Amazon web services CloudFormation模板失败,出现错误“0”;服务:AmazonEC2;身份代码:400;错误代码:不受支持的";

Amazon web services CloudFormation模板失败,出现错误“0”;服务:AmazonEC2;身份代码:400;错误代码:不受支持的";,amazon-web-services,amazon-cloudformation,aws-cloudformation-custom-resource,Amazon Web Services,Amazon Cloudformation,Aws Cloudformation Custom Resource,我已经用以下资源创建了CloudFormaton模板 --- Resources: InsuranceVPC: Type: AWS::EC2::VPC Properties: CidrBlock: 11.0.0.0/16 EnableDnsSupport: 'false' EnableDnsHostnames: 'false' InstanceTenancy: dedicated Tags: - Ke

我已经用以下资源创建了CloudFormaton模板

---
Resources: 
  InsuranceVPC:
    Type: AWS::EC2::VPC
    Properties:
      CidrBlock: 11.0.0.0/16
      EnableDnsSupport: 'false'
      EnableDnsHostnames: 'false'
      InstanceTenancy: dedicated
      Tags:
       - Key: work
         Value: insurance
       - Key: name
         Value: InsuranceVPC

  InsuranceInternetGateway:
    Type: AWS::EC2::InternetGateway
    Properties:
      Tags:
      - Key: work
        Value: insurance
      - Key: name
        Value: InsuranceInternetGateway

  InsuranceSubnet:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId:
        Ref: InsuranceVPC
      CidrBlock: 11.0.2.0/24
      AvailabilityZone: "ap-south-1a"
      Tags:
      - Key: work
        Value: insurance
      - Key: name
        Value: InsuranceSubnet

  AttachGateway:
    Type: AWS::EC2::VPCGatewayAttachment
    Properties:
      VpcId:
         Ref: InsuranceVPC
      InternetGatewayId:
         Ref: InsuranceInternetGateway

  Ec2Instance: 
    Type: AWS::EC2::Instance
    Properties: 
      ImageId: "ami-0732b62d310b80e97"
      InstanceType: "t2.medium"
      KeyName: "DevOpsAutomation"
      NetworkInterfaces: 
        - AssociatePublicIpAddress: "true"
          DeviceIndex: "0"
          GroupSet: 
            - Ref: "InsuranceSecurityGroup"
          SubnetId: 
            Ref: "InsuranceSubnet"

  InsuranceSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
        GroupDescription: Allow http and ssh to client host
        VpcId:
           Ref: InsuranceVPC
        SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: 0.0.0.0/0
        SecurityGroupEgress:
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: 0.0.0.0/0
除EC2Instance失败并出现以下错误外,所有资源创建均成功:

当前不支持请求的配置。请查看文档以了解支持的配置。(服务:AmazonEC2;状态代码:400;错误代码:不支持;请求ID:a59a2d39-3aa9-4f7b-9cbd-db05dca0d61e)

以下资源未能创建:[Ec2Instance]。使用请求的回滚

我检查的内容:

  • ImageID和InstanceType存在于同一区域(或AZ)
  • 满足所有其他对象及其依赖项
  • 虽然我知道我还没有创建路由表,但路由条目应该不会影响EC2实例资源的创建
  • 我是创建资源的特权用户

  • 请帮助或指导我这里缺少的内容

    您的VPC设置为专用租赁,这对您可以在其中使用的资源(包括某些实例类型)有限制

    某些AWS服务或其功能无法与实例租约设置为专用的VPC配合使用。请查看服务文档以确认是否存在任何限制

    某些实例类型无法启动到实例租约设置为专用的VPC中。有关支持的实例类型的更多信息,请参阅


    您应该检查上面的链接,与您的实例类型进行比较。

    I在我的沙盒帐户上启动了您的模板

    我发现了一些问题

    • 缺少依赖于实例的
      DependsOn
    • 专有网络拥有
    专用租赁
  • 和不正确的
    GroupSet
  • 我修改了模板,使其现在在
    us-east-1
    中完全工作。您必须将其调整到您自己的区域(如果不使用
    us-east-1
    ,AMI也需要更改回您原来的模板)


    非常感谢您提供了全面的答案,以及您为复制此内容所做的努力。这很有帮助!感谢您提供了更清晰的信息!这有助于获得见解!!没问题,祝您度过愉快的一天:)
    ---
    Resources: 
      InsuranceVPC:
        Type: AWS::EC2::VPC
        Properties:
          CidrBlock: 11.0.0.0/16
          EnableDnsSupport: 'false'
          EnableDnsHostnames: 'false'
          InstanceTenancy: default
          Tags:
           - Key: work
             Value: insurance
           - Key: name
             Value: InsuranceVPC
    
      InsuranceInternetGateway:
        Type: AWS::EC2::InternetGateway
        Properties:
          Tags:
          - Key: work
            Value: insurance
          - Key: name
            Value: InsuranceInternetGateway
    
      InsuranceSubnet:
        Type: AWS::EC2::Subnet
        Properties:
          VpcId:
            Ref: InsuranceVPC
          CidrBlock: 11.0.2.0/24
          AvailabilityZone: "us-east-1a"
          Tags:
          - Key: work
            Value: insurance
          - Key: name
            Value: InsuranceSubnet
    
      AttachGateway:
        Type: AWS::EC2::VPCGatewayAttachment
        Properties:
          VpcId:
             Ref: InsuranceVPC
          InternetGatewayId:
             Ref: InsuranceInternetGateway
    
      Ec2Instance: 
        Type: AWS::EC2::Instance
        DependsOn: AttachGateway
        Properties: 
          ImageId: "ami-08f3d892de259504d"
          InstanceType: "t2.medium"
          KeyName: "MyKeyPair"
          NetworkInterfaces: 
            - AssociatePublicIpAddress: "true"
              DeviceIndex: "0"
              GroupSet: 
                - !GetAtt InsuranceSecurityGroup.GroupId
              SubnetId: 
                Ref: "InsuranceSubnet"
    
      InsuranceSecurityGroup:
        Type: AWS::EC2::SecurityGroup
        Properties:
            GroupDescription: Allow http and ssh to client host
            VpcId:
               Ref: InsuranceVPC
            SecurityGroupIngress:
            - IpProtocol: tcp
              FromPort: 80
              ToPort: 80
              CidrIp: 0.0.0.0/0
            - IpProtocol: tcp
              FromPort: 22
              ToPort: 22
              CidrIp: 0.0.0.0/0
            SecurityGroupEgress:
            - IpProtocol: tcp
              FromPort: 80
              ToPort: 80
              CidrIp: 0.0.0.0/0