aws-samples/aws-cloudwan-workshop-code

AWS Cloud WAN - Infrastructure as Code Examples

AWS Cloud WAN is a managed wide-area networking (WAN) service that you can use to build, manage, and monitor an unified global network that connects resources running across your cloud and on-premises environments. It provides a central dashboard from which you can connect on-premises branch offices, data centers, and Amazon Virtual Private Clouds (VPCs) across the AWS global network. You can use simple network policies to centrally configure and automate network management and security tasks, and get a complete view of your global network.

This repository shows you an example of global communication with AWS Cloud WAN, showing the same architecture you can build in the AWS Cloud WAN Workshop using different Infrastructure as Code (IaC) frameworks: CloudFormation, CDK (with Typescript and Python examples) and Terraform.

• AWS CloudFormation
• AWS CDK (Typescript)
• AWS CDK (Python)
• Terraform

NOTE: The resources created incur costs in your AWS Account. Consider deleting the resources created once your tests are done. For more information, check the AWS Cloud WAN pricing.

References

• AWS Cloud WAN documentation.
• AWS Cloud WAN Workshop.
• Blog post: Introducing AWS Cloud WAN (Preview).

Security

See CONTRIBUTING for more information.

License

This library is licensed under the MIT-0 License. See the LICENSE file.

aws-cloudwan-workshop-code's Issues

issue with terraform\modules\compute\main.tf

line # 46 needs to be updated to: "amzn2-ami-hvm-*-gp2" or it will fail to find the most current AMI.

EU-Prod VPC is named nonprod

EU-Prod VPC is named nonprod which also adds a confusing name to the EU-Prod attachment, that is actually assigned to the nonprod segment. This is for the TypeScript CDK Stack.

Self Hosted - Cloudformation - [Makefile:27: deploy-cloudwan-active] Error 255

Fails with error when using make deploy.

From Stackset status
The following resource(s) failed to update: [CoreNetwork].

1 validation error detected: Value 'Incorrect policy. (Service: NetworkManager, Status Code: 400, Request ID: a7b53b81-3ffe-4888-b02a-e132513ef8a3): [{ErrorCode: MAXIMUM_ITEMS_EXCEEDED, Message: $.segment-actions[1].destinations: blackhole may only exist in a singleton list}, {ErrorCode: INVALID_STRING, Message: $.segment-actions[1].destinations[0]: attachment identifiers must be prefixed with "attachment-" and must end in 17 characters where all characters are from the set "a..f" or "0..9"}, {ErrorCode: CONSTANT_VIOLATION, Message: $.segment-actions[1].destinations[0]: must be a constant value blackhole}, {ErrorCode: INVALID_STRING, Message: $.segment-actions[1].destinations[1]: attachment identifiers must be prefixed with "attachment-" and must end in 17 characters where all characters are from the set "a..f" or "0..9"}, {ErrorCode: CONSTANT_VIOLATION, Message: $.segment-actions[1].destinations[1]: must be a constant value blackhole}, {ErrorCode: REQUIRED_PROPERTY, Message: $.segment-actions[1].mode: is missing but it is required}, {ErrorCode: REQUIRED_PROPERTY, Message: $.segment-actions[1].share-with: is missing but it is required}, {ErrorCode: MAXIMUM_ITEMS_EXCEEDED, Message: $.segment-actions[2].destinations: blackhole may only exist in a singleton list}, {ErrorCode: INVALID_STRING, Message: $.segment-actions[2].destinations[0]: attachment identifiers must be prefixed with "attachment-" and must end in 17 characters where all characters are from the set "a..f" or "0..9"}, {ErrorCode: CONSTANT_VIOLATION, Message: $.segment-actions[2].destinations[0]: must be a constant value blackhole}, {ErrorCode: INVALID_STRING, Message: $.segment-actions[2].destinations[1]: attachment identifiers must be prefixed with "attachment-" and must end in 17 characters where all characters are from the set "a..f" or "0..9"}, {ErrorCode: CONSTANT_VIOLATION, Message: $.segment-actions[2].destinations[1]: must be a constant value blackhole}, {ErrorCode: REQUIRED_PROPERTY, Message: $.segment-actions[2].mode: is missing but it is required}, {ErrorCode: REQUIRED_PROPERTY, Message: $.segment-actions[2].share-with: is missing but it is required}]' at 'statusMessage' failed to satisfy constraint: Member must have length less than or equal to 1024

Readme.md file points to Cloud WAN Workshop that doesn't exist anymore.

The readme.md file points to the Cloud WAN workshop (https://catalog.workshops.aws/cloudwan/en-US) but that page does not exist.

This is the paragraph:
This repository shows you an example of global communication with AWS Cloud WAN, showing the same architecture you can build in the AWS Cloud WAN Workshop using different Infrastructure as Code (IaC) frameworks: CloudFormation, CDK (with Typescript and Python examples) and Terraform.

Error with make deploy-initial

"An error occurred (ValidationError) when calling the CreateChangeSet operation: Template format error: Unresolved resource dependencies [TGWCWANPeering, TGWPolicyTable] in the Resources block of the template
make: *** [deploy-initial] Error 254" 

Any insight? Thank you

Terraform fails with │ Error: AWS SDK Go Service Operation Incomplete

│ with module.nvirginia_spoke_vpcs["prod"].awscc_ec2_subnet_route_table_association.cwan["us-east-1a"],
│ on .terraform/modules/nvirginia_spoke_vpcs/main.tf line 333, in resource "awscc_ec2_subnet_route_table_association" "cwan":
│ 333: resource "awscc_ec2_subnet_route_table_association" "cwan" {
│
│ Waiting for Cloud Control API service CreateResource operation completion returned: waiter state transitioned to FAILED. StatusMessage: The subnet ID 'subnet-0751c60afa92b52d5' does not exist (Service: Ec2, Status Code: 400,
│ Request ID: 5524c626-b6ba-4a98-b60a-44cd62764121). ErrorCode: GeneralServiceException