如何通过CloudFormation先关联Elastic IP再执行EC2实例脚本？

首先明确：无法在AWS::EC2::Instance资源内部直接定义并关联Elastic IP（EIP），必须通过单独的AWS::EC2::EIP和AWS::EC2::EIPAssociation资源来实现绑定。

接下来解决执行顺序问题——要让依赖EIP的脚本在EIP绑定完成后再运行，核心思路是延迟UserData中脚本的执行，直到EIP成功关联到实例，具体有两种可行方案：

方案1：在UserData脚本中添加EIP绑定检查逻辑 #

直接在UserData里编写循环检查逻辑，确认实例公网IP与目标EIP匹配后，再执行业务脚本。示例YAML片段：

Resources:
  MyEC2Instance:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: t2.micro
      ImageId: ami-xxxxxx # 替换为你的目标AMI ID
      UserData:
        Fn::Base64: !Sub |
          #!/bin/bash
          # 等待EIP绑定完成
          TARGET_EIP=${MyEIP}
          while true; do
            CURRENT_IP=$(curl -s http://169.254.169.254/latest/meta-data/public-ipv4)
            if [ "$CURRENT_IP" = "$TARGET_EIP" ]; then
              break
            fi
            sleep 5
          done
          # 此处编写依赖EIP的业务脚本
          echo "EIP已绑定，开始执行业务逻辑"
          # ... 你的业务代码 ...

  MyEIP:
    Type: AWS::EC2::EIP
    Properties:
      Domain: vpc

  MyEIPAssociation:
    Type: AWS::EC2::EIPAssociation
    Properties:
      InstanceId: !Ref MyEC2Instance
      EIP: !Ref MyEIP

方案2：用CloudFormation cfn-init配合资源依赖 #

借助CloudFormation的cfn-init工具，将业务脚本拆分到实例元数据配置中，通过资源依赖加速EIP关联，并在配置中添加等待逻辑：

Resources:
  MyEC2Instance:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: t2.micro
      ImageId: ami-xxxxxx # 替换为你的目标AMI ID
      UserData:
        Fn::Base64: !Sub |
          #!/bin/bash
          yum install -y aws-cfn-bootstrap
          # 调用cfn-init拉取配置并执行
          /opt/aws/bin/cfn-init -v --stack ${AWS::StackName} --resource MyEC2Instance --region ${AWS::Region}
      Metadata:
        AWS::CloudFormation::Init:
          configSets:
            default: ['waitForEIP', 'runBusinessScript']
          waitForEIP:
            commands:
              01_wait_eip:
                command: !Sub |
                  TARGET_EIP=${MyEIP}
                  while true; do
                    CURRENT_IP=$(curl -s http://169.254.169.254/latest/meta-data/public-ipv4)
                    if [ "$CURRENT_IP" = "$TARGET_EIP" ]; then
                      exit 0
                    fi
                    sleep 5
                  done
          runBusinessScript:
            commands:
              01_run_script:
                command: |
                  echo "EIP绑定完成，执行业务脚本"
                  # ... 你的业务代码 ...
    DependsOn: MyEIPAssociation # 确保实例创建后立即触发EIP关联

  MyEIP:
    Type: AWS::EC2::EIP
    Properties:
      Domain: vpc

  MyEIPAssociation:
    Type: AWS::EC2::EIPAssociation
    Properties:
      InstanceId: !Ref MyEC2Instance
      EIP: !Ref MyEIP

关键说明 #

• DependsOn属性仅能保证EIPAssociation在实例创建后立即执行，但实例启动时UserData已开始运行，因此仍需脚本内的等待逻辑确保EIP实际绑定完成。
• 若使用非Amazon Linux系统，需调整cfn-bootstrap的安装命令（如Ubuntu使用apt-get install aws-cfn-bootstrap）。

内容的提问来源于stack exchange，提问作者Wilko