data "aws_ssm_parameter" "latest_ami_vpc2" {
name = "/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64"
}
resource "aws_instance" "vpc2-bastion-2" {
ami = data.aws_ssm_parameter.latest_ami_vpc2.value
subnet_id = aws_subnet.private_a-2.id
instance_type = "t3.small"
key_name = aws_key_pair.keypair.key_name
vpc_security_group_ids = [aws_security_group.vpc2.id]
associate_public_ip_address = false
iam_instance_profile = aws_iam_instance_profile.ssm-bastion.name
user_data = <<-EOF
#!/bin/bash
echo 'Skill53##' | passwd --stdin ec2-user
yum update -y
yum install -y https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm
systemctl restart amazon-ssm-agent.service
systemctl enable --now amazon-ssm-agent
EOF
tags = {
Name = "gwangju-VPC2-Instance"
}
depends_on = [ aws_route_table.private_a-2,aws_route.vpc2-egress-pri-a-tgw,aws_vpc_endpoint.ec2-2,aws_vpc_endpoint.ec2-message-2,aws_vpc_endpoint.ssm-2,aws_vpc_endpoint.ssm-message-2,aws_vpc_endpoint_subnet_association.sub-a-2,aws_vpc_endpoint_subnet_association.sub-b-2,aws_vpc_endpoint_subnet_association.sub-a-message-2,aws_vpc_endpoint_subnet_association.sub-b-message-2,aws_vpc_endpoint_subnet_association.sub-a-ec2-2,aws_vpc_endpoint_subnet_association.sub-b-ec2-2,aws_vpc_endpoint_subnet_association.sub-a-ec2-message-2,aws_vpc_endpoint_subnet_association.sub-b-ec2-message-2 ]
}
JSON
복사