-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathcloudformationtemplate.yaml
87 lines (84 loc) · 2.59 KB
/
cloudformationtemplate.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
Parameters:
DockerImageUri:
Type: String
Description: The URI of the Docker image for the Lambda function.
AWSTemplateFormatVersion: '2010-09-09'
Description: AWS CloudFormation template to create a Lambda function from a Docker image and an API Gateway to trigger the Lambda function
Resources:
MyLambdaExecutionRole:
Type: 'AWS::IAM::Role'
Properties:
AssumeRolePolicyDocument:
Version: '2012-10-17'
Statement:
- Effect: Allow
Principal:
Service:
- lambda.amazonaws.com
Action:
- 'sts:AssumeRole'
Path: '/'
Policies:
- PolicyName: 'LambdaExecutionPolicy'
PolicyDocument:
Version: '2012-10-17'
Statement:
- Effect: Allow
Action:
- 'logs:*'
Resource: 'arn:aws:logs:*:*:*'
MyLambdaFunction:
Type: 'AWS::Lambda::Function'
Properties:
FunctionName: 'DockerizedFlaskNostrApp'
Code:
ImageUri: !Ref DockerImageUri
PackageType: Image
MemorySize: 512
Timeout: 60
Role: !GetAtt MyLambdaExecutionRole.Arn
Architectures:
- arm64
MyApi:
Type: 'AWS::ApiGatewayV2::Api'
Properties:
ProtocolType: HTTP
Name: 'Nostr-Serverless-API'
MyApiIntegration:
Type: 'AWS::ApiGatewayV2::Integration'
Properties:
ApiId: !Ref MyApi
IntegrationType: AWS_PROXY
IntegrationUri: !Sub
- 'arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${LambdaFunctionArn}/invocations'
- LambdaFunctionArn: !GetAtt MyLambdaFunction.Arn
PayloadFormatVersion: '2.0'
MyApiRoute:
Type: 'AWS::ApiGatewayV2::Route'
Properties:
ApiId: !Ref MyApi
RouteKey: 'ANY /{proxy+}'
Target: !Join [ '/', [ 'integrations', !Ref MyApiIntegration ] ]
MyApiDeployment:
Type: 'AWS::ApiGatewayV2::Deployment'
DependsOn: MyApiRoute
Properties:
ApiId: !Ref MyApi
MyApiStage:
Type: 'AWS::ApiGatewayV2::Stage'
Properties:
ApiId: !Ref MyApi
AutoDeploy: true
DeploymentId: !Ref MyApiDeployment
StageName: '$default'
MyApiLambdaPermission:
Type: 'AWS::Lambda::Permission'
Properties:
Action: 'lambda:InvokeFunction'
FunctionName: !Ref MyLambdaFunction
Principal: 'apigateway.amazonaws.com'
SourceArn: !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${MyApi}/*/*'
Outputs:
ApiUrl:
Description: The URL of the API Gateway
Value: !Sub "https://${MyApi}.execute-api.${AWS::Region}.amazonaws.com/"