AWS CloudFormation：对引起错误的子网的引用

Question

我正在尝试构建一个AWS CloudFormation模板以创建VPC，公共子网，然后将EC2实例启动到该子网中。当我尝试将EC2实例启动到新创建的子网中时，虽然能够创建VPC和子网资源，但会出现错误：

The requested configuration is currently not supported. Please check the documentation for supported configurations. (Service: AmazonEC2; Status Code: 400; Error Code: Unsupported; Request ID: 953bf578-375e-4d4a-bc27-b7193543ea94)

如果我注释掉EC2创建块中对子网的引用，则脚本可以工作，但实例将启动到默认子网中，而不是脚本中较早创建的实例（这不是我想要的）。

脚本：

Resources:
  VPC:
    Type: 'AWS::EC2::VPC'
    Properties:
      CidrBlock: 10.0.0.0/16
      EnableDnsSupport: 'false'
      EnableDnsHostnames: 'false'
      InstanceTenancy: dedicated
  PublicSubnet:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref VPC
      CidrBlock: 10.0.0.0/24
      AvailabilityZone: !Select [ 0, !GetAZs ]
  InternetGateway:
    Type: 'AWS::EC2::InternetGateway'
    DependsOn: VPC
  AttachGateway:
    Type: 'AWS::EC2::VPCGatewayAttachment'
    Properties:
      VpcId: !Ref VPC
      InternetGatewayId: !Ref InternetGateway
  PublicRouteTable:
    Type: AWS::EC2::RouteTable
    Properties:
      VpcId: !Ref VPC
  PublicRoute: 
    Type: 'AWS::EC2::Route'
    DependsOn: 'AttachGateway'
    Properties:
      RouteTableId: !Ref PublicRouteTable
      DestinationCidrBlock: 0.0.0.0/0
      GatewayId: !Ref InternetGateway
  PublicSubnetRouteTableAssociation:
    Type: 'AWS::EC2::SubnetRouteTableAssociation'
    Properties:
      SubnetId: !Ref PublicSubnet
      RouteTableId: !Ref PublicRouteTable
  InstanceSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: Allow http to client host
      VpcId: !Ref VPC
      SecurityGroupIngress:
      - IpProtocol: tcp
        FromPort: 80
        ToPort: 80
        CidrIp: 0.0.0.0/0
      - IpProtocol: tcp
        FromPort: 22
        ToPort: 22
        CidrIp: 0.0.0.0/0
  Ec2Instance:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: t2.micro
      ImageId: ami-0323c3dd2da7fb37d
      SubnetId: !Ref PublicSubnet  # The offending line (?)
      KeyName: MyEC2KeyPair

Answer 1

这是您的VPC租期专用的结果。

我可以确认t2实例不支持专用主机。要么删除VPC的专用托管，要么将您的实例类型更新为其他类型。

您可以将VPC租约更新为默认值，它将随共享主机一起返回，或者查看受支持的T3可爆实例。

查看其他信息：https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-instance.html