# 起動テンプレートを作成
aws ec2 create-launch-template \
  --launch-template-name web-server-template \
  --version-description "v1.0 - NGINX + Node.js" \
  --launch-template-data '{
    "ImageId": "ami-0abcdef1234567890",
    "InstanceType": "t3.small",
    "KeyName": "my-key-pair",
    "SecurityGroupIds": ["sg-0123456789abcdef0"],
    "IamInstanceProfile": {
      "Name": "EC2-WebServer-Profile"
    },
    "BlockDeviceMappings": [
      {
        "DeviceName": "/dev/xvda",
        "Ebs": {
          "VolumeSize": 30,
          "VolumeType": "gp3",
          "Encrypted": true
        }
      }
    ],
    "MetadataOptions": {
      "HttpTokens": "required",
      "HttpEndpoint": "enabled"
    },
    "Monitoring": {
      "Enabled": true
    },
    "TagSpecifications": [
      {
        "ResourceType": "instance",
        "Tags": [
          {"Key": "Name", "Value": "web-server"},
          {"Key": "Environment", "Value": "production"}
        ]
      }
    ],
    "UserData": "'$(base64 -w 0 startup.sh)'"
  }'
 
# 起動テンプレートの新バージョンを作成
aws ec2 create-launch-template-version \
  --launch-template-name web-server-template \
  --version-description "v2.0 - Graviton migration" \
  --source-version 1 \
  --launch-template-data '{
    "ImageId": "ami-0fedcba9876543210",
    "InstanceType": "t4g.small"
  }'
 
# デフォルトバージョンの設定
aws ec2 modify-launch-template \
  --launch-template-name web-server-template \
  --default-version 2
 
# 起動テンプレートのバージョン一覧
aws ec2 describe-launch-template-versions \
  --launch-template-name web-server-template \
  --query 'LaunchTemplateVersions[].[VersionNumber,VersionDescription,LaunchTemplateData.InstanceType]' \
  --output table

# Auto Scaling グループを作成
aws autoscaling create-auto-scaling-group \
  --auto-scaling-group-name web-asg \
  --launch-template LaunchTemplateName=web-server-template,Version='$Latest' \
  --min-size 2 \
  --max-size 10 \
  --desired-capacity 2 \
  --vpc-zone-identifier "subnet-aaa,subnet-bbb,subnet-ccc" \
  --target-group-arns "arn:aws:elasticloadbalancing:ap-northeast-1:123456789012:targetgroup/web-tg/xxx" \
  --health-check-type ELB \
  --health-check-grace-period 300 \
  --default-cooldown 300 \
  --termination-policies '["OldestLaunchTemplate", "OldestInstance"]' \
  --new-instances-protected-from-scale-in \
  --capacity-rebalance \
  --tags '[
    {"Key": "Name", "Value": "web-server", "PropagateAtLaunch": true},
    {"Key": "Environment", "Value": "production", "PropagateAtLaunch": true}
  ]'
 
# ASG の状態確認
aws autoscaling describe-auto-scaling-groups \
  --auto-scaling-group-names web-asg \
  --query 'AutoScalingGroups[0].{Min:MinSize,Max:MaxSize,Desired:DesiredCapacity,Instances:Instances[*].{Id:InstanceId,AZ:AvailabilityZone,Health:HealthStatus,State:LifecycleState}}' \
  --output json

# 混合インスタンスポリシーで ASG を作成
aws autoscaling create-auto-scaling-group \
  --auto-scaling-group-name web-asg-mixed \
  --mixed-instances-policy '{
    "LaunchTemplate": {
      "LaunchTemplateSpecification": {
        "LaunchTemplateName": "web-server-template",
        "Version": "$Latest"
      },
      "Overrides": [
        {"InstanceType": "t4g.small", "WeightedCapacity": "1"},
        {"InstanceType": "t4g.medium", "WeightedCapacity": "2"},
        {"InstanceType": "t3.small", "WeightedCapacity": "1"},
        {"InstanceType": "t3.medium", "WeightedCapacity": "2"},
        {"InstanceType": "m6g.large", "WeightedCapacity": "4"},
        {"InstanceType": "m5.large", "WeightedCapacity": "4"}
      ]
    },
    "InstancesDistribution": {
      "OnDemandBaseCapacity": 2,
      "OnDemandPercentageAboveBaseCapacity": 25,
      "SpotAllocationStrategy": "capacity-optimized",
      "SpotMaxPrice": ""
    }
  }' \
  --min-size 2 \
  --max-size 20 \
  --desired-capacity 4 \
  --vpc-zone-identifier "subnet-aaa,subnet-bbb,subnet-ccc" \
  --target-group-arns "arn:aws:elasticloadbalancing:ap-northeast-1:123456789012:targetgroup/web-tg/xxx" \
  --health-check-type ELB \
  --health-check-grace-period 300
 
# 結果:
# - ベースの 2 台はオンデマンド（安定性確保）
# - 追加分の 75% はスポット（コスト削減）
# - 追加分の 25% はオンデマンド（可用性確保）
# - capacity-optimized で中断リスクが低いプールを自動選択

# CPU 使用率 60% を維持するポリシー
aws autoscaling put-scaling-policy \
  --auto-scaling-group-name web-asg \
  --policy-name cpu-target-tracking \
  --policy-type TargetTrackingScaling \
  --target-tracking-configuration '{
    "PredefinedMetricSpecification": {
      "PredefinedMetricType": "ASGAverageCPUUtilization"
    },
    "TargetValue": 60.0,
    "ScaleInCooldown": 300,
    "ScaleOutCooldown": 60,
    "DisableScaleIn": false
  }'
 
# リクエスト数ベースのポリシー
aws autoscaling put-scaling-policy \
  --auto-scaling-group-name web-asg \
  --policy-name request-count-tracking \
  --policy-type TargetTrackingScaling \
  --target-tracking-configuration '{
    "PredefinedMetricSpecification": {
      "PredefinedMetricType": "ALBRequestCountPerTarget",
      "ResourceLabel": "app/my-alb/xxx/targetgroup/web-tg/yyy"
    },
    "TargetValue": 1000.0
  }'
 
# カスタムメトリクスベースのポリシー（SQS キュー長）
aws autoscaling put-scaling-policy \
  --auto-scaling-group-name worker-asg \
  --policy-name sqs-queue-tracking \
  --policy-type TargetTrackingScaling \
  --target-tracking-configuration '{
    "CustomizedMetricSpecification": {
      "MetricName": "ApproximateNumberOfMessagesVisible",
      "Namespace": "AWS/SQS",
      "Dimensions": [
        {"Name": "QueueName", "Value": "my-worker-queue"}
      ],
      "Statistic": "Average"
    },
    "TargetValue": 10.0
  }'

# スケールアウト: CPU に応じて段階的に台数追加
aws autoscaling put-scaling-policy \
  --auto-scaling-group-name web-asg \
  --policy-name cpu-step-scale-out \
  --policy-type StepScaling \
  --adjustment-type ChangeInCapacity \
  --step-adjustments '[
    {"MetricIntervalLowerBound": 0, "MetricIntervalUpperBound": 20, "ScalingAdjustment": 1},
    {"MetricIntervalLowerBound": 20, "MetricIntervalUpperBound": 40, "ScalingAdjustment": 2},
    {"MetricIntervalLowerBound": 40, "ScalingAdjustment": 4}
  ]' \
  --metric-aggregation-type Average
 
# 対応する CloudWatch アラーム
aws cloudwatch put-metric-alarm \
  --alarm-name "web-asg-cpu-high" \
  --namespace AWS/EC2 \
  --metric-name CPUUtilization \
  --dimensions Name=AutoScalingGroupName,Value=web-asg \
  --statistic Average \
  --period 60 \
  --evaluation-periods 2 \
  --threshold 60 \
  --comparison-operator GreaterThanThreshold \
  --alarm-actions "arn:aws:autoscaling:ap-northeast-1:123456789012:scalingPolicy:xxx:autoScalingGroupName/web-asg:policyName/cpu-step-scale-out"

# 平日 9:00 (JST) にスケールアウト
aws autoscaling put-scheduled-update-group-action \
  --auto-scaling-group-name web-asg \
  --scheduled-action-name weekday-scale-out \
  --recurrence "0 0 * * MON-FRI" \
  --min-size 4 \
  --max-size 10 \
  --desired-capacity 4 \
  --time-zone "Asia/Tokyo"
 
# 平日 22:00 (JST) にスケールイン
aws autoscaling put-scheduled-update-group-action \
  --auto-scaling-group-name web-asg \
  --scheduled-action-name weekday-scale-in \
  --recurrence "0 13 * * MON-FRI" \
  --min-size 2 \
  --max-size 10 \
  --desired-capacity 2 \
  --time-zone "Asia/Tokyo"
 
# 週末は最小構成
aws autoscaling put-scheduled-update-group-action \
  --auto-scaling-group-name web-asg \
  --scheduled-action-name weekend-scale-down \
  --recurrence "0 0 * * SAT" \
  --min-size 2 \
  --max-size 4 \
  --desired-capacity 2 \
  --time-zone "Asia/Tokyo"
 
# スケジュール一覧の確認
aws autoscaling describe-scheduled-actions \
  --auto-scaling-group-name web-asg \
  --output table

# 予測スケーリングを有効化
aws autoscaling put-scaling-policy \
  --auto-scaling-group-name web-asg \
  --policy-name predictive-scaling \
  --policy-type PredictiveScaling \
  --predictive-scaling-configuration '{
    "MetricSpecifications": [{
      "TargetValue": 60.0,
      "PredefinedMetricPairSpecification": {
        "PredefinedMetricType": "ASGCPUUtilization"
      }
    }],
    "Mode": "ForecastAndScale",
    "SchedulingBufferTime": 300,
    "MaxCapacityBreachBehavior": "HonorMaxCapacity"
  }'
 
# 予測結果の確認
aws autoscaling get-predictive-scaling-forecast \
  --auto-scaling-group-name web-asg \
  --policy-name predictive-scaling \
  --start-time "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
  --end-time "$(date -u -v+2d +%Y-%m-%dT%H:%M:%SZ)"

# 起動時のライフサイクルフック（設定完了まで待機）
aws autoscaling put-lifecycle-hook \
  --auto-scaling-group-name web-asg \
  --lifecycle-hook-name launch-hook \
  --lifecycle-transition autoscaling:EC2_INSTANCE_LAUNCHING \
  --heartbeat-timeout 300 \
  --default-result CONTINUE \
  --notification-target-arn arn:aws:sns:ap-northeast-1:123456789012:asg-lifecycle
 
# 終了時のライフサイクルフック（ログ退避・接続ドレイン）
aws autoscaling put-lifecycle-hook \
  --auto-scaling-group-name web-asg \
  --lifecycle-hook-name terminate-hook \
  --lifecycle-transition autoscaling:EC2_INSTANCE_TERMINATING \
  --heartbeat-timeout 600 \
  --default-result CONTINUE \
  --notification-target-arn arn:aws:sns:ap-northeast-1:123456789012:asg-lifecycle
 
# ライフサイクルアクション完了通知
aws autoscaling complete-lifecycle-action \
  --auto-scaling-group-name web-asg \
  --lifecycle-hook-name launch-hook \
  --instance-id i-0123456789abcdef0 \
  --lifecycle-action-result CONTINUE

# ALB を作成
ALB_ARN=$(aws elbv2 create-load-balancer \
  --name web-alb \
  --subnets subnet-aaa subnet-bbb subnet-ccc \
  --security-groups sg-alb-xxx \
  --scheme internet-facing \
  --type application \
  --ip-address-type ipv4 \
  --tags Key=Environment,Value=production \
  --query 'LoadBalancers[0].LoadBalancerArn' --output text)
 
# ALB のアクセスログを S3 に出力
aws elbv2 modify-load-balancer-attributes \
  --load-balancer-arn $ALB_ARN \
  --attributes '[
    {"Key": "access_logs.s3.enabled", "Value": "true"},
    {"Key": "access_logs.s3.bucket", "Value": "my-alb-logs-bucket"},
    {"Key": "access_logs.s3.prefix", "Value": "web-alb"},
    {"Key": "idle_timeout.timeout_seconds", "Value": "60"},
    {"Key": "routing.http.drop_invalid_header_fields.enabled", "Value": "true"},
    {"Key": "routing.http2.enabled", "Value": "true"}
  ]'
 
# ターゲットグループを作成
TG_ARN=$(aws elbv2 create-target-group \
  --name web-tg \
  --protocol HTTP --port 80 \
  --vpc-id vpc-xxx \
  --target-type instance \
  --health-check-path /health \
  --health-check-interval-seconds 30 \
  --health-check-timeout-seconds 5 \
  --healthy-threshold-count 2 \
  --unhealthy-threshold-count 3 \
  --matcher '{"HttpCode": "200-299"}' \
  --query 'TargetGroups[0].TargetGroupArn' --output text)
 
# ターゲットグループの属性設定
aws elbv2 modify-target-group-attributes \
  --target-group-arn $TG_ARN \
  --attributes '[
    {"Key": "deregistration_delay.timeout_seconds", "Value": "30"},
    {"Key": "slow_start.duration_seconds", "Value": "60"},
    {"Key": "stickiness.enabled", "Value": "true"},
    {"Key": "stickiness.type", "Value": "lb_cookie"},
    {"Key": "stickiness.lb_cookie.duration_seconds", "Value": "3600"}
  ]'
 
# HTTPS リスナーを作成
aws elbv2 create-listener \
  --load-balancer-arn $ALB_ARN \
  --protocol HTTPS --port 443 \
  --certificates CertificateArn=arn:aws:acm:ap-northeast-1:123456789012:certificate/xxx \
  --default-actions Type=forward,TargetGroupArn=$TG_ARN \
  --ssl-policy ELBSecurityPolicy-TLS13-1-2-2021-06
 
# HTTP → HTTPS リダイレクト
aws elbv2 create-listener \
  --load-balancer-arn $ALB_ARN \
  --protocol HTTP --port 80 \
  --default-actions '[{
    "Type": "redirect",
    "RedirectConfig": {
      "Protocol": "HTTPS",
      "Port": "443",
      "StatusCode": "HTTP_301"
    }
  }]'

# パスベースルーティングルールを追加
aws elbv2 create-rule \
  --listener-arn $LISTENER_ARN \
  --conditions '[{
    "Field": "path-pattern",
    "Values": ["/api/*"]
  }]' \
  --actions '[{
    "Type": "forward",
    "TargetGroupArn": "'$API_TG_ARN'"
  }]' \
  --priority 10
 
# ホストベースルーティング
aws elbv2 create-rule \
  --listener-arn $LISTENER_ARN \
  --conditions '[{
    "Field": "host-header",
    "Values": ["api.example.com"]
  }]' \
  --actions '[{
    "Type": "forward",
    "TargetGroupArn": "'$API_TG_ARN'"
  }]' \
  --priority 20
 
# 複合条件（パス + ヘッダー）
aws elbv2 create-rule \
  --listener-arn $LISTENER_ARN \
  --conditions '[
    {"Field": "path-pattern", "Values": ["/api/v2/*"]},
    {"Field": "http-header", "HttpHeaderConfig": {"HttpHeaderName": "X-Api-Version", "Values": ["2"]}}
  ]' \
  --actions '[{
    "Type": "forward",
    "TargetGroupArn": "'$API_V2_TG_ARN'"
  }]' \
  --priority 5
 
# 加重ターゲットグループ（カナリアリリース）
aws elbv2 create-rule \
  --listener-arn $LISTENER_ARN \
  --conditions '[{"Field": "path-pattern", "Values": ["/feature/*"]}]' \
  --actions '[{
    "Type": "forward",
    "ForwardConfig": {
      "TargetGroups": [
        {"TargetGroupArn": "'$STABLE_TG_ARN'", "Weight": 90},
        {"TargetGroupArn": "'$CANARY_TG_ARN'", "Weight": 10}
      ],
      "TargetGroupStickinessConfig": {
        "Enabled": true,
        "DurationSeconds": 3600
      }
    }
  }]' \
  --priority 15

# NLB を作成（固定 IP 付き）
NLB_ARN=$(aws elbv2 create-load-balancer \
  --name tcp-nlb \
  --type network \
  --subnets subnet-aaa subnet-bbb subnet-ccc \
  --scheme internet-facing \
  --query 'LoadBalancers[0].LoadBalancerArn' --output text)
 
# 固定 Elastic IP を割り当てる場合
NLB_ARN=$(aws elbv2 create-load-balancer \
  --name tcp-nlb-eip \
  --type network \
  --subnet-mappings '[
    {"SubnetId": "subnet-aaa", "AllocationId": "eipalloc-aaa"},
    {"SubnetId": "subnet-bbb", "AllocationId": "eipalloc-bbb"}
  ]' \
  --scheme internet-facing \
  --query 'LoadBalancers[0].LoadBalancerArn' --output text)
 
# TCP ターゲットグループ
NLB_TG_ARN=$(aws elbv2 create-target-group \
  --name tcp-tg \
  --protocol TCP --port 443 \
  --vpc-id vpc-xxx \
  --target-type instance \
  --health-check-protocol TCP \
  --health-check-interval-seconds 10 \
  --healthy-threshold-count 2 \
  --unhealthy-threshold-count 2 \
  --query 'TargetGroups[0].TargetGroupArn' --output text)
 
# TLS リスナー（NLB で TLS 終端）
aws elbv2 create-listener \
  --load-balancer-arn $NLB_ARN \
  --protocol TLS --port 443 \
  --certificates CertificateArn=arn:aws:acm:ap-northeast-1:123456789012:certificate/xxx \
  --default-actions Type=forward,TargetGroupArn=$NLB_TG_ARN \
  --ssl-policy ELBSecurityPolicy-TLS13-1-2-2021-06

# スポットインスタンスリクエスト（推奨: ASG の混合ポリシーを使う）
aws ec2 request-spot-instances \
  --instance-count 5 \
  --type "one-time" \
  --launch-specification '{
    "ImageId": "ami-0abcdef1234567890",
    "InstanceType": "c5.xlarge",
    "KeyName": "my-key-pair",
    "SecurityGroupIds": ["sg-xxx"],
    "SubnetId": "subnet-xxx",
    "IamInstanceProfile": {"Name": "BatchWorkerProfile"}
  }'
 
# スポットフリートを起動（複数インスタンスタイプ）
aws ec2 request-spot-fleet \
  --spot-fleet-request-config '{
    "IamFleetRole": "arn:aws:iam::123456789012:role/aws-ec2-spot-fleet-role",
    "TargetCapacity": 10,
    "LaunchSpecifications": [
      {"InstanceType": "c5.xlarge", "ImageId": "ami-xxx", "SubnetId": "subnet-aaa", "WeightedCapacity": 1},
      {"InstanceType": "c5a.xlarge", "ImageId": "ami-xxx", "SubnetId": "subnet-bbb", "WeightedCapacity": 1},
      {"InstanceType": "c5d.xlarge", "ImageId": "ami-xxx", "SubnetId": "subnet-ccc", "WeightedCapacity": 1},
      {"InstanceType": "c6i.xlarge", "ImageId": "ami-xxx", "SubnetId": "subnet-aaa", "WeightedCapacity": 1},
      {"InstanceType": "c6g.xlarge", "ImageId": "ami-xxx-arm64", "SubnetId": "subnet-bbb", "WeightedCapacity": 1}
    ],
    "AllocationStrategy": "capacityOptimized",
    "TerminateInstancesWithExpiration": true,
    "Type": "maintain",
    "ReplaceUnhealthyInstances": true
  }'
 
# スポット価格履歴の確認
aws ec2 describe-spot-price-history \
  --instance-types c5.xlarge c5a.xlarge c6i.xlarge \
  --product-descriptions "Linux/UNIX" \
  --start-time "$(date -u -v-1d +%Y-%m-%dT%H:%M:%SZ)" \
  --query 'SpotPriceHistory[].[InstanceType,AvailabilityZone,SpotPrice,Timestamp]' \
  --output table

# EC2 メタデータでスポット中断通知を確認するスクリプト
#!/bin/bash
TOKEN=$(curl -s -X PUT "http://169.254.169.254/latest/api/token" \
  -H "X-aws-ec2-metadata-token-ttl-seconds: 21600")
 
while true; do
  RESPONSE=$(curl -s -o /dev/null -w "%{http_code}" \
    -H "X-aws-ec2-metadata-token: $TOKEN" \
    http://169.254.169.254/latest/meta-data/spot/instance-action)
 
  if [ "$RESPONSE" == "200" ]; then
    ACTION=$(curl -s -H "X-aws-ec2-metadata-token: $TOKEN" \
      http://169.254.169.254/latest/meta-data/spot/instance-action)
    echo "Spot interruption notice received: $ACTION"
 
    # グレースフルシャットダウン処理
    # 1. 新しいリクエストの受付を停止
    /usr/local/bin/stop-accepting-requests.sh
    # 2. 進行中のジョブをチェックポイント
    /usr/local/bin/checkpoint-jobs.sh
    # 3. ログを S3 に退避
    /usr/local/bin/flush-logs-to-s3.sh
    # 4. ロードバランサーからデタッチ
    /usr/local/bin/deregister-from-lb.sh
    break
  fi
  sleep 5
done

# EventBridge でスポット中断をキャッチする Lambda
# EventBridge ルール
aws events put-rule \
  --name "spot-interruption-handler" \
  --event-pattern '{
    "source": ["aws.ec2"],
    "detail-type": ["EC2 Spot Instance Interruption Warning"]
  }'
 
# Lambda ターゲットの設定
aws events put-targets \
  --rule "spot-interruption-handler" \
  --targets '[{
    "Id": "SpotInterruptionHandler",
    "Arn": "arn:aws:lambda:ap-northeast-1:123456789012:function:handle-spot-interruption"
  }]'

# 推奨 Savings Plans を確認
aws savingsplans describe-savings-plans-offerings \
  --service-codes AmazonEC2 \
  --payment-options NoUpfront \
  --plan-types ComputeSavingsPlans \
  --region us-east-1
 
# 現在の Savings Plans 一覧
aws savingsplans describe-savings-plans \
  --query 'savingsPlans[].[savingsPlanId,savingsPlanType,commitment,state,start,end]' \
  --output table
 
# Savings Plans の利用率確認
aws ce get-savings-plans-utilization \
  --time-period Start=2026-01-01,End=2026-02-01 \
  --query 'Total.{Utilization:Utilization.UtilizationPercentage,TotalCommitment:AmortizedCommitment.TotalAmortizedCommitment,TotalSavings:SavingsPlansSavings}'
 
# Cost Explorer で Savings Plans の推奨を取得
aws ce get-savings-plans-purchase-recommendation \
  --savings-plans-type COMPUTE_SP \
  --payment-option NO_UPFRONT \
  --term-in-years ONE_YEAR \
  --lookback-period-in-days THIRTY_DAYS

# 未使用の Elastic IP を検出・削除
aws ec2 describe-addresses \
  --query 'Addresses[?AssociationId==null].[AllocationId,PublicIp]' \
  --output table
 
# 低使用率インスタンスの検出（CPU 使用率 5% 以下）
aws cloudwatch get-metric-statistics \
  --namespace AWS/EC2 \
  --metric-name CPUUtilization \
  --dimensions Name=InstanceId,Value=i-0123456789abcdef0 \
  --start-time "$(date -u -v-7d +%Y-%m-%dT%H:%M:%SZ)" \
  --end-time "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
  --period 86400 \
  --statistics Average
 
# 未アタッチの EBS ボリュームを検出
aws ec2 describe-volumes \
  --filters "Name=status,Values=available" \
  --query 'Volumes[].[VolumeId,Size,VolumeType,CreateTime]' \
  --output table
 
# 古いスナップショットの検出（90日以上前）
aws ec2 describe-snapshots --owner-ids self \
  --query "Snapshots[?StartTime<='$(date -u -v-90d +%Y-%m-%dT%H:%M:%SZ)'].[SnapshotId,VolumeSize,StartTime,Description]" \
  --output table
 
# AWS Compute Optimizer の推奨を取得
aws compute-optimizer get-ec2-instance-recommendations \
  --query 'instanceRecommendations[].{Instance:instanceArn,Current:currentInstanceType,Recommended:recommendationOptions[0].instanceType,Finding:finding,Savings:recommendationOptions[0].estimatedMonthlySavings.value}' \
  --output table

# EventBridge + Lambda で開発環境を夜間停止
# Lambda 関数例（Python）
# 停止対象: Environment=development タグのインスタンス
 
# 停止スケジュール（毎日 20:00 JST）
aws events put-rule \
  --name stop-dev-instances \
  --schedule-expression "cron(0 11 * * ? *)" \
  --state ENABLED
 
# 起動スケジュール（毎日 09:00 JST）
aws events put-rule \
  --name start-dev-instances \
  --schedule-expression "cron(0 0 ? * MON-FRI *)" \
  --state ENABLED

AWSTemplateFormatVersion: '2010-09-09'
Description: Production-grade ALB + Auto Scaling Group
 
Parameters:
  VpcId:
    Type: AWS::EC2::VPC::Id
  PublicSubnetIds:
    Type: List<AWS::EC2::Subnet::Id>
  PrivateSubnetIds:
    Type: List<AWS::EC2::Subnet::Id>
  CertificateArn:
    Type: String
  LatestAmiId:
    Type: AWS::SSM::Parameter::Value<AWS::EC2::Image::Id>
    Default: /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-6.1-x86_64
 
Resources:
  # ALB セキュリティグループ
  ALBSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: ALB Security Group
      VpcId: !Ref VpcId
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 443
          ToPort: 443
          CidrIp: 0.0.0.0/0
 
  # EC2 セキュリティグループ
  EC2SecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: EC2 Security Group
      VpcId: !Ref VpcId
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          SourceSecurityGroupId: !Ref ALBSecurityGroup
 
  # ALB
  ApplicationLoadBalancer:
    Type: AWS::ElasticLoadBalancingV2::LoadBalancer
    Properties:
      Name: web-alb
      Type: application
      Scheme: internet-facing
      Subnets: !Ref PublicSubnetIds
      SecurityGroups:
        - !Ref ALBSecurityGroup
      LoadBalancerAttributes:
        - Key: idle_timeout.timeout_seconds
          Value: '60'
        - Key: routing.http.drop_invalid_header_fields.enabled
          Value: 'true'
 
  # ターゲットグループ
  TargetGroup:
    Type: AWS::ElasticLoadBalancingV2::TargetGroup
    Properties:
      Name: web-tg
      Protocol: HTTP
      Port: 80
      VpcId: !Ref VpcId
      TargetType: instance
      HealthCheckPath: /health
      HealthCheckIntervalSeconds: 30
      HealthyThresholdCount: 2
      UnhealthyThresholdCount: 3
      TargetGroupAttributes:
        - Key: deregistration_delay.timeout_seconds
          Value: '30'
 
  # HTTPS リスナー
  HTTPSListener:
    Type: AWS::ElasticLoadBalancingV2::Listener
    Properties:
      LoadBalancerArn: !Ref ApplicationLoadBalancer
      Protocol: HTTPS
      Port: 443
      Certificates:
        - CertificateArn: !Ref CertificateArn
      SslPolicy: ELBSecurityPolicy-TLS13-1-2-2021-06
      DefaultActions:
        - Type: forward
          TargetGroupArn: !Ref TargetGroup
 
  # HTTP → HTTPS リダイレクト
  HTTPListener:
    Type: AWS::ElasticLoadBalancingV2::Listener
    Properties:
      LoadBalancerArn: !Ref ApplicationLoadBalancer
      Protocol: HTTP
      Port: 80
      DefaultActions:
        - Type: redirect
          RedirectConfig:
            Protocol: HTTPS
            Port: '443'
            StatusCode: HTTP_301
 
  # 起動テンプレート
  LaunchTemplate:
    Type: AWS::EC2::LaunchTemplate
    Properties:
      LaunchTemplateName: web-server-lt
      LaunchTemplateData:
        ImageId: !Ref LatestAmiId
        InstanceType: t3.small
        SecurityGroupIds:
          - !Ref EC2SecurityGroup
        MetadataOptions:
          HttpTokens: required
          HttpEndpoint: enabled
        Monitoring:
          Enabled: true
        BlockDeviceMappings:
          - DeviceName: /dev/xvda
            Ebs:
              VolumeSize: 30
              VolumeType: gp3
              Encrypted: true
 
  # Auto Scaling グループ
  AutoScalingGroup:
    Type: AWS::AutoScaling::AutoScalingGroup
    Properties:
      AutoScalingGroupName: web-asg
      LaunchTemplate:
        LaunchTemplateId: !Ref LaunchTemplate
        Version: !GetAtt LaunchTemplate.LatestVersionNumber
      MinSize: 2
      MaxSize: 10
      DesiredCapacity: 2
      VPCZoneIdentifier: !Ref PrivateSubnetIds
      TargetGroupARNs:
        - !Ref TargetGroup
      HealthCheckType: ELB
      HealthCheckGracePeriod: 300
      Tags:
        - Key: Name
          Value: web-server
          PropagateAtLaunch: true
 
  # スケーリングポリシー
  CPUScalingPolicy:
    Type: AWS::AutoScaling::ScalingPolicy
    Properties:
      AutoScalingGroupName: !Ref AutoScalingGroup
      PolicyType: TargetTrackingScaling
      TargetTrackingConfiguration:
        PredefinedMetricSpecification:
          PredefinedMetricType: ASGAverageCPUUtilization
        TargetValue: 60
        ScaleInCooldown: 300
        ScaleOutCooldown: 60
 
Outputs:
  ALBDNSName:
    Value: !GetAtt ApplicationLoadBalancer.DNSName
  ALBHostedZoneId:
    Value: !GetAtt ApplicationLoadBalancer.CanonicalHostedZoneID

# 悪い例
--min-size 0 --desired-capacity 1
 
# 良い例（本番環境）
--min-size 2 --desired-capacity 2 --max-size 10

# 悪い例 — EC2 ステータスチェックのみ
--health-check-type EC2
 
# 良い例 — ELB ヘルスチェック（HTTP レベル）
--health-check-type ELB --health-check-grace-period 300

# 悪い例 — 1つのインスタンスタイプのみ
"LaunchSpecifications": [
  {"InstanceType": "c5.xlarge", ...}
]
# → そのプールの容量不足で全て中断される可能性
 
# 良い例 — 複数タイプ・複数 AZ
"Overrides": [
  {"InstanceType": "c5.xlarge"},
  {"InstanceType": "c5a.xlarge"},
  {"InstanceType": "c5d.xlarge"},
  {"InstanceType": "c6i.xlarge"},
  {"InstanceType": "c6g.xlarge"},
  {"InstanceType": "m5.xlarge"}
]

# 悪い例 — 猶予期間なし
# → アプリケーション起動前に unhealthy 判定され、無限ループ
--health-check-grace-period 0
 
# 良い例 — アプリケーション起動時間を考慮
# アプリが起動完了するまで 5 分待つ
--health-check-grace-period 300

# 演習1: 基本実装のテンプレート
class Exercise1:
    """基本的な実装パターンの演習"""
 
    def __init__(self):
        self.data = []
 
    def validate_input(self, value):
        """入力値の検証"""
        if value is None:
            raise ValueError("入力値がNoneです")
        return True
 
    def process(self, value):
        """データ処理のメインロジック"""
        self.validate_input(value)
        self.data.append(value)
        return self.data
 
    def get_results(self):
        """処理結果の取得"""
        return {
            'count': len(self.data),
            'data': self.data
        }
 
# テスト
def test_exercise1():
    ex = Exercise1()
    assert ex.process(1) == [1]
    assert ex.process(2) == [1, 2]
    assert ex.get_results()['count'] == 2
 
    try:
        ex.process(None)
        assert False, "例外が発生するべき"
    except ValueError:
        pass
 
    print("全テスト合格!")
 
test_exercise1()

# 演習2: 応用パターン
from typing import List, Dict, Optional
from datetime import datetime
 
class AdvancedExercise:
    """応用パターンの演習"""
 
    def __init__(self, max_size: int = 100):
        self._items: List[Dict] = []
        self._max_size = max_size
        self._created_at = datetime.now()
 
    def add(self, key: str, value: any) -> bool:
        """アイテムの追加（サイズ制限付き）"""
        if len(self._items) >= self._max_size:
            return False
        self._items.append({
            'key': key,
            'value': value,
            'timestamp': datetime.now().isoformat()
        })
        return True
 
    def find(self, key: str) -> Optional[Dict]:
        """キーによる検索"""
        for item in reversed(self._items):
            if item['key'] == key:
                return item
        return None
 
    def remove(self, key: str) -> bool:
        """キーによる削除"""
        for i, item in enumerate(self._items):
            if item['key'] == key:
                self._items.pop(i)
                return True
        return False
 
    def stats(self) -> Dict:
        """統計情報"""
        return {
            'total_items': len(self._items),
            'max_size': self._max_size,
            'usage_percent': len(self._items) / self._max_size * 100,
            'uptime': str(datetime.now() - self._created_at)
        }
 
# テスト
def test_advanced():
    ex = AdvancedExercise(max_size=3)
    assert ex.add("a", 1) == True
    assert ex.add("b", 2) == True
    assert ex.add("c", 3) == True
    assert ex.add("d", 4) == False  # サイズ制限
    assert ex.find("b")['value'] == 2
    assert ex.remove("b") == True
    assert ex.find("b") is None
    stats = ex.stats()
    assert stats['total_items'] == 2
    print("応用テスト全合格!")
 
test_advanced()

# 演習3: パフォーマンス最適化
import time
from functools import lru_cache
 
# 最適化前（O(n^2)）
def slow_search(data: list, target: int) -> int:
    """非効率な検索"""
    for i in range(len(data)):
        for j in range(i + 1, len(data)):
            if data[i] + data[j] == target:
                return (i, j)
    return (-1, -1)
 
# 最適化後（O(n)）
def fast_search(data: list, target: int) -> tuple:
    """ハッシュマップを使った効率的な検索"""
    seen = {}
    for i, num in enumerate(data):
        complement = target - num
        if complement in seen:
            return (seen[complement], i)
        seen[num] = i
    return (-1, -1)
 
# ベンチマーク
def benchmark():
    import random
    data = list(range(5000))
    random.shuffle(data)
    target = data[100] + data[4000]
 
    start = time.time()
    result1 = slow_search(data, target)
    slow_time = time.time() - start
 
    start = time.time()
    result2 = fast_search(data, target)
    fast_time = time.time() - start
 
    print(f"非効率版: {slow_time:.4f}秒")
    print(f"効率版:   {fast_time:.6f}秒")
    print(f"高速化率: {slow_time/fast_time:.0f}倍")
 
benchmark()

# ウォームプールの設定
aws autoscaling put-warm-pool \
  --auto-scaling-group-name web-asg \
  --pool-state Stopped \
  --min-size 2 \
  --max-group-prepared-capacity 5