AMI

# 현재 리전의 최신 Amazon Linux 2023 AMI 찾기
aws ec2 describe-images \
  --owners amazon \
  --filters "Name=name,Values=al2023-ami-2023*-x86_64" \
            "Name=state,Values=available" \
  --query 'Images | sort_by(@, &CreationDate) | [-1].ImageId' \
  --output text

# 실행 중인 인스턴스에서 AMI 생성
aws ec2 create-image \
  --instance-id i-1234567890abcdef0 \
  --name "my-app-v1.2.3-$(date +%Y%m%d)" \
  --description "Production web server with Node.js 20" \
  --no-reboot

# AMI 생성 상태 확인
aws ec2 describe-images \
  --image-ids ami-0123456789abcdef0 \
  --query 'Images[0].State'

# AMI로 인스턴스 시작
aws ec2 run-instances \
  --image-id ami-0123456789abcdef0 \
  --instance-type t3.medium \
  --key-name my-keypair \
  --security-group-ids sg-12345678 \
  --subnet-id subnet-12345678 \
  --count 1

# 다른 리전으로 AMI 복사
aws ec2 copy-image \
  --source-region us-east-1 \
  --source-image-id ami-0123456789abcdef0 \
  --name "my-app-v1.2.3-ap-northeast-2" \
  --region ap-northeast-2

# 오래된 AMI 삭제 (deregister + snapshot 삭제)
aws ec2 deregister-image --image-id ami-old123456
aws ec2 delete-snapshot --snapshot-id snap-old123456

# packer.pkr.hcl - HashiCorp Packer로 AMI 자동 생성
packer {
  required_plugins {
    amazon = {
      version = ">= 1.2.0"
      source  = "github.com/hashicorp/amazon"
    }
  }
}

source "amazon-ebs" "base" {
  ami_name      = "my-app-{{timestamp}}"
  instance_type = "t3.medium"
  region        = "ap-northeast-2"

  # 베이스 이미지: 최신 Amazon Linux 2023
  source_ami_filter {
    filters = {
      name                = "al2023-ami-2023*-x86_64"
      root-device-type    = "ebs"
      virtualization-type = "hvm"
    }
    most_recent = true
    owners      = ["amazon"]
  }

  ssh_username = "ec2-user"

  # AMI 태그
  tags = {
    Name        = "my-app-{{timestamp}}"
    Environment = "production"
    Builder     = "packer"
  }
}

build {
  sources = ["source.amazon-ebs.base"]

  # 시스템 업데이트
  provisioner "shell" {
    inline = [
      "sudo dnf update -y",
      "sudo dnf install -y docker git",
      "sudo systemctl enable docker",
      "sudo usermod -aG docker ec2-user"
    ]
  }

  # 애플리케이션 설치 스크립트
  provisioner "shell" {
    script = "./scripts/install-app.sh"
  }

  # 설정 파일 복사
  provisioner "file" {
    source      = "./configs/"
    destination = "/tmp/configs"
  }
}

# 빌드 명령: packer build .

# 최신 AMI 조회 (data source)
data "aws_ami" "amazon_linux" {
  most_recent = true
  owners      = ["amazon"]

  filter {
    name   = "name"
    values = ["al2023-ami-2023*-x86_64"]
  }

  filter {
    name   = "virtualization-type"
    values = ["hvm"]
  }
}

# AMI ID 출력
output "latest_ami_id" {
  value = data.aws_ami.amazon_linux.id
}

# Launch Template에 AMI 사용
resource "aws_launch_template" "app" {
  name_prefix   = "my-app-"
  image_id      = data.aws_ami.amazon_linux.id
  instance_type = "t3.medium"

  network_interfaces {
    associate_public_ip_address = false
    security_groups             = [aws_security_group.app.id]
  }

  user_data = base64encode(<<-EOF
    #!/bin/bash
    yum update -y
    # 애플리케이션 시작 스크립트
    EOF
  )

  tag_specifications {
    resource_type = "instance"
    tags = {
      Name = "my-app-instance"
    }
  }
}

# Auto Scaling Group에서 Launch Template 사용
resource "aws_autoscaling_group" "app" {
  name                = "my-app-asg"
  vpc_zone_identifier = aws_subnet.private[*].id
  min_size            = 2
  max_size            = 10
  desired_capacity    = 2

  launch_template {
    id      = aws_launch_template.app.id
    version = "$Latest"
  }
}