Amazon EC2 DynamoDB and Dockerized App

Description: 
  This is a template that launches an EC2 instance and deploys a dockerized angular app 
  to a public EC2 instance. The EC2 instance is configured using files from 
  github repository here - https://github.com/linuxacademy/Content-AWS-Certified-Data-Analytics---Speciality 
  This template also sets up a DynamoDB table and populates it with some data.
Parameters:
  LatestAmiId:
    Type: 'AWS::SSM::Parameter::Value<AWS::EC2::Image::Id>'
    Default: '/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64'
Resources:
  AccessKey:
    Type: AWS::IAM::AccessKey
    Properties:
      UserName: cloud_user
  LambdaRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Principal:
            Service:
            - lambda.amazonaws.com
          Action:
          - sts:AssumeRole
      Path: "/"
      Policies:
        - PolicyName: EC2AccessRole
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
            - Effect: Allow
              Action:
              - ec2:*
              Resource: "*"
            - Effect: Allow
              Action:
              - logs:*
              Resource: "*"

  InitFunction:
    Type: AWS::Lambda::Function
    Properties:
      Code:
        ZipFile: |
          import json
          import boto3
          import threading
          import urllib3
          SUCCESS = "SUCCESS"
          FAILED = "FAILED"
          http = urllib3.PoolManager()
          def send(event, context, responseStatus, responseData, physicalResourceId=None, noEcho=False, reason=None):
              responseUrl = event['ResponseURL']
              print(responseUrl)
              responseBody = {}
              responseBody['Status'] = responseStatus
              responseBody['Reason'] = reason or "See the details in CloudWatch Log Stream: {}".format(context.log_stream_name)
              responseBody['PhysicalResourceId'] = physicalResourceId or context.log_stream_name
              responseBody['StackId'] = event['StackId']
              responseBody['RequestId'] = event['RequestId']
              responseBody['LogicalResourceId'] = event['LogicalResourceId']
              responseBody['NoEcho'] = noEcho
              responseBody['Data'] = responseData
              json_responseBody = json.dumps(responseBody)
              print("Response body:\n" + json_responseBody)
              headers = {
                  'content-type' : '',
                  'content-length' : str(len(json_responseBody))
              }
              try:
                  response = http.request('PUT',responseUrl,headers=headers,body=json_responseBody)
                  print("Status code: {}".format(str(response.status)))
              except Exception as e:
                  print("send(..) failed executing requests.put(..): " + str(e))
          def createDefault():
              print("Creating default VPC")
              ec2 = boto3.client('ec2')
              response = ec2.create_default_vpc()
              return response
          def deleteDefault():
              return ""
          def timeout(event, context):
              print('Timing out, sending failure response to CFN')
              send(event, context, FAILED, {}, None)
          def lambda_handler(event, context):
              print(f'Received event: {json.dumps(event)}')
              timer = threading.Timer((context.get_remaining_time_in_millis() / 1000.00) - 0.5, timeout, args=[event, context])
              timer.start()
              status = SUCCESS
              responseData = {}
              try:
                  if event['RequestType'] == 'Delete':
                      deleteDefault()
                  else:
                      response = createDefault()
                      print(response)
                      responseData['Data'] = response
              except Exception as e:
                  print(e)
                  status = FAILED
              finally:
                  timer.cancel()
                  send(event, context, status, responseData, None)
      Handler: index.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 60

  InitializeVPC:
    Type: Custom::InitFunction
    Properties:
      ServiceToken: !GetAtt InitFunction.Arn
  
  LnDynamoDBUserTable:
    Type: AWS::DynamoDB::Table
    Properties:
      AttributeDefinitions:
        - AttributeName: user_id
          AttributeType: S
      KeySchema:
        - AttributeName: user_id
          KeyType: HASH
      TableName: users-information
      BillingMode: PAY_PER_REQUEST
  LnLambdaExecutionAndDynamoRole:
    Type: AWS::IAM::Role
    DependsOn:
      - LnDynamoDBUserTable
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Principal:
            Service:
            - lambda.amazonaws.com
          Action:
          - sts:AssumeRole
      Path: "/"
      Policies:
      - PolicyName: root
        PolicyDocument:
          Version: '2012-10-17'
          Statement:
          - Effect: Allow
            Action:
            - logs:*
            Resource: arn:aws:logs:*:*:*
          - Effect: Allow
            Action:
            - dynamodb:PutItem
            Resource: !GetAtt LnDynamoDBUserTable.Arn
  LnPopulateDynamoDBTable:
    Type: AWS::Lambda::Function
    DependsOn:
      - LnDynamoDBUserTable
      - LnLambdaExecutionAndDynamoRole
    Properties:
      Code:
        S3Bucket: 'das-c01-data-analytics-specialty'
        S3Key: 'Lab_Joining_Enriching_Transforming_Streaming_Data_Amazon_Kinesis/create-users-dynamodb-lambda.zip'
      Handler: index.handler
      Runtime: nodejs18.x
      Role: !GetAtt LnLambdaExecutionAndDynamoRole.Arn
      Timeout: 60
  LnPopulateDynamoDBTableInit:
    Type: Custom::LnPopulateDynamoDBTable
    Properties:
      ServiceToken: !GetAtt LnPopulateDynamoDBTable.Arn

  LnSecurityGroupWebserver:
    Type: AWS::EC2::SecurityGroup
    DependsOn:
      - InitializeVPC
    Properties:
      GroupDescription: !Sub 'Security Group created with CF template for web servers.'
      SecurityGroupIngress:
      - IpProtocol: tcp
        FromPort: 80
        ToPort: 80
        CidrIp: 0.0.0.0/0
      Tags:
        - Key: Name
          Value: !Sub '${AWS::StackName}-kinesis-helper-webserver-sg'
        - Key: Description
          Value: !Sub 'Security Group created for kinesis web server with ${AWS::StackName}.'

  LnCreateKinesisHelperServer:
    Type: AWS::EC2::Instance
    DependsOn:
      - LnSecurityGroupWebserver
    Properties:
      InstanceType: 't3a.medium'
      ImageId: !Ref LatestAmiId
      Tags:
        - Key: Name
          Value: !Join [ '-', [!Sub '${AWS::StackName}', 'kinesis-helper-server'] ]
      SecurityGroupIds:
        - !Ref LnSecurityGroupWebserver
      UserData:
        Fn::Base64:
          !Join [ "", [
            "#!/bin/bash -xe\n",
            "yum update -y\n",
            "/bin/echo '%password%' | /bin/passwd cloud_user --stdin\n",
            "/opt/aws/bin/cfn-init -v ", #use cfn-init to install packages in cloudformation init
            !Sub "--stack ${AWS::StackName} ",
            "--resource LnCreateKinesisHelperServer ",
            "--configsets InstallAndConfigure ",
            !Sub "--region ${AWS::Region}\n",
            !Sub "/opt/aws/bin/cfn-signal -e $? ",
            !Sub "--stack ${AWS::StackName} ",
            "--resource LnCreateKinesisHelperServer ",
            !Sub "--region ${AWS::Region}",
            "\n"] ]
    Metadata:
      AWS::CloudFormation::Init:
        configSets: 
          InstallAndConfigure:
            - "install_docker"
            - "start_docker"
            - "install_git"
            - "get_angular_app"
            - "build_docker_image"
            - "docker_run_app"
        install_docker:
          commands:
            test:
              command: amazon-linux-extras install docker
              cwd: /home/ec2-user
        start_docker:
          commands:
            test:
              command: service docker start && usermod -a -G docker ec2-user
              cwd: /home/ec2-user
        install_git:
          commands:
            test:
              command: yum install git -y
              cwd: /home/ec2-user
        get_angular_app:
          commands:
            test:
              command: git clone https://github.com/ACloudGuru-Resources/Content-AWS-Certified-Data-Analytics---Speciality.git
              cwd: /home/ec2-user
        build_docker_image: 
          commands: 
            test: 
              command: docker image build -t ubuntu-angular .
              cwd: /home/ec2-user/Content-AWS-Certified-Data-Analytics---Speciality/Lab_Joining_Enriching_Transforming_Streaming_Data_Amazon_Kinesis/dockerized-angular-app
        docker_run_app: 
          commands: 
            test: 
              command: docker run -d -p 80:80 ubuntu-angular
              cwd: /home/ec2-user/Content-AWS-Certified-Data-Analytics---Speciality/Lab_Joining_Enriching_Transforming_Streaming_Data_Amazon_Kinesis/dockerized-angular-app
    CreationPolicy:
      ResourceSignal:
        Count: 1
        Timeout: PT60M
Outputs:
  pubIpAddress1:
    Description: cloud_user Access Key
    Value: !Ref AccessKey
  pubIpAddress2:
    Description: cloud_user Secret Access Key
    Value: !GetAtt AccessKey.SecretAccessKey
  pubIpAddress3:
    Description: Public IP address of Kinesis Helper Server
    Value: !GetAtt LnCreateKinesisHelperServer.PublicIp