AWS untuk Pemula: Memulai Cloud Computing

# Pastikan AWS CLI sudah dikonfigurasi
aws configure
# Masukkan: AWS Access Key ID, Secret, Region, Output format

# Buat key pair untuk SSH
aws ec2 create-key-pair \
  --key-name my-key \
  --query 'KeyMaterial' \
  --output text > my-key.pem
chmod 400 my-key.pem

# Buat security group (firewall)
aws ec2 create-security-group \
  --group-name web-sg \
  --description "Allow HTTP and SSH"

# Tambah aturan firewall
aws ec2 authorize-security-group-ingress \
  --group-name web-sg \
  --protocol tcp --port 22 --cidr 0.0.0.0/0

aws ec2 authorize-security-group-ingress \
  --group-name web-sg \
  --protocol tcp --port 80 --cidr 0.0.0.0/0

# Launch EC2 instance (Free Tier eligible)
aws ec2 run-instances \
  --image-id ami-0123456789abcdef0 \
  --instance-type t3.micro \
  --key-name my-key \
  --security-groups web-sg \
  --count 1

# Cek status instance
aws ec2 describe-instances \
  --query 'Reservations[*].Instances[*].[InstanceId,State.Name,PublicIpAddress]' \
  --output table

# SSH ke instance
ssh -i my-key.pem ec2-user@

# Stop instance (hemat biaya saat tidak digunakan)
aws ec2 stop-instances --instance-ids i-1234567890abcdef0

# Hapus instance
aws ec2 terminate-instances --instance-ids i-1234567890abcdef0

# === BUCKET OPERATIONS ===
# Buat bucket
aws s3 mb s3://my-unique-bucket-name-2026

# Daftar semua bucket
aws s3 ls

# Daftar isi bucket
aws s3 ls s3://my-unique-bucket-name-2026/

# === FILE OPERATIONS ===
# Upload file
aws s3 cp photo.jpg s3://my-bucket/images/photo.jpg

# Upload direktori (recursive)
aws s3 sync ./dist s3://my-bucket/website/

# Download file
aws s3 cp s3://my-bucket/images/photo.jpg ./downloaded.jpg

# Hapus file
aws s3 rm s3://my-bucket/images/photo.jpg

# Pindah / rename
aws s3 mv s3://my-bucket/old.txt s3://my-bucket/new.txt

# === STATIC WEBSITE HOSTING ===
aws s3 website s3://my-bucket \
  --index-document index.html \
  --error-document error.html

# Set bucket public
aws s3api put-bucket-policy \
  --bucket my-bucket \
  --policy '{
    "Version": "2012-10-17",
    "Statement": [{
      "Effect": "Allow",
      "Principal": "*",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::my-bucket/*"
    }]
  }'

# Buat RDS PostgreSQL instance (Free Tier)
aws rds create-db-instance \
  --db-instance-identifier my-database \
  --db-instance-class db.t3.micro \
  --engine postgres \
  --engine-version 16.3 \
  --master-username admin \
  --master-user-password MySecurePassword123! \
  --allocated-storage 20 \
  --storage-type gp3 \
  --backup-retention-period 7 \
  --multi-az false \
  --publicly-accessible false

# Cek status database
aws rds describe-db-instances \
  --db-instance-identifier my-database \
  --query 'DBInstances[0].DBInstanceStatus'

# Dapatkan endpoint database
aws rds describe-db-instances \
  --db-instance-identifier my-database \
  --query 'DBInstances[0].Endpoint.Address'

# Connect dari EC2 di VPC yang sama
psql -h  -U admin -d mydb

# Snapshot manual (backup)
aws rds create-db-snapshot \
  --db-instance-identifier my-database \
  --db-snapshot-identifier my-snapshot-2026

# Hapus database (HATI-HATI!)
aws rds delete-db-instance \
  --db-instance-identifier my-database \
  --skip-final-snapshot

"""
AWS Lambda Function — API Handler
BeebaneLabs - AWS Tutorial
"""

import json
from datetime import datetime


def handler(event, context):
    """
    Lambda handler — entry point saat function dipanggil.
    
    Args:
        event: Data trigger (API Gateway, S3, dll)
        context: Info tentang runtime environment
    """
    
    # Parse request dari API Gateway
    http_method = event.get('httpMethod', 'GET')
    path = event.get('path', '/')
    query_params = event.get('queryStringParameters') or {}
    
    # Log untuk CloudWatch
    print(f"Request: {http_method} {path}")
    print(f"Query: {query_params}")
    
    # Response berdasarkan path
    if path == '/health':
        body = {
            'status': 'healthy',
            'timestamp': datetime.utcnow().isoformat(),
            'function_name': context.function_name,
            'memory_limit': context.memory_limit_in_mb,
            'remaining_time': context.get_remaining_time_in_millis()
        }
    elif path == '/hello':
        name = query_params.get('name', 'World')
        body = {
            'message': f'Hello, {name}!',
            'timestamp': datetime.utcnow().isoformat()
        }
    else:
        body = {
            'error': 'Not Found',
            'path': path
        }
        return {
            'statusCode': 404,
            'headers': {
                'Content-Type': 'application/json',
                'Access-Control-Allow-Origin': '*'
            },
            'body': json.dumps(body)
        }
    
    return {
        'statusCode': 200,
        'headers': {
            'Content-Type': 'application/json',
            'Access-Control-Allow-Origin': '*'
        },
        'body': json.dumps(body, default=str)
    }

# Buat deployment package
zip function.zip lambda_function.py

# Buat IAM role untuk Lambda
aws iam create-role \
  --role-name lambda-role \
  --assume-role-policy-document '{
    "Version": "2012-10-17",
    "Statement": [{
      "Effect": "Allow",
      "Principal": {"Service": "lambda.amazonaws.com"},
      "Action": "sts:AssumeRole"
    }]
  }'

# Attach policy
aws iam attach-role-policy \
  --role-name lambda-role \
  --policy-arn arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole

# Deploy Lambda function
aws lambda create-function \
  --function-name my-api \
  --runtime python3.12 \
  --role arn:aws:iam::123456789012:role/lambda-role \
  --handler lambda_function.handler \
  --zip-file fileb://function.zip \
  --timeout 30 \
  --memory-size 128

# Test invoke
aws lambda invoke \
  --function-name my-api \
  --payload '{"httpMethod":"GET","path":"/hello","queryStringParameters":{"name":"BeebaneLabs"}}' \
  --cli-binary-format raw-in-base64-out \
  response.json

cat response.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowS3ReadOnly",
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::my-bucket",
        "arn:aws:s3:::my-bucket/*"
      ]
    },
    {
      "Sid": "DenyDeleteAll",
      "Effect": "Deny",
      "Action": [
        "s3:DeleteBucket",
        "iam:DeleteUser"
      ],
      "Resource": "*"
    }
  ]
}

# Buat VPC
VPC_ID=$(aws ec2 create-vpc \
  --cidr-block 10.0.0.0/16 \
  --query 'Vpc.VpcId' --output text)
echo "VPC: $VPC_ID"

# Aktifkan DNS hostname
aws ec2 modify-vpc-attribute \
  --vpc-id $VPC_ID \
  --enable-dns-hostnames

# Buat public subnet
PUB_SUBNET=$(aws ec2 create-subnet \
  --vpc-id $VPC_ID \
  --cidr-block 10.0.1.0/24 \
  --availability-zone ap-southeast-1a \
  --query 'Subnet.SubnetId' --output text)

# Buat private subnet
PRIV_SUBNET=$(aws ec2 create-subnet \
  --vpc-id $VPC_ID \
  --cidr-block 10.0.10.0/24 \
  --availability-zone ap-southeast-1a \
  --query 'Subnet.SubnetId' --output text)

# Buat Internet Gateway
IGW_ID=$(aws ec2 create-internet-gateway \
  --query 'InternetGateway.InternetGatewayId' --output text)
aws ec2 attach-internet-gateway \
  --internet-gateway-id $IGW_ID --vpc-id $VPC_ID

# Route table untuk public subnet
RT_ID=$(aws ec2 create-route-table \
  --vpc-id $VPC_ID \
  --query 'RouteTable.RouteTableId' --output text)
aws ec2 create-route \
  --route-table-id $RT_ID \
  --destination-cidr-block 0.0.0.0/0 \
  --gateway-id $IGW_ID
aws ec2 associate-route-table \
  --route-table-id $RT_ID --subnet-id $PUB_SUBNET