{"id":24643,"date":"2019-12-18T08:00:12","date_gmt":"2019-12-17T23:00:12","guid":{"rendered":"https:\/\/www.techscore.com\/blog\/?p=24643"},"modified":"2019-12-16T17:03:05","modified_gmt":"2019-12-16T08:03:05","slug":"aws-cdk","status":"publish","type":"post","link":"https:\/\/www.techscore.com\/blog\/2019\/12\/18\/aws-cdk\/","title":{"rendered":"AWS CDK\u3092\u5c0e\u5165\u3057\u3066\u8131YAML\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3092\u8a66\u307f\u308b"},"content":{"rendered":"

\u3053\u308c\u306f \ud83d\ude3aTECHSCORE Advent Calendar 2019\ud83d\ude3a<\/a>\u306e18\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002<\/p>\n

\u4eca\u307e\u3067CloudFormation\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3092\u76f4\u63a5YAML\u3067\u66f8\u3044\u3066\u3044\u307e\u3057\u305f\u304c\u3001\u4f5c\u6210\u3059\u308b\u30ea\u30bd\u30fc\u30b9\u6570\u304c\u591a\u304f\u306a\u308b\u306b\u3064\u308c\u3066\u8a18\u8ff0\u91cf\u306e\u591a\u3055\u306b\u8f9b\u3055\u3092\u611f\u3058\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u304d\u307e\u3057\u305f\u3002
\n\u305d\u3093\u306a\u6298AWS CDK<\/a>\u306e\u3053\u3068\u3092\u77e5\u308a\u3001\u8a66\u3057\u306b\u7c21\u5358\u306a\u69cb\u6210\u3092AWS CDK\u3067\u4f5c\u6210\u3057\u3066\u307f\u308b\u3053\u3068\u306b\u3057\u307e\u3057\u305f\u3002<\/p>\n

\u5229\u7528\u3059\u308bAWS CDK\u306eAPI\u306b\u3064\u3044\u3066<\/h2>\n

Developer Guide<\/a>\u3084API Reference<\/a>\u3092\u898b\u308b\u3068\u3001AWS CDK\u306eAPI\u306b\u306fCloudFormation\u306e\u5404\u30ea\u30bd\u30fc\u30b9\u30bf\u30a4\u30d7\uff08VPC\u7b49\uff09\u30681\u5bfe1\u3067\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u4f4e\u30ec\u30d9\u30eb\u306a\u3082\u306e\u3068\u3001\u3088\u308a\u9ad8\u30ec\u30d9\u30eb\u306a\u3082\u306e\uff08\u4f8b\u3048\u3070\u3001VPC\u3084\u30b5\u30d6\u30cd\u30c3\u30c8\u3092\u4f5c\u6210\u3059\u308b\u969b\u306b\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u3084\u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\u3001\u30eb\u30fc\u30c8\u3068\u3044\u3063\u305f\u95a2\u9023\u30ea\u30bd\u30fc\u30b9\u3092\u81ea\u52d5\u7684\u306b\u4f5c\u6210\u30fb\u95a2\u9023\u4ed8\u3051\u3057\u3066\u304f\u308c\u308b\uff09\u304c\u3042\u308b\u3088\u3046\u3067\u3059\u304c\u3001\u5229\u7528\u3059\u308bAZ\u3084\u30b5\u30d6\u30cd\u30c3\u30c8\u306e\u500b\u6570\u3092\u67d4\u8edf\u306b\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u3057\u305f\u304b\u3063\u305f\u306e\u3067\u3001\u4eca\u56de\u306f\u4f4e\u30ec\u30d9\u30ebAPI\u306e\u65b9\u3092\u8a66\u3057\u3066\u307f\u305f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n

\u5fc5\u8981\u306a\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h2>\n

Getting Started With the AWS CDK<\/a>\u306b\u5f93\u3063\u3066\u3001AWS CDK\u3092\u5b9f\u884c\u3059\u308b\u74b0\u5883\u3092\u6e96\u5099\u3057\u307e\u3059\u3002
\nAWS CDK\u306e\u8a00\u8a9e\u306b\u306f\u3001Python\u3092\u9078\u629e\u3057\u307e\u3059\u3002<\/p>\n

\ncurl -sL https:\/\/rpm.nodesource.com\/setup_10.x | sudo bash -\nsudo yum install python3\nsudo yum install nodejs\nsudo npm install -g aws-cdk\n<\/pre>\n
\u4eca\u56de\u78ba\u8a8d\u306b\u5229\u7528\u3057\u305f\u74b0\u5883\u306f\u3001\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n
OS\uff1a Amazon Linux release 2 (Karoo)
\nnode\uff1a v10.17.0
\nnpm\uff1a 6.11.3
\nPython\uff1a 3.7.4
\npip\uff1a 19.0.3
\ncdk\uff1a 1.18.0<\/p>\n
AWS\u306e\u30af\u30ec\u30c7\u30f3\u30b7\u30e3\u30eb\u3068\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u3092\u8a2d\u5b9a<\/h2>\n
AWS\u306e\u30af\u30ec\u30c7\u30f3\u30b7\u30e3\u30eb\u3092\u74b0\u5883\u5909\u6570\u306b\u8a2d\u5b9a\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n
\nexport AWS_ACCESS_KEY_ID=Specifies your access key.\nexport AWS_SECRET_ACCESS_KEY=Specifies your secret access key.\nexport AWS_DEFAULT_REGION=ap-northeast-1\n<\/pre>\n
IAM\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u306b\u306f\u3001\u4ee5\u4e0b\u306eAWS\u7ba1\u7406\u30dd\u30ea\u30b7\u30fc\u3092\u30a2\u30bf\u30c3\u30c1\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n
\nAWSCloudFormationFullAccess\nAmazonEC2FullAccess\nAmazonS3FullAccess\n<\/pre>\n
\u4f5c\u6210\u3059\u308b\u30ea\u30bd\u30fc\u30b9\u306e\u69cb\u6210<\/h2>\n
\u30d1\u30d6\u30ea\u30c3\u30af\u30b5\u30d6\u30cd\u30c3\u30c8\uff08\/20\uff09\u3068\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b5\u30d6\u30cd\u30c3\u30c8\uff08\/20\uff09\u3092AZ\u3054\u3068\u306b1\u3064\u305a\u3064\u6301\u3064VPC\uff0810.0.0.0\/16\uff09\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002
\n\u30d1\u30d6\u30ea\u30c3\u30af\u30b5\u30d6\u30cd\u30c3\u30c8\u306b\u306fNAT Gateway\u3092\u914d\u7f6e\u3057\u307e\u3059\u3002<\/p>\n
\"\"<\/a><\/p>\n
AWS CDK\u30a2\u30d7\u30ea\u306e\u96db\u5f62\u3092\u4f5c\u6210<\/h2>\n
Getting Started With the AWS CDK<\/a>\u306b\u3042\u308b\u3088\u3046\u306b\u30a2\u30d7\u30ea\u306e\u96db\u5f62\u3092\u4f5c\u6210\u3057\u3001AWS CDK\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002
\n\u4eca\u56de\u306fVPC\u3068\u30b5\u30d6\u30cd\u30c3\u30c8\u3092\u4f5c\u6210\u3057\u307e\u3059\u306e\u3067\u3001\u30b3\u30a2\u30e2\u30b8\u30e5\u30fc\u30eb\u3068EC2\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002
\n\u305d\u306e\u4ed6\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u3064\u3044\u3066\u306fAWS CDK Python Reference<\/a>\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n
\nmkdir my-network\ncd my-network\ncdk init --language python\nsource .env\/bin\/activate\npip install -r requirements.txt\npip install --upgrade aws-cdk.core\npip install --upgrade aws-cdk.aws_ec2\n<\/pre>\n
\u4f5c\u6210\u3059\u308bAWS\u30ea\u30bd\u30fc\u30b9\u306e\u30b3\u30fc\u30c9\u3092\u8ffd\u52a0<\/h2>\n
\u96db\u5f62\u3092\u4f5c\u6210\u3057\u305f\u6642\u70b9\u3067\u306f\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u69cb\u6210\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n
\n\u2514\u2500\u2500 my-network\n    \u251c\u2500\u2500 README.md\n    \u251c\u2500\u2500 app.py\n    \u251c\u2500\u2500 cdk.json\n    \u251c\u2500\u2500 my_network\n    \u2502\u00a0\u00a0 \u251c\u2500\u2500 __init__.py\n    \u2502\u00a0\u00a0 \u251c\u2500\u2500 my_network.egg-info\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u251c\u2500\u2500 PKG-INFO\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u251c\u2500\u2500 SOURCES.txt\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u251c\u2500\u2500 dependency_links.txt\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u251c\u2500\u2500 requires.txt\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u2514\u2500\u2500 top_level.txt\n    \u2502\u00a0\u00a0 \u2514\u2500\u2500 my_network_stack.py\n    \u251c\u2500\u2500 requirements.txt\n    \u2514\u2500\u2500 setup.py\n<\/pre>\n
my_network_stack.py
\n\u3092\u958b\u304f\u3068\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u30b3\u30fc\u30c9\u304c\u8a18\u8ff0\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n
\nfrom aws_cdk import core\n\n\nclass MyNetworkStack(core.Stack):\n\n    def __init__(self, scope: core.Construct, id: str, **kwargs) -> None:\n        super().__init__(scope, id, **kwargs)\n\n        # The code that defines your stack goes here\n<\/pre>\n
\u30b3\u30e1\u30f3\u30c8\u306b\u3042\u308b\u3088\u3046\u306b\u3001\u3053\u306e\u4e2d\u306b\u4f5c\u6210\u3059\u308b\u30ea\u30bd\u30fc\u30b9\u306e\u30b3\u30fc\u30c9\u3092\u8a18\u8ff0\u3057\u3066\u3044\u304d\u307e\u3059\u3002
\n\u4f5c\u6210\u3059\u308b\u30ea\u30bd\u30fc\u30b9\u306e\u6570\u304c\u591a\u3044\u306e\u3067\u3001my_resources\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u4f5c\u6210\u3057\u3066\u305d\u3053\u306b\u8ffd\u52a0\u3057\u305f\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u547c\u3073\u51fa\u3059\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n
\u30e2\u30b8\u30e5\u30fc\u30eb\u8ffd\u52a0\u5f8c\u306e\u69cb\u6210\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n
\n\u2514\u2500\u2500 my-network\n    \u251c\u2500\u2500 README.md\n    \u251c\u2500\u2500 app.py\n    \u251c\u2500\u2500 cdk.json\n    \u251c\u2500\u2500 my_network\n    \u2502\u00a0\u00a0 \u251c\u2500\u2500 __init__.py\n    \u2502\u00a0\u00a0 \u251c\u2500\u2500 my_network.egg-info\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u251c\u2500\u2500 PKG-INFO\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u251c\u2500\u2500 SOURCES.txt\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u251c\u2500\u2500 dependency_links.txt\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u251c\u2500\u2500 requires.txt\n    \u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u2514\u2500\u2500 top_level.txt\n    \u2502\u00a0\u00a0 \u2514\u2500\u2500 my_network_stack.py\n    \u2502\u00a0\u00a0 \u2514\u2500\u2500 my_resources\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 __init__.py\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 availability_zone.py\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 nat_gateway.py\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 route.py\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 subnet.py\n    \u2502\u00a0\u00a0     \u2514\u2500\u2500 vpc.py\n    \u251c\u2500\u2500 requirements.txt\n    \u2514\u2500\u2500 setup.py\n<\/pre>\n
\u8ffd\u52a0\u3057\u305f\u30e2\u30b8\u30e5\u30fc\u30eb\u306e\u5185\u5bb9\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n
availability_zone.py\uff08\u30a2\u30d9\u30a4\u30e9\u30d3\u30ea\u30c6\u30a3\u30fc\u30be\u30fc\u30f3\u306e\u5b9a\u7fa9\uff09\u203b\u6771\u4eac\u30ea\u30fc\u30b8\u30e7\u30f3\u306b\u9650\u5b9a<\/p>\n
\nclass AvailabilityZone:\n    def __init__(self, region='ap-northeast-1') -> None:\n        self.__region = region\n\n        if self.__region == 'ap-northeast-1':\n            self.__names = ['ap-northeast-1a', 'ap-northeast-1c', 'ap-northeast-1d']\n        else:\n            self.__names = []\n\n    @property\n    def names(self) -> list:\n        return self.__names\n\n    def name(self, az_number) -> str:\n        return self.__names[az_number]\n<\/pre>\n
nat_gateway.py\uff08NAT Gateway\uff09<\/p>\n
\nimport hashlib\nfrom aws_cdk import (\n    core,\n    aws_ec2,\n)\n\n\ndef create_nat_gateway(scope: core.Construct, vpc: aws_ec2.CfnVPC, subnet: aws_ec2.CfnSubnet) -> aws_ec2.CfnNatGateway:\n    vpc_id = [tag['value'] for tag in vpc.tags.render_tags() if tag['key'] == 'Name'].pop()\n    subnet_id = [tag['value'] for tag in subnet.tags.render_tags() if tag['key'] == 'Name'].pop()\n    id = hashlib.md5(subnet_id.encode()).hexdigest()\n    eip = aws_ec2.CfnEIP(scope, f'{vpc_id}\/EIP-{id}')\n    \n    nat_gateway = aws_ec2.CfnNatGateway(scope, f'{vpc_id}\/NatGateway-{id}',\n        allocation_id=eip.attr_allocation_id,\n        subnet_id=subnet.ref,\n        tags=[core.CfnTag(\n            key='Name',\n            value=f'{vpc_id}\/NatGateway-{id}',\n        )],\n    )\n    \n    return nat_gateway\n<\/pre>\n
route.py\uff08\u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\u3001\u30eb\u30fc\u30c8\uff09<\/p>\n
\nimport hashlib\nfrom aws_cdk import (\n    core,\n    aws_ec2,\n)\n\n\ndef create_privagte_route_table(scope: core.Construct, vpc: aws_ec2.CfnVPC, nat_gateway: aws_ec2.CfnNatGateway) -> aws_ec2.CfnRouteTable:\n    vpc_id = [tag['value'] for tag in vpc.tags.render_tags() if tag['key'] == 'Name'].pop()\n    ngw_id = [tag['value'] for tag in nat_gateway.tags.render_tags() if tag['key'] == 'Name'].pop()\n    id = hashlib.md5(ngw_id.encode()).hexdigest()\n    route_table = aws_ec2.CfnRouteTable(scope, f'{vpc_id}\/RouteTable-{id}',\n        vpc_id=vpc.ref,\n        tags=[core.CfnTag(\n            key='Name',\n            value=f'{vpc_id}\/RouteTable-{id}',\n        )],\n    )\n    \n    aws_ec2.CfnRoute(scope, f'{vpc_id}\/Route-{id}',\n        route_table_id=route_table.ref,\n        destination_cidr_block='0.0.0.0\/0',\n        nat_gateway_id=nat_gateway.ref,\n    )\n    \n    return route_table\n\n\ndef create_public_route_table(scope: core.Construct, vpc: aws_ec2.CfnVPC, internet_gateway: aws_ec2.CfnInternetGateway) -> aws_ec2.CfnRouteTable:\n    vpc_id = [tag['value'] for tag in vpc.tags.render_tags() if tag['key'] == 'Name'].pop()\n    igw_id = [tag['value'] for tag in internet_gateway.tags.render_tags() if tag['key'] == 'Name'].pop()\n    id = hashlib.md5(igw_id.encode()).hexdigest()\n    route_table = aws_ec2.CfnRouteTable(scope, f'{vpc_id}\/RouteTable-{id}',\n        vpc_id=vpc.ref,\n        tags=[core.CfnTag(\n            key='Name',\n            value=f'{vpc_id}\/RouteTable-{id}',\n        )],\n    )\n    \n    aws_ec2.CfnRoute(scope, f'{id}\/Route-{id}',\n        route_table_id=route_table.ref,\n        destination_cidr_block='0.0.0.0\/0',\n        gateway_id=internet_gateway.ref,\n    )\n    \n    return route_table\n\n\ndef create_route_table_association(scope: core.Construct, vpc: aws_ec2.CfnVPC, subnet: aws_ec2.CfnSubnet, route_table: aws_ec2.CfnRouteTable) -> aws_ec2.CfnSubnetRouteTableAssociation:\n    vpc_id = [tag['value'] for tag in vpc.tags.render_tags() if tag['key'] == 'Name'].pop()\n    subnet_id = [tag['value'] for tag in subnet.tags.render_tags() if tag['key'] == 'Name'].pop()\n    id = hashlib.md5(subnet_id.encode()).hexdigest()\n    association = aws_ec2.CfnSubnetRouteTableAssociation(scope, f'{vpc_id}\/SubnetRouteTableAssociation-{id}',\n        route_table_id=route_table.ref,\n        subnet_id=subnet.ref,\n    )\n\n    return association\n<\/pre>\n
subnet.py\uff08\u30b5\u30d6\u30cd\u30c3\u30c8\uff09<\/p>\n
\nimport hashlib\nimport ipaddress\nimport uuid\nfrom aws_cdk import (\n    core,\n    aws_ec2,\n)\nfrom my_resources import (\n    availability_zone,\n    vpc,\n)\n\n\nclass SubnetGroup:\n    def __init__(self, scope: core.Construct, vpc: aws_ec2.CfnVPC, *,\n            desired_layers: int=2,\n            desired_azs: int=2,\n            region: str='ap-northeast-1',\n            private_enabled: bool=True,\n            cidr_mask: int=20) -> None:\n        self._cidr_mask = cidr_mask\n        self._desired_azs = desired_azs\n        self._desired_layers = desired_layers\n        self._private_enabled = private_enabled\n        self._region = region\n        self._reserved_azs = 5\n        self._reserved_layers = 3\n        self._scope = scope\n        self._vpc = vpc\n        \n        self._desired_subnet_points = []\n        for layer_number in range(self._desired_layers):\n            for az_number in range(self._desired_azs):\n                self._desired_subnet_points.append([layer_number, az_number])\n                \n        self._public_subnets = []\n        self._private_subnets = []\n        \n    @property\n    def cidr_mask(self) -> int:\n        return self._cidr_mask\n        \n    @property\n    def desired_azs(self) -> int:\n        return self._desired_azs\n        \n    @property\n    def desired_layers(self) -> int:\n        return self._desired_layers\n        \n    @property\n    def desired_subnet_points(self) -> list:\n        return self._desired_subnet_points\n        \n    @property\n    def private_enabled(self) -> bool:\n        return self._private_enabled\n        \n    @property\n    def private_subnets(self) -> list:\n        return self._private_subnets\n        \n    @property\n    def public_subnets(self) -> list:\n        return self._public_subnets\n        \n    @property\n    def region(self) -> str:\n        return self._region\n        \n    @property\n    def reserved_azs(self) -> int:\n        return self._reserved_azs\n        \n    @property\n    def reserved_layers(self) -> int:\n        return self._reserved_layers\n\n    @property\n    def scope(self) -> core.Construct:\n        return self._scope\n    \n    @property\n    def vpc(self) -> aws_ec2.CfnVPC:\n        return self._vpc\n\n    def create_subnets(self) -> None:\n        nw = ipaddress.ip_network(self.vpc.cidr_block)\n        cidrs = list(nw.subnets(new_prefix=self.cidr_mask))\n        cidrs.reverse()\n        az = availability_zone.AvailabilityZone()\n        vpc_id = [tag['value'] for tag in self.vpc.tags.render_tags() if tag['key'] == 'Name'].pop()\n        \n        for layer in range(self.reserved_layers):\n            for az_number in range(self.reserved_azs):\n                current = [layer, az_number]\n                cidr = str(cidrs.pop())\n                if current in self.desired_subnet_points:\n                    id = hashlib.md5(f'{layer}-{az_number}'.encode()).hexdigest()\n                    subnet = aws_ec2.CfnSubnet(self.scope, f'{vpc_id}\/Subnet-{id}',\n                        cidr_block=cidr,\n                        vpc_id=self.vpc.ref,\n                        availability_zone=az.name(az_number),\n                        tags=[\n                            core.CfnTag(\n                                key='Name',\n                                value=f'{vpc_id}\/Subnet-{id}',\n                            ),\n                            core.CfnTag(\n                                key='Layer',\n                                value=f'{layer}',\n                            ),\n                            core.CfnTag(\n                                key='AZNumber',\n                                value=f'{az_number}',\n                            ),\n                        ],\n                    )\n                    if self.private_enabled and layer > 0:\n                        self._private_subnets.append(subnet)\n                    else:\n                        self._public_subnets.append(subnet)\n<\/pre>\n
vpc.py\uff08VPC\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\uff09<\/p>\n
\nfrom aws_cdk import (\n    core,\n    aws_ec2,\n)\n\n\ndef create_vpc(scope: core.Construct, id: str, *,\n        cidr='10.0.0.0\/16',\n        enable_dns_hostnames=True,\n        enable_dns_support=True) -> aws_ec2.CfnVPC:\n    vpc = aws_ec2.CfnVPC(scope, id,\n        cidr_block=cidr,\n        enable_dns_hostnames=enable_dns_hostnames,\n        enable_dns_support=enable_dns_support,\n        tags=[core.CfnTag(\n            key='Name',\n            value=id,\n        )]\n    )\n\n    return vpc\n\n\ndef create_internet_gateway(scope: core.Construct, vpc: aws_ec2.CfnVPC) -> aws_ec2.CfnInternetGateway:\n    vpc_id = [tag['value'] for tag in vpc.tags.render_tags() if tag['key'] == 'Name'].pop()\n    \n    internet_gateway = aws_ec2.CfnInternetGateway(scope, f'{vpc_id}\/InternetGateway',\n        tags=[core.CfnTag(\n            key='Name',\n            value=f'{vpc_id}\/InternetGateway',\n        )]\n    )\n    \n    aws_ec2.CfnVPCGatewayAttachment(scope, f'{vpc_id}\/VPCGatewayAttachment',\n        vpc_id=vpc.ref,\n        internet_gateway_id=internet_gateway.ref,\n    )\n    \n    return internet_gateway\n<\/pre>\n
network_stack.py
\n\u3092\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u7de8\u96c6\u3057\u3066\u3001\u8ffd\u52a0\u3057\u305f\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u547c\u3073\u51fa\u3057\u307e\u3059\u3002<\/p>\n
\nfrom aws_cdk import core\nfrom my_resources import (\n    vpc,\n    subnet,\n    nat_gateway,\n    route,\n)\n\n\nclass MyNetworkStack(core.Stack):\n    def __init__(self, scope: core.Construct, id: str, **kwargs) -> None:\n        super().__init__(scope, id, **kwargs)\n\n        # The code that defines your stack goes here\n        vpc_id = 'MyVPC'\n        subnet_desired_layers = 2\n        subnet_desired_azs = 2\n        private_subnet_enabled=True\n        \n        v = vpc.create_vpc(self, vpc_id)\n        igw = vpc.create_internet_gateway(self, v)\n        subnet_group = subnet.SubnetGroup(self, v,\n            desired_layers=subnet_desired_layers,\n            desired_azs=subnet_desired_azs,\n            private_enabled=private_subnet_enabled)\n        subnet_group.create_subnets()\n        \n        if subnet_group.public_subnets:\n            public_route_table = route.create_public_route_table(self, v, igw)\n            for public_subnet in subnet_group.public_subnets:\n                route.create_route_table_association(self, v, public_subnet, public_route_table)\n        \n        if subnet_group.private_subnets:\n            private_route_tables = []\n            for public_subnet in subnet_group.public_subnets:\n                ngw = nat_gateway.create_nat_gateway(self, v, public_subnet)\n                private_route_table = route.create_privagte_route_table(self, v, ngw)\n                private_route_tables.append(private_route_table)\n                \n            for private_subnet in subnet_group.private_subnets:\n                az_number = [tag['value'] for tag in private_subnet.tags.render_tags() if tag['key'] == 'AZNumber'].pop()\n                route.create_route_table_association(self, v, private_subnet, private_route_tables[int(az_number)])\n<\/pre>\n
AWS CDK\u306e\u5b9f\u884c<\/h2>\n
\u6e96\u5099\u304c\u3067\u304d\u307e\u3057\u305f\u306e\u3067\u3001\u30a2\u30d7\u30ea\u306e\u30eb\u30fc\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\uff08my-network\uff09\u3067cdk\u3092\u5b9f\u884c\u3057\u3066\u307f\u307e\u3059\u3002
\n\u307e\u305a\u306f\u3001
\ncdk diff
\n\u3092\u5b9f\u884c\u3057\u3066\u4f5c\u6210\u30fb\u5909\u66f4\u3055\u308c\u308b\u30ea\u30bd\u30fc\u30b9\u306e\u5dee\u5206\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n
\ncdk diff\n<\/pre>\n
\nStack my-network\nConditions\n[+] Condition CDKMetadataAvailable: {\"Fn::Or\":[{\"Fn::Or\":[{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"ap-east-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"ap-northeast-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"ap-northeast-2\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"ap-south-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"ap-southeast-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"ap-southeast-2\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"ca-central-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"cn-north-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"cn-northwest-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"eu-central-1\"]}]},{\"Fn::Or\":[{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"eu-north-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"eu-west-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"eu-west-2\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"eu-west-3\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"me-south-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"sa-east-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"us-east-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"us-east-2\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"us-west-1\"]},{\"Fn::Equals\":[{\"Ref\":\"AWS::Region\"},\"us-west-2\"]}]}]}\n\nResources\n[+] AWS::EC2::VPC MyVPC MyVPC\n[+] AWS::EC2::InternetGateway MyVPC--InternetGateway MyVPCInternetGateway\n[+] AWS::EC2::VPCGatewayAttachment MyVPC--VPCGatewayAttachment MyVPCVPCGatewayAttachment\n[+] AWS::EC2::Subnet MyVPC--Subnet-c7763203e20a64b270352752d6a1e7c6 MyVPCSubnetc7763203e20a64b270352752d6a1e7c6\n[+] AWS::EC2::Subnet MyVPC--Subnet-c2eb282156233b5d827219971c8b04c2 MyVPCSubnetc2eb282156233b5d827219971c8b04c2\n[+] AWS::EC2::Subnet MyVPC--Subnet-eca26941bc5187d1e2983961edb6dbb6 MyVPCSubneteca26941bc5187d1e2983961edb6dbb6\n[+] AWS::EC2::Subnet MyVPC--Subnet-ea66c06c1e1c05fa9f1aa39d98dc5bc1 MyVPCSubnetea66c06c1e1c05fa9f1aa39d98dc5bc1\n[+] AWS::EC2::RouteTable MyVPC--RouteTable-e7636240538bdd71bd55872aed605e26 MyVPCRouteTablee7636240538bdd71bd55872aed605e26\n[+] AWS::EC2::Route e7636240538bdd71bd55872aed605e26--Route-e7636240538bdd71bd55872aed605e26 e7636240538bdd71bd55872aed605e26Routee7636240538bdd71bd55872aed605e26\n[+] AWS::EC2::SubnetRouteTableAssociation MyVPC--SubnetRouteTableAssociation-8a80275c4aeaac9a8e6f6f36e18f5f5b MyVPCSubnetRouteTableAssociation8a80275c4aeaac9a8e6f6f36e18f5f5b\n[+] AWS::EC2::SubnetRouteTableAssociation MyVPC--SubnetRouteTableAssociation-7c555b7a2a9e217d5de327ca36a79a54 MyVPCSubnetRouteTableAssociation7c555b7a2a9e217d5de327ca36a79a54\n[+] AWS::EC2::EIP MyVPC--EIP-8a80275c4aeaac9a8e6f6f36e18f5f5b MyVPCEIP8a80275c4aeaac9a8e6f6f36e18f5f5b\n[+] AWS::EC2::NatGateway MyVPC--NatGateway-8a80275c4aeaac9a8e6f6f36e18f5f5b MyVPCNatGateway8a80275c4aeaac9a8e6f6f36e18f5f5b\n[+] AWS::EC2::RouteTable MyVPC--RouteTable-f178a135091a35c9541fbf72fb1c8dc1 MyVPCRouteTablef178a135091a35c9541fbf72fb1c8dc1\n[+] AWS::EC2::Route MyVPC--Route-f178a135091a35c9541fbf72fb1c8dc1 MyVPCRoutef178a135091a35c9541fbf72fb1c8dc1\n[+] AWS::EC2::EIP MyVPC--EIP-7c555b7a2a9e217d5de327ca36a79a54 MyVPCEIP7c555b7a2a9e217d5de327ca36a79a54\n[+] AWS::EC2::NatGateway MyVPC--NatGateway-7c555b7a2a9e217d5de327ca36a79a54 MyVPCNatGateway7c555b7a2a9e217d5de327ca36a79a54\n[+] AWS::EC2::RouteTable MyVPC--RouteTable-765dc824da4c4f28ce886a61c6b54742 MyVPCRouteTable765dc824da4c4f28ce886a61c6b54742\n[+] AWS::EC2::Route MyVPC--Route-765dc824da4c4f28ce886a61c6b54742 MyVPCRoute765dc824da4c4f28ce886a61c6b54742\n[+] AWS::EC2::SubnetRouteTableAssociation MyVPC--SubnetRouteTableAssociation-ad32a7208c1d822e4f35b34060485714 MyVPCSubnetRouteTableAssociationad32a7208c1d822e4f35b34060485714\n[+] AWS::EC2::SubnetRouteTableAssociation MyVPC--SubnetRouteTableAssociation-c73221f09ade1614a962f2c9c60cd682 MyVPCSubnetRouteTableAssociationc73221f09ade1614a962f2c9c60cd682\n<\/pre>\n
\u5b9a\u7fa9\u3057\u305f\u30ea\u30bd\u30fc\u30b9\u304c\u8ffd\u52a0\u306e\u5bfe\u8c61\u3068\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3067\u304d\u307e\u3057\u305f\u306e\u3067\u3001
\ncdk deploy
\n\u3092\u5b9f\u884c\u3057\u3066\u5b9f\u969b\u306b\u30ea\u30bd\u30fc\u30b9\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n
\ncdk deploy\n<\/pre>\n
\nmy-network: deploying...\nmy-network: creating CloudFormation changeset...\n...\n \u2705  my-network\n<\/pre>\n
cdk deploy
\n\u306e\u5b9f\u884c\u5b8c\u4e86\u5f8c\u3001AWS\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b3\u30f3\u30bd\u30fc\u30eb\u3067CloudFormation\u30b9\u30bf\u30c3\u30af\u3092\u898b\u308b\u3068\u3001my-network\u30b9\u30bf\u30c3\u30af\u3067\u30ea\u30bd\u30fc\u30b9\u304c\u4f5c\u6210\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3067\u304d\u307e\u3057\u305f\u3002<\/p>\n
\"\"<\/a><\/p>\n
\u6700\u5f8c\u306b<\/h2>\n
\u4eca\u56de\u306fAWS CDK\u306e\u4f4e\u30ec\u30d9\u30ebAPI\u3092\u8a66\u3057\u3066\u307f\u307e\u3057\u305f\u304c\u3001\u30d7\u30ed\u30b0\u30e9\u30df\u30f3\u30b0\u8a00\u8a9e\u306e\u30eb\u30fc\u30d7\u69cb\u9020\u3092\u5229\u7528\u3057\u3066\u540c\u3058\u30ea\u30bd\u30fc\u30b9\u3092\u8907\u6570\u4f5c\u6210\u3067\u304d\u308b\u3053\u3068\u3060\u3051\u3067\u3082\u3001YAML\u3067\u76f4\u63a5\u8a18\u8ff0\u3059\u308b\u306e\u3068\u6bd4\u3079\u3066\u30b3\u30fc\u30c9\u91cf\u3092\u5927\u5e45\u306b\u6e1b\u3089\u3059\u3053\u3068\u304c\u3067\u304d\u3001\u975e\u5e38\u306b\u9b45\u529b\u7684\u306a\u3082\u306e\u3060\u3068\u611f\u3058\u307e\u3057\u305f\u3002
\nCloudFormation\u3067\u30ea\u30bd\u30fc\u30b9\u3092\u4f5c\u6210\u3057\u305f\u3053\u3068\u304c\u3042\u308c\u3070API\u306f\u76f4\u611f\u7684\u306b\u5229\u7528\u3067\u304d\u308b\u3082\u306e\u3068\u306a\u3063\u3066\u304a\u308a\u3001\u5c0e\u5165\u307e\u3067\u306e\u6577\u5c45\u306f\u6bd4\u8f03\u7684\u4f4e\u3044\u306e\u3067\u306f\u306a\u3044\u304b\u3068\u601d\u3044\u307e\u3059\u3002
\n\u4eca\u5f8c\u306f\u672c\u756a\u74b0\u5883\u3067\u306e\u5229\u7528\u3082\u60f3\u5b9a\u3057\u3066\u4f7f\u3063\u3066\u3044\u304d\u305f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u3053\u308c\u306f \ud83d\ude3aTECHSCORE Advent Calendar 2019\ud83d\ude3a\u306e18\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002<\/p>\n
\u4eca\u307e\u3067CloudFormation\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3092\u76f4\u63a5YAML\u3067\u66f8\u3044\u3066\u3044\u307e\u3057\u305f\u304c\u3001\u4f5c\u6210\u3059\u308b\u30ea\u30bd\u30fc\u30b9\u6570\u304c\u591a\u304f\u306a\u308b\u306b\u3064\u308c\u3066\u8a18\u8ff0\u91cf\u306e\u591a\u3055\u306b\u8f9b\u3055\u3092\u611f\u3058\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u304d\u307e\u3057\u305f\u3002
\u7d9a\u304d\u3092\u8aad\u3080...<\/a><\/p>\n","protected":false},"author":42,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[332,344,18],"tags":[141,119,120],"_links":{"self":[{"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/posts\/24643"}],"collection":[{"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/users\/42"}],"replies":[{"embeddable":true,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/comments?post=24643"}],"version-history":[{"count":82,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/posts\/24643\/revisions"}],"predecessor-version":[{"id":25422,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/posts\/24643\/revisions\/25422"}],"wp:attachment":[{"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/media?parent=24643"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/categories?post=24643"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/tags?post=24643"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}