app.py from flask import Flask, render_template, request import boto3 import logging import os app = Flask(__name__) logging.basicConfig(level=logging.INFO) logger = logging.getLogger(__name__) dynamodb = boto3.client('dynamodb') @app.route('/', methods=['GET', 'POST']) def index(): if request"> app.py from flask import Flask, render_template, request import boto3 import logging import os app = Flask(__name__) logging.basicConfig(level=logging.INFO) logger = logging.getLogger(__name__) dynamodb = boto3.client('dynamodb') @app.route('/', methods=['GET', 'POST']) def index(): if request"> app.py from flask import Flask, render_template, request import boto3 import logging import os app = Flask(__name__) logging.basicConfig(level=logging.INFO) logger = logging.getLogger(__name__) dynamodb = boto3.client('dynamodb') @app.route('/', methods=['GET', 'POST']) def index(): if request"> 
resource "aws_instance" "private-ec2-1" {
  ami = data.aws_ssm_parameter.latest_ami.value
  subnet_id = aws_subnet.private_a.id
  instance_type = "t3.micro"
  vpc_security_group_ids = [aws_security_group.gm-private-sg.id]
  iam_instance_profile = aws_iam_instance_profile.bastion.name
  user_data = <<-EOF
    #!/bin/bash
    echo "Skill53##" | passwd --stdin ec2-user
    sed -i 's|.*PasswordAuthentication.*|PasswordAuthentication yes|g' /etc/ssh/sshd_config
    systemctl restart sshd
    yum update -y
    yum install -y curl jq --allowerasing
    yum install -y python3-pip
    yum install -y zip --allowerasing
    cd /home/ec2-user
    cat <<SOS> app.py
    from flask import Flask, render_template, request
    import boto3
    import logging
    import os

    app = Flask(__name__)

    logging.basicConfig(level=logging.INFO)
    logger = logging.getLogger(__name__)

    dynamodb = boto3.client('dynamodb')

    @app.route('/', methods=['GET', 'POST'])
    def index():
        if request.method == 'POST':
            try:
                table_name = request.form['table_name']
                s3_bucket = request.form['s3_bucket']
                attribute1_value = request.form['attribute1_value']
                attribute2_value = request.form['attribute2_value']

                response = dynamodb.put_item(
                    TableName=table_name,
                    Item={
                        'PK': {'S': 'partition_key_value'},
                        'SK': {'S': 'sort_key_value'},        
                        'Attribute1': {'S': attribute1_value},
                        'Attribute2': {'S': attribute2_value}
                    }
                )

                logger.info(f"Item added to DynamoDB successfully. Attribute1: {attribute1_value}, Attribute2: {attribute2_value}")

                try:
                    with open('logs.log', 'a') as log_file:
                        log_file.write(f"Item added to DynamoDB successfully. Attribute1: {attribute1_value}, Attribute2: {attribute2_value}\\n")

                except Exception as e:
                    logger.error(f"Error writing logs to file: {e}")

                try:
                    file_name = 'logs.log'

                    with open(file_name, 'rb') as data:
                        s3 = boto3.client('s3')
                        s3.upload_fileobj(data, s3_bucket, file_name)

                    logger.info("Logs uploaded to S3 successfully.")

                    os.remove(file_name)

                except Exception as e:
                    logger.error(f"Error uploading logs to S3: {e}")

            except Exception as e:
                logger.error(f"Error adding item to DynamoDB: {e}")
                return "Error adding item to DynamoDB"
        
        return render_template('index.html')

    @app.route('/healthcheck')
    def healthcheck():
        return "OK"

    if __name__ == "__main__":
        app.run(host='0.0.0.0', port=5000, debug=True)
    SOS
    curl "<https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip>" -o "awscliv2.zip"
    unzip awscliv2.zip
    sudo ./aws/install
    ln -s /usr/local/bin/aws /usr/bin/
    ln -s /usr/local/bin/aws_completer /usr/bin/
    mkdir /home/ec2-user/templates
    cat <<IND> /home/ec2-user/templates/index.html
    <!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>DynamoDB Items</title>
    </head>
    <body>
        <h1>Add Item to DynamoDB</h1>
        <form action="/" method="post">
            <label for="table_name">Table Name:</label>
            <input type="text" id="table_name" name="table_name"><br><br>
            
            <label for="attribute1_value">Attribute1:</label>
            <input type="text" id="attribute1_value" name="attribute1_value"><br><br>
            
            <label for="attribute2_value">Attribute2:</label>
            <input type="text" id="attribute2_value" name="attribute2_value"><br><br>
            
            <label for="s3_bucket">S3 Bucket Name:</label>
            <input type="text" id="s3_bucket" name="s3_bucket"><br><br>
            
            <input type="submit" value="Submit">
        </form>
    </body>
    </html>
    IND
    yum install -y lynx
  EOF
  tags = {
    Name = "gm-bastion"
  }
}

resource "aws_security_group" "gm-private-sg" {
  name = "gm-bastion-sg"
  vpc_id = aws_vpc.main.id

  ingress {
    protocol = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
    from_port = "22"
    to_port = "22"
  }

  ingress {
    protocol = "tcp"
    security_groups = [aws_security_group.lb-sg.id]
    from_port = "5000"
    to_port = "5000"
  }

  egress {
    protocol = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
    from_port = "443"
    to_port = "443"
  }

  egress {
    protocol = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
    from_port = "80"
    to_port = "80"
  }
    tags = {
    Name = "gm-bastion-sg"
  }
}