set -e

export TAG_NAME="example-script"

export SCRIPT_DIR=$(realpath $(dirname $0))

function json_get {

python -c "import json, sys; data=json.load(sys.stdin); print data$1;"

}

function tag {

aws ec2 create-tags --tags "Key=Name,Value=$TAG_NAME" --resources "$1"

}

function get_ids {

ALL_TAGS=$(aws ec2 describe-tags --filters "Name=value,Values=$TAG_NAME" "Name=resource-type,Values=$1")

echo "$ALL_TAGS" | python -c "import json, sys; data=json.load(sys.stdin); print ' '.join([tag['ResourceId'] for tag in data['Tags']])"

}

function create_or_get {

}

if [ ! -e ~/.aws/credentials ]

echo "AWS is not configured." >&2

echo "Run 'aws configure' to set the aws credentials." >&2

exit -1

echo -n "Creating VPC... "

VPC_ID=$(create_or_get "vpc" "['Vpc']['VpcId']" \

aws ec2 modify-vpc-attribute --vpc-id ${VPC_ID} --enable-dns-hostnames > /dev/null

echo "$VPC_ID"

echo -n "Creating subnet... "

SUBNET_ID=$(create_or_get "subnet" "['Subnet']['SubnetId']" \

echo "$SUBNET_ID"

echo -n "Configuring security group: Allowing SSH and HTTP(S)... "

SECURITY_GROUP_JSON=$(aws ec2 describe-security-groups --filters "Name=vpc-id,Values=$VPC_ID")

SECURITY_GROUP_ID=$(echo "$SECURITY_GROUP_JSON" | json_get "['SecurityGroups'][0]['GroupId']")

tag "$SECURITY_GROUP_ID"

if [[ "$SECURITY_GROUP_JSON" != *"\"ToPort\": 22,"* ]]

aws ec2 authorize-security-group-ingress \

--group-id "$SECURITY_GROUP_ID" \

--protocol tcp \

--port 22 \

--cidr 0.0.0.0/0

if [[ "$SECURITY_GROUP_JSON" != *"\"ToPort\": 80,"* ]]

aws ec2 authorize-security-group-ingress \

--group-id "$SECURITY_GROUP_ID" \

--protocol tcp \

--port 80 \

--cidr 0.0.0.0/0

if [[ "$SECURITY_GROUP_JSON" != *"\"ToPort\": 443,"* ]]

aws ec2 authorize-security-group-ingress \

--group-id "$SECURITY_GROUP_ID" \

--protocol tcp \

--port 443 \

--cidr 0.0.0.0/0

echo "$SECURITY_GROUP_ID"

echo -n "Creating Internet gateway... "

INTERNET_GATEWAY_ID=$(create_or_get "internet-gateway" "['InternetGateway']['InternetGatewayId']" \

echo "$INTERNET_GATEWAY_ID"

echo -n "Attaching Internet gateway to VPC... "

CURRENT_INTERNET_GATEWAY=$(aws ec2 describe-internet-gateways --internet-gateway-ids "$INTERNET_GATEWAY_ID")

if [[ "$CURRENT_INTERNET_GATEWAY" != *"\"VpcId\": \"$VPC_ID\""* ]]

aws ec2 attach-internet-gateway \

--internet-gateway-id "$INTERNET_GATEWAY_ID" \

--vpc-id "$VPC_ID"

echo done

echo -n "Retreiving route table id... "

ROUTE_TABLE_ID=$(aws ec2 describe-route-tables \

tag "$ROUTE_TABLE_ID"

echo "$ROUTE_TABLE_ID"

echo -n "Creating default route... "

aws ec2 create-route \

--route-table-id "$ROUTE_TABLE_ID" \

--destination-cidr-block "0.0.0.0/0" \

--gateway-id "$INTERNET_GATEWAY_ID" > /dev/null

echo done

echo -n "Creating SSH key pair... "

set +e

aws ec2 describe-key-pairs --key-name "$TAG_NAME" > /dev/null 2>&1

if [ $? -ne 0 ]

aws ec2 create-key-pair --key-name "$TAG_NAME" | json_get "['KeyMaterial']" > "${TAG_NAME}.pem"

chmod 400 "${TAG_NAME}.pem"

set -e

echo done

echo -n "Creating EC2 instance... "

ALL_IDs=$(get_ids instance)

NON_TERMINATED=()

for INSTANCE_ID in $ALL_IDs

DESCRIBE_RESULT=$(aws ec2 describe-instances --filter "Name=instance-id,Values=$INSTANCE_ID")

if [[ $DESCRIBE_RESULT == *"\"InstanceId\": \"$INSTANCE_ID\""* ]]

then

INSTANCE_STATE=$(echo "$DESCRIBE_RESULT" | json_get "['Reservations'][0]['Instances'][0]['State']['Name']")

if [ $INSTANCE_STATE != "terminated" ] && [ $INSTANCE_STATE != "shutting-down" ]

then

NON_TERMINATED+=($INSTANCE_ID)

fi

fi

NUMBER_OF_NON_TERMINATED=${#NON_TERMINATED[@]}

if [[ $NUMBER_OF_NON_TERMINATED -eq 0 ]]

INSTANCE_ID=$(aws ec2 run-instances \

tag "$INSTANCE_ID"

elif [[ $NUMBER_OF_NON_TERMINATED -eq 1 ]]

INSTANCE_ID=${NON_TERMINATED[0]}

echo "Error: More than one instance with tag $TAG_NAME found." 2>&1

exit -1

echo "$INSTANCE_ID"

echo "Waiting for instance. This may take a few seconds... "

INSTANCE_STATE="pending"

while [ "$INSTANCE_STATE" == "pending" ]

DESCRIBE_RESULT=$(aws ec2 describe-instances --filter "Name=instance-id,Values=$INSTANCE_ID")

INSTANCE_STATE=$(echo "$DESCRIBE_RESULT" | json_get "['Reservations'][0]['Instances'][0]['State']['Name']")

echo "... state is $INSTANCE_STATE."

if [[ "$INSTANCE_STATE" == "pending" ]]

then

sleep 5

fi

PUBLIC_IP=$(echo "$DESCRIBE_RESULT" | json_get "['Reservations'][0]['Instances'][0]['PublicIpAddress']")

echo Started EC2 instance with IP address "$PUBLIC_IP"

if [ -e "${TAG_NAME}.pem" ]

echo "As soon as the SSH daemon is started, you can log in with 'ssh -i ${TAG_NAME}.pem ec2-user@${PUBLIC_IP}'."

echo "If you see 'Connection refused': No worries, it will take a few minutes until the SSH daemon is started. Try again."

echo "The nginx Web server is installed in the background after the first boot."

echo "When you are logged in with SSH on ${PUBLIC_IP}, you can view the progress with 'tail -f /var/log/init-instance.log'."

echo "Once the Web server is up, you can access it on http(s)://${PUBLIC_IP}"