Uses cloudformation and aws cli v2.
- Install the aws cli.
- Create an aws account.
- Create a group and a user to get an access key id and a secret access key
- Fill out the vars.env with the gathered information.
- Run buildBaseAmi.sh
- Run deleteBaseAmi.sh
- Specify policies and permissions the group the user is in should have for this to work.
- Cloudformation to create the group, user, and required policies that can be run manually before running the build script. Don't know how much of this is possible.
- Make the created s3 bucket private on creation
- Maybe move this whole thing into a docker image that you can just run that to build this. Would make the only requirement be docker instead of aws cli. Might be overkill.