create-aws-stack.json

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "TiDB Serverless Tier Cluster x Amazon QuickSight",
  "Parameters": {
    "TiDBVPCEndpointServiceName": {
      "Description": "TiDB Cloud VPC Endpoint Service Name",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "64"
    },
    "TiDBServerlessAvailabilityZone": {
      "Description": "TiDB Cloud Serverless Tier Availability Zone (AZ)",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "64"
    },
    "AnotherAvailabilityZone": {
      "Description": "Another Availability Zone, workaround the restriction of VPC Connection",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "64"
    },
    "TiDBDatabase": {
      "Description": "TiDB Cloud database name",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "64",
      "Default": "test"
    },
    "TiDBUser": {
      "NoEcho": "true",
      "Description": "Username for TiDB Cloud database access",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "32"
    },
    "TiDBPassword": {
      "NoEcho": "true",
      "Description": "Password for TiDB Cloud database access",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "64"
    },
    "TiDBHost": {
      "Description": "Host URL for TiDB Cloud database access",
      "Default": "localhost",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "256"
    },
    "TiDBPort": {
      "Description": "Port for TiDB Cloud database access",
      "Default": "4000",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "8",
      "AllowedPattern": "[0-9]*",
      "ConstraintDescription": "only allow numbers."
    },
    "QuickSightRoleArn": {
      "Description": "Role ARN of Amazon QuickSight",
      "Type": "String",
      "MinLength": "1",
      "MaxLength": "256"
    }
  },
  "Resources": {
    "QuickSightVPC": {
      "Type": "AWS::EC2::VPC",
      "Properties": {
        "CidrBlock": "10.2.0.0/16",
        "EnableDnsSupport": true,
        "EnableDnsHostnames": true,
        "InstanceTenancy": "default",
        "Tags": [
          {
            "Key": "Name",
            "Value": "quick-sight-vpc"
          }
        ]
      }
    },
    "QuickSightSubnet": {
      "Type" : "AWS::EC2::Subnet",
      "DependsOn": [
        "QuickSightVPC"
      ],
      "Properties" : {
        "VpcId" : { "Ref" : "QuickSightVPC" },
        "CidrBlock" : "10.2.0.0/18",
        "AvailabilityZone" : { "Ref" : "TiDBServerlessAvailabilityZone" },
        "Tags": [
          {
            "Key": "Name",
            "Value": "quick-sight-subnet"
          }
        ]
      }
    },
    "WorkaroundSubnet": {
      "Type" : "AWS::EC2::Subnet",
      "DependsOn": [
        "QuickSightVPC"
      ],
      "Properties" : {
        "VpcId" : { "Ref" : "QuickSightVPC" },
        "CidrBlock" : "10.2.64.0/18",
        "AvailabilityZone" : { "Ref" : "AnotherAvailabilityZone" },
        "Tags": [
          {
            "Key": "Name",
            "Value": "quick-sight-subnet"
          }
        ]
      }
    },
    "QuickSightPublicRouteTable": {
      "Type": "AWS::EC2::RouteTable",
      "Properties": {
        "VpcId": {
          "Ref": "QuickSightVPC"
        },
        "Tags": [
          {
            "Key": "Name",
            "Value": "quick-sight-public-route-table"
          }
        ]
      }
    },
    "QuickSightPublicRoute": {
      "Type": "AWS::EC2::Route",
      "DependsOn": [
        "QuickSightAttachGateway",
        "QuickSightPublicRouteTable"
      ],
      "Properties": {
          "DestinationCidrBlock": "0.0.0.0/0",
          "RouteTableId": {
              "Ref": "QuickSightPublicRouteTable"
          },
          "GatewayId": {
            "Ref": "QuickSightInternetGateway"
          }
      }
    },
    "QuickSightSubnetRouteTableAssociation": {
      "Type" : "AWS::EC2::SubnetRouteTableAssociation",
      "Properties" : {
          "RouteTableId" : {
            "Ref": "QuickSightPublicRouteTable"
          },
          "SubnetId" : {
            "Ref": "QuickSightSubnet"
          }
        }
    },
    "QuickSightSecurityGroup": {
      "Type": "AWS::EC2::SecurityGroup",
      "Properties": {
          "GroupDescription": "SecurityGroup for QuickSight",
          "VpcId": {
              "Ref": "QuickSightVPC"
          },
          "SecurityGroupIngress": [
            {
              "CidrIp" : "0.0.0.0/0",
              "Description" : "Allow All IP to SSH",
              "FromPort" : 0,
              "IpProtocol" : "tcp",
              "ToPort" : 65535
            }
          ],
          "Tags": [
            {
              "Key": "Name",
              "Value": "quick-sight-security-group"
            }
          ]
      }
    },
    "QuickSightVPCRouteResolverEndpoint": {
      "Type" : "AWS::Route53Resolver::ResolverEndpoint",
      "Properties" : {
          "Direction" : "INBOUND",
          "IpAddresses" : [
            {
            "Ip" : "10.2.1.254",
            "SubnetId" : {"Ref": "QuickSightSubnet"}
            },
            {
            "Ip" : "10.2.1.255",
            "SubnetId" : {"Ref": "QuickSightSubnet"}
            }
          ],
          "Name" : "quick-sight-vpc-route-resolver-endpoint",
          "SecurityGroupIds" : [ {"Ref" : "QuickSightSecurityGroup"} ]
        }
    },
    "QuickSightVPCEndpoint": {
      "Type" : "AWS::EC2::VPCEndpoint",
      "Properties" : {
        "PrivateDnsEnabled": true,
        "ServiceName" : {"Ref": "TiDBVPCEndpointServiceName"},
        "SecurityGroupIds": [ {"Ref": "QuickSightSecurityGroup"} ],
        "SubnetIds" : [ {"Ref": "QuickSightSubnet"} ],
        "VpcEndpointType" : "Interface",
        "VpcId" : {"Ref": "QuickSightVPC"}
      }
    },
    "QuickSightInstence": {
      "Type": "AWS::EC2::Instance",
      "DependsOn": [
        "QuickSightSecurityGroup",
        "QuickSightSubnet",
        "QuickSightVPCRouteResolverEndpoint"
      ],
      "Properties": {
        "ImageId" : "ami-0735c191cf914754d",
        "NetworkInterfaces": [
          {
            "SubnetId": {
              "Ref": "QuickSightSubnet"
            },
            "AssociatePublicIpAddress": "true",
            "DeviceIndex": "0",
            "GroupSet": [
              {
                "Ref": "QuickSightSecurityGroup"
              }
            ]
          }
        ],
        "Tags": [
          {
            "Key": "Name",
            "Value": "quick-sight-instence"
          }
        ]
      }
    },
    "QuickSightInternetGateway" : {
      "Type" : "AWS::EC2::InternetGateway",
      "DependsOn": [
        "QuickSightVPC",
        "QuickSightSubnet"
      ],
      "Properties": {
        "Tags": [
          {
            "Key": "Name",
            "Value": "quick-sight-internet-gateway"
          }
        ]
      }
    },
    "QuickSightAttachGateway" : {
      "Type" : "AWS::EC2::VPCGatewayAttachment",
      "DependsOn": [
        "QuickSightVPC",
        "QuickSightSubnet",
        "QuickSightInternetGateway"
      ],
      "Properties" : {
         "VpcId" : { "Ref" : "QuickSightVPC" },
         "InternetGatewayId" : { "Ref" : "QuickSightInternetGateway" }
      }
    },
    "QuickSightVPCConnection": {
      "Type" : "AWS::QuickSight::VPCConnection",
      "DependsOn": [
        "QuickSightVPC",
        "QuickSightSubnet",
        "WorkaroundSubnet",
        "QuickSightSecurityGroup",
        "QuickSightVPCRouteResolverEndpoint"
      ],
      "Properties" : {
          "AvailabilityStatus" : "AVAILABLE",
          "AwsAccountId" : {"Ref": "AWS::AccountId"},
          "DnsResolvers" : [ "10.2.1.254", "10.2.1.255" ],
          "Name" : "TiDB-Serverless-Tier-PrivateLink-Connection",
          "RoleArn" : {"Ref": "QuickSightRoleArn"},
          "SecurityGroupIds" : [ {"Ref": "QuickSightSecurityGroup"} ],
          "SubnetIds" : [ {"Ref": "QuickSightSubnet"}, {"Ref": "WorkaroundSubnet"} ],
          "VPCConnectionId" : "QuickSightVPCConnection"
        }
    }
  },
  "Outputs": {
    "QuickSightVPCConnectionARN": {
      "Description": "QuickSight VPC Connection ARN string",
      "Value": {"Fn::GetAtt": ["QuickSightVPCConnection", "Arn"]},
      "Export" : {
        "Name" : "QuickSightVPCConnectionARN"
      }
    }
  }
}