e846b3201f
* Modify Go codegen for fn.Output overloads * Fix go tests * Fixed CHANGELOG conflict * ACCEPT changes reverting Fargate example to master, file issue * Link an issue
64 lines
1.7 KiB
Go
64 lines
1.7 KiB
Go
package main
|
|
|
|
import (
|
|
"github.com/pulumi/pulumi-aws/sdk/v4/go/aws/ec2"
|
|
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
|
|
)
|
|
|
|
func main() {
|
|
pulumi.Run(func(ctx *pulumi.Context) error {
|
|
aws_vpc, err := ec2.NewVpc(ctx, "aws_vpc", &ec2.VpcArgs{
|
|
CidrBlock: pulumi.String("10.0.0.0/16"),
|
|
InstanceTenancy: pulumi.String("default"),
|
|
})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
privateS3VpcEndpoint, err := ec2.NewVpcEndpoint(ctx, "privateS3VpcEndpoint", &ec2.VpcEndpointArgs{
|
|
VpcId: aws_vpc.ID(),
|
|
ServiceName: pulumi.String("com.amazonaws.us-west-2.s3"),
|
|
})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
privateS3PrefixList := ec2.GetPrefixListOutput(ctx, ec2.GetPrefixListOutputArgs{
|
|
PrefixListId: privateS3VpcEndpoint.PrefixListId,
|
|
}, nil)
|
|
bar, err := ec2.NewNetworkAcl(ctx, "bar", &ec2.NetworkAclArgs{
|
|
VpcId: aws_vpc.ID(),
|
|
})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
_, err = ec2.NewNetworkAclRule(ctx, "privateS3NetworkAclRule", &ec2.NetworkAclRuleArgs{
|
|
NetworkAclId: bar.ID(),
|
|
RuleNumber: pulumi.Int(200),
|
|
Egress: pulumi.Bool(false),
|
|
Protocol: pulumi.String("tcp"),
|
|
RuleAction: pulumi.String("allow"),
|
|
CidrBlock: privateS3PrefixList.ApplyT(func(privateS3PrefixList ec2.GetPrefixListResult) (string, error) {
|
|
return privateS3PrefixList.CidrBlocks[0], nil
|
|
}).(pulumi.StringOutput),
|
|
FromPort: pulumi.Int(443),
|
|
ToPort: pulumi.Int(443),
|
|
})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
_ = ec2.GetAmiIdsOutput(ctx, ec2.GetAmiIdsOutputArgs{
|
|
Owners: pulumi.StringArray{
|
|
bar.ID(),
|
|
},
|
|
Filters: ec2.GetAmiIdsFilterArray{
|
|
&ec2.GetAmiIdsFilterArgs{
|
|
Name: bar.ID(),
|
|
Values: pulumi.StringArray{
|
|
pulumi.String("pulumi*"),
|
|
},
|
|
},
|
|
},
|
|
}, nil)
|
|
return nil
|
|
})
|
|
}
|