--- AWSTemplateFormatVersion: 2010-09-09 Description: SASKV5 VPC + Bastion + Fargate + Database Parameters: TemplateBucket: Type: String Default: awslabs-startup-kit-templates-deploy-v5 Description: The template bucket for the CloudFormation templates # vpc.cfn.yml parameters AvailabilityZone1: Description: The first availability zone in the region Type: AWS::EC2::AvailabilityZone::Name ConstraintDescription: Must be a valid availability zone AvailabilityZone2: Description: The second availability zone in the region Type: AWS::EC2::AvailabilityZone::Name ConstraintDescription: Must be a valid availability zone SSHFrom: Description: Limit SSH access to bastion hosts to a CIDR IP block Type: String MinLength: 9 MaxLength: 18 Default: 0.0.0.0/0 ELBIngressPort: Description: The ELB ingress port used by security groups Type: Number MinValue: 0 MaxValue: 65535 ConstraintDescription: TCP ports must be between 0 - 65535 Default: 80 AppIngressPort: Description: The application ingress port used by security groups Type: Number MinValue: 0 MaxValue: 65535 ConstraintDescription: TCP ports must be between 0 - 65535 Default: 80 # bastion.cfn.yml parameters KeyName: Description: EC2 key pair name for bastion host SSH access Type: AWS::EC2::KeyPair::KeyName LogRetentionInDays: Description: Number of days you would like your CloudWatch Logs to be retained Type: Number Default: 90 # For more information on the google-authenticator PAM module, see: https://github.com/google/google-authenticator-libpam MFA: Description: Set to true to install MFA using the google-authenticator PAM module on your bastion host Type: String ConstraintDescription: Value must be true or false Default: false AllowedValues: - true - false # fargate.cfn.yml parameters HostedZoneName: Type: String Description: The optional Amazon Route 53 Hosted Zone Name for the optional load balancer alias record - do not include a period at the end Default: "" AllowedPattern: "(^$|^((?!-)[A-Za-z0-9-]{1,63}(?