diff --git a/new.yaml b/new.yaml new file mode 100644 index 00000000..c2846b41 --- /dev/null +++ b/new.yaml @@ -0,0 +1,41 @@ +AWSTemplateFormatVersion: '2010-09-09' +Description: AWS CloudFormation Template to deploy insecure infrastructure +Parameters: + CompanyName: + Description: Company Name + Type: String + Default: acme + Environment: + Description: Environment + Type: String + Default: dev + DBName: + Description: Name of the Database + Type: String + Default: db1 + Password: + Description: Database Password + Type: String + NoEcho: True + MinLength: 1 + MaxLength: 41 + AllowedPattern: ^[a-zA-Z0-9]*$ + LatestAmiId: + Type: AWS::SSM::Parameter::Value + Default: /aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2 + +Resources: + DataScienceBucket: + # not encrypted + Type: AWS::S3::Bucket + DeletionPolicy: Delete + Properties: + BucketName: !Sub "${AWS::AccountId}-${CompanyName}-${Environment}-data-science" + AccessControl: PublicRead + Tags: + - Key: Name + Value: !Sub "${AWS::AccountId}-${CompanyName}-${Environment}-data-science" + BucketEncryption: + ServerSideEncryptionConfiguration: + - ServerSideEncryptionByDefault: + SSEAlgorithm: AES256