +x wp-cli.phar
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ sudo mv wp-cli.phar /usr/local/bin/wp
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ wp --info
OS: Linux 4.14.350-266.564.amzn2.x86_64 #1 SMP Sat Aug 10 09:56:03 UTC 2024 x86_64
Shell: /bin/bash
PHP binary: /usr/bin/php
PHP version: 7.4.33
php.ini used: /etc/php.ini
MySQL binary: /usr/bin/mysql
MySQL version: mysql Ver 15.1 Distrib 5.5.68-MariaDB, for Linux (x86_64) using readline 5.1
SQL modes:
WP-CLI root dir: phar://wp-cli.phar/vendor/wp-cli/wp-cli
WP-CLI vendor dir: phar://wp-cli.phar/vendor
WP_CLI phar path: /home/ec2-user
WP-CLI packages dir:
WP-CLI cache dir: /home/ec2-user/.wp-cli/cache
WP-CLI global config:
WP-CLI project config:
WP-CLI version: 2.11.0
変数
コマンド
DB_NAME="wordpress" \
&& echo ${DB_NAME}
MASTER_USERNAME="admin" \
&& echo ${MASTER_USERNAME}
MASTER_USER_PASSWORD="AjO5PqEZI6IX" \
&& echo ${MASTER_USER_PASSWORD}
RDS_INSTANCE="db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com" \
&& echo ${RDS_INSTANCE}
WP_URL="elb-user1-154512834.ap-northeast-1.elb.amazonaws.com" \
&& echo ${WP_URL}
WP_TITLE="はじめてのAWS" \
&& echo ${WP_TITLE}
WP_USERNAME="admin" \
&& echo ${WP_USERNAME}
WP_PASSWORD=$(< /dev/urandom tr -dc 'A-Za-z0-9' | head -c12) \
&& echo ${WP_PASSWORD}
WP_EMAIL="username@example.com" \
&& echo ${WP_EMAIL}
出力
[ec2-user@ip-10-0-0-6 ~]$ DB_NAME="wordpress" \
> && echo ${DB_NAME}
wordpress
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ MASTER_USERNAME="admin" \
> && echo ${MASTER_USERNAME}
admin
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ MASTER_USER_PASSWORD="AjO5PqEZI6IX" \
> && echo ${MASTER_USER_PASSWORD}
AjO5PqEZI6IX
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ RDS_INSTANCE="db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com" \
> && echo ${RDS_INSTANCE}
db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ WP_URL="elb-user1-154512834.ap-northeast-1.elb.amazonaws.com" \
> && echo ${WP_URL}
elb-user1-154512834.ap-northeast-1.elb.amazonaws.com
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ WP_TITLE="はじめてのAWS" \
> && echo ${WP_TITLE}
はじめてのAWS
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ WP_USERNAME="admin" \
> && echo ${WP_USERNAME}
admin
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ WP_PASSWORD=$(< /dev/urandom tr -dc 'A-Za-z0-9' | head -c12) \
> && echo ${WP_PASSWORD}
m2NouEqLPS5d
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ WP_EMAIL="username@example.com" \
> && echo ${WP_EMAIL}
username@example.com
WordPressの初期設定
コマンド
# WordPressの初期設定
wp core download
sudo -u apache /usr/local/bin/wp config create \
--path=/var/www/html \
--dbname=${DB_NAME} \
--dbuser=${MASTER_USERNAME} \
--dbpass=${MASTER_USER_PASSWORD} \
--dbhost=${RDS_INSTANCE} \
--dbprefix=wp_
wp core install \
--url=http://${WP_URL} \
--title="${WP_TITLE}" \
--admin_user=${WP_USERNAME} \
--admin_password=${WP_PASSWORD} \
--admin_email=${WP_EMAIL}
wp option update blog_public 0
出力
[ec2-user@ip-10-0-0-6 ~]$ # WordPressの初期設定
[ec2-user@ip-10-0-0-6 ~]$ wp core download
Downloading WordPress 6.6.1 (en_US)...
md5 hash verified: a15f676931133623b7b347f1fabc966b
Success: WordPress downloaded.
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ wp config create \
> --dbname=${DB_NAME} \
> --dbuser=${MASTER_USERNAME} \
> --dbpass=${MASTER_USER_PASSWORD} \
> --dbhost=${RDS_INSTANCE} \
> --dbprefix=wp_
Success: Generated 'wp-config.php' file.
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ wp core install \
> --url=http://${WP_URL} \
> --title="${WP_TITLE}" \
> --admin_user=${WP_USERNAME} \
> --admin_password=${WP_PASSWORD} \
> --admin_email=${WP_EMAIL}
Success: WordPress installed successfully.
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ sudo cp -p wp-config.php /var/www/html
[ec2-user@ip-10-0-0-6 ~]$ wp core install \
> --url=http://${WP_URL} \
> --title="${WP_TITLE}" \
> --admin_user=${WP_USERNAME} \
> --admin_password=${WP_PASSWORD} \
> --admin_email=${WP_EMAIL}
WordPress is already installed.
[ec2-user@ip-10-0-0-6 ~]$
[ec2-user@ip-10-0-0-6 ~]$ wp option update blog_public 0
Success: Updated 'blog_public' option.
EC2 Instance Connect 切断
コマンド
exit
出力
[ec2-user@ip-10-0-0-6 ~]$ exit
logout
Connection to 3.112.34.36 closed.
6. 07 AMIの作成と作成したAMIから2つ目のEC2インスタンスの起動
変数
コマンド
# イメージ名
AMI_NAME='wordpress-user1' \
&& echo ${AMI_NAME}
# EC2インスタンス名 2
EC2_NAME_2='webserver#2-user1' \
&& echo ${EC2_NAME_2}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # イメージ名
[cloudshell-user@ip-10-132-84-39 ~]$ AMI_NAME='wordpress-user1' \
> && echo ${AMI_NAME}
wordpress-user1
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # EC2インスタンス名 2
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_NAME_2='webserver#2-user1' \
> && echo ${EC2_NAME_2}
webserver#2-user1
AMI の作成
コマンド
# AMI作成
aws ec2 create-image \
--instance-id ${EC2_ID_1} \
--name "${AMI_NAME}"
# ID取得
IMAGE_ID=$(
aws ec2 describe-images \
--filters "Name=name,Values=${AMI_NAME}" \
--query 'Images[0].ImageId' \
--output text
) \
&& echo ${IMAGE_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # AMI作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 create-image \
> --instance-id ${EC2_ID_1} \
> --name "${AMI_NAME}"
{
"ImageId": "ami-0dd3897e244f061da"
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ID取得
[cloudshell-user@ip-10-132-84-39 ~]$ IMAGE_ID=$(
> aws ec2 describe-images \
> --filters "Name=name,Values=${AMI_NAME}" \
> --query 'Images[0].ImageId' \
> --output text
> ) \
> && echo ${IMAGE_ID}
ami-0dd3897e244f061da
2つ⽬の EC2 インスタンスの作成
コマンド
# EC2インスタンス作成
aws ec2 run-instances \
--image-id ${IMAGE_ID} \
--instance-type ${EC2_INSTANCE_TYPE} \
--security-group-ids ${EC2_SECURITY_GROUP_ID} \
--subnet-id ${AZ2_PUB_ID} \
--associate-public-ip-address \
--tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=${EC2_NAME_2}}]" \
--no-cli-pager
# インスタンスID
EC2_ID_2=$( \
aws ec2 describe-instances \
--filters Name=tag:Name,Values=${EC2_NAME_2} \
--query "Reservations[*].Instances[*].[InstanceId]" \
--output text
) \
&& echo ${EC2_ID_2}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # EC2インスタンス作成
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 run-instances \
> --image-id ${IMAGE_ID} \
> --instance-type ${EC2_INSTANCE_TYPE} \
> --security-group-ids ${EC2_SECURITY_GROUP_ID} \
> --subnet-id ${AZ2_PUB_ID} \
> --associate-public-ip-address \
> --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=${EC2_NAME_2}}]" \
> --no-cli-pager
{
"Groups": [],
"Instances": [
{
"AmiLaunchIndex": 0,
"ImageId": "ami-0dd3897e244f061da",
"InstanceId": "i-05d36122200065fdb",
"InstanceType": "t2.micro",
"LaunchTime": "2024-08-25T10:56:35+00:00",
"Monitoring": {
"State": "disabled"
},
"Placement": {
"AvailabilityZone": "ap-northeast-1c",
"GroupName": "",
"Tenancy": "default"
},
"PrivateDnsName": "ip-10-0-1-86.ap-northeast-1.compute.internal",
"PrivateIpAddress": "10.0.1.86",
"ProductCodes": [],
"PublicDnsName": "",
"State": {
"Code": 0,
"Name": "pending"
},
"StateTransitionReason": "",
"SubnetId": "subnet-0d31beb3e7dd1140d",
"VpcId": "vpc-02b5fbe797028d4e8",
"Architecture": "x86_64",
"BlockDeviceMappings": [],
"ClientToken": "4f91e9c3-878c-410e-9b7f-4c2e8afef03e",
"EbsOptimized": false,
"EnaSupport": true,
"Hypervisor": "xen",
"NetworkInterfaces": [
{
"Attachment": {
"AttachTime": "2024-08-25T10:56:35+00:00",
"AttachmentId": "eni-attach-0d3c0eb282a9800ca",
"DeleteOnTermination": true,
"DeviceIndex": 0,
"Status": "attaching",
"NetworkCardIndex": 0
},
"Description": "",
"Groups": [
{
"GroupName": "web-user1",
"GroupId": "sg-0f13aa5ebac4e8118"
}
],
"Ipv6Addresses": [],
"MacAddress": "0a:c5:5e:53:dc:9f",
"NetworkInterfaceId": "eni-058844cac8665e433",
"OwnerId": "999999999999",
"PrivateIpAddress": "10.0.1.86",
"PrivateIpAddresses": [
{
"Primary": true,
"PrivateIpAddress": "10.0.1.86"
}
],
"SourceDestCheck": true,
"Status": "in-use",
"SubnetId": "subnet-0d31beb3e7dd1140d",
"VpcId": "vpc-02b5fbe797028d4e8",
"InterfaceType": "interface"
}
],
"RootDeviceName": "/dev/xvda",
"RootDeviceType": "ebs",
"SecurityGroups": [
{
"GroupName": "web-user1",
"GroupId": "sg-0f13aa5ebac4e8118"
}
],
"SourceDestCheck": true,
"StateReason": {
"Code": "pending",
"Message": "pending"
},
"Tags": [
{
"Key": "Name",
"Value": "webserver#2-user1"
}
],
"VirtualizationType": "hvm",
"CpuOptions": {
"CoreCount": 1,
"ThreadsPerCore": 1
},
"CapacityReservationSpecification": {
"CapacityReservationPreference": "open"
},
"MetadataOptions": {
"State": "pending",
"HttpTokens": "optional",
"HttpPutResponseHopLimit": 1,
"HttpEndpoint": "enabled",
"HttpProtocolIpv6": "disabled",
"InstanceMetadataTags": "disabled"
},
"EnclaveOptions": {
"Enabled": false
},
"PrivateDnsNameOptions": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": false,
"EnableResourceNameDnsAAAARecord": false
},
"MaintenanceOptions": {
"AutoRecovery": "default"
},
"CurrentInstanceBootMode": "legacy-bios"
}
],
"OwnerId": "999999999999",
"ReservationId": "r-029ca72ab07d2a83c"
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インスタンスID
[cloudshell-user@ip-10-132-84-39 ~]$ EC2_ID_2=$( \
> aws ec2 describe-instances \
> --filters Name=tag:Name,Values=${EC2_NAME_2} \
> --query "Reservations[*].Instances[*].[InstanceId]" \
> --output text
> ) \
> && echo ${EC2_ID_2}
i-05d36122200065fdb
2つ目のEC2インスタンスをELBに登録
コマンド
aws elbv2 register-targets \
--target-group-arn ${TARGET_GROUP_ARN} \
--targets Id=${EC2_ID_2}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 register-targets \
> --target-group-arn ${TARGET_GROUP_ARN} \
> --targets Id=${EC2_ID_2}
ターゲットグループ（ステータス）
コマンド
# ターゲットグループ（ステータス）
aws elbv2 describe-target-health \
--target-group-arn ${TARGET_GROUP_ARN}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ（ステータス）
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 describe-target-health \
> --target-group-arn ${TARGET_GROUP_ARN}
{
"TargetHealthDescriptions": [
{
"Target": {
"Id": "i-05d36122200065fdb",
"Port": 80
},
"HealthCheckPort": "80",
"TargetHealth": {
"State": "healthy"
}
},
{
"Target": {
"Id": "i-0ed3b54d25b834102",
"Port": 80
},
"HealthCheckPort": "80",
"TargetHealth": {
"State": "healthy"
}
}
]
}
08 RDSのマルチAZ配置 〜 すでに作成済みのRDS DB インスタンスのマルチAZ化を行う 〜
RDS変更
コマンド
aws rds modify-db-instance \
--db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
--multi-az \
--apply-immediately \
--no-cli-pager
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds modify-db-instance \
> --db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
> --multi-az \
> --apply-immediately \
> --no-cli-pager
{
"DBInstance": {
"DBInstanceIdentifier": "db-user1",
"DBInstanceClass": "db.t3.micro",
"Engine": "mysql",
"DBInstanceStatus": "available",
"MasterUsername": "admin",
"DBName": "wordpress",
"Endpoint": {
"Address": "db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com",
"Port": 3306,
"HostedZoneId": "Z24O6O9L7SGTNB"
},
"AllocatedStorage": 20,
"InstanceCreateTime": "2024-08-25T09:35:37.302000+00:00",
"PreferredBackupWindow": "13:43-14:13",
"BackupRetentionPeriod": 0,
"DBSecurityGroups": [],
"VpcSecurityGroups": [
{
"VpcSecurityGroupId": "sg-08c2854a9b34f089b",
"Status": "active"
}
],
"DBParameterGroups": [
{
"DBParameterGroupName": "default.mysql8.0",
"ParameterApplyStatus": "in-sync"
}
],
"AvailabilityZone": "ap-northeast-1a",
"DBSubnetGroup": {
"DBSubnetGroupName": "db-subnet-user1",
"DBSubnetGroupDescription": "RDS for MySQL",
"VpcId": "vpc-02b5fbe797028d4e8",
"SubnetGroupStatus": "Complete",
"Subnets": [
{
"SubnetIdentifier": "subnet-04ef02ee504c79f77",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1a"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-06ddf6a468a549ff8",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1c"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
}
]
},
"PreferredMaintenanceWindow": "sun:15:03-sun:15:33",
"PendingModifiedValues": {
"MultiAZ": true
},
"MultiAZ": false,
"EngineVersion": "8.0.35",
"AutoMinorVersionUpgrade": true,
"ReadReplicaDBInstanceIdentifiers": [],
"LicenseModel": "general-public-license",
"OptionGroupMemberships": [
{
"OptionGroupName": "default:mysql-8-0",
"Status": "in-sync"
}
],
"PubliclyAccessible": false,
"StorageType": "gp2",
"DbInstancePort": 0,
"StorageEncrypted": true,
"KmsKeyId": "arn:aws:kms:ap-northeast-1:999999999999:key/951b3fa0-aedb-4215-a2e6-9b7c2f5292e5",
"DbiResourceId": "db-JLWEZ2TQ2U6TEYZGZWHYZ7R3L4",
"CACertificateIdentifier": "rds-ca-rsa2048-g1",
"DomainMemberships": [],
"CopyTagsToSnapshot": false,
"MonitoringInterval": 0,
"DBInstanceArn": "arn:aws:rds:ap-northeast-1:999999999999:db:db-user1",
"IAMDatabaseAuthenticationEnabled": false,
"PerformanceInsightsEnabled": false,
"DeletionProtection": false,
"AssociatedRoles": [],
"MaxAllocatedStorage": 1000,
"TagList": [],
"CustomerOwnedIpEnabled": false,
"BackupTarget": "region",
"NetworkType": "IPV4",
"StorageThroughput": 0,
"CertificateDetails": {
"CAIdentifier": "rds-ca-rsa2048-g1",
"ValidTill": "2025-08-25T09:34:46+00:00"
},
"DedicatedLogVolume": false,
"EngineLifecycleSupport": "open-source-rds-extended-support"
}
}
09 Webシステム全体の可用性の確認 〜 EC2インスタンスの停止やRDSのフェイルオーバーを行う 〜
オプション 1:EC2 インスタンスを1つ停⽌させ、全体の可⽤性の確認
EC2インスタンス停止
コマンド
aws ec2 stop-instances --instance-ids ${EC2_ID_1}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 stop-instances --instance-ids ${EC2_ID_1}
{
"StoppingInstances": [
{
"CurrentState": {
"Code": 64,
"Name": "stopping"
},
"InstanceId": "i-0ed3b54d25b834102",
"PreviousState": {
"Code": 16,
"Name": "running"
}
}
]
}
通信確認
コマンド（別タブで実施）
url=http://elb-user1-154512834.ap-northeast-1.elb.amazonaws.com/
while true; do TZ=JST-9 date; curl -o /dev/null -s -w "%{http_code}\n" ${url} ; sleep 1s; done
出力（別タブで実施）
[cloudshell-user@ip-10-132-84-39 ~]$ url=http://elb-user1-154512834.ap-northeast-1.elb.amazonaws.com/
[cloudshell-user@ip-10-132-84-39 ~]$ while true; do TZ=JST-9 date; curl -o /dev/null -s -w "%{http_code}\n" ${url} ; sleep 1s; done
Sun Aug 25 08:29:23 PM JST 2024
200
Sun Aug 25 08:29:25 PM JST 2024
200
Sun Aug 25 08:29:26 PM JST 2024
200
Sun Aug 25 08:29:27 PM JST 2024
200
Sun Aug 25 08:29:29 PM JST 2024
200
Sun Aug 25 08:29:30 PM JST 2024
200
Sun Aug 25 08:29:31 PM JST 2024
200
Sun Aug 25 08:29:33 PM JST 2024
200
Sun Aug 25 08:29:34 PM JST 2024
200
Sun Aug 25 08:29:35 PM JST 2024
200
Sun Aug 25 08:29:37 PM JST 2024
200
Sun Aug 25 08:29:38 PM JST 2024
200
Sun Aug 25 08:29:39 PM JST 2024
200
Sun Aug 25 08:29:41 PM JST 2024
200
Sun Aug 25 08:29:42 PM JST 2024
200
Sun Aug 25 08:29:43 PM JST 2024
200
Sun Aug 25 08:29:45 PM JST 2024
502
Sun Aug 25 08:29:46 PM JST 2024
502
Sun Aug 25 08:29:47 PM JST 2024
200
Sun Aug 25 08:29:48 PM JST 2024
200
Sun Aug 25 08:29:50 PM JST 2024
504
Sun Aug 25 08:30:01 PM JST 2024
200
Sun Aug 25 08:30:03 PM JST 2024
200
Sun Aug 25 08:30:04 PM JST 2024
504
Sun Aug 25 08:30:15 PM JST 2024
504
Sun Aug 25 08:30:26 PM JST 2024
200
Sun Aug 25 08:30:28 PM JST 2024
200
Sun Aug 25 08:30:29 PM JST 2024
200
Sun Aug 25 08:30:30 PM JST 2024
200
Sun Aug 25 08:30:32 PM JST 2024
200
Sun Aug 25 08:30:33 PM JST 2024
200
Sun Aug 25 08:30:34 PM JST 2024
200
Sun Aug 25 08:30:36 PM JST 2024
200
Sun Aug 25 08:30:37 PM JST 2024
200
Sun Aug 25 08:30:38 PM JST 2024
200
Sun Aug 25 08:30:40 PM JST 2024
200
Sun Aug 25 08:30:41 PM JST 2024
200
Sun Aug 25 08:30:43 PM JST 2024
200
Sun Aug 25 08:30:44 PM JST 2024
200
Sun Aug 25 08:30:45 PM JST 2024
200
Sun Aug 25 08:30:47 PM JST 2024
200
Sun Aug 25 08:30:48 PM JST 2024
200
Sun Aug 25 08:30:49 PM JST 2024
200
Sun Aug 25 08:30:51 PM JST 2024
200
Sun Aug 25 08:30:52 PM JST 2024
200
Sun Aug 25 08:30:53 PM JST 2024
200
Sun Aug 25 08:30:55 PM JST 2024
200
Sun Aug 25 08:30:56 PM JST 2024
200
Sun Aug 25 08:30:58 PM JST 2024
200
Sun Aug 25 08:30:59 PM JST 2024
200
Sun Aug 25 08:31:00 PM JST 2024
200
Sun Aug 25 08:31:02 PM JST 2024
200
Sun Aug 25 08:31:03 PM JST 2024
200
Sun Aug 25 08:31:04 PM JST 2024
200
Sun Aug 25 08:31:06 PM JST 2024
200
Sun Aug 25 08:31:07 PM JST 2024
200
Sun Aug 25 08:31:08 PM JST 2024
200
Sun Aug 25 08:31:10 PM JST 2024
200
Sun Aug 25 08:31:11 PM JST 2024
200
Sun Aug 25 08:31:13 PM JST 2024
200
Sun Aug 25 08:31:14 PM JST 2024
200
Sun Aug 25 08:31:15 PM JST 2024
200
Sun Aug 25 08:31:17 PM JST 2024
200
Sun Aug 25 08:31:18 PM JST 2024
200
Sun Aug 25 08:31:19 PM JST 2024
200
Sun Aug 25 08:31:21 PM JST 2024
200
Sun Aug 25 08:31:22 PM JST 2024
200
Sun Aug 25 08:31:23 PM JST 2024
200
Sun Aug 25 08:31:25 PM JST 2024
200
Sun Aug 25 08:31:26 PM JST 2024
200
Sun Aug 25 08:31:27 PM JST 2024
200
Sun Aug 25 08:31:29 PM JST 2024
200
Sun Aug 25 08:31:30 PM JST 2024
200
Sun Aug 25 08:31:31 PM JST 2024
200
Sun Aug 25 08:31:33 PM JST 2024
200
Sun Aug 25 08:31:34 PM JST 2024
200
Sun Aug 25 08:31:36 PM JST 2024
200
Sun Aug 25 08:31:37 PM JST 2024
200
Sun Aug 25 08:31:38 PM JST 2024
200
Sun Aug 25 08:31:40 PM JST 2024
200
Sun Aug 25 08:31:41 PM JST 2024
200
Sun Aug 25 08:31:42 PM JST 2024
200
Sun Aug 25 08:31:44 PM JST 2024
200
Sun Aug 25 08:31:45 PM JST 2024
200
Sun Aug 25 08:31:47 PM JST 2024
200
Sun Aug 25 08:31:48 PM JST 2024
200
Sun Aug 25 08:31:49 PM JST 2024
200
Sun Aug 25 08:31:51 PM JST 2024
200
Sun Aug 25 08:31:52 PM JST 2024
200
Sun Aug 25 08:31:53 PM JST 2024
200
Sun Aug 25 08:31:55 PM JST 2024
200
Sun Aug 25 08:31:56 PM JST 2024
200
Sun Aug 25 08:31:58 PM JST 2024
200
Sun Aug 25 08:31:59 PM JST 2024
200
Sun Aug 25 08:32:00 PM JST 2024
200
Sun Aug 25 08:32:02 PM JST 2024
200
Sun Aug 25 08:32:03 PM JST 2024
200
Sun Aug 25 08:32:04 PM JST 2024
200
Sun Aug 25 08:32:06 PM JST 2024
200
Sun Aug 25 08:32:07 PM JST 2024
200
Sun Aug 25 08:32:08 PM JST 2024
200
Sun Aug 25 08:32:10 PM JST 2024
200
Sun Aug 25 08:32:11 PM JST 2024
200
Sun Aug 25 08:32:12 PM JST 2024
200
Sun Aug 25 08:32:13 PM JST 2024
200
Sun Aug 25 08:32:15 PM JST 2024
200
Sun Aug 25 08:32:16 PM JST 2024
200
Sun Aug 25 08:32:18 PM JST 2024
200
Sun Aug 25 08:32:19 PM JST 2024
200
Sun Aug 25 08:32:20 PM JST 2024
200
Sun Aug 25 08:32:22 PM JST 2024
200
Sun Aug 25 08:32:23 PM JST 2024
200
Sun Aug 25 08:32:24 PM JST 2024
200
Sun Aug 25 08:32:25 PM JST 2024
200
Sun Aug 25 08:32:27 PM JST 2024
200
Sun Aug 25 08:32:28 PM JST 2024
200
Sun Aug 25 08:32:29 PM JST 2024
200
Sun Aug 25 08:32:31 PM JST 2024
200
Sun Aug 25 08:32:32 PM JST 2024
^C
EC2インスタンス開始
コマンド
aws ec2 start-instances --instance-ids ${EC2_ID_1}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 start-instances --instance-ids ${EC2_ID_1}
{
"StartingInstances": [
{
"CurrentState": {
"Code": 0,
"Name": "pending"
},
"InstanceId": "i-0ed3b54d25b834102",
"PreviousState": {
"Code": 80,
"Name": "stopped"
}
}
]
}
コマンド（別タブで実施）
url=http://elb-user1-154512834.ap-northeast-1.elb.amazonaws.com/
while true; do TZ=JST-9 date; curl -o /dev/null -s -w "%{http_code}\n" ${url} ; sleep 1s; done
出力（別タブで実施）
[cloudshell-user@ip-10-132-84-39 ~]$ url=http://elb-user1-154512834.ap-northeast-1.elb.amazonaws.com/
[cloudshell-user@ip-10-132-84-39 ~]$ while true; do TZ=JST-9 date; curl -o /dev/null -s -w "%{http_code}\n" ${url} ; sleep 1s; done
Sun Aug 25 08:29:23 PM JST 2024
200
Sun Aug 25 08:29:25 PM JST 2024
200
Sun Aug 25 08:29:26 PM JST 2024
200
Sun Aug 25 08:29:27 PM JST 2024
200
Sun Aug 25 08:29:29 PM JST 2024
200
Sun Aug 25 08:29:30 PM JST 2024
200
Sun Aug 25 08:29:31 PM JST 2024
200
Sun Aug 25 08:29:33 PM JST 2024
200
Sun Aug 25 08:29:34 PM JST 2024
200
Sun Aug 25 08:29:35 PM JST 2024
200
Sun Aug 25 08:29:37 PM JST 2024
200
Sun Aug 25 08:29:38 PM JST 2024
200
Sun Aug 25 08:29:39 PM JST 2024
200
Sun Aug 25 08:29:41 PM JST 2024
200
Sun Aug 25 08:29:42 PM JST 2024
200
Sun Aug 25 08:29:43 PM JST 2024
200
Sun Aug 25 08:29:45 PM JST 2024
502
Sun Aug 25 08:29:46 PM JST 2024
502
Sun Aug 25 08:29:47 PM JST 2024
200
Sun Aug 25 08:29:48 PM JST 2024
200
Sun Aug 25 08:29:50 PM JST 2024
504
Sun Aug 25 08:30:01 PM JST 2024
200
Sun Aug 25 08:30:03 PM JST 2024
200
Sun Aug 25 08:30:04 PM JST 2024
504
Sun Aug 25 08:30:15 PM JST 2024
504
Sun Aug 25 08:30:26 PM JST 2024
200
Sun Aug 25 08:30:28 PM JST 2024
200
Sun Aug 25 08:30:29 PM JST 2024
200
Sun Aug 25 08:30:30 PM JST 2024
200
Sun Aug 25 08:30:32 PM JST 2024
200
Sun Aug 25 08:30:33 PM JST 2024
200
Sun Aug 25 08:30:34 PM JST 2024
200
Sun Aug 25 08:30:36 PM JST 2024
200
Sun Aug 25 08:30:37 PM JST 2024
200
Sun Aug 25 08:30:38 PM JST 2024
200
Sun Aug 25 08:30:40 PM JST 2024
200
Sun Aug 25 08:30:41 PM JST 2024
200
Sun Aug 25 08:30:43 PM JST 2024
200
Sun Aug 25 08:30:44 PM JST 2024
200
Sun Aug 25 08:30:45 PM JST 2024
200
Sun Aug 25 08:30:47 PM JST 2024
200
Sun Aug 25 08:30:48 PM JST 2024
200
Sun Aug 25 08:30:49 PM JST 2024
200
Sun Aug 25 08:30:51 PM JST 2024
200
Sun Aug 25 08:30:52 PM JST 2024
200
Sun Aug 25 08:30:53 PM JST 2024
200
Sun Aug 25 08:30:55 PM JST 2024
200
Sun Aug 25 08:30:56 PM JST 2024
200
Sun Aug 25 08:30:58 PM JST 2024
200
Sun Aug 25 08:30:59 PM JST 2024
200
Sun Aug 25 08:31:00 PM JST 2024
200
Sun Aug 25 08:31:02 PM JST 2024
200
Sun Aug 25 08:31:03 PM JST 2024
200
Sun Aug 25 08:31:04 PM JST 2024
200
Sun Aug 25 08:31:06 PM JST 2024
200
Sun Aug 25 08:31:07 PM JST 2024
200
Sun Aug 25 08:31:08 PM JST 2024
200
Sun Aug 25 08:31:10 PM JST 2024
200
Sun Aug 25 08:31:11 PM JST 2024
200
Sun Aug 25 08:31:13 PM JST 2024
200
Sun Aug 25 08:31:14 PM JST 2024
200
Sun Aug 25 08:31:15 PM JST 2024
200
Sun Aug 25 08:31:17 PM JST 2024
200
Sun Aug 25 08:31:18 PM JST 2024
200
Sun Aug 25 08:31:19 PM JST 2024
200
Sun Aug 25 08:31:21 PM JST 2024
200
Sun Aug 25 08:31:22 PM JST 2024
200
Sun Aug 25 08:31:23 PM JST 2024
200
Sun Aug 25 08:31:25 PM JST 2024
200
Sun Aug 25 08:31:26 PM JST 2024
200
Sun Aug 25 08:31:27 PM JST 2024
200
Sun Aug 25 08:31:29 PM JST 2024
200
Sun Aug 25 08:31:30 PM JST 2024
200
Sun Aug 25 08:31:31 PM JST 2024
200
Sun Aug 25 08:31:33 PM JST 2024
200
Sun Aug 25 08:31:34 PM JST 2024
200
Sun Aug 25 08:31:36 PM JST 2024
200
Sun Aug 25 08:31:37 PM JST 2024
200
Sun Aug 25 08:31:38 PM JST 2024
200
Sun Aug 25 08:31:40 PM JST 2024
200
Sun Aug 25 08:31:41 PM JST 2024
200
Sun Aug 25 08:31:42 PM JST 2024
200
Sun Aug 25 08:31:44 PM JST 2024
200
Sun Aug 25 08:31:45 PM JST 2024
200
Sun Aug 25 08:31:47 PM JST 2024
200
Sun Aug 25 08:31:48 PM JST 2024
200
Sun Aug 25 08:31:49 PM JST 2024
200
Sun Aug 25 08:31:51 PM JST 2024
200
Sun Aug 25 08:31:52 PM JST 2024
200
Sun Aug 25 08:31:53 PM JST 2024
200
Sun Aug 25 08:31:55 PM JST 2024
200
Sun Aug 25 08:31:56 PM JST 2024
200
Sun Aug 25 08:31:58 PM JST 2024
200
Sun Aug 25 08:31:59 PM JST 2024
200
Sun Aug 25 08:32:00 PM JST 2024
200
Sun Aug 25 08:32:02 PM JST 2024
200
Sun Aug 25 08:32:03 PM JST 2024
200
Sun Aug 25 08:32:04 PM JST 2024
200
Sun Aug 25 08:32:06 PM JST 2024
200
Sun Aug 25 08:32:07 PM JST 2024
200
Sun Aug 25 08:32:08 PM JST 2024
200
Sun Aug 25 08:32:10 PM JST 2024
200
Sun Aug 25 08:32:11 PM JST 2024
200
Sun Aug 25 08:32:12 PM JST 2024
200
Sun Aug 25 08:32:13 PM JST 2024
200
Sun Aug 25 08:32:15 PM JST 2024
200
Sun Aug 25 08:32:16 PM JST 2024
200
Sun Aug 25 08:32:18 PM JST 2024
200
Sun Aug 25 08:32:19 PM JST 2024
200
Sun Aug 25 08:32:20 PM JST 2024
200
Sun Aug 25 08:32:22 PM JST 2024
200
Sun Aug 25 08:32:23 PM JST 2024
200
Sun Aug 25 08:32:24 PM JST 2024
200
Sun Aug 25 08:32:25 PM JST 2024
200
Sun Aug 25 08:32:27 PM JST 2024
200
Sun Aug 25 08:32:28 PM JST 2024
200
Sun Aug 25 08:32:29 PM JST 2024
200
Sun Aug 25 08:32:31 PM JST 2024
200
Sun Aug 25 08:32:32 PM JST 2024
^C
オプション 2:RDS DB インスタンスのフェイルオーバーを⾏い、全体の可⽤性を確認
DBインスタンス再起動
コマンド
aws rds reboot-db-instance \
--db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
--force-failover \
--no-cli-pager
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds reboot-db-instance \
> --db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
> --force-failover
> --no-cli-pager
{
"DBInstance": {
"DBInstanceIdentifier": "db-user1",
"DBInstanceClass": "db.t3.micro",
"Engine": "mysql",
"DBInstanceStatus": "rebooting",
"MasterUsername": "admin",
"DBName": "wordpress",
"Endpoint": {
"Address": "db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com",
"Port": 3306,
"HostedZoneId": "Z24O6O9L7SGTNB"
},
"AllocatedStorage": 20,
"InstanceCreateTime": "2024-08-25T09:35:37.302000+00:00",
"PreferredBackupWindow": "13:43-14:13",
"BackupRetentionPeriod": 0,
"DBSecurityGroups": [],
"VpcSecurityGroups": [
{
"VpcSecurityGroupId": "sg-08c2854a9b34f089b",
"Status": "active"
}
],
"DBParameterGroups": [
{
"DBParameterGroupName": "default.mysql8.0",
"ParameterApplyStatus": "in-sync"
}
],
"AvailabilityZone": "ap-northeast-1a",
"DBSubnetGroup": {
"DBSubnetGroupName": "db-subnet-user1",
"DBSubnetGroupDescription": "RDS for MySQL",
"VpcId": "vpc-02b5fbe797028d4e8",
"SubnetGroupStatus": "Complete",
"Subnets": [
{
"SubnetIdentifier": "subnet-04ef02ee504c79f77",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1a"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-06ddf6a468a549ff8",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1c"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
}
]
},
"PreferredMaintenanceWindow": "sun:15:03-sun:15:33",
"PendingModifiedValues": {},
"MultiAZ": true,
"EngineVersion": "8.0.35",
"AutoMinorVersionUpgrade": true,
"ReadReplicaDBInstanceIdentifiers": [],
"LicenseModel": "general-public-license",
"OptionGroupMemberships": [
{
"OptionGroupName": "default:mysql-8-0",
"Status": "in-sync"
}
],
"SecondaryAvailabilityZone": "ap-northeast-1c",
"PubliclyAccessible": false,
"StorageType": "gp2",
"DbInstancePort": 0,
"StorageEncrypted": true,
"KmsKeyId": "arn:aws:kms:ap-northeast-1:999999999999:key/951b3fa0-aedb-4215-a2e6-9b7c2f5292e5",
"DbiResourceId": "db-JLWEZ2TQ2U6TEYZGZWHYZ7R3L4",
"CACertificateIdentifier": "rds-ca-rsa2048-g1",
"DomainMemberships": [],
"CopyTagsToSnapshot": false,
"MonitoringInterval": 0,
"DBInstanceArn": "arn:aws:rds:ap-northeast-1:999999999999:db:db-user1",
"IAMDatabaseAuthenticationEnabled": false,
"PerformanceInsightsEnabled": false,
"DeletionProtection": false,
"AssociatedRoles": [],
"MaxAllocatedStorage": 1000,
"TagList": [],
"CustomerOwnedIpEnabled": false,
"BackupTarget": "region",
"NetworkType": "IPV4",
"StorageThroughput": 0,
"CertificateDetails": {
"CAIdentifier": "rds-ca-rsa2048-g1",
"ValidTill": "2025-08-25T09:34:46+00:00"
},
"DedicatedLogVolume": false,
"EngineLifecycleSupport": "open-source-rds-extended-support"
}
}
コマンド（別タブで実施）
url=http://elb-user1-154512834.ap-northeast-1.elb.amazonaws.com/
while true; do TZ=JST-9 date; curl -o /dev/null -s -w "%{http_code}\n" ${url} ; sleep 1s; done
出力（別タブで実施）
[cloudshell-user@ip-10-132-84-39 ~]$ url=http://elb-user1-154512834.ap-northeast-1.elb.amazonaws.com/
[cloudshell-user@ip-10-132-84-39 ~]$ while true; do TZ=JST-9 date; curl -o /dev/null -s -w "%{http_code}\n" ${url} ; sleep 1s; done
Sun Aug 25 08:37:40 PM JST 2024
200
Sun Aug 25 08:37:42 PM JST 2024
200
Sun Aug 25 08:37:43 PM JST 2024
200
Sun Aug 25 08:37:44 PM JST 2024
200
Sun Aug 25 08:37:46 PM JST 2024
200
Sun Aug 25 08:37:47 PM JST 2024
200
Sun Aug 25 08:37:48 PM JST 2024
200
Sun Aug 25 08:37:50 PM JST 2024
200
Sun Aug 25 08:37:51 PM JST 2024
200
Sun Aug 25 08:37:52 PM JST 2024
200
Sun Aug 25 08:37:54 PM JST 2024
200
Sun Aug 25 08:37:55 PM JST 2024
200
Sun Aug 25 08:37:56 PM JST 2024
200
Sun Aug 25 08:37:58 PM JST 2024
200
Sun Aug 25 08:37:59 PM JST 2024
200
Sun Aug 25 08:38:00 PM JST 2024 ←１分間通信断
504
Sun Aug 25 08:39:01 PM JST 2024
200
Sun Aug 25 08:39:03 PM JST 2024
200
Sun Aug 25 08:39:04 PM JST 2024
200
Sun Aug 25 08:39:05 PM JST 2024
200
Sun Aug 25 08:39:07 PM JST 2024
200
Sun Aug 25 08:39:08 PM JST 2024
200
Sun Aug 25 08:39:09 PM JST 2024
200
Sun Aug 25 08:39:11 PM JST 2024
200
Sun Aug 25 08:39:12 PM JST 2024
200
Sun Aug 25 08:39:13 PM JST 2024
200
Sun Aug 25 08:39:15 PM JST 2024
200
Sun Aug 25 08:39:16 PM JST 2024
200
Sun Aug 25 08:39:17 PM JST 2024
200
Sun Aug 25 08:39:19 PM JST 2024
200
Sun Aug 25 08:39:20 PM JST 2024
200
Sun Aug 25 08:39:21 PM JST 2024
200
Sun Aug 25 08:39:23 PM JST 2024
200
Sun Aug 25 08:39:24 PM JST 2024
200
Sun Aug 25 08:39:25 PM JST 2024
200
Sun Aug 25 08:39:27 PM JST 2024
200
Sun Aug 25 08:39:28 PM JST 2024
200
Sun Aug 25 08:39:29 PM JST 2024
200
Sun Aug 25 08:39:31 PM JST 2024
200
Sun Aug 25 08:39:32 PM JST 2024
200
Sun Aug 25 08:39:33 PM JST 2024
200
Sun Aug 25 08:39:34 PM JST 2024
200
Sun Aug 25 08:39:36 PM JST 2024
200
Sun Aug 25 08:39:37 PM JST 2024
200
Sun Aug 25 08:39:38 PM JST 2024
200
Sun Aug 25 08:39:40 PM JST 2024
200
Sun Aug 25 08:39:41 PM JST 2024
200
Sun Aug 25 08:39:43 PM JST 2024
200
Sun Aug 25 08:39:44 PM JST 2024
200
Sun Aug 25 08:39:45 PM JST 2024
200
イベント確認
コマンド
aws rds describe-events \
--source-identifier ${DB_INSTANCE_IDENTIFIER} \
--source-type db-instance \
--output table \
--no-cli-pager
出力
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds describe-events \
> --source-identifier ${DB_INSTANCE_IDENTIFIER} \
> --source-type db-instance \
> --output table \
> --no-cli-pager
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| DescribeEvents |
+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|| Events ||
|+------------------------------------+-----------------------------------------------------------------+---------------------------------------------------------+--------------------+---------------+|
|| Date | Message | SourceArn | SourceIdentifier | SourceType ||
|+------------------------------------+-----------------------------------------------------------------+---------------------------------------------------------+--------------------+---------------+|
|| 2024-08-25T11:06:52.329000+00:00 | Applying modification to convert to a Multi-AZ DB Instance | arn:aws:rds:ap-northeast-1:999999999999:db:db-user1 | db-user1 | db-instance ||
|+------------------------------------+-----------------------------------------------------------------+---------------------------------------------------------+--------------------+---------------+|
||| EventCategories |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
||| configuration change |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
|| Events ||
|+----------------------------------+-----------------------------------------------------------------------+-------------------------------------------------------+-------------------+--------------+|
|| Date | Message | SourceArn | SourceIdentifier | SourceType ||
|+----------------------------------+-----------------------------------------------------------------------+-------------------------------------------------------+-------------------+--------------+|
|| 2024-08-25T11:15:35.168000+00:00| Finished applying modification to convert to a Multi-AZ DB Instance | arn:aws:rds:ap-northeast-1:999999999999:db:db-user1 | db-user1 | db-instance ||
|+----------------------------------+-----------------------------------------------------------------------+-------------------------------------------------------+-------------------+--------------+|
||| EventCategories |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
||| configuration change |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
|| Events ||
|+-----------------------------------------+-----------------------------------------------+-----------------------------------------------------------------+-----------------------+-----------------+|
|| Date | Message | SourceArn | SourceIdentifier | SourceType ||
|+-----------------------------------------+-----------------------------------------------+-----------------------------------------------------------------+-----------------------+-----------------+|
|| 2024-08-25T11:38:00.724000+00:00 | Multi-AZ instance failover started. | arn:aws:rds:ap-northeast-1:999999999999:db:db-user1 | db-user1 | db-instance ||
|+-----------------------------------------+-----------------------------------------------+-----------------------------------------------------------------+-----------------------+-----------------+|
||| EventCategories |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
||| failover |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
|| Events ||
|+---------------------------------------------+--------------------------------+-----------------------------------------------------------------------+-------------------------+--------------------+|
|| Date | Message | SourceArn | SourceIdentifier | SourceType ||
|+---------------------------------------------+--------------------------------+-----------------------------------------------------------------------+-------------------------+--------------------+|
|| 2024-08-25T11:38:16.147000+00:00 | DB instance restarted | arn:aws:rds:ap-northeast-1:999999999999:db:db-user1 | db-user1 | db-instance ||
|+---------------------------------------------+--------------------------------+-----------------------------------------------------------------------+-------------------------+--------------------+|
||| EventCategories |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
||| availability |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
|| Events ||
|+---------------------------------------------+--------------------------------+-----------------------------------------------------------------------+-------------------------+--------------------+|
|| Date | Message | SourceArn | SourceIdentifier | SourceType ||
|+---------------------------------------------+--------------------------------+-----------------------------------------------------------------------+-------------------------+--------------------+|
|| 2024-08-25T11:38:21.678000+00:00 | DB instance restarted | arn:aws:rds:ap-northeast-1:999999999999:db:db-user1 | db-user1 | db-instance ||
|+---------------------------------------------+--------------------------------+-----------------------------------------------------------------------+-------------------------+--------------------+|
||| EventCategories |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
||| availability |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
|| Events ||
|+-----------------------------------------+-----------------------------------------------+-----------------------------------------------------------------+-----------------------+-----------------+|
|| Date | Message | SourceArn | SourceIdentifier | SourceType ||
|+-----------------------------------------+-----------------------------------------------+-----------------------------------------------------------------+-----------------------+-----------------+|
|| 2024-08-25T11:38:34.615000+00:00 | Multi-AZ instance failover completed | arn:aws:rds:ap-northeast-1:999999999999:db:db-user1 | db-user1 | db-instance ||
|+-----------------------------------------+-----------------------------------------------+-----------------------------------------------------------------+-----------------------+-----------------+|
||| EventCategories |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
||| failover |||
||+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+||
|| Events ||
|+--------------------------------------+----------------------------------------------------------+------------------------------------------------------------+---------------------+----------------+|
|| Date | Message | SourceArn | SourceIdentifier | SourceType ||
|+--------------------------------------+----------------------------------------------------------+------------------------------------------------------------+---------------------+----------------+|
|| 2024-08-25T11:38:34.615000+00:00 | The user requested a failover of the DB instance. | arn:aws:rds:ap-northeast-1:999999999999:db:db-user1 | db-user1 | db-instance ||
|+--------------------------------------+----------------------------------------------------------+------------------------------------------------------------+---------------------+----------------+|
詳細
コマンド
# 詳細
aws rds describe-db-instances \
--db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
--no-cli-pager
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # 詳細
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds describe-db-instances \
> --db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
> --no-cli-pager
{
"DBInstances": [
{
"DBInstanceIdentifier": "db-user1",
"DBInstanceClass": "db.t3.micro",
"Engine": "mysql",
"DBInstanceStatus": "available",
"MasterUsername": "admin",
"DBName": "wordpress",
"Endpoint": {
"Address": "db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com",
"Port": 3306,
"HostedZoneId": "Z24O6O9L7SGTNB"
},
"AllocatedStorage": 20,
"InstanceCreateTime": "2024-08-25T09:35:37.302000+00:00",
"PreferredBackupWindow": "13:43-14:13",
"BackupRetentionPeriod": 0,
"DBSecurityGroups": [],
"VpcSecurityGroups": [
{
"VpcSecurityGroupId": "sg-08c2854a9b34f089b",
"Status": "active"
}
],
"DBParameterGroups": [
{
"DBParameterGroupName": "default.mysql8.0",
"ParameterApplyStatus": "in-sync"
}
],
"AvailabilityZone": "ap-northeast-1c",
"DBSubnetGroup": {
"DBSubnetGroupName": "db-subnet-user1",
"DBSubnetGroupDescription": "RDS for MySQL",
"VpcId": "vpc-02b5fbe797028d4e8",
"SubnetGroupStatus": "Complete",
"Subnets": [
{
"SubnetIdentifier": "subnet-04ef02ee504c79f77",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1a"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-06ddf6a468a549ff8",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1c"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
}
]
},
"PreferredMaintenanceWindow": "sun:15:03-sun:15:33",
"PendingModifiedValues": {},
"MultiAZ": true,
"EngineVersion": "8.0.35",
"AutoMinorVersionUpgrade": true,
"ReadReplicaDBInstanceIdentifiers": [],
"LicenseModel": "general-public-license",
"OptionGroupMemberships": [
{
"OptionGroupName": "default:mysql-8-0",
"Status": "in-sync"
}
],
"SecondaryAvailabilityZone": "ap-northeast-1a",
"PubliclyAccessible": false,
"StorageType": "gp2",
"DbInstancePort": 0,
"StorageEncrypted": true,
"KmsKeyId": "arn:aws:kms:ap-northeast-1:999999999999:key/951b3fa0-aedb-4215-a2e6-9b7c2f5292e5",
"DbiResourceId": "db-JLWEZ2TQ2U6TEYZGZWHYZ7R3L4",
"CACertificateIdentifier": "rds-ca-rsa2048-g1",
"DomainMemberships": [],
"CopyTagsToSnapshot": false,
"MonitoringInterval": 0,
"DBInstanceArn": "arn:aws:rds:ap-northeast-1:999999999999:db:db-user1",
"IAMDatabaseAuthenticationEnabled": false,
"PerformanceInsightsEnabled": false,
"DeletionProtection": false,
"AssociatedRoles": [],
"MaxAllocatedStorage": 1000,
"TagList": [],
"CustomerOwnedIpEnabled": false,
"ActivityStreamStatus": "stopped",
"BackupTarget": "region",
"NetworkType": "IPV4",
"StorageThroughput": 0,
"CertificateDetails": {
"CAIdentifier": "rds-ca-rsa2048-g1",
"ValidTill": "2025-08-25T09:34:46+00:00"
},
"DedicatedLogVolume": false,
"IsStorageConfigUpgradeAvailable": false,
"EngineLifecycleSupport": "open-source-rds-extended-support"
}
]
}
10 補足 & まとめ & 今後のラーニングパスについて
RDS削除
コマンド
# RDS削除
aws rds delete-db-instance \
--db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
--skip-final-snapshot \
--delete-automated-backups \
--no-cli-pager
# サブネットグループ削除
aws rds delete-db-subnet-group --db-subnet-group-name ${DB_SUBNET_GROUP_NAME}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # RDS削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds delete-db-instance \
> --db-instance-identifier ${DB_INSTANCE_IDENTIFIER} \
> --skip-final-snapshot \
> --delete-automated-backups \
> --no-cli-pager
{
"DBInstance": {
"DBInstanceIdentifier": "db-user1",
"DBInstanceClass": "db.t3.micro",
"Engine": "mysql",
"DBInstanceStatus": "deleting",
"MasterUsername": "admin",
"DBName": "wordpress",
"Endpoint": {
"Address": "db-user1.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com",
"Port": 3306,
"HostedZoneId": "Z24O6O9L7SGTNB"
},
"AllocatedStorage": 20,
"InstanceCreateTime": "2024-08-25T09:35:37.302000+00:00",
"PreferredBackupWindow": "13:43-14:13",
"BackupRetentionPeriod": 0,
"DBSecurityGroups": [],
"VpcSecurityGroups": [
{
"VpcSecurityGroupId": "sg-08c2854a9b34f089b",
"Status": "active"
}
],
"DBParameterGroups": [
{
"DBParameterGroupName": "default.mysql8.0",
"ParameterApplyStatus": "in-sync"
}
],
"AvailabilityZone": "ap-northeast-1c",
"DBSubnetGroup": {
"DBSubnetGroupName": "db-subnet-user1",
"DBSubnetGroupDescription": "RDS for MySQL",
"VpcId": "vpc-02b5fbe797028d4e8",
"SubnetGroupStatus": "Complete",
"Subnets": [
{
"SubnetIdentifier": "subnet-04ef02ee504c79f77",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1a"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-06ddf6a468a549ff8",
"SubnetAvailabilityZone": {
"Name": "ap-northeast-1c"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
}
]
},
"PreferredMaintenanceWindow": "sun:15:03-sun:15:33",
"PendingModifiedValues": {},
"MultiAZ": true,
"EngineVersion": "8.0.35",
"AutoMinorVersionUpgrade": true,
"ReadReplicaDBInstanceIdentifiers": [],
"LicenseModel": "general-public-license",
"OptionGroupMemberships": [
{
"OptionGroupName": "default:mysql-8-0",
"Status": "in-sync"
}
],
"SecondaryAvailabilityZone": "ap-northeast-1a",
"PubliclyAccessible": false,
"StorageType": "gp2",
"DbInstancePort": 0,
"StorageEncrypted": true,
"KmsKeyId": "arn:aws:kms:ap-northeast-1:999999999999:key/951b3fa0-aedb-4215-a2e6-9b7c2f5292e5",
"DbiResourceId": "db-JLWEZ2TQ2U6TEYZGZWHYZ7R3L4",
"CACertificateIdentifier": "",
"DomainMemberships": [],
"CopyTagsToSnapshot": false,
"MonitoringInterval": 0,
"DBInstanceArn": "arn:aws:rds:ap-northeast-1:999999999999:db:db-user1",
"IAMDatabaseAuthenticationEnabled": false,
"PerformanceInsightsEnabled": false,
"DeletionProtection": false,
"AssociatedRoles": [],
"MaxAllocatedStorage": 1000,
"TagList": [],
"CustomerOwnedIpEnabled": false,
"BackupTarget": "region",
"NetworkType": "IPV4",
"StorageThroughput": 0,
"DedicatedLogVolume": false,
"EngineLifecycleSupport": "open-source-rds-extended-support"
}
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # サブネットグループ削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws rds delete-db-subnet-group --db-subnet-group-name ${DB_SUBNET_GROUP_NAME}
EC2削除
コマンド
# EC2インスタンス削除
aws ec2 terminate-instances --instance-ids ${EC2_ID_1} ${EC2_ID_2}
# スナップショットID取得
SNAPSHOT_ID=$( \
aws ec2 describe-images \
--image-ids ${IMAGE_ID} \
--query Images[].BlockDeviceMappings[].Ebs.SnapshotId \
--output text
) \
&& echo ${SNAPSHOT_ID}
# AMI削除
aws ec2 deregister-image --image-id ${IMAGE_ID}
# スナップショットを削除する
aws ec2 delete-snapshot --snapshot-id ${SNAPSHOT_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # EC2インスタンス削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 terminate-instances --instance-ids ${EC2_ID_1} ${EC2_ID_2}
{
"TerminatingInstances": [
{
"CurrentState": {
"Code": 32,
"Name": "shutting-down"
},
"InstanceId": "i-05d36122200065fdb",
"PreviousState": {
"Code": 16,
"Name": "running"
}
},
{
"CurrentState": {
"Code": 32,
"Name": "shutting-down"
},
"InstanceId": "i-0ed3b54d25b834102",
"PreviousState": {
"Code": 16,
"Name": "running"
}
}
]
}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # スナップショットID取得
[cloudshell-user@ip-10-132-84-39 ~]$ SNAPSHOT_ID=$( \
> aws ec2 describe-images \
> --image-ids ${IMAGE_ID} \
> --query Images[].BlockDeviceMappings[].Ebs.SnapshotId \
> --output text
> ) \
> && echo ${SNAPSHOT_ID}
snap-0c96f46dc1fe85e4a
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # AMI削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 deregister-image --image-id ${IMAGE_ID}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # スナップショットを削除する
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-snapshot --snapshot-id ${SNAPSHOT_ID}
ロードバランサー削除
コマンド
# ロードバランサー削除
aws elbv2 delete-load-balancer --load-balancer-arn ${LB_ARN}
# ターゲットグループ削除
aws elbv2 delete-target-group --target-group-arn ${TARGET_GROUP_ARN}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # ロードバランサー削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 delete-load-balancer --load-balancer-arn ${LB_ARN}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ターゲットグループ削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws elbv2 delete-target-group --target-group-arn ${TARGET_GROUP_ARN}
VPC削除
コマンド
# セキュリティグループ削除
aws ec2 delete-security-group --group-id ${ELB_SECURITY_GROUP_ID}
aws ec2 delete-security-group --group-id ${RDS_SG_ID}
aws ec2 delete-security-group --group-id ${EC2_SECURITY_GROUP_ID}
# インターネットゲートウェイ デタッチ
aws ec2 detach-internet-gateway \
--internet-gateway-id ${IGW_ID}\
--vpc-id ${VPC_ID}
# インターネットゲートウェイ削除
aws ec2 delete-internet-gateway --internet-gateway-id ${IGW_ID}
# Subnet 削除
aws ec2 delete-subnet --subnet-id ${AZ1_PUB_ID}
aws ec2 delete-subnet --subnet-id ${AZ2_PUB_ID}
aws ec2 delete-subnet --subnet-id ${AZ1_PRI_ID}
aws ec2 delete-subnet --subnet-id ${AZ2_PRI_ID}
# ルートテーブル削除
aws ec2 delete-route-table --route-table-id ${PUB_RT_ID}
# VPC削除
aws ec2 delete-vpc --vpc-id ${VPC_ID}
出力
[cloudshell-user@ip-10-132-84-39 ~]$ # セキュリティグループ削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-security-group --group-id ${ELB_SECURITY_GROUP_ID}
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-security-group --group-id ${RDS_SG_ID}
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-security-group --group-id ${EC2_SECURITY_GROUP_ID}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インターネットゲートウェイ デタッチ
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 detach-internet-gateway \
> --internet-gateway-id ${IGW_ID}\
> --vpc-id ${VPC_ID}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # インターネットゲートウェイ削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-internet-gateway --internet-gateway-id ${IGW_ID}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # Subnet 削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-subnet --subnet-id ${AZ1_PUB_ID}
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-subnet --subnet-id ${AZ2_PUB_ID}
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-subnet --subnet-id ${AZ1_PRI_ID}
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-subnet --subnet-id ${AZ2_PRI_ID}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # ルートテーブル削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-route-table --route-table-id ${PUB_RT_ID}
[cloudshell-user@ip-10-132-84-39 ~]$
[cloudshell-user@ip-10-132-84-39 ~]$ # VPC削除
[cloudshell-user@ip-10-132-84-39 ~]$ aws ec2 delete-vpc --vpc-id ${VPC_ID}