windows1.json

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "This template enables roles and features of Windows Server. **WARNING** This template creates Amazon EC2 Windows instance and related resources. You will be billed for the AWS resources used if you create a stack from this template.",
  "Parameters": {
    "KeyName": {
      "Description": "Name of an existing EC2 KeyPair",
      "Type": "AWS::EC2::KeyPair::KeyName",
      "ConstraintDescription": "must be the name of an existing EC2 KeyPair."
    },
    "InstanceType": {
      "Description": "Amazon EC2 instance type",
      "Type": "String",
      "Default": "m5.large",
      "AllowedValues": [
        "t2.micro",
        "t2.small",
        "t2.medium",
        "m3.medium",
        "m3.large",
        "m3.xlarge",
        "m3.2xlarge",
        "m5.large",
        "m4.xlarge",
        "m4.2xlarge",
        "m4.4xlarge",
        "m4.10xlarge",
        "c3.large",
        "c3.xlarge",
        "c3.2xlarge",
        "c3.4xlarge",
        "c3.8xlarge",
        "r3.large",
        "r3.xlarge",
        "r3.2xlarge",
        "r3.4xlarge",
        "r3.8xlarge",
        "i2.xlarge",
        "i2.2xlarge",
        "i2.4xlarge",
        "i2.8xlarge",
        "d2.xlarge",
        "d2.2xlarge",
        "d2.4xlarge",
        "d2.8xlarge"
      ],
      "ConstraintDescription": "must be a valid EC2 instance type."
    },
    "Roles": {
      "Description": "A SPACE seperated list of roles that you want to enable on this instance. Valid values are AD-Certificate, AD-Domain-Services, ADLDS, DHCP, DNS, Fax, File-Services, NPAS, Print-Services, Web-Server, and WDS.",
      "Type": "String",
      "Default": "None",
      "AllowedPattern": "(((AD\\-Certificate)|(AD\\-Domain\\-Services)|(ADLDS)|(DHCP)|(DNS)|(Fax)|(File\\-Services)|(NPAS)|(Print\\-Services)|(Web\\-Server)|(WDS))( ((AD\\-Certificate)|(AD\\-Domain\\-Services)|(ADLDS)|(DHCP)|(DNS)|(Fax)|(File\\-Services)|(NPAS)|(Print\\-Services)|(Web\\-Server)|(WDS)))*)|(None)"
    },
    "Features": {
      "Description": "A SPACE seperated list of features that you want to enable on this instance. Valid values are NET-Framework, BITS, BitLocker, BranchCache, CMAK, Desktop-Experience, DAMC, Failover-Clustering, GPMC, Ink-Handwriting, Internet-Print-Client, ISNS, LPR-Port-Monitor, MSMQ, Multipath-IO, NLB, PNRP, qWave, Remote-Assistance, RDC, RPC-over-HTTP-Proxy, Simple-TCPIP, SMTP-Server, SNMP-Services, Storage-Mgr-SANS, Subsystem-UNIX-Apps, Telnet-Client, Telnet-Server, TFTP-Client, Biometric-Framework, Windows-Internal-DB, PowerShell-ISE, Backup-Features, Migration, WSRM, TIFF-IFilter, WinRM-IIS-Ext, WINS-Server, Wireless-Networking, and XPS-Viewer.",
      "Type": "String",
      "Default": "None",
      "AllowedPattern": "(((NET\\-Framework)|(BITS)|(BitLocker)|(BranchCache)|(CMAK)|(Desktop\\-Experience)|(DAMC)|(Failover\\-Clustering)|(GPMC)|(Ink\\-Handwriting)|(Internet\\-Print\\-Client)|(ISNS)|(LPR\\-Port\\-Monitor)|(MSMQ)|(Multipath\\-IO)|(NLB)|(PNRP)|(qWave)|(Remote\\-Assistance)|(RDC)|(RPC\\-over\\-HTTP\\-Proxy)|(Simple\\-TCPIP)|(SMTP\\-Server)|(SNMP\\-Services)|(Storage\\-Mgr\\-SANS)|(Subsystem\\-UNIX\\-Apps)|(Telnet\\-Client)|(Telnet\\-Server)|(TFTP\\-Client)|(Biometric\\-Framework)|(Windows\\-Internal\\-DB)|(PowerShell\\-ISE)|(Backup\\-Features)|(Migration)|(WSRM)|(TIFF\\-IFilter)|(WinRM\\-IIS\\-Ext)|(WINS\\-Server)|(Wireless\\-Networking)|(XPS\\-Viewer))( ((NET\\-Framework)|(BITS)|(BitLocker)|(BranchCache)|(CMAK)|(Desktop\\-Experience)|(DAMC)|(Failover\\-Clustering)|(GPMC)|(Ink\\-Handwriting)|(Internet\\-Print\\-Client)|(ISNS)|(LPR\\-Port\\-Monitor)|(MSMQ)|(Multipath\\-IO)|(NLB)|(PNRP)|(qWave)|(Remote\\-Assistance)|(RDC)|(RPC\\-over\\-HTTP\\-Proxy)|(Simple\\-TCPIP)|(SMTP\\-Server)|(SNMP\\-Services)|(Storage\\-Mgr\\-SANS)|(Subsystem\\-UNIX\\-Apps)|(Telnet\\-Client)|(Telnet\\-Server)|(TFTP\\-Client)|(Biometric\\-Framework)|(Windows\\-Internal\\-DB)|(PowerShell\\-ISE)|(Backup\\-Features)|(Migration)|(WSRM)|(TIFF\\-IFilter)|(WinRM\\-IIS\\-Ext)|(WINS\\-Server)|(Wireless\\-Networking)|(XPS\\-Viewer)))*( )*)|(None)"
    },
    "SourceCidrForRDP": {
      "Description": "IP Cidr from which you are likely to RDP into the instances. You can add rules later by modifying the created security groups e.g. 54.32.98.160/32",
      "Type": "String",
      "MinLength": "9",
      "MaxLength": "18",
      "AllowedPattern": "^([0-9]+\\.){3}[0-9]+\\/[0-9]+$"
    }
  },
  "Mappings": {
    "AWSRegion2AMI": {
      "us-east-1": {
        "Windows2008r2": "ami-05053a58f18d79165",
        "Windows2012r2": "ami-066663db63b3aa675"
      },
      "us-west-2": {
        "Windows2008r2": "ami-09baf7dca5abb5477",
        "Windows2012r2": "ami-07c77fe35092981e9"
      },
      "us-west-1": {
        "Windows2008r2": "ami-0103343efe39caae9",
        "Windows2012r2": "ami-08462bc4d6a8eb5c1"
      },
      "eu-west-1": {
        "Windows2008r2": "ami-0146d7f51c6677e99",
        "Windows2012r2": "ami-009af7c43be38087d"
      },
      "eu-west-2": {
        "Windows2008r2": "ami-0c83c0bcaf872d604",
        "Windows2012r2": "ami-025fc1fa28fdf1a87"
      },
      "eu-west-3": {
        "Windows2008r2": "ami-03af3787c0ef4ca0d",
        "Windows2012r2": "ami-0cbc109ce3fe6584e"
      },
      "eu-central-1": {
        "Windows2008r2": "ami-098bba2f7c9962b56",
        "Windows2012r2": "ami-0ece2db131cd3c16a"
      },
      "eu-north-1": {
        "Windows2008r2": "ami-0da3dcb725fd36774",
        "Windows2012r2": "ami-01e97bc0f89e9ca04"
      },
      "ap-northeast-1": {
        "Windows2008r2": "ami-085b9d0f82b3d500b",
        "Windows2012r2": "ami-0d99aa7f0403a9ba4"
      },
      "ap-northeast-2": {
        "Windows2008r2": "ami-05d7911c701557f98",
        "Windows2012r2": "ami-0163c75ba997507aa"
      },
      "ap-northeast-3": {
        "Windows2008r2": "ami-0b9d45b41271b9dff",
        "Windows2012r2": "ami-0646ac68d679b1b73"
      },
      "ap-southeast-1": {
        "Windows2008r2": "ami-08cde6692201557a8",
        "Windows2012r2": "ami-00230cfcbc0180362"
      },
      "ap-southeast-2": {
        "Windows2008r2": "ami-0e17bfe822c550bff",
        "Windows2012r2": "ami-0f66d840816e8a35f"
      },
      "ap-south-1": {
        "Windows2008r2": "ami-033ede8dc37ea7fb6",
        "Windows2012r2": "ami-0437fea2a5ba5aacd"
      },
      "us-east-2": {
        "Windows2008r2": "ami-0ccd4940b0cd75ce3",
        "Windows2012r2": "ami-00890851afd74dda3"
      },
      "ca-central-1": {
        "Windows2008r2": "ami-0ce5dfea946fa499d",
        "Windows2012r2": "ami-051f75c651d856381"
      },
      "sa-east-1": {
        "Windows2008r2": "ami-0876972eb2541a9d5",
        "Windows2012r2": "ami-0f7eee4d47377680e"
      },
      "cn-north-1": {
        "Windows2008r2": "ami-04d3dc91707f96a37",
        "Windows2012r2": "ami-0524bf2ce3a8bab46"
      },
      "cn-northwest-1": {
        "Windows2008r2": "ami-006c99da93a40e535",
        "Windows2012r2": "ami-0ce900e3a255d57a2"
      }
    }
  },
  "Resources": {
    "InstanceSecurityGroup": {
      "Type": "AWS::EC2::SecurityGroup",
      "Properties": {
        "GroupDescription": "Enable RDP",
        "SecurityGroupIngress": [
          {
            "IpProtocol": "tcp",
            "FromPort": "3389",
            "ToPort": "3389",
            "CidrIp": {
              "Ref": "SourceCidrForRDP"
            }
          }
        ]
      }
    },
    "WindowsServer": {
      "Type": "AWS::EC2::Instance",
      "Metadata": {
        "AWS::CloudFormation::Init": {
          "config": {
            "files": {
              "c:\\cfn\\cfn-hup.conf": {
                "content": {
                  "Fn::Join": [
                    "",
                    [
                      "[main]\n",
                      "stack=",
                      {
                        "Ref": "AWS::StackId"
                      },
                      "\n",
                      "region=",
                      {
                        "Ref": "AWS::Region"
                      },
                      "\n"
                    ]
                  ]
                }
              },
              "c:\\cfn\\hooks.d\\cfn-auto-reloader.conf": {
                "content": {
                  "Fn::Join": [
                    "",
                    [
                      "[cfn-auto-reloader-hook]\n",
                      "triggers=post.update\n",
                      "path=Resources.WindowsServer.Metadata.AWS::CloudFormation::Init\n",
                      "action=cfn-init.exe -v -s ",
                      {
                        "Ref": "AWS::StackId"
                      },
                      " -r WindowsServer",
                      " --region ",
                      {
                        "Ref": "AWS::Region"
                      },
                      "\n"
                    ]
                  ]
                }
              }
            },
            "commands": {
              "1-install-roles": {
                "command": {
                  "Fn::Join": [
                    "",
                    [
                      "if not \"None\" EQU \"",
                      {
                        "Ref": "Roles"
                      },
                      "\" (servermanagercmd -install ",
                      {
                        "Ref": "Roles"
                      },
                      " -restart)"
                    ]
                  ]
                }
              },
              "2-install-features": {
                "command": {
                  "Fn::Join": [
                    "",
                    [
                      "if not \"None\" EQU \"",
                      {
                        "Ref": "Features"
                      },
                      "\" (servermanagercmd -install ",
                      {
                        "Ref": "Features"
                      },
                      " -restart)"
                    ]
                  ]
                }
              },
              "3-signal-success": {
                "command": {
                  "Fn::Join": [
                    "",
                    [
                      "cfn-signal.exe -e %ERRORLEVEL% \"",
                      {
                        "Fn::Base64": {
                          "Ref": "WindowsServerWaitHandle"
                        }
                      },
                      "\""
                    ]
                  ]
                }
              }
            },
            "services": {
              "windows": {
                "cfn-hup": {
                  "enabled": "true",
                  "ensureRunning": "true",
                  "files": [
                    "c:\\cfn\\cfn-hup.conf",
                    "c:\\cfn\\hooks.d\\cfn-auto-reloader.conf"
                  ]
                }
              }
            }
          }
        }
      },
      "Properties": {
        "InstanceType": {
          "Ref": "InstanceType"
        },
        "ImageId": {
          "Fn::FindInMap": [
            "AWSRegion2AMI",
            {
              "Ref": "AWS::Region"
            },
            "Windows2008r2"
          ]
        },
        "SecurityGroups": [
          {
            "Ref": "InstanceSecurityGroup"
          }
        ],
        "KeyName": {
          "Ref": "KeyName"
        },
        "UserData": {
          "Fn::Base64": {
            "Fn::Join": [
              "",
              [
                "<script>\n",
                "cfn-init.exe -v -s ",
                {
                  "Ref": "AWS::StackId"
                },
                " -r WindowsServer",
                " --region ",
                {
                  "Ref": "AWS::Region"
                },
                "\n",
                "</script>"
              ]
            ]
          }
        }
      }
    },
    "WindowsServerWaitHandle": {
      "Type": "AWS::CloudFormation::WaitConditionHandle"
    },
    "WindowsServerWaitCondition": {
      "Type": "AWS::CloudFormation::WaitCondition",
      "DependsOn": "WindowsServer",
      "Properties": {
        "Handle": {
          "Ref": "WindowsServerWaitHandle"
        },
        "Timeout": "1800"
      }
    }
  },
  "Outputs": {
    "RolesEnabled": {
      "Value": {
        "Ref": "Roles"
      },
      "Description": "Roles enabled on this instance."
    },
    "FeaturesEnabled": {
      "Value": {
        "Ref": "Features"
      },
      "Description": "Features enabled on this instance."
    }
  }
}