{
  "AWSTemplateFormatVersion":"2010-09-09",
  "Description":"NetflixOSS Aminator 2.0.174 - Template by Answers for AWS",
  "Parameters":{
    "InstanceType":{
      "Description":"Type of EC2 instances to launch",
      "Type":"String",
      "Default":"m3.medium",
      "AllowedValues" : [ "t1.micro", "m1.small", "m1.medium", "m1.large", "m1.xlarge", "m2.xlarge", "m2.2xlarge", "m2.4xlarge", "m3.medium", "m3.large", "m3.xlarge", "m3.2xlarge", "c1.medium", "c1.xlarge", "cg1.4xlarge" ],
      "ConstraintDescription" : "must be a valid EC2 instance type."
    },
    "KeyName":{
      "Description":"The EC2 Key Pair to allow SSH access to the instances",
      "Type":"String",
      "MinLength": "1",
      "MaxLength": "64",
      "AllowedPattern" : "[-_ a-zA-Z0-9]*",
      "ConstraintDescription" : "can contain only alphanumeric characters, spaces, dashes and underscores."
    }
  },
  
  "Mappings":{
    "AWSRegion2AMI":{
      "us-east-1":{
        "ami":"ami-89b6ece0"
      },
      "us-west-1":{
        "ami":"ami-36c6f073"
      },
      "us-west-2":{
        "ami":"ami-ecc65ddc"
      },
      "eu-west-1":{
        "ami":"ami-b957b5ce"
      },
      "sa-east-1":{
        "ami":"ami-a15bfdbc"
      },
      "ap-southeast-1":{
        "ami":"ami-16bbee44"
      },
      "ap-southeast-2":{
        "ami":"ami-e31884d9"
      },
      "ap-northeast-1":{
        "ami":"ami-53beda52"
      }
    }
  },

  "Resources" : {
    "AminatorIamRole":{
      "Type":"AWS::IAM::Role",
      "Properties":{
        "AssumeRolePolicyDocument":{
          "Statement":[
            {
              "Effect":"Allow",
              "Principal":{
                "Service":[
                  "ec2.amazonaws.com"
                ]
              },
              "Action":[
                "sts:AssumeRole"
              ]
            }
          ]
        },
        "Path":"/",
        "Policies":[
          {
            "PolicyName":"AminatorPolicy",
            "PolicyDocument":{
              "Statement": [
                {
                  "Effect": "Allow",
                  "Action": [
                    "ec2:AttachVolume",
                    "ec2:CopyImage",
                    "ec2:CopySnapshot",
                    "ec2:CreateImage",
                    "ec2:CreateSnapshot",
                    "ec2:CreateTags",
                    "ec2:CreateVolume",
                    "ec2:DeleteSnapshot",
                    "ec2:DeleteTags",
                    "ec2:DeleteVolume",
                    "ec2:DeregisterImage",
                    "ec2:DetachVolume",
                    "ec2:ModifyImageAttribute",
                    "ec2:ModifySnapshotAttribute",
                    "ec2:ModifyVolumeAttribute",
                    "ec2:RegisterImage",
                    "ec2:ResetImageAttribute",
                    "ec2:ResetSnapshotAttribute",
                    "ec2:Describe*",
                    "s3:Get*",
                    "s3:List*"
                  ],
                  "Resource": "*"
                }
              ]
            }
          }
        ]
      }
    },
    "AminatorInstanceProfile":{
      "Type":"AWS::IAM::InstanceProfile",
      "Properties":{
        "Path":"/",
        "Roles":[
          {
            "Ref":"AminatorIamRole"
          }
        ]
      }
    },
    
    "AminatorASG":{
      "Type":"AWS::AutoScaling::AutoScalingGroup",
      "Properties":{
        "AvailabilityZones":{
          "Fn::GetAZs":""
        },
        "LaunchConfigurationName":{
          "Ref":"AminatorLaunchConfig"
        },
        "MinSize":1,
        "MaxSize":1,
        "Cooldown":"120",
        "Tags":[
          {
            "Key":"Name",
            "Value":"Aminator",
            "PropagateAtLaunch":"true"
          }
        ]
      }
    },
    
    "AminatorLaunchConfig":{
      "Type":"AWS::AutoScaling::LaunchConfiguration",
      "Properties":{
        "KeyName":{
          "Ref":"KeyName"
        },
        "ImageId":{
          "Fn::FindInMap":[
            "AWSRegion2AMI",
            {
              "Ref":"AWS::Region"
            },
            "ami"
          ]
        },
        "SecurityGroups":[
          {
            "Ref":"AminatorSecurityGroup"
          }
        ],
        "InstanceType":{ "Ref": "InstanceType" },
        "IamInstanceProfile":{
          "Ref":"AminatorInstanceProfile"
        }
      }
    },
    
    "AminatorSecurityGroup":{
      "Type":"AWS::EC2::SecurityGroup",
      "Properties":{
        "GroupDescription":"Access to Aminator",
        "SecurityGroupIngress":[
          {
            "IpProtocol":"tcp",
            "FromPort":"22",
            "ToPort":"22",
            "CidrIp":"0.0.0.0/0"
          }
        ]
      }
    }
  }
}