import pulumi
import pulumi_aws as aws


my_key_pair = aws.ec2.KeyPair("mytest", 
    public_key="REDACTED"
)
size = 't2.micro'
ami = aws.get_ami(
    most_recent="true",
    owners=["679593333241"],
    filters=[
        {"name":"name","values":["CentOS Linux 7 x86_64 HVM EBS*"]},
        {"name":"architecture","values":["x86_64"]},
        {"name":"root-device-type","values":["ebs"]}
    ])

master_sg = aws.ec2.SecurityGroup('master_sg',
    description='Enable Salt master SSH access',
    egress=[
        { 'protocol': '-1', 'fromPort': 0, 'toPort': 0, 'cidrBlocks': [ "0.0.0.0/0" ] }
    ],
    ingress=[
        { 'protocol': 'tcp', 'from_port': 22, 'to_port': 22, 'cidr_blocks': ['0.0.0.0/0'] }
    ])

node2node_sg = aws.ec2.SecurityGroup('node2node_sg',
    description='Enable Salt node to node all access',
    ingress=[
        { 'protocol': '-1', 'from_port': 0, 'to_port': 0, 'self': True }
    ])

master_user_data = """#!/bin/bash -e
yum update -y
yum install -y <https://repo.saltstack.com/py3/redhat/salt-py3-repo-2019.2.el7.noarch.rpm>
yum install -y salt-master salt-ssh salt-cloud salt-api
sed -i "s|#auto_accept: False|auto_accept: True|g" /etc/salt/master
systemctl start salt-master
"""

master = aws.ec2.Instance('master',
    instance_type=size,
    security_groups=[master_sg.name, node2node_sg.name],
    ami=ami.id,
    key_name=my_key_pair,
    user_data=master_user_data)

master_public_ip = master.public_ip

minion_user_data = """#!/bin/bash -e
yum update -y
yum install -y <https://repo.saltstack.com/py3/redhat/salt-py3-repo-2019.2.el7.noarch.rpm>
yum install -y salt-minion salt-ssh salt-cloud salt-api
mkdir -p /etc/salt/minion.d
sed -i "s|#master: salt|master: %s|g" /etc/salt/minion
systemctl start salt-minion
""" % master.private_ip

minion = aws.ec2.Instance('minion',
    instance_type=size,
    security_groups=[master_sg.name, node2node_sg.name],
    ami=ami.id,
    key_name=my_key_pair,
    user_data=minion_user_data)

pulumi.export('sshLogin', "ssh -i ~/.ssh/id_rsa centos@%s" % master_public_ip)
pulumi.export('masterPrivateIp', master.private_ip)
pulumi.export('masterPublicHostName', master.public_dns)

sshLogin

ssh -i ~/.ssh/id_rsa centos@<pulumi.output.Output object at 0x10a8ed450>

apply

private_subnet_ids = []

private_subnet_2 = aws.ec2.Subnet(
    "app-subnet-2",
    vpc_id=vpc_id,
    availability_zone="us-west-2b",
    cidr_block="10.100.2.0/24",
    map_public_ip_on_launch = 'false',
    # Only assign public IP if we are exposing public subnets
    tags={
        "Name": "app-subnet-2",
    },)
private_subnet_ids.append(private_subnet_2)

for psubnet in private_subnet_ids:
    passociationname = str(psubnet.id) + "route_table_association"
    passociationname = aws.ec2.RouteTableAssociation(
    passociationname,
    subnet_id = psubnet.id,
    route_table_id = private_route_table.id,
    )

Type                              Name                                                                 Plan
     pulumi:pulumi:Stack               mgmt-vpc-mgmt-vpc-prod
 +   ├─ aws:ec2:RouteTableAssociation  <pulumi.output.Output object at 0x1052d64d0>route_table_association  create
 +   ├─ aws:ec2:RouteTableAssociation  <pulumi.output.Output object at 0x1052bd890>route_table_association  create
 +   ├─ aws:ec2:RouteTableAssociation  <pulumi.output.Output object at 0x1052e9b90>route_table_association  create
 +   ├─ aws:ec2:RouteTableAssociation  <pulumi.output.Output object at 0x1052e9210>route_table_association  create
 -   ├─ aws:ec2:RouteTableAssociation  <pulumi.output.Output object at 0x105a8f190>route_table_association  delete
 -   ├─ aws:ec2:RouteTableAssociation  <pulumi.output.Output object at 0x105aa8350>route_table_association  delete
 -   ├─ aws:ec2:RouteTableAssociation  <pulumi.output.Output object at 0x105a44650>route_table_association  delete
 -   └─ aws:ec2:RouteTableAssociation  <pulumi.output.Output object at 0x105aa87d0>route_table_association  delete

Outputs:
  + privatename     : "<pulumi.output.Output object at 0x1052bd890>route_table_association"

Resources:
    + 4 to create
    - 4 to delete
    8 changes. 18 unchanged

passociationname = psubnet.id.apply(lambda id: id + "route_table_association")

fastly:index:Servicev1 (testing123):
    error: Preview failed: unrecognized resource type (Read): fastly:index/servicev1:Servicev1

pulumi_python

"sourceVersion": "source-version",
  "secondarySourceVersions": {
    "sourceIdentifier": "secondary-source-identifier",
    "sourceVersion": "secondary-source-version"
  }, 
<https://docs.aws.amazon.com/codebuild/latest/userguide/create-project.html#create-project-cli>