AWS CloudFormation 使用现有安全组

Question

我想在 cloudformation 模板上使用现有的安全组。 现在我有创建 2 SG 的模板，

 "InstanceMember1": {
      "Type": "AWS::EC2::Instance",
      "Properties": {
        "SubnetId": {
          "Ref": "privateSubnetA"
        },
        "SecurityGroupIds": [
          {
            "Ref": "MongoSg"
          },
          {
            "Ref": "mongoTrafficSG"
          } 
        ],
    }
}

"MongoSg": {
      "Type": "AWS::EC2::SecurityGroup",
      "Properties": {
        "GroupDescription": "MongoDB security group",
        "SecurityGroupIngress": [
          {
            "IpProtocol": "tcp",
            "FromPort": "22",
            "ToPort": "22",
            "SourceSecurityGroupId": {
              "Ref": "bastionSG"
            }
          }
        ],
        "VpcId": "%%vpc-id%%",
      }
}
}

现在我想给实例添加存在的安全组id，有什么建议吗？

Answer 1

您可以继续并指定安全组名称： http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2-instance-securitygroups

 "InstanceMember1": {
      "Type": "AWS::EC2::Instance",
      "Properties": {
        "SubnetId": {
          "Ref": "privateSubnetA"
        },
        "SecurityGroups": [ "mysuperawesomealreadyexistinggroup"],
    }
}