Using the AWS PHP SDK

AWS has SDK's for almost all popular languages, including PHP. These SDK's behave very similarly, using the same API calls and parameters.

Generally, the SDKs do a nice job of taking advantage of each languages strengths.

Let's see how to use the PHP SDK - it's simpler than you might think!

Configuring Credentials

The AWS SDK's all make API calls against AWS. To do this, you need IAM credentials with the correct access setup to make the API calls requests (IAM Roles and Policies).

Assuming you have the permissions to run the API calls you need, the SDK's all do a nice job of detecting the various ways you might pass the credentials to the SDK.

You can see a list of the ways to get the SDK to read your credentials here. Don't worry if they don't all make sense.

Here's the gist of it:

You can set environment variables
You can have your ~/.aws/credentials file
Your environment (EC2 server, CodeBuild environment, Lambda function, ECS environment) can "assume" a role (more advanced)

There are other yet even more advanced ways to setup your credentials, but these are the most common.

I generally do one of the following:

Setting up environment variables (via Laravel's .env file)
Allow the SDK to read the ~/.aws.credentials file, usually done for local development

If you set certain environment variables, the SDK will do everything for you. If you don't have environmet variables set, the SDK will automatically search for your ~/.aws/credentials file.

Here's what it looks like to create a new Ec2Client object:

use Aws\Ec2\Ec2Client;
 
$ec2 = new Ec2Client([
    // Region is required if not set by an env var
    'region' => 'us-east-2',
 
    // API version
    'version' => 'latest',
 
    // Use a profile from ~/.aws/credentials
    // 'profile' => 'your-profile-here'
]);

Making Commands

Each language has it's own API reference documentation. The PHP docs are here.

We'll see an example of using the Amazon EC2 API to create a server. This uses the RunInstances (plural!) API call.

Here's what it looks like to create an EC2 server:

// $result: ['Location' => 'us-east-2']
$result = $ec2->runInstances([
 
    // ImageId: https://cloud-images.ubuntu.com/locator/ec2/
    'ImageId' => 'ami-0b29b6e62f2343b46',
    'InstanceType' => 't3.small',
 
    // Optional parameters you likely want to define
    // 'KeyName' => "some-key",
    // 'SecurityGroupIds' => ['sg-foobar'],
    // 'SubnetId' => 'subnet-foobar',
 
    'MaxCount' => 1, // You can create multiple servers
    'MinCount' => 1, // but we'll just create one
 
    // Create the root disk volume
    'BlockDeviceMappings' => [
        // Can usually assume this is the correct
        // root device name
        'DeviceName' => '/dev/sda1',
        'Ebs' => [
            'DeleteOnTermination' => true,
            'VolumeSize' => 8,
            'VolumeType' => 'gp3',
        ],
    ],
]);

Waiters

One of the overlooked features of the SDK's is "waiters", which let you wait until a resource has reached a certain state.

This is useful to get around the times where you find yourself writing things like:

while(/* server is not yet running */) {
    // Check if server is running
}

Trust me, you'll end up writing code like that when coding against AWS.

Waiters aren't always well documented, depending on the SDK. PHP's are, luckily, well documented. For example, on the EC2 page, we can scroll down to see available Waiters.

We'll use the InstanceRunning waiter. Note that it tells us this waiter uses the DescribeInstances API operation. That means the parameters we pass it are the ones used for that API call.

Let's see what that looks like:

$result = $ec2->runInstances([/* ... */]);
 
// We only created one instance, so we can assume
// the zeroeth array index
$instanceId = $result['Instances'][0]['InstanceId'];
 
$ec2->waitUntil('InstanceRunning', [
   // Can pass an array of instance ID's
   // We only have 1 instance
   'InstanceIds'  => [$instanceId],
   '@waiter' => [
       'delay'       => 3, // Wait 3 seconds between polling
       'maxAttempts' => 10, // Max attempts before failing, total of 30 seconds waited here
   ]
]);