amazon-web-services - 如何将我的 AWS Managed AD 链接到 cloudformation 中的 FSx 资源？

Question

我对云信息还很陌生。尝试通过加入我的 AWS Managed AD 为 AWS FSx 创建模板。这是我到目前为止所做的，当我在 AWS CF 控制台中执行时，它显示无法检索 AWS AD 的外部值，并且看起来像其他选项，我可以使用下拉菜单进行选择； AD 中，我没有通过下拉方式选择 AWS 托管的 Microsft AD。

AWSTemplateFormatVersion: 2010-09-09
Parameters:
 MyAWSManagedADServiceID:
  Description: "AWS Managed Active Directoy Service ID, (e.g d-90670817d3)"
  Type: 'AWS::DirectoryService::MicrosoftAD'
  # Type: String
 StorageCapacity:
  Description: "Type the Storage Capacity value in TB, default '2TB' storage"
  Type: Number
  Default: 2000
 MyFSxVPC:
  Description: "VPC to operate FSx file FileSystem, (e.g vpc-05f3704057d6dce71)"
  Type: AWS::EC2::VPC::Id
 MyPrivateSubnet01:
  Description: "The ID of Private Subnet 1 in Availability Zone 1 (e.g., subnet-a0246dcd)"
  Type: AWS::EC2::Subnet::Id
 MyPrivateSubnet02:
  Description: "The ID of the Private Subnet 2 in Availability Zone 2 (e.g., subnet-a0246dcd)"
  Type: AWS::EC2::Subnet::Id
 WindowsIngressSecurityGroupId:
  Description: "SecurityGroup ID for AWS FSx, (e.g sg-0fa88a05af8a49e03)"
  Type: AWS::EC2::SecurityGroup::Id

Resources:
  WindowsMadFileSystemWithAllConfigs:
    Type: 'AWS::FSx::FileSystem'
    Properties:
      FileSystemType: WINDOWS
      StorageCapacity: !Ref StorageCapacity
      StorageType: SSD
      SubnetIds:
        - !Ref MyPrivateSubnet01
        - !Ref MyPrivateSubnet02
      SecurityGroupIds:
        - !Ref WindowsIngressSecurityGroupId
      Tags:
        - Key: Name
          Value: my-fsx-multi-az
      WindowsConfiguration:
        ActiveDirectoryId: !Ref MyAWSManagedADServiceID
        ThroughputCapacity: 8
        WeeklyMaintenanceStartTime: '4:16:30'
        DailyAutomaticBackupStartTime: '01:00'
        AutomaticBackupRetentionDays: 2
        DeploymentType: MULTI_AZ_1
        PreferredSubnetId: !Ref PrivateSubnet01
        CopyTagsToBackups: false
Outputs:
  FileSystemId:
    Value: !Ref WindowsMadFileSystemWithAllConfigs

如何消除 AD 的此错误以及如何从该下拉菜单中选择 AWS Managed AD？

Answer 1

啊，我发现“Type: 'AWS::DirectoryService::MicrosoftAD'”不是 CF 模板接受的参数之一。引用:https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html最终使用字符串类型解决了问题，但是我们可以执行 ssm 并使用它。