data "aws_ssm_parameter" "latest_ami_vpc2" {
  name = "/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64"
}

resource "aws_instance" "vpc2-bastion-2" {
  ami = data.aws_ssm_parameter.latest_ami_vpc2.value
  subnet_id = aws_subnet.private_a-2.id
  instance_type = "t3.small"
  key_name = aws_key_pair.keypair.key_name
  vpc_security_group_ids = [aws_security_group.vpc2.id]
  associate_public_ip_address = false
  iam_instance_profile = aws_iam_instance_profile.ssm-bastion.name
  user_data = <<-EOF
    #!/bin/bash
    echo 'Skill53##' | passwd --stdin ec2-user
    yum update -y
    yum install -y <https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm>
    systemctl restart amazon-ssm-agent.service
    systemctl enable --now amazon-ssm-agent
  EOF
  tags = {
    Name = "gwangju-VPC2-Instance"
  }
  depends_on = [ aws_route_table.private_a-2,aws_route.vpc2-egress-pri-a-tgw,aws_vpc_endpoint.ec2-2,aws_vpc_endpoint.ec2-message-2,aws_vpc_endpoint.ssm-2,aws_vpc_endpoint.ssm-message-2,aws_vpc_endpoint_subnet_association.sub-a-2,aws_vpc_endpoint_subnet_association.sub-b-2,aws_vpc_endpoint_subnet_association.sub-a-message-2,aws_vpc_endpoint_subnet_association.sub-b-message-2,aws_vpc_endpoint_subnet_association.sub-a-ec2-2,aws_vpc_endpoint_subnet_association.sub-b-ec2-2,aws_vpc_endpoint_subnet_association.sub-a-ec2-message-2,aws_vpc_endpoint_subnet_association.sub-b-ec2-message-2 ]
}