尝试将安全组添加到 EC2 实例时出错

Question

sg = ec2.create_security_group(GroupName='MyWebServer', Description = 'WebServer', VpcId='vpc-0dea879f34afff60d')

instance = ec2.create_instances(
 ImageId='ami-0fc970315c2d38f01',
 MinCount=1,
 MaxCount=1,
 InstanceType='t2.nano',
 SecurityGroups=[ sg.group_id ] 
)

我正在尝试创建一个实例并将一个安全组附加到它， 当我在调用 RunInstances 操作时运行 ''(InvalidParameterValue) 的代码时出现错误：Value () 参数 groupId 无效。该值不能为空。”

它创建安全组，但在调用时不创建实例。任何解决方案或帮助将不胜感激。

Answer 1

我们可以使用sg['GroupId']访问组ID

import boto3

ec2 = boto3.client('ec2', region_name='us-east-1')
sg = ec2.create_security_group(GroupName='MyWebServer', Description = 'WebServer', VpcId='vpc-0dea879f34afff60d')

response = ec2.run_instances(
    ImageId='ami-0fc970315c2d38f01',
    InstanceType='t2.micro',
    MaxCount=1,
    MinCount=1,
    SecurityGroupIds=[
       sg['GroupId']
    ],
)

Answer 2

试试这个：

instance = ec2.create_instances(
 ImageId='ami-0fc970315c2d38f01',
 MinCount=1,
 MaxCount=1,
 InstanceType='t2.nano',
 SecurityGroupIds=[ sg.group_id ] 
)

Answer 3

   // BELOW CODE WILL CREATE AWS INSTANCE AND LINK IT WITH SECURITY GROUP
   // PROVIDER MENTIONING THE REGION AND THE ACCESS KEY FOR THE CLOUD
      provider "aws" {
        # Configuration options
        region= "us-east-2"
        access_key= "XXXX"
        secret_key= "XXXXXX"
      }
      // CREATING THE AMI INSTANCE AND ASSOCIATING TO THE SECURITY GROUP
      resource "aws_instance" "base" {
        ami = "ami-0277b52859bac6f4b"
        instance_type = "t2.micro"
        associate_public_ip_address = true
        key_name = "Linux"  // ASSOCIATING THE EXISTING LOGIN KEY PAIR NAME
        tags = {
            Name="terraform"  
        }
        //ASSOCIATING THE EXISTING SECURITY GROUP TO THE INSTANCE
        vpc_security_group_ids  = [ aws_security_group.customSecGrp.id ] 
      }

// CREATING A SECURITY WITH INBOUND AND OUTBOUND PORTS
resource "aws_security_group" "customSecGrp" {  
name = "customSecGrp"
description = "Security group allowing Inbound"

  tags = {
    Name = "customSecGrp"
  } 

ingress {
description = "SSL TLS from VPC" 
from_port = 443
to_port = 443 
protocol    = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
ingress {
  cidr_blocks = [ "0.0.0.0/0" ]
  description = "tomcat port from vpc"
  from_port = 8080
  protocol = "tcp"
  self = false
  to_port = 8080
} 
  egress { 
  from_port = 0
  to_port   = 0
  protocol  = "-1" 
  cidr_blocks = ["0.0.0.0/0"]
  }
}