AWS-Create-Stack-Base.json

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "Create Default Company stack in AWS",

  "Resources": {
    "CompanyVPC": {
      "Type": "AWS::EC2::VPC",
      "Properties": {
        "CidrBlock": "10.0.0.0/16",
        "InstanceTenancy": "default",
        "EnableDnsSupport": "true",
        "EnableDnsHostnames": "true",
        "Tags": [
          {
            "Key": "Stack",
            "Value": "StackBase"
          },
          {
            "Key": "Name",
            "Value": "StackBaseVPC"
          }
        ]
      }
    },
    "subnetmanagement": {
      "Type": "AWS::EC2::Subnet",
      "Properties": {
        "CidrBlock": "10.0.0.0/24",
        "AvailabilityZone": "us-west-2a",
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "Tags": [
          {
            "Key": "Name",
            "Value": "Management Subnet 10.0.0.0/24"
          },
          {
            "Key": "Stack",
            "Value": "StackBase"
          }
        ]
      }
    },
    "subnettrust": {
      "Type": "AWS::EC2::Subnet",
      "Properties": {
        "CidrBlock": "10.0.1.0/24",
        "AvailabilityZone": "us-west-2a",
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "Tags": [
          {
            "Key": "Stack",
            "Value": "StackBase"
          },
          {
            "Key": "Name",
            "Value": "Trust Subnet 10.0.1.0/24"
          }
        ]
      }
    },
    "subnetdmz": {
      "Type": "AWS::EC2::Subnet",
      "Properties": {
        "CidrBlock": "10.0.2.0/24",
        "AvailabilityZone": "us-west-2a",
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "Tags": [
          {
            "Key": "Name",
            "Value": "DMZ Subnet 10.0.2.0/24"
          },
          {
            "Key": "Stack",
            "Value": "StackBase"
          }
        ]
      }
    },
    "subnetuntrust": {
      "Type": "AWS::EC2::Subnet",
      "Properties": {
        "CidrBlock": "10.0.10.0/24",
        "AvailabilityZone": "us-west-2a",
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "Tags": [
          {
            "Key": "Name",
            "Value": "Untrust Subnet 10.0.10.0/24"
          },
          {
            "Key": "Stack",
            "Value": "StackBase"
          }
        ]
      }
    },
    "AWSInternetGateway": {
      "Type": "AWS::EC2::InternetGateway",
      "Properties": {
        "Tags": [
          {
            "Key": "Name",
            "Value": "AWS Internet Gateway"
          },
          {
            "Key": "Stack",
            "Value": "StackBase"
          }
        ]
      }
    },
    "AWSDhcpOptions": {
      "Type": "AWS::EC2::DHCPOptions",
      "Properties": {
        "Tags": [
          {
            "Key": "Stack",
            "Value": "StackBase"
          }
        ],
        "DomainName": "us-west-2.compute.internal",
        "DomainNameServers": [
          "AmazonProvidedDNS"
        ]
      }
    },
    "AWSACL1": {
      "Type": "AWS::EC2::NetworkAcl",
      "Properties": {
        "VpcId": {
          "Ref": "CompanyVPC"
        }
      }
    },
    "AWSACL2": {
      "Type": "AWS::EC2::NetworkAcl",
      "Properties": {
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "Tags": [
          {
            "Key": "Stack",
            "Value": "StackBase"
          }
        ]
      }
    },
    "AWSRouteTable1": {
      "Type": "AWS::EC2::RouteTable",
      "Properties": {
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "Tags": [
          {
            "Key": "Stack",
            "Value": "StackBase"
          }
        ]
      }
    },
    "AWSRouteTable2": {
      "Type": "AWS::EC2::RouteTable",
      "Properties": {
        "VpcId": {
          "Ref": "CompanyVPC"
        }
      }
    },
    "AWSRouteTable3": {
      "Type": "AWS::EC2::RouteTable",
      "Properties": {
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "Tags": [
          {
            "Key": "Stack",
            "Value": "StackBase"
          }
        ]
      }
    },
    "acl1": {
      "Type": "AWS::EC2::NetworkAclEntry",
      "Properties": {
        "CidrBlock": "0.0.0.0/0",
        "Egress": "true",
        "Protocol": "-1",
        "RuleAction": "allow",
        "RuleNumber": "100",
        "NetworkAclId": {
          "Ref": "AWSACL1"
        }
      }
    },
    "acl2": {
      "Type": "AWS::EC2::NetworkAclEntry",
      "Properties": {
        "CidrBlock": "0.0.0.0/0",
        "Protocol": "-1",
        "RuleAction": "allow",
        "RuleNumber": "100",
        "NetworkAclId": {
          "Ref": "AWSACL1"
        }
      }
    },
    "acl3": {
      "Type": "AWS::EC2::NetworkAclEntry",
      "Properties": {
        "CidrBlock": "0.0.0.0/0",
        "Egress": "true",
        "Protocol": "-1",
        "RuleAction": "allow",
        "RuleNumber": "100",
        "NetworkAclId": {
          "Ref": "AWSACL2"
        }
      }
    },
    "acl4": {
      "Type": "AWS::EC2::NetworkAclEntry",
      "Properties": {
        "CidrBlock": "0.0.0.0/0",
        "Protocol": "-1",
        "RuleAction": "allow",
        "RuleNumber": "100",
        "NetworkAclId": {
          "Ref": "AWSACL2"
        }
      }
    },
    "subnetacl1": {
      "Type": "AWS::EC2::SubnetNetworkAclAssociation",
      "Properties": {
        "NetworkAclId": {
          "Ref": "AWSACL2"
        },
        "SubnetId": {
          "Ref": "subnetdmz"
        }
      }
    },
    "subnetacl2": {
      "Type": "AWS::EC2::SubnetNetworkAclAssociation",
      "Properties": {
        "NetworkAclId": {
          "Ref": "AWSACL2"
        },
        "SubnetId": {
          "Ref": "subnettrust"
        }
      }
    },
    "subnetacl3": {
      "Type": "AWS::EC2::SubnetNetworkAclAssociation",
      "Properties": {
        "NetworkAclId": {
          "Ref": "AWSACL2"
        },
        "SubnetId": {
          "Ref": "subnetmanagement"
        }
      }
    },
    "AWSGateway1": {
      "Type": "AWS::EC2::VPCGatewayAttachment",
      "Properties": {
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "InternetGatewayId": {
          "Ref": "AWSInternetGateway"
        }
      }
    },
    "subnetroute2": {
      "Type": "AWS::EC2::SubnetRouteTableAssociation",
      "Properties": {
        "RouteTableId": {
          "Ref": "AWSRouteTable3"
        },
        "SubnetId": {
          "Ref": "subnetmanagement"
        }
      }
    },
    "route1": {
      "Type": "AWS::EC2::Route",
      "Properties": {
        "DestinationCidrBlock": "0.0.0.0/0",
        "RouteTableId": {
          "Ref": "AWSRouteTable1"
        },
        "GatewayId": {
          "Ref": "AWSInternetGateway"
        }
      },
      "DependsOn": "AWSGateway1"
    },
    "route2": {
      "Type": "AWS::EC2::Route",
      "Properties": {
        "DestinationCidrBlock": "0.0.0.0/0",
        "RouteTableId": {
          "Ref": "AWSRouteTable3"
        },
        "GatewayId": {
          "Ref": "AWSInternetGateway"
        }
      },
      "DependsOn": "AWSGateway1"
    },
    "dchpassoc1": {
      "Type": "AWS::EC2::VPCDHCPOptionsAssociation",
      "Properties": {
        "VpcId": {
          "Ref": "CompanyVPC"
        },
        "DhcpOptionsId": {
          "Ref": "AWSDhcpOptions"
        }
      }
    },
  },
  "Description": "Default Company Base Stack"
}