| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110 |
- AWSTemplateFormatVersion: 2010-09-09
- Description: >-
- Cisco Systems - Creates hostedzone, Mgmt route table, and SG. (qs-1qp7e9tna)
- Metadata:
- ParameterLabels:
- VPCID:
- default: VPC ID
- DnsName:
- default: Dns name
- SSHLockDownCIDR:
- default: SSH Lockdown CIDR
- Parameters:
- DnsName:
- Type: String
- Description: DNS name of PublicHostedZone
- VPCID:
- Type: AWS::EC2::VPC::Id
- Description: Select VPC which ASAv will be deployed in
- SSHLockDownCIDR:
- AllowedPattern: >-
- ^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/([0-9]|1[6-9]|2[0-8]))$
- ConstraintDescription: CIDR block parameter must be in the form x.x.x.x/0-28
- Description: CIDR block for locking down the SSH access on the outside interface
- Type: String
-
- Resources:
- PublicHostedZone:
- Type: "AWS::Route53::HostedZone"
- Properties:
- HostedZoneConfig:
- Comment: 'Hosted zone'
- Name: !Ref DnsName
- HostedZoneTags:
- -
- Key: 'Name'
- Value: 'ASAvHostedZone'
- MgmtRouteTable:
- Type: AWS::EC2::RouteTable
- Properties:
- VpcId: !Ref VPCID
- Tags:
- - Key: Name
- Value: MGMT subnet Route Table
- ASAvInstanceSGMGMT:
- Type: AWS::EC2::SecurityGroup
- Properties:
- GroupDescription: Security Group for ASAv Instances
- VpcId: !Ref VPCID
- Tags:
- - Key: Name
- Value: "ASAvSecurityGroup"
- SecurityGroupIngress:
- - IpProtocol: "TCP"
- FromPort: 443
- ToPort: 443
- CidrIp: 0.0.0.0/0
- - IpProtocol: "TCP"
- FromPort: 22
- ToPort: 22
- CidrIp: 0.0.0.0/0
- - IpProtocol: "TCP"
- FromPort: 80
- ToPort: 80
- CidrIp: 0.0.0.0/0
- ASAvInstanceSGINSIDE:
- Type: AWS::EC2::SecurityGroup
- Properties:
- GroupDescription: Security Group for ASAv Instances
- VpcId: !Ref VPCID
- Tags:
- - Key: Name
- Value: "ASAvSecurityGroup"
- SecurityGroupIngress:
- - IpProtocol: "-1"
- FromPort: 0
- ToPort: 65535
- CidrIp: 0.0.0.0/0
- ASAvInstanceSGOUTSIDE:
- Type: AWS::EC2::SecurityGroup
- Properties:
- GroupDescription: Security Group for ASAv Instances
- VpcId: !Ref VPCID
- Tags:
- - Key: Name
- Value: "ASAvSecurityGroup"
- SecurityGroupIngress:
- - IpProtocol: "TCP"
- FromPort: 443
- ToPort: 443
- CidrIp: 0.0.0.0/0
- - IpProtocol: "UDP"
- FromPort: 443
- ToPort: 443
- CidrIp: 0.0.0.0/0
- - IpProtocol: "TCP"
- FromPort: 22
- ToPort: 22
- CidrIp: !Ref SSHLockDownCIDR
- Outputs:
- PublicHostedZone:
- Value: !Ref 'PublicHostedZone'
- MgmtRouteTable:
- Value: !Ref 'MgmtRouteTable'
- ASAvInstanceSGMGMT:
- Value: !Ref 'ASAvInstanceSGMGMT'
- ASAvInstanceSGOUTSIDE:
- Value: !Ref 'ASAvInstanceSGOUTSIDE'
- ASAvInstanceSGINSIDE:
- Value: !Ref 'ASAvInstanceSGINSIDE'
|
