import boto3

# AWS の認証情報。この情報を使って AWS サービスにアクセスします。
AWS_ACCESS_KEY_ID = '****'
AWS_SECRET_ACCESS_KEY = '****'

# AWS のリージョン情報。このリージョンで EC2 インスタンスが起動します。
REGION_NAME = 'us-east-1'
ZONES = ['a', 'c', 'd']

def create_vpc_with_resources():
    # ec2_resource または ec2_client を使用してリソース操作を実施
    ec2_resource = boto3.resource(
        'ec2',
        aws_access_key_id=AWS_ACCESS_KEY_ID,
        aws_secret_access_key=AWS_SECRET_ACCESS_KEY,
        region_name=REGION_NAME
    )
    # ec2_resource (class EC2.Resources) にない操作は ec2_client (class EC2.Client) を利用
    ec2_client = boto3.client(
        'ec2',
        aws_access_key_id=AWS_ACCESS_KEY_ID,
        aws_secret_access_key=AWS_SECRET_ACCESS_KEY,
        region_name=REGION_NAME
    )

    print('Creating VPC...')
    vpc = ec2_resource.create_vpc(CidrBlock='10.0.0.0/16')
    vpc.create_tags(Tags=[{'Key': 'Name', 'Value': 'my_vpc'}])
    vpc.wait_until_available()

    print('Enabling DNS hostnames and support...')
    ec2_client.modify_vpc_attribute(VpcId=vpc.id, EnableDnsHostnames={'Value': True})
    ec2_client.modify_vpc_attribute(VpcId=vpc.id, EnableDnsSupport={'Value': True})

    print('Creating and attaching Internet Gateway...')
    igw = ec2_resource.create_internet_gateway()
    vpc.attach_internet_gateway(InternetGatewayId=igw.id)
    igw.create_tags(Tags=[{'Key': 'Name', 'Value': 'my_vpc_igw'}])

    # パブリックサブネットを冗長化して作成
    public_subnets = []
    for i, zone in enumerate(ZONES):
        print(f'Creating public subnet in zone {zone}...')
        subnet = vpc.create_subnet(CidrBlock=f'10.0.{i*2}.0/24', AvailabilityZone=f'{REGION_NAME}{zone}')
        subnet.create_tags(Tags=[{'Key': 'Name', 'Value': f'my_vpc_public_subnet_{zone}'}])
        public_subnets.append(subnet)

    # プライベートサブネットを冗長化して作成
    private_subnets = []
    for i, zone in enumerate(ZONES):
        print(f'Creating private subnet in zone {zone}...')
        subnet = vpc.create_subnet(CidrBlock=f'10.0.{i*2 + 1}.0/24', AvailabilityZone=f'{REGION_NAME}{zone}')
        subnet.create_tags(Tags=[{'Key': 'Name', 'Value': f'my_vpc_private_subnet_{zone}'}])
        private_subnets.append(subnet)

    # ルートテーブルを作成し、パブリックサブネットに関連付け
    for i, subnet in enumerate(public_subnets):
        print(f'Creating route table for public subnet in zone {ZONES[i]}...')
        route_table = vpc.create_route_table()
        route = route_table.create_route(DestinationCidrBlock='0.0.0.0/0', GatewayId=igw.id)
        route_table.associate_with_subnet(SubnetId=subnet.id)
        route_table.create_tags(Tags=[{'Key': 'Name', 'Value': f'my_vpc_public_route_table_{ZONES[i]}'}])

    # NATゲートウェイとElastic IPを作成し、プライベートサブネットに関連付け
    nat_gw_ids = []
    for i, subnet in enumerate(public_subnets):
        print(f'Allocating Elastic IP and creating NAT Gateway in zone {ZONES[i]}...')
        eip_allocation = ec2_client.allocate_address(Domain='vpc')
        allocation_id = eip_allocation['AllocationId']
        ec2_client.create_tags(
            Resources=[eip_allocation['AllocationId']],
            Tags=[{'Key': 'Name', 'Value': f'my_vpc_eip_{ZONES[i]}'}]
        )
        nat_gw = ec2_client.create_nat_gateway(
            SubnetId=subnet.id,
            AllocationId=allocation_id
        )
        nat_gw_id = nat_gw['NatGateway']['NatGatewayId']
        nat_gw_ids.append(nat_gw_id)

        ec2_client.create_tags(
            Resources=[nat_gw_id],
            Tags=[{'Key': 'Name', 'Value': f'my_vpc_nat_gw_{ZONES[i]}'}]
        )

        # NATゲートウェイの作成状態を確認
        ec2_client.get_waiter('nat_gateway_available').wait(NatGatewayIds=[nat_gw_id])

        print(f'Creating route table for private subnet in zone {ZONES[i]}...')
        private_subnet = private_subnets[i]
        route_table = vpc.create_route_table()
        route_table.create_route(DestinationCidrBlock='0.0.0.0/0', NatGatewayId=nat_gw_id)
        route_table.associate_with_subnet(SubnetId=private_subnet.id)
        route_table.create_tags(Tags=[{'Key': 'Name', 'Value': f'my_vpc_private_route_table_{ZONES[i]}'}])

    print('Creating S3 Gateway Endpoint...')
    s3_endpoint = ec2_client.create_vpc_endpoint(
        VpcEndpointType='Gateway',
        VpcId=vpc.id,
        ServiceName=f'com.amazonaws.{REGION_NAME}.s3',
        RouteTableIds=[rt.id for rt in vpc.route_tables.all()],
        PolicyDocument='{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":"*","Action":"s3:*","Resource":"*"}]}'
    )

    s3_endpoint_id = s3_endpoint['VpcEndpoint']['VpcEndpointId']
    ec2_client.create_tags(
        Resources=[s3_endpoint_id],
        Tags=[{'Key': 'Name', 'Value': 'my_vpc_s3_endpoint'}]
    )

    print(f'VPC ID: {vpc.id}')
    print(f'Public Subnet IDs: {[subnet.id for subnet in public_subnets]}')
    print(f'Private Subnet IDs: {[subnet.id for subnet in private_subnets]}')
    print(f'NAT Gateway IDs: {nat_gw_ids}')
    print(f'S3 Endpoint ID: {s3_endpoint_id}')

# 関数を実行してリソースを作成
create_vpc_with_resources()