Archived historical project
These templates document AWS, Packer, and Chef image-building workflows used in the 2017-2019 ecosystem. They are preserved as an engineering reference but are no longer maintained or validated against current AWS, Packer, or Chef releases. Do not use them in production without a full security and compatibility review.
Generic windows template to build an AMI using packer and the amazon-ebs builder. The following variables need to be passed from the environment/CI server:
- AWS_ACCESS_KEY_ID
- AWS_SECRET_ACCESS_KEY
- AWS_SESSION_TOKEN
- aws_ami
- aws_vpc_id
- aws_subnet
- aws_instance_profile
- chef_run_list
- chef_server_url
- chef_environment
assume-role.sh contains a sample script for assuming a cross account IAM role that can be used to launch the builder instance in another account, it will set the AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY and AWS_SESSION_TOKEN variables.
In addition the host running packer needs a validator secret key available, the path is currently hardcoded in the template.
Accompanying blog post explaining the templates here: https://cze.dk/building-windows-2016-ami-on-aws-with-packer-and-chef/