EC2 서버 배포 - 정답 및 해설

# VPC ID 확인
VPC_ID=$(aws ec2 describe-vpcs \
  --filters "Name=tag:Name,Values=ShopEasy-VPC" \
  --query "Vpcs[0].VpcId" \
  --output text \
  --region ap-northeast-2)

echo "VPC ID: $VPC_ID"

# 보안 그룹 생성
SG_ID=$(aws ec2 create-security-group \
  --group-name ShopEasy-EC2-SG \
  --description "ShopEasy EC2 보안 그룹 - SSH, API 서버 포트 허용" \
  --vpc-id $VPC_ID \
  --query "GroupId" \
  --output text \
  --region ap-northeast-2)

echo "Security Group ID: $SG_ID"

# 내 퍼블릭 IP 확인
MY_IP=$(curl -s https://checkip.amazonaws.com)

# SSH (22번 포트) - 내 IP만 허용
aws ec2 authorize-security-group-ingress \
  --group-id $SG_ID \
  --protocol tcp \
  --port 22 \
  --cidr "${MY_IP}/32" \
  --region ap-northeast-2

# API 서버 (5000번 포트) - 모든 IP 허용
aws ec2 authorize-security-group-ingress \
  --group-id $SG_ID \
  --protocol tcp \
  --port 5000 \
  --cidr 0.0.0.0/0 \
  --region ap-northeast-2

# 태그 추가
aws ec2 create-tags \
  --resources $SG_ID \
  --tags Key=Name,Value=ShopEasy-EC2-SG Key=Project,Value=ShopEasy \
  --region ap-northeast-2

# 보안 그룹 확인
aws ec2 describe-security-groups \
  --group-ids $SG_ID \
  --query "SecurityGroups[0].{Name:GroupName,ID:GroupId,InboundRules:IpPermissions}" \
  --region ap-northeast-2

# 키 페어 생성 및 .pem 파일 저장
aws ec2 create-key-pair \
  --key-name ShopEasy-Key \
  --key-type rsa \
  --query "KeyMaterial" \
  --output text \
  --region ap-northeast-2 > ~/.ssh/ShopEasy-Key.pem

# 권한 설정
chmod 400 ~/.ssh/ShopEasy-Key.pem

# 확인
ls -la ~/.ssh/ShopEasy-Key.pem

aws ec2 describe-key-pairs \
  --key-names ShopEasy-Key \
  --region ap-northeast-2

# 퍼블릭 서브넷 ID 확인
SUBNET_ID=$(aws ec2 describe-subnets \
  --filters "Name=tag:Name,Values=ShopEasy-Public-Subnet-1" \
  --query "Subnets[0].SubnetId" \
  --output text \
  --region ap-northeast-2)

echo "Subnet ID: $SUBNET_ID"

# 보안 그룹 ID 확인
SG_ID=$(aws ec2 describe-security-groups \
  --filters "Name=group-name,Values=ShopEasy-EC2-SG" \
  --query "SecurityGroups[0].GroupId" \
  --output text \
  --region ap-northeast-2)

echo "Security Group ID: $SG_ID"

# Amazon Linux 2023 최신 AMI ID 확인
AMI_ID=$(aws ec2 describe-images \
  --owners amazon \
  --filters \
    "Name=name,Values=al2023-ami-2023.*-x86_64" \
    "Name=state,Values=available" \
  --query "sort_by(Images, &CreationDate)[-1].ImageId" \
  --output text \
  --region ap-northeast-2)

echo "AMI ID: $AMI_ID"

# EC2 인스턴스 생성
INSTANCE_ID=$(aws ec2 run-instances \
  --image-id $AMI_ID \
  --instance-type t2.micro \
  --key-name ShopEasy-Key \
  --subnet-id $SUBNET_ID \
  --security-group-ids $SG_ID \
  --associate-public-ip-address \
  --tag-specifications \
    'ResourceType=instance,Tags=[{Key=Name,Value=ShopEasy-API},{Key=Project,Value=ShopEasy}]' \
  --query "Instances[0].InstanceId" \
  --output text \
  --region ap-northeast-2)

echo "Instance ID: $INSTANCE_ID"

# 실행 상태까지 대기
aws ec2 wait instance-running \
  --instance-ids $INSTANCE_ID \
  --region ap-northeast-2

echo "인스턴스가 실행 중입니다!"

# 퍼블릭 IP 확인
PUBLIC_IP=$(aws ec2 describe-instances \
  --instance-ids $INSTANCE_ID \
  --query "Reservations[0].Instances[0].PublicIpAddress" \
  --output text \
  --region ap-northeast-2)

echo "Public IP: $PUBLIC_IP"

# 인스턴스 퍼블릭 IP 확인
PUBLIC_IP=$(aws ec2 describe-instances \
  --filters "Name=tag:Name,Values=ShopEasy-API" "Name=instance-state-name,Values=running" \
  --query "Reservations[0].Instances[0].PublicIpAddress" \
  --output text \
  --region ap-northeast-2)

echo "Public IP: $PUBLIC_IP"

# SSH 접속
ssh -i ~/.ssh/ShopEasy-Key.pem ec2-user@$PUBLIC_IP

# User Data 스크립트 (EC2 생성 시 --user-data 옵션으로 전달)
#!/bin/bash
curl -fsSL https://rpm.nodesource.com/setup_20.x | bash -
dnf install -y nodejs git
su - ec2-user -c "cd /home/ec2-user && git clone https://github.com/shopeasydeploy/ecommerce-app.git"
su - ec2-user -c "cd /home/ec2-user/ecommerce-app/api-server && npm install"

# 참고: SSM으로 EC2에 git clone 명령 전송
# (이 방법은 IAM 역할 설정이 필요하므로 Chapter 4 이후에 가능합니다)
aws ssm send-command \
  --instance-ids $INSTANCE_ID \
  --document-name "AWS-RunShellScript" \
  --parameters 'commands=["su - ec2-user -c \"cd /home/ec2-user && git clone https://github.com/shopeasydeploy/ecommerce-app.git\""]' \
  --region ap-northeast-2

# EC2 퍼블릭 IP 확인
PUBLIC_IP=$(aws ec2 describe-instances \
  --filters "Name=tag:Name,Values=ShopEasy-API" "Name=instance-state-name,Values=running" \
  --query "Reservations[0].Instances[0].PublicIpAddress" \
  --output text \
  --region ap-northeast-2)

# 헬스 체크
curl http://${PUBLIC_IP}:5000/api/health

# EC2 퍼블릭 IP 확인
PUBLIC_IP=$(aws ec2 describe-instances \
  --filters "Name=tag:Name,Values=ShopEasy-API" "Name=instance-state-name,Values=running" \
  --query "Reservations[0].Instances[0].PublicIpAddress" \
  --output text \
  --region ap-northeast-2)

# 상품 목록 확인
curl -s http://${PUBLIC_IP}:5000/api/products | python3 -m json.tool

# 인스턴스 중지
INSTANCE_ID=$(aws ec2 describe-instances \
  --filters "Name=tag:Name,Values=ShopEasy-API" "Name=instance-state-name,Values=running" \
  --query "Reservations[0].Instances[0].InstanceId" \
  --output text \
  --region ap-northeast-2)

aws ec2 stop-instances \
  --instance-ids $INSTANCE_ID \
  --region ap-northeast-2

echo "인스턴스 중지 중: $INSTANCE_ID"

# 중지 완료 대기
aws ec2 wait instance-stopped \
  --instance-ids $INSTANCE_ID \
  --region ap-northeast-2

echo "인스턴스가 중지되었습니다."