amazon-web-servicesaws-cloudformationaws-cloudformation-custom-resourceaws-nat-gateway
How to Attach Elastic IP to NatGateway via Cloud Formation
I am trying to learn Aws cloud Formation , where I am trying to create VPC as shown in picture. it contains three public subnets, private subnets , natgateway and Internetgateway with public and private Route table.I am trying to achieve it through cloud formation but getting Exception for Elastic IP.
I have created template but When I try to create stack on cloud formation I am getting error
"The elastic-ip ID 'xx.xxx.xx.xxx' is malformed (Service: AmazonEC2; Status Code: 400; Error Code: InvalidElasticIpID.Malformed; Request ID: 2e3a9f8c-5a7e-482e-869c-8a0e46a08f27; Proxy: null)"
. I am trying to attach Elastic IP to NatGateway and getting above error. Please Guide me how can I do this.
{
{
"AWSTemplateFormatVersion": "2010-09-09",
"Resources": {
"ExampleEc2Instance": {
"Type": "AWS::EC2::Instance",
"Properties": {
"InstanceType": "t2.micro",
"ImageId" : "ami-047a51fa27710816e",
"AvailabilityZone" : "us-east-1a",
"SecurityGroupIds" : [{
"Ref":"ExampleSecurityGroup"
}],
"SubnetId" : {
"Ref":"public2A"
}
}
},"ExampleEc2InstancePrivate": {
"Type": "AWS::EC2::Instance",
"Properties": {
"InstanceType": "t2.micro",
"ImageId" : "ami-047a51fa27710816e",
"AvailabilityZone" : "us-east-1a",
"SecurityGroupIds" : [{
"Ref":"ExampleSecurityGroup"
}],
"SubnetId" : {
"Ref":"private2A"
}
}
},
"public2A":{
"Type" : "AWS::EC2::Subnet",
"Properties":{
"AvailabilityZone" : "us-east-1a",
"CidrBlock" : "10.0.2.0/24",
"Tags" : [{"Key" : "public2A", "Value" : "public2A"}],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},"public2B":{
"Type" : "AWS::EC2::Subnet",
"Properties":{
"AvailabilityZone" : "us-east-1a",
"CidrBlock" : "10.0.3.0/24",
"Tags" : [{"Key" : "public2B", "Value" : "public2B"}],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},
"public2C":{
"Type" : "AWS::EC2::Subnet",
"Properties":{
"AvailabilityZone" : "us-east-1a",
"CidrBlock" : "10.0.1.0/24",
"Tags" : [{"Key" : "public2C", "Value" : "public2C"}],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},"private2A":{
"Type" : "AWS::EC2::Subnet",
"Properties":{
"AvailabilityZone" : "us-east-1a",
"CidrBlock" : "10.0.5.0/24",
"Tags" : [{"Key" : "private2A", "Value" : "private2A"}],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},"private2B":{
"Type" : "AWS::EC2::Subnet",
"Properties":{
"AvailabilityZone" : "us-east-1a",
"CidrBlock" : "10.0.6.0/24",
"Tags" : [{"Key" : "private2B", "Value" : "private2B"}],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},
"private2C":{
"Type" : "AWS::EC2::Subnet",
"Properties":{
"AvailabilityZone" : "us-east-1a",
"CidrBlock" : "10.0.7.0/24",
"Tags" : [{"Key" : "private2C", "Value" : "private2C"}],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},
"privateRT":{
"Type" : "AWS::EC2::RouteTable",
"Properties" : {
"Tags" : [{"Key" : "privateRT", "Value" : "privateRT"}],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},
"publicRT":{
"Type" : "AWS::EC2::RouteTable",
"Properties" : {
"Tags" : [{"Key" : "publicRT", "Value" : "publicRT"}],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},
"public2ARouteTableAssociation" : {
"Type" : "AWS::EC2::SubnetRouteTableAssociation",
"Properties" : {
"SubnetId" : { "Ref" : "public2A" },
"RouteTableId" : { "Ref" : "publicRT" }
}
},
"public2BRouteTableAssociation" : {
"Type" : "AWS::EC2::SubnetRouteTableAssociation",
"Properties" : {
"SubnetId" : { "Ref" : "public2B" },
"RouteTableId" : { "Ref" : "publicRT" }
}
},
"public2CRouteTableAssociation" : {
"Type" : "AWS::EC2::SubnetRouteTableAssociation",
"Properties" : {
"SubnetId" : { "Ref" : "public2C" },
"RouteTableId" : { "Ref" : "publicRT" }
}
},
"private2ARouteTableAssociation" : {
"Type" : "AWS::EC2::SubnetRouteTableAssociation",
"Properties" : {
"SubnetId" : { "Ref" : "private2A" },
"RouteTableId" : { "Ref" : "privateRT" }
}
},
"private2BRouteTableAssociation" : {
"Type" : "AWS::EC2::SubnetRouteTableAssociation",
"Properties" : {
"SubnetId" : { "Ref" : "private2B" },
"RouteTableId" : { "Ref" : "privateRT" }
}
},
"private2CRouteTableAssociation" : {
"Type" : "AWS::EC2::SubnetRouteTableAssociation",
"Properties" : {
"SubnetId" : { "Ref" : "private2C" },
"RouteTableId" : { "Ref" : "privateRT" }
}
},
"myVpcInternetGateWay":{
"Type" : "AWS::EC2::InternetGateway",
"Properties" : {
"Tags" : [{"Key" : "myVpcInternetGateWay", "Value" : "myVpcInternetGateWay"}]
}
},
"myVpcInternetGateWayRoute":{
"Type" : "AWS::EC2::Route",
"Properties" : {
"DestinationCidrBlock" : "0.0.0.0/0",
"GatewayId" : {"Ref":"myVpcInternetGateWay"},
"RouteTableId" : {"Ref":"publicRT"}
}
},
"myVpcInternetGateWayAttachement":{
"Type" : "AWS::EC2::VPCGatewayAttachment",
"Properties" : {
"InternetGatewayId" : {"Ref":"myVpcInternetGateWay"},
"VpcId" : {"Ref":"ExampleVpcId"}
}
},
"myNatGateWay":{
"Type" : "AWS::EC2::NatGateway",
"Properties" : {
"AllocationId" : {"Ref":"myElasticIP"},
"SubnetId" :{"Ref":"public2A"},
"Tags" : [{"Key" : "myNatGateWay", "Value" : "myNatGateWay"}]
}
},"myVpcNatGatWayRoute":{
"Type" : "AWS::EC2::Route",
"Properties" : {
"DestinationCidrBlock" : "0.0.0.0/0",
"GatewayId" : {"Ref":"myNatGateWay"},
"RouteTableId" : {"Ref":"privateRT"}
}
},
"myElasticIP":{
"Type" : "AWS::EC2::EIP",
"Properties" : {
"Domain" : "VPC",
"Tags" : [{"Key" : "myElasticIP", "Value" : "myElasticIP"}]
}
},
"ExampleSecurityGroup":{
"Type":"AWS::EC2::SecurityGroup",
"Properties" : {
"GroupDescription" : "Allow http to client host",
"GroupName" : "templateSecuritygrp",
"Tags" : [ {"Key" : "securityGroup", "Value" : "cloudformationSecurityGroup"} ],
"VpcId" : {
"Ref":"ExampleVpcId"
}
}
},
"ExampleSecurityGroupEgress" : {
"Type":"AWS::EC2::SecurityGroupEgress",
"Properties":{
"IpProtocol":"-1",
"FromPort":"-1",
"ToPort":"-1",
"DestinationSecurityGroupId":{
"Ref":"ExampleSecurityGroup"
},
"GroupId":{
"Ref":"ExampleSecurityGroup"
}
}
},
"ExampleSecurityGroupIngress" :{
"Type":"AWS::EC2::SecurityGroupIngress",
"Properties":{
"IpProtocol":"-1",
"FromPort":"-1",
"ToPort":"-1",
"SourceSecurityGroupId":{
"Ref":"ExampleSecurityGroup"
},
"GroupId":{
"Ref":"ExampleSecurityGroup"
}
}
},
"ExampleVpcId":{
"Type":"AWS::EC2::VPC",
"Properties" : {
"CidrBlock" : "10.0.0.0/16",
"EnableDnsSupport" : "false",
"EnableDnsHostnames" : "false",
"InstanceTenancy" : "default",
"Tags" : [ {"Key" : "tmpltVPC", "Value" : "firstVpc"}]
}
}
}
}
}
Solution
In your myNatGateWay you should use GetAtt to get AllocationId:
"myNatGateWay":{
"Type" : "AWS::EC2::NatGateway",
"Properties" : {
"AllocationId" : { "Fn::GetAtt" : ["myElasticIP", "AllocationId"]},
"SubnetId" :{"Ref":"public2A"},
"Tags" : [{"Key" : "myNatGateWay", "Value" : "myNatGateWay"}]
}
}
Also you need DependsOn in EIP:
"myElasticIP":{
"Type" : "AWS::EC2::EIP",
"DependsOn":["myVpcInternetGateWayAttachement"] ,
"Properties" : {
"Domain" : "VPC",
"Tags" : [{"Key" : "myElasticIP", "Value" : "myElasticIP"}]
}
}
Finally myVpcNatGatWayRoute should be:
"myVpcNatGatWayRoute":{
"Type" : "AWS::EC2::Route",
"Properties" : {
"DestinationCidrBlock" : "0.0.0.0/0",
"NatGatewayId" : {"Ref":"myNatGateWay"},
"RouteTableId" : {"Ref":"privateRT"}
}
}
- How to use MFA with AWS CLI?
- How do I get the URL for the item using the Amazon API
- How to make links work with exported sites when hosted on AWS Cloudfront?
- Error launching CloudFormation Template for CloudHSM
- Glacier as Resource in CloudFormation template?
- how to secure keys for API calls from android device to amazon services
- Why is this IAM policy denying access with an MFA session?
- AWS Lambda Function Trigger API Gateway Issue
- GetMyFeesEstimate API Amazon vba
- AWS Cloudformation !Ref SecurityGroup returns an invalid ID
- How to set up AWS Client VPN with Keycloak as IdP
- How to view/identify which process taking how much memory?
- using bottlenose in python to extract product price from Amazon in different locale
- Unable to delete cfn stack, role is invalid or cannot be assumed
- How to Set Up Account Linking for a Skill using Alexa API from Amazon?
- GitHub actions "aws: not found" error on ubuntu-latest with Godot CI
- Download file from S3 to Rails 4 app
- Cloudfront (CDN) with Internal Application Load Balancer
- Connecting private load balancer to cloud front distribution?
- Request to Amazon API with delphi : Got HTTP/1.1 403 Forbidden
- Amazon QuickSight Connects Over Internet Instead of VPC to Public Redshift Cluster
- Shift Lambda infrastructure to ECS
- IAM policy to allow EC2 instance API access only to modify itself
- How to match these 2 tables?
- What is the best way of getting files from AWS S3, inserting them into zip and uploading that zip to the bucket?
- What does this mean? An error occurred (SignatureDoesNotMatch) when calling the GetCallerIdentity operation: Signature expired
- AWS ElastiCache in cluster mode has no Primary / Reader endpoints
- How to query: filtering on multiple primary partition keys and range on primary sort key
- How can I get boto3 script to run as a Lambda function?
- Testing AWS CDK Applications Locally