创建Application Load Balancer时遇SecurityGroupId不支持属性错误求助

错误信息 #

Encountered unsupported property SecurityGroupId

问题模板 #

AWSTemplateFormatVersion: 2010-09-09

Description: AWS CloudFormation Sample Template for creating LoadBalancer

Parameters:
  VPC2Block:
    Description: VPCId of your existing Virtual Private Cloud (VPC)
    Type: String
    Default: vpc-0c9a732125ac08541
  
  PublicSubnet03Block:
    Description: SubnetId of an existing subnet (for the primary network in your Virtual Private Cloud VPC)
    Type: String
    Default: subnet-0787f34404852ceb9

Resources:
  
  ApplicationLoadBalancer:
    Type: AWS::ElasticLoadBalancingV2::LoadBalancer
    Properties: 
      Name: MyApplicationLoadBalancer
      Type: application
      IpAddressType: ipv4
      Scheme: internet-facing
      SecurityGroupId: !Ref Albsg 
      SubnetId: !Ref PublicSubnet03Block
      Tags:
        - Key: Name
          Value: ALB

  HTTPListener:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
        Properties:
            LoadBalancerArn: !Ref ApplicationLoadBalancer
            Port: 80
            Protocol: "HTTP"
            DefaultActions: 
              - Type: forward
                TargetGroupArn: !Ref ALBTargetGroup
  
  
  ALBTargetGroup:
    Type: AWS::ElasticLoadBalancingV2::TargetGroup
    Properties:
      HealthCheckIntervalSeconds: 10
      HealthCheckPath: /
      HealthCheckTimeoutSeconds: 5
      HealthyThresholdCount: 2
      Matcher:
        HttpCode: 200,302
      Name: MyWebServers
      Port: 80
      Protocol: HTTP
      TargetType: instance
      UnhealthyThresholdCount: 5
      VpcId: !Ref VPC2Block
      

  Albsg:
    Type: 'AWS::EC2::SecurityGroup'
    Properties:
      GroupName: ALB-sg
      GroupDescription: Security group for Load balancer
      SecurityGroupIngress:
        - CidrIp: 0.0.0.0/0
          FromPort: '80'
          IpProtocol: tcp
          ToPort: '80'
      Tags:
        - Key: Name 
          Value: ALB_SG

Outputs:
  TargetGroupName:
    Value: !Ref ALBTargetGroup
    Description: Name of Target ARN

解决方案 #

你的模板存在两个属性名称错误：

• AWS::ElasticLoadBalancingV2::LoadBalancer不支持SecurityGroupId属性，正确属性名为SecurityGroups（复数形式，接受数组类型，可传入一个或多个安全组ID）
• 该资源同样不支持SubnetId属性，正确属性名为Subnets（复数形式，接受数组类型，推荐传入多个子网实现高可用）

修改后的ApplicationLoadBalancer资源部分如下：

ApplicationLoadBalancer:
  Type: AWS::ElasticLoadBalancingV2::LoadBalancer
  Properties: 
    Name: MyApplicationLoadBalancer
    Type: application
    IpAddressType: ipv4
    Scheme: internet-facing
    SecurityGroups: 
      - !Ref Albsg 
    Subnets: 
      - !Ref PublicSubnet03Block
    Tags:
      - Key: Name
        Value: ALB

替换原模板对应部分后，即可正常部署。

内容的提问来源于stack exchange，提问作者Geralt