{"id":24317293,"url":"https://github.com/ot-nemoto/cloudformation-openam-template","last_synced_at":"2026-02-15T22:01:33.099Z","repository":{"id":102348182,"uuid":"172332285","full_name":"ot-nemoto/cloudformation-openam-template","owner":"ot-nemoto","description":null,"archived":false,"fork":false,"pushed_at":"2019-04-08T16:11:33.000Z","size":17,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2025-10-09T13:34:18.286Z","etag":null,"topics":["cloudformation-template"],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ot-nemoto.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-02-24T12:01:25.000Z","updated_at":"2019-05-02T23:47:34.000Z","dependencies_parsed_at":"2023-03-12T10:01:36.951Z","dependency_job_id":null,"html_url":"https://github.com/ot-nemoto/cloudformation-openam-template","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/ot-nemoto/cloudformation-openam-template","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ot-nemoto%2Fcloudformation-openam-template","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ot-nemoto%2Fcloudformation-openam-template/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ot-nemoto%2Fcloudformation-openam-template/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ot-nemoto%2Fcloudformation-openam-template/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ot-nemoto","download_url":"https://codeload.github.com/ot-nemoto/cloudformation-openam-template/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ot-nemoto%2Fcloudformation-openam-template/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29490360,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-15T19:29:10.908Z","status":"ssl_error","status_checked_at":"2026-02-15T19:29:10.419Z","response_time":118,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cloudformation-template"],"created_at":"2025-01-17T13:33:50.650Z","updated_at":"2026-02-15T22:01:33.052Z","avatar_url":"https://github.com/ot-nemoto.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# cloudformation-openam-template\n\n## OpenAM\n\n### 前提条件\n\n- **aws-cli** がインストールされ、プロファイルの設定がされていること\n- HostedZoneに **ドメイン** が登録されていること\n- 対象のRegionに **キーペア** が作成されていること\n- 実行するIAMユーザに十分な権限があること\n- OpenAM\n  - Deployする場合は[ForgeRock](https://backstage.forgerock.com/downloads/browse/am/archive/productId:openam)からダウンロードします(**要アカウント登録**)\n  - ダウンロード可能な場所に配置して下さい\n  - 以下の手順でS3へパブリックな環境を構築することも可能です(`OpenAM-13.0.0.war`がカレントにあること)\n\n```sh\n# Warを配置するS3バケットを作成\naws cloudformation create-stack \\\n  --stack-name public-bucket \\\n  --template-body file://public-bucket-template.yml\n\n# バケット名を取得\nBUCKET_NAME=$(aws cloudformation describe-stacks \\\n  --stack-name public-bucket \\\n  --query 'Stacks[].Outputs[?OutputKey==`BucketName`].OutputValue' \\\n  --output text)\necho ${BUCKET_NAME}\n  #\n\n# OpenAMのwarファイルをS3にアップロード\naws s3 cp OpenAM-13.0.0.war s3://${BUCKET_NAME}/\n\n# アップロードしたWarファイルのURIを取得\nDONWLOD_URI=$(aws cloudformation describe-stacks \\\n  --stack-name public-bucket \\\n  --query 'Stacks[].Outputs[?OutputKey==`DownloadUri`].OutputValue' \\\n  --output text)\necho ${DONWLOD_URI}\n  #\n```\n\n### 構築手順\n\n- 環境変数を設定\n  - 作成済み（作成した）キーペアのキー名\n  - Route53に登録済みのHostedZone名\n  - OpenAMがダウンロード可能なURI\n\n```sh\n# 例)\nKEY_NAME=openam-key\nHOSTED_ZONE_NAME=example.com.\nOPENAM_WAR_URI=${DONWLOD_URI}/OpenAM-13.0.0.war\n```\n\n- 環境構築\n\n```sh\naws cloudformation create-stack \\\n  --stack-name openam \\\n  --capabilities CAPABILITY_IAM \\\n  --parameters ParameterKey=KeyName,ParameterValue=${KEY_NAME} \\\n               ParameterKey=HostedZoneName,ParameterValue=${HOSTED_ZONE_NAME} \\\n               ParameterKey=OpenamWarUri,ParameterValue=${OPENAM_WAR_URI} \\\n  --template-body file://openam-template.yml\n```\n\n- OpenAMのURI取得\n\n```sh\nDOMAIN=$(aws cloudformation describe-stacks \\\n  --stack-name openam \\\n  --query 'Stacks[].Outputs[?OutputKey==`PublicDns`].OutputValue' \\\n  --output text)\necho http://${DOMAIN}/openam\n  #\n```\n\n### Parameters\n\n|Name|Type|Default|Required|\n|--|--|--|--|\n|ProjectName|String|openam|*No*|\n|VpcCIDR|String|10.100.0.0/16|*No*|\n|PublicSubnet1CIDR|String|10.100.0.0/24|*No*|\n|PublicSubnet2CIDR|String|10.100.1.0/24|*No*|\n|DeveloperCIDR|String|0.0.0.0/0|*No*|\n|InstanceType|String|t2.micro|*No*|\n|KeyName|AWS::EC2::KeyPair::KeyName|-|*Yes*|\n|HostedZoneName|String|-|*Yes*|\n|OpenamWarUri|String|-|*Yes*|\n\n### Outputs\n\n|Key|ExportName|Description|\n|--|--|--|\n|OpsWorksInstanceProfileArn|\\\u003cstack-name\u003e-opsworks-instance-profile-arn|インスタンスプロファイルArn|\n|OpsWorksServiceRoleArn|\\\u003cstack-name\u003e-opsworks-service-role-arn|OpsWorksのサービスロールArn|\n|PublicDns|\\\u003cstack-name\u003e-public-dns|ドメイン|\n|PublicIp|\\\u003cstack-name\u003e-public-ip|パブリックIPアドレス|\n|PublicSubnet1|\\\u003cstack-name\u003e-public-subnet-1|パブリックサブネットID\u003cbr\u003e（OpenAMが配置されているサブネット）|\n|PublicSubnet2|\\\u003cstack-name\u003e-public-subnet-2|パブリックサブネットID\u003cbr\u003e（OpenDJも構築する場合はこのIPを利用）|\n|SecurityGroup|\\\u003cstack-name\u003e-security-group|セキュリティグループID|\n|Vpc|\\\u003cstack-name\u003e-vpc|VPC ID|\n\n## OpenDJ\n\n### 前提条件\n\n- OpenAMが上記スタックで構築されていること\n- OpenDJ\n  - Deployする場合はForgeRockからダウンロードします(要アカウント登録)\n  - ダウンロード可能な場所に配置して下さい\n  - 以下の手順でS3へパブリックな環境を構築することも可能です(`opendj-3.0.0-1.noarch.rpm`がカレントにあること)\n\n```sh\n# OpenDJのrpmファイルをS3にアップロード\naws s3 cp opendj-3.0.0-1.noarch.rpm s3://${BUCKET_NAME}/\n\nDONWLOD_URI=$(aws cloudformation describe-stacks \\\n  --stack-name public-bucket \\\n  --query 'Stacks[].Outputs[?OutputKey==`DownloadUri`].OutputValue' \\\n  --output text)\necho ${DONWLOD_URI}\n```\n\n### 環境構築\n\n- 環境変数を設定\n  - 作成済み（作成した）キーペアのキー名\n  - Route53に登録済みのHostedZone名\n  - OpenDJがダウンロード可能なURI\n  - OpenDJのルートパスワード\n  - OpenDJのベースドメイン名\n\n```sh\n# 例)\nKEY_NAME=openam-key\nHOSTED_ZONE_NAME=example.com.\nOPENDJ_RPM_URI=${DONWLOD_URI}/opendj-3.0.0-1.noarch.rpm\nROOT_PW=secret\nBASE_DN=dc=example\\\\\\,dc=com\n```\n\n- 環境構築\n\n```sh\naws cloudformation create-stack \\\n  --stack-name opendj \\\n  --capabilities CAPABILITY_IAM \\\n  --parameters ParameterKey=KeyName,ParameterValue=${KEY_NAME} \\\n               ParameterKey=HostedZoneName,ParameterValue=${HOSTED_ZONE_NAME} \\\n               ParameterKey=OpendjRpmUri,ParameterValue=${OPENDJ_RPM_URI} \\\n               ParameterKey=RootPw,ParameterValue=\"${ROOT_PW}\" \\\n               ParameterKey=BaseDn,ParameterValue=\"${BASE_DN}\" \\\n  --template-body file://opendj-template.yml\n```\n\n### Parameters\n\n|Name|Type|Default|Required|\n|--|--|--|--|\n|ProjectName|String|opendj|*No*|\n|OpenamStackName|String|openam|*No*|\n|DeveloperCIDR|String|0.0.0.0/0|*No*|\n|InstanceType|String|t2.micro|*No*|\n|KeyName|AWS::EC2::KeyPair::KeyName|-|*Yes*|\n|HostedZoneName|String|-|*Yes*|\n|OpendjRpmUri|String|-|*Yes*|\n|RootPw|String|secret|*No*|\n|BaseDn|String|dc=openam,dc=forgerock,dc=org|*No*|\n\n### Outputs\n\n|Key|ExportName|Description|\n|--|--|--|\n|PublicDns|\\\u003cstack-name\u003e-public-dns|ドメイン|\n|PublicIp|\\\u003cstack-name\u003e-public-ip|パブリックIPアドレス|\n|LDAPServer|-|LDAPサーバー|\n|LDAPBindDN|-|LDAPバインドDN|\n|LDAPBindPW|-|LDAPバインドパスワード|\n|LDAPBindPW|-|LDAP組織DN|\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fot-nemoto%2Fcloudformation-openam-template","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fot-nemoto%2Fcloudformation-openam-template","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fot-nemoto%2Fcloudformation-openam-template/lists"}