custom-integration-reference/template.yaml at main · agnostack/custom-integration-reference · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
AWSTemplateFormatVersion: "2010-09-09"
Transform: AWS::Serverless-2016-10-31

Parameters:
  # Customer specific variables

  # Common variables
  InstanceName:
    Type: String
    Default: example

  AppName:
    Type: String
    Default: agnostack-custom-integration

  Stage:
    Type: String
    Default: prod
    AllowedValues:
      - dev
      - staging
      - prod

  LogLevel:
    Type: String
    Default: info
    AllowedValues:
      - trace
      - debug
      - info
      - warn
      - error

  Architecture:
    Type: String
    Default: arm64
    AllowedValues: [x86_64, arm64]

Globals:
  Function:
    Runtime: nodejs22.x
    Timeout: 10
    MemorySize: 512
    Architectures:
      - !Ref Architecture
    Environment:
      Variables:
        APP_NAME: !Ref AppName
        INSTANCE_NAME: !Ref InstanceName
        LOG_LEVEL: !Ref LogLevel
        STAGE: !Ref Stage

        # Customer specific Variables

        # Customer specific Public Variables (store/update in SSM)
        PUBLIC_KEY: !Sub "{{resolve:ssm:/${AppName}-${InstanceName}/PUBLIC_KEY}}"
        SHARED_SECRET: !Sub "{{resolve:ssm:/${AppName}-${InstanceName}/SHARED_SECRET}}"

        # Customer specific Secure Variables (store/update in Secrets Manager)
        SECURE: !Sub "{{resolve:secretsmanager:/${AppName}-${InstanceName}/SECURE}}"
        PRIVATE_KEY: ""

Resources:
  HttpApi:
    Type: AWS::Serverless::HttpApi
    Properties:
      Name: !Sub "${AppName}-${InstanceName}-${Stage}"
      StageName: !Ref Stage

  ExecuteFunction:
    Type: AWS::Serverless::Function
    Metadata:
      BuildMethod: makefile
    Properties:
      CodeUri: .
      Handler: src/handlers.execute

      Policies:
        - SSMParameterReadPolicy:
            ParameterName: !Sub "/${AppName}-${InstanceName}/*"

      Events:
        ExecutePostProxy:
          Type: HttpApi
          Properties:
            ApiId: !Ref HttpApi
            Path: /{route+}
            Method: POST

        ExecutePostRoot:
          Type: HttpApi
          Properties:
            ApiId: !Ref HttpApi
            Path: /
            Method: POST

Outputs:
  ApiUrl:
    Value: !Sub "${HttpApi.ApiEndpoint}/${Stage}/"