Skip to main content templates cfn-vpc.yaml 2 AZ layout, public + private subnets, cross-stack reference ready 2026-05-28 cfn-igw.yaml IGW attach to VPC, public route added 2026-05-28 cfn-nat.yaml Auto Elastic IP, outbound internet access for private subnets 2026-05-28 cfn-security-group.yaml Empty SG shell, multiple SGs via suffix, cross-stack reference ready 2026-05-28 cfn-security-group-ingress.yaml Add ingress rules to existing SG, up to 3 rules, port/CIDR via parameters 2026-05-28 cfn-security-group-egress.yaml Restrict outbound, replaces default allow-all, up to 3 rules 2026-05-28 cfn-alb.yaml TG included, HTTP/HTTPS, multiple ALBs via AlbSuffix, Scheme switch 2026-05-28 cfn-nlb.yaml TG included, TCP/UDP/TLS, multiple NLBs via NlbSuffix, Scheme switch 2026-05-28 cfn-vpc-basic.yaml VPC + 1 public subnet + IGW + route table, CIDR params only 2026-05-30 cfn-igw-basic.yaml IGW + VPC attachment, VPC ID param only 2026-05-30 cfn-nat-basic.yaml EIP + NAT Gateway + private route, copy-paste to add second 2026-05-30 cfn-security-group-basic.yaml 1 inbound rule, port/CIDR as params, copy-paste to add more 2026-05-30 cfn-security-group-ingress-basic.yaml 1 rule to existing SG, 3 params: SG ID, port, CIDR 2026-05-30 cfn-security-group-egress-basic.yaml 1 outbound rule to existing SG, replaces default allow-all 2026-05-30 cfn-alb-basic.yaml ALB + TG + HTTP listener, HTTP only, minimal parameters 2026-05-30 cfn-nlb-basic.yaml NLB + TG + TCP listener, TCP only, no SG, minimal parameters 2026-05-30