remove UI components

wtromano · wtromano · commit 7b402e74b8dc · 2024-08-20T07:51:36.000-04:00
diff --git a/workshops/serverless-testing-workshop/template.yaml b/workshops/serverless-testing-workshop/template.yaml
@@ -242,332 +242,6 @@ Resources:
                   name:
                     - !Ref UnicornInventoryBucket
 
-##################################################
-##################################################
-##### demo-app (begin)
-##################################################
-##################################################
-
-  #
-  # Networking
-  #  VPC, 2 Public Subnets, S3/ECR/Cloudwatch Service Endpoints, Internet Gateway
-  #
-
-  StreamlitVPC:
-    Type: AWS::EC2::VPC
-    Properties:
-      CidrBlock: 192.168.0.0/24
-      EnableDnsHostnames : true
-      EnableDnsSupport : true
-
-  StreamlitSubnet1:
-    Type: AWS::EC2::Subnet
-    Properties:
-      VpcId: !Ref StreamlitVPC
-      CidrBlock: 192.168.0.0/25
-      AvailabilityZone: !Sub "${AWS::Region}b"
-
-  StreamlitSubnet2:
-    Type: AWS::EC2::Subnet
-    Properties:
-      VpcId: !Ref StreamlitVPC
-      CidrBlock: 192.168.0.128/25
-      AvailabilityZone: !Sub "${AWS::Region}c"
-
-  StreamlitInternetGateway:
-    Type: AWS::EC2::InternetGateway
-
-  StreamlitGatewayAttachment:
-    Type: AWS::EC2::VPCGatewayAttachment
-    Properties:
-      InternetGatewayId: !Ref StreamlitInternetGateway
-      VpcId: !Ref StreamlitVPC
-
-  StreamlitSecurityGroup:
-    Type: AWS::EC2::SecurityGroup
-    Properties:
-      GroupDescription: "Streamlit UI Security Group"
-      GroupName: !Sub "${AWS::StackName}-ds-sg"
-      SecurityGroupEgress:
-         - IpProtocol: tcp
-           FromPort: 0
-           ToPort: 65535
-           CidrIp: 0.0.0.0/0
-           Description: Allow outbound access
-      SecurityGroupIngress:
-        - IpProtocol: tcp
-          FromPort: 8501
-          ToPort: 8501
-          CidrIp: 0.0.0.0/0
-          Description: Inbound only on Streamlit port
-      VpcId: !Ref StreamlitVPC
-
-  EndpointSecurityGroup:
-    Type: AWS::EC2::SecurityGroup
-    Properties:
-      GroupDescription: "Streamlit UI Endpoint Security Group"
-      GroupName: !Sub "${AWS::StackName}-ep-sg"
-      SecurityGroupEgress:
-         - IpProtocol: tcp
-           FromPort: 0
-           ToPort: 65535
-           CidrIp: 0.0.0.0/0
-           Description: Allow outbound access
-      SecurityGroupIngress:
-        - IpProtocol: tcp
-          FromPort: 0
-          ToPort: 65535
-          SourceSecurityGroupId: !Ref StreamlitSecurityGroup
-          Description: Allow inbound from Streamlit sg only
-      VpcId: !Ref StreamlitVPC
-
-  StreamlitRouteTable:
-    Type: 'AWS::EC2::RouteTable'
-    Properties:
-      VpcId: !Ref StreamlitVPC
-
-  InternetGatewayRoute:
-    Type: AWS::EC2::Route
-    Properties:
-      GatewayId: !Ref StreamlitInternetGateway
-      RouteTableId: !Ref StreamlitRouteTable
-      DestinationCidrBlock: 0.0.0.0/0
-
-  SubnetRouteTableAssociation1:
-    Type: 'AWS::EC2::SubnetRouteTableAssociation'
-    Properties:
-      SubnetId: !Ref StreamlitSubnet1
-      RouteTableId: !Ref StreamlitRouteTable
-
-  SubnetRouteTableAssociation2:
-    Type: 'AWS::EC2::SubnetRouteTableAssociation'
-    Properties:
-      SubnetId: !Ref StreamlitSubnet2
-      RouteTableId: !Ref StreamlitRouteTable
-
-  StreamlitVPCEndpointECRApi:
-    Type: AWS::EC2::VPCEndpoint
-    Properties:
-      SecurityGroupIds:
-        - !Ref EndpointSecurityGroup
-      ServiceName: !Sub 'com.amazonaws.${AWS::Region}.ecr.api'
-      SubnetIds:
-        - !Ref StreamlitSubnet1
-        - !Ref StreamlitSubnet2
-      VpcEndpointType: Interface
-      VpcId: !Ref StreamlitVPC
-      PrivateDnsEnabled: true
-
-  StreamlitVPCEndpointDocker:
-    Type: AWS::EC2::VPCEndpoint
-    Properties:
-      SecurityGroupIds:
-        - !Ref EndpointSecurityGroup
-      ServiceName: !Sub 'com.amazonaws.${AWS::Region}.ecr.dkr'
-      SubnetIds:
-        - !Ref StreamlitSubnet1
-        - !Ref StreamlitSubnet2
-      VpcEndpointType: Interface
-      VpcId: !Ref StreamlitVPC
-      PrivateDnsEnabled: true
-
-  StreamlitVPCEndpointLogs:
-    Type: AWS::EC2::VPCEndpoint
-    Properties:
-      SecurityGroupIds:
-        - !Ref EndpointSecurityGroup
-      ServiceName: !Sub 'com.amazonaws.${AWS::Region}.logs'
-      SubnetIds: 
-        - !Ref StreamlitSubnet1
-        - !Ref StreamlitSubnet2
-      VpcEndpointType: Interface
-      VpcId: !Ref StreamlitVPC
-      PrivateDnsEnabled: true
-
-  StreamlitVPCEndpointS3:
-    Type: AWS::EC2::VPCEndpoint
-    Properties:
-      ServiceName: !Sub 'com.amazonaws.${AWS::Region}.s3'
-      VpcEndpointType: Gateway
-      VpcId: !Ref StreamlitVPC
-      RouteTableIds:
-        - !Ref StreamlitRouteTable
-
-  LoadBalancer:
-    Type: AWS::ElasticLoadBalancingV2::LoadBalancer
-    Properties:
-      Subnets:
-        - !Ref StreamlitSubnet1
-        - !Ref StreamlitSubnet2
-      SecurityGroups:
-        - !Ref   StreamlitSecurityGroup
-
-  LoadBalancerListener:
-    Type: AWS::ElasticLoadBalancingV2::Listener
-    Properties:
-      LoadBalancerArn: !Ref LoadBalancer
-      Port: 8501
-      Protocol: HTTP
-      DefaultActions:
-        - Type: forward
-          TargetGroupArn: !Ref TargetGroup
-
-  TargetGroup:
-    Type: AWS::ElasticLoadBalancingV2::TargetGroup
-    Properties:
-      Name: !Sub "${AWS::StackName}-tg-http"
-      VpcId: !Ref StreamlitVPC
-      Port: 8501
-      Protocol: HTTP
-      TargetType: ip
-      HealthCheckEnabled: true
-      HealthCheckIntervalSeconds: 60
-      HealthCheckPath: "/_stcore/health"
-      HealthCheckPort: 8501
-      HealthCheckProtocol: HTTP
-      TargetGroupAttributes:
-        - Key: stickiness.enabled
-          Value: "true"
-        - Key: stickiness.type
-          Value: lb_cookie
-        - Key: stickiness.lb_cookie.duration_seconds
-          Value: "86500"
-
-  ECSTask:
-    Type: AWS::ECS::TaskDefinition
-    DependsOn: LoadBalancerListener
-    Properties:
-      RequiresCompatibilities:
-        - FARGATE
-      Cpu: '2048'
-      Memory: '4096'
-      NetworkMode: awsvpc
-      RuntimePlatform:
-        CpuArchitecture: "X86_64"
-        OperatingSystemFamily: "LINUX"
-      ExecutionRoleArn: !Ref ExecutionRole
-      TaskRoleArn: !Ref TaskRole
-      ContainerDefinitions:
-        - Name: "streamlit"
-          Image: !Sub "${AWS::AccountId}.dkr.ecr.${AWS::Region}.amazonaws.com/urs-ui"
-          MemoryReservation: 2048
-          Cpu: 2048
-          Memory: 4096
-          Essential: true
-          PortMappings:
-            - ContainerPort: 8501
-          Environment:
-            - Name: BACKEND_STACK_NAME
-              Value: !Sub "{AWS::StackName}"
-          LogConfiguration:
-            LogDriver: awslogs
-            Options:
-              awslogs-create-group: "true"
-              awslogs-group: !Sub "/ecs/${AWS::StackName}-ECSTask"
-              awslogs-region: !Sub "${AWS::Region}"
-              awslogs-stream-prefix: "ecs"
-
-  ECSCluster:
-    Type: 'AWS::ECS::Cluster'
-    Properties:
-      ClusterName: !Sub "${AWS::StackName}-cluster"
-
-  ECSService:
-    Type: 'AWS::ECS::Service'
-    Properties:
-      Cluster: !Ref ECSCluster
-      TaskDefinition: !Ref ECSTask
-      DesiredCount: 1
-      LaunchType: FARGATE
-      ServiceName: !Sub "${AWS::StackName}-svc"
-      SchedulingStrategy: "REPLICA"
-      LoadBalancers:
-        - ContainerName: "streamlit"
-          ContainerPort: !Ref iECRStreamlitPort
-          TargetGroupArn: !Ref TargetGroup
-      HealthCheckGracePeriodSeconds: 50
-      NetworkConfiguration:
-        AwsvpcConfiguration:
-          AssignPublicIp: ENABLED
-          SecurityGroups:
-            - !Ref StreamlitSecurityGroup
-          Subnets:
-            - !Ref StreamlitSubnet1
-            - !Ref StreamlitSubnet2
-
-  ExecutionRole:
-    Type: AWS::IAM::Role
-    Properties:
-      RoleName: !Sub "${AWS::StackName}-execution-role"
-      AssumeRolePolicyDocument:
-        Statement:
-          - Effect: Allow
-            Principal:
-              Service:
-                - ecs.amazonaws.com
-                - ecs-tasks.amazonaws.com
-            Action: 'sts:AssumeRole'
-      Policies:
-        - PolicyName: cw
-          PolicyDocument:
-            Version: "2012-10-17"
-            Statement:
-              - Effect: Allow
-                Action:
-                  - logs:CreateLogGroup
-                  - logs:CreateLogStream
-                  - logs:PutLogEvents
-                Resource: '*'
-        - PolicyName: s3-read-access-policy
-          PolicyDocument:
-            Version: "2012-10-17"
-            Statement:
-              - Effect: Allow
-                Action:
-                  - s3:GetObject
-                  - s3:ListBucket
-                  - s3:GetBucketLocation
-                  - s3:GetObjectVersion
-                  - s3:GetLifecycleConfiguration
-                  - s3:PutObject
-                Resource: 
-                  - !Sub "arn:aws:s3:::unicorn-inv-${AWS::StackName}-${AWS::AccountId}"
-                  - !Sub "arn:aws:s3:::unicorn-inv-${AWS::StackName}-${AWS::AccountId}/*"
-        - PolicyName: ecr_access_policy
-          PolicyDocument:
-            Version: "2012-10-17"
-            Statement:
-              - Effect: Allow
-                Action:
-                  - ecr:GetAuthorizationToken
-                  - ecr:BatchCheckLayerAvailability
-                  - ecr:GetDownloadUrlForLayer
-                  - ecr:BatchGetImage
-                Resource: "*"
-        - PolicyName: stack_describe_for_config
-          PolicyDocument:
-            Version: "2012-10-17"
-            Statement:
-              - Effect: Allow
-                Action:
-                  - cloudformation:DescribeStacks
-                Resource: 
-                  - !Sub "arn:aws:cloudformation:${AWS::Region}:${AWS::AccountId}:stack/${AWS::StackName}"
-                  - !Sub "arn:aws:cloudformation:${AWS::Region}:${AWS::AccountId}:stack/${AWS::StackName}"
-  TaskRole:
-    Type: AWS::IAM::Role
-    Properties:
-      RoleName: !Sub "${AWS::StackName}-task-role"
-      AssumeRolePolicyDocument:
-        Statement:
-          - Effect: Allow
-            Principal:
-              Service: ecs-tasks.amazonaws.com
-            Action: 'sts:AssumeRole'
-
-
-
-
 Outputs:
   # ServerlessRestApi is an implicit API created out of Events key under Serverless::Function
   # Find out more about other implicit resources you can reference within SAM
@@ -587,6 +261,3 @@ Outputs:
   GetFileValidatorARN:
     Description: "ARN of the Lambda function required in the 'OPTIONAL: Invoke a Lambda function in the cloud' section."
     Value: !GetAtt FileValidator.Arn
-  oUiDnsName:
-    Description: Host UI web link name
-    Value: !Sub "http://${LoadBalancer.DNSName}:${iECRStreamlitPort}"
