@izara_project/izara-core-generate-service-code 1.0.66 → 1.0.68

package/src/emit/resource/templates/DynamoDBTable_Yaml.ejs

@@ -1,20 +1,20 @@
 ##===== [DynamoDB Table: <%- tableName %>]
-  <%- tableName %>Table:
-    Type: AWS::DynamoDB::Table
-    Properties:
-      TableName: ${self:custom.iz_resourcePrefix}<%- tableName %>
-      BillingMode: PAY_PER_REQUEST
-      AttributeDefinitions:
-        - AttributeName: "<%- pk %>"
-          AttributeType: "S"
-<% if (sk) { %>
-        - AttributeName: "<%- sk %>"
-          AttributeType: "S"
-<% } %>
-      KeySchema:
-        - AttributeName: "<%- pk %>"
-          KeyType: "HASH"
-<% if (sk) { %>
-        - AttributeName: "<%- sk %>"
-          KeyType: "RANGE"
+<%- tableName %>Table:
+  Type: AWS::DynamoDB::Table
+  Properties:
+    TableName: ${self:custom.iz_resourcePrefix}<%- tableName %>
+    BillingMode: PAY_PER_REQUEST
+    AttributeDefinitions:
+      - AttributeName: '<%- pk %>'
+        AttributeType: 'S'
+      <% if (sk) { %>
+      - AttributeName: '<%- sk %>'
+        AttributeType: 'S'
+    <% } %>
+    KeySchema:
+      - AttributeName: '<%- pk %>'
+        KeyType: 'HASH'
+      <% if (sk) { %>
+      - AttributeName: '<%- sk %>'
+        KeyType: 'RANGE'
 <% } %>

package/src/emit/resource/templates/FlowOut_Yaml.ejs

@@ -1,6 +1,6 @@
 ##===== [Topic Out]
-  Out<%- topicName %>:
-    Type: AWS::SNS::Topic
-    Properties:
-      DisplayName: "SNS Message out"
-      TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_<%- topicName %>_Out
+Out<%- topicName %>:
+  Type: AWS::SNS::Topic
+  Properties:
+    DisplayName: 'SNS Message out'
+    TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_<%- topicName %>_Out

package/src/emit/resource/templates/GeneratedLambdaRoleServiceConfig.ejs

@@ -0,0 +1,138 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+import Logger from '@izara_project/izara-core-library-logger';
+import dynamodbSharedLib from '@izara_project/izara-core-library-dynamodb';
+import lambdaSharedLib from '@izara_project/izara-core-library-lambda';
+import snsSharedLib from '@izara_project/izara-core-library-sns';
+import initialSetupConfig from '../../config/Config.js';
+
+const _izContext = { logger: Logger };
+
+export function generatedLambdaRole() {
+  const externalLambdaRole = [
+    <% if (crud) { -%>
+    {
+      roleName: 'FlowObjects',
+      statement: [
+        {
+          Sid: 'FlowObjectsRoleTest0',
+          Effect: 'Allow',
+          Action: ['lambda:InvokeFunction'],
+          Resource: [
+            `arn:aws:lambda:${process.env.iz_region}:${process.env.iz_accountId}:function:${lambdaSharedLib.lambdaFunctionName(_izContext, 'GetNodeHdrInv', 'GraphHandler')}`
+          ]
+        },
+
+        {
+          Sid: 'FlowObjectsRoleTest1',
+          Effect: 'Allow',
+          Action: ['sns:Publish'],
+          Resource: [
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'UpdateNode_In', 'GraphHandler')}`
+          ]
+        },
+
+        {
+          Sid: 'FlowObjectsRoleTest2',
+          Effect: 'Allow',
+          Action: ['sns:Publish'],
+          Resource: [
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'CreateNode_In', 'GraphHandler')}`
+          ]
+        }
+        //(<createFlowObjectsRole>)
+        //(</createFlowObjectsRole>)
+      ]
+    },
+    <% } -%>
+
+    {
+      roleName: 'ProcFindData',
+      statement: [
+        {
+          Sid: 'ProcFindDataRoleTest0',
+          Effect: 'Allow',
+          Action: ['lambda:InvokeFunction'],
+          Resource: [
+            `arn:aws:lambda:${process.env.iz_region}:${process.env.iz_accountId}:function:${lambdaSharedLib.lambdaFunctionName(_izContext, 'GetNodeHdrInv', 'GraphHandler')}`
+          ]
+        }
+        //(<createProcFindDataRole>)
+        //(</createProcFindDataRole>)
+      ]
+    } <% if (relationships) { %>,
+
+    {
+      roleName: 'FlowRelationship',
+      statement: [
+        {
+          Sid: 'FlowRelationshipRoleTest0',
+          Effect: 'Allow',
+          Action: ['lambda:InvokeFunction'],
+          Resource: [
+            `arn:aws:lambda:${process.env.iz_region}:${process.env.iz_accountId}:function:${lambdaSharedLib.lambdaFunctionName(_izContext, 'GetRelationshipHdrInv', 'GraphHandler')}`
+          ]
+        },
+
+        {
+          Sid: 'FlowRelationshipRoleTest1',
+          Effect: 'Allow',
+          Action: ['sns:Publish'],
+          Resource: [
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'CreateRelationship_In', 'GraphHandler')}`,
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'UpdateRelationship_In', 'GraphHandler')}`,
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'DeleteRelationship_In', 'GraphHandler')}`,
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'ChangeRelationship_In', 'GraphHandler')}`,
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'MoveRelationship_In', 'GraphHandler')}`
+          ]
+        }
+        //(<createFlowRelationshipRole>)
+        //(</createFlowRelationshipRole>)
+      ]
+    } <% } -%>,
+
+    <% s3Flows.forEach(function(flow) { -%> {
+      roleName: '<%= flow.roleName %>',
+      statement: [
+        {
+          Sid: '<%= flow.roleName %>RoleTest0',
+          Effect: 'Allow',
+          Action: ['sns:Publish'],
+          Resource: [
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'ReservedDynamicUsage_In', 'AccountLimits')}`
+          ]
+        },
+
+        {
+          Sid: '<%= flow.roleName %>RoleTest1',
+          Effect: 'Allow',
+          Action: ['sns:Publish'],
+          Resource: [
+            `arn:aws:sns:${process.env.iz_region}:${process.env.iz_accountId}:${snsSharedLib.snsTopicNameByFlowSchema(_izContext, 'ConfirmDynamicAfterUpload_In', 'AccountLimits')}`
+          ]
+        }
+        //(<create<%= flow.roleName %>Role>)
+        //(</create<%= flow.roleName %>Role>)
+      ]
+    } <% }); %>
+    //(<additionalRole>)
+    //(</additionalRole>)
+  ];
+
+  return externalLambdaRole;
+}

package/src/emit/resource/templates/ResourceBeforeLogicalYaml.ejs

@@ -1,47 +1,47 @@
-  <%_ flowTags.forEach(flowTag => { _%>
-  SubscriptionOut<%- flowTag.charAt(0).toUpperCase() + flowTag.slice(1) %>To<%- queueName %>:
-    Type: AWS::SNS::Subscription
-    Properties:
-      TopicArn: !Ref Out<%- flowTag.charAt(0).toUpperCase() + flowTag.slice(1) %>
-      Endpoint: "arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqs"
-      Protocol: "sqs"
-  <%_ }) _%>
-  ##===== [Queue]
-  <%- queueName %>HdrSqs:
-    Type: "AWS::SQS::Queue"
-    Properties:
-      QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqs
-      RedrivePolicy:
-        deadLetterTargetArn:
-          Fn::GetAtt:
-            - <%- queueName %>HdrSqsDLQ
-            - Arn
-        maxReceiveCount: 3
-      VisibilityTimeout: 120
+<%_ flowTags.forEach(flowTag => { _%>
+SubscriptionOut<%- flowTag.charAt(0).toUpperCase() + flowTag.slice(1) %>To<%- queueName %>:
+  Type: AWS::SNS::Subscription
+  Properties:
+    TopicArn: !Ref Out<%- flowTag.charAt(0).toUpperCase() + flowTag.slice(1) %>
+    Endpoint: 'arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqs'
+    Protocol: 'sqs'
+<%_ }) _%>
+##===== [Queue]
+<%- queueName %>HdrSqs:
+  Type: 'AWS::SQS::Queue'
+  Properties:
+    QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqs
+    RedrivePolicy:
+      deadLetterTargetArn:
+        Fn::GetAtt:
+          - <%- queueName %>HdrSqsDLQ
+          - Arn
+      maxReceiveCount: 3
+    VisibilityTimeout: 120
 
-  ##===== [Queue DLQ]
-  <%- queueName %>HdrSqsDLQ:
-    Type: AWS::SQS::Queue
-    Properties:
-      QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqsDLQ
+##===== [Queue DLQ]
+<%- queueName %>HdrSqsDLQ:
+  Type: AWS::SQS::Queue
+  Properties:
+    QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqsDLQ
 
-  ##===== [Queue Policy]
-  <%- queueName %>HdrSqsPolicy:
-    Type: AWS::SQS::QueuePolicy
-    Properties:
-      PolicyDocument:
-        Version: "2012-10-17"
-        Statement:
-          - Sid: "allow-sns-messages"
-            Effect: Allow
-            Principal: "*"
-            Resource:
-              Fn::GetAtt:
-                - <%- queueName %>HdrSqs
-                - Arn
-            Action: "SQS:SendMessage"
-      Queues:
-        - Ref: <%- queueName %>HdrSqs
+##===== [Queue Policy]
+<%- queueName %>HdrSqsPolicy:
+  Type: AWS::SQS::QueuePolicy
+  Properties:
+    PolicyDocument:
+      Version: '2012-10-17'
+      Statement:
+        - Sid: 'allow-sns-messages'
+          Effect: Allow
+          Principal: '*'
+          Resource:
+            Fn::GetAtt:
+              - <%- queueName %>HdrSqs
+              - Arn
+          Action: 'SQS:SendMessage'
+    Queues:
+      - Ref: <%- queueName %>HdrSqs
 
-  #<#<%- queueName %>QueueSetting#>
-  #<#/<%- queueName %>QueueSetting#>
+#<#<%- queueName %>QueueSetting#>
+#<#/<%- queueName %>QueueSetting#>

package/src/emit/resource/templates/ResourceSqsYaml.ejs

@@ -1,39 +1,39 @@
-  ##===== [Queue]
-  <%- resourceQueueName || queueName %>:
-    Type: "AWS::SQS::Queue"
-    Properties:
-      QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>
-      RedrivePolicy:
-        deadLetterTargetArn:
-          Fn::GetAtt:
-            - <%- resourceQueueName || queueName %>DLQ
-            - Arn
-        maxReceiveCount: 3
-      VisibilityTimeout: 120
+##===== [Queue]
+<%- resourceQueueName || queueName %>:
+  Type: 'AWS::SQS::Queue'
+  Properties:
+    QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>
+    RedrivePolicy:
+      deadLetterTargetArn:
+        Fn::GetAtt:
+          - <%- resourceQueueName || queueName %>DLQ
+          - Arn
+      maxReceiveCount: 3
+    VisibilityTimeout: 120
 
-  ##===== [Queue DLQ]
-  <%- resourceQueueName || queueName %>DLQ:
-    Type: AWS::SQS::Queue
-    Properties:
-      QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>DLQ
+##===== [Queue DLQ]
+<%- resourceQueueName || queueName %>DLQ:
+  Type: AWS::SQS::Queue
+  Properties:
+    QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>DLQ
 
-  ##===== [Queue Policy]
-  <%- resourceQueueName || queueName %>Policy:
-    Type: AWS::SQS::QueuePolicy
-    Properties:
-      PolicyDocument:
-        Version: "2012-10-17"
-        Statement:
-          - Sid: "allow-sns-messages"
-            Effect: Allow
-            Principal: "*"
-            Resource:
-              Fn::GetAtt:
-                - <%- resourceQueueName || queueName %>
-                - Arn
-            Action: "SQS:SendMessage"
-      Queues:
-        - Ref: <%- resourceQueueName || queueName %>
+##===== [Queue Policy]
+<%- resourceQueueName || queueName %>Policy:
+  Type: AWS::SQS::QueuePolicy
+  Properties:
+    PolicyDocument:
+      Version: '2012-10-17'
+      Statement:
+        - Sid: 'allow-sns-messages'
+          Effect: Allow
+          Principal: '*'
+          Resource:
+            Fn::GetAtt:
+              - <%- resourceQueueName || queueName %>
+              - Arn
+          Action: 'SQS:SendMessage'
+    Queues:
+      - Ref: <%- resourceQueueName || queueName %>
 
-  #<#<%- queueName %>QueueSetting#>
-  #<#/<%- queueName %>QueueSetting#>
+#<#<%- queueName %>QueueSetting#>
+#<#/<%- queueName %>QueueSetting#>

package/src/emit/resource/templates/ResourceYaml.ejs

@@ -1,54 +1,54 @@
 ##===== [Create topic in]
-  In<%- queueName %>:
-    Type: AWS::SNS::Topic
-    Properties:
-      DisplayName: "SNS Message in"
-      TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_<%- queueName %>_In
+In<%- queueName %>:
+  Type: AWS::SNS::Topic
+  Properties:
+    DisplayName: 'SNS Message in'
+    TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_<%- queueName %>_In
 
-  ##===== [SNS Subscription - Topic In]
-  SubscriptionIn<%- queueName %>:
-    Type: AWS::SNS::Subscription
-    Properties:
-      TopicArn: !Ref In<%- queueName %>
-      Endpoint: "arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqs"
-      Protocol: "sqs"
+##===== [SNS Subscription - Topic In]
+SubscriptionIn<%- queueName %>:
+  Type: AWS::SNS::Subscription
+  Properties:
+    TopicArn: !Ref In<%- queueName %>
+    Endpoint: 'arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqs'
+    Protocol: 'sqs'
 
-  ##===== [Queue]
-  <%- queueName %>HdrSqs:
-    Type: "AWS::SQS::Queue"
-    Properties:
-      QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqs
-      RedrivePolicy:
-        deadLetterTargetArn:
-          Fn::GetAtt:
-            - <%- queueName %>HdrSqsDLQ
-            - Arn
-        maxReceiveCount: 3
-      VisibilityTimeout: 120
+##===== [Queue]
+<%- queueName %>HdrSqs:
+  Type: 'AWS::SQS::Queue'
+  Properties:
+    QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqs
+    RedrivePolicy:
+      deadLetterTargetArn:
+        Fn::GetAtt:
+          - <%- queueName %>HdrSqsDLQ
+          - Arn
+      maxReceiveCount: 3
+    VisibilityTimeout: 120
 
-  ##===== [Queue DLQ]
-  <%- queueName %>HdrSqsDLQ:
-    Type: AWS::SQS::Queue
-    Properties:
-      QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqsDLQ
+##===== [Queue DLQ]
+<%- queueName %>HdrSqsDLQ:
+  Type: AWS::SQS::Queue
+  Properties:
+    QueueName: ${self:custom.iz_resourcePrefix}<%- queueName %>HdrSqsDLQ
 
-  ##===== [Queue Policy]
-  <%- queueName %>HdrSqsPolicy:
-    Type: AWS::SQS::QueuePolicy
-    Properties:
-      PolicyDocument:
-        Version: "2012-10-17"
-        Statement:
-          - Sid: "allow-sns-messages"
-            Effect: Allow
-            Principal: "*"
-            Resource:
-              Fn::GetAtt:
-                - <%- queueName %>HdrSqs
-                - Arn
-            Action: "SQS:SendMessage"
-      Queues:
-        - Ref: <%- queueName %>HdrSqs
+##===== [Queue Policy]
+<%- queueName %>HdrSqsPolicy:
+  Type: AWS::SQS::QueuePolicy
+  Properties:
+    PolicyDocument:
+      Version: '2012-10-17'
+      Statement:
+        - Sid: 'allow-sns-messages'
+          Effect: Allow
+          Principal: '*'
+          Resource:
+            Fn::GetAtt:
+              - <%- queueName %>HdrSqs
+              - Arn
+          Action: 'SQS:SendMessage'
+    Queues:
+      - Ref: <%- queueName %>HdrSqs
 
-  #<#<%- queueName %>QueueSetting#>
-  #<#/<%- queueName %>QueueSetting#>
+#<#<%- queueName %>QueueSetting#>
+#<#/<%- queueName %>QueueSetting#>

package/src/emit/resource/templates/S3Bucket_Yaml.ejs

@@ -0,0 +1,19 @@
+##===== [S3 Bucket: <%- bucketName %>]
+<%- bucketName %>S3Bucket:
+  Type: AWS::S3::Bucket
+  Properties:
+    BucketName: <%- bucketName %>
+    CorsConfiguration:
+      CorsRules:
+        - AllowedHeaders:
+            - '*'
+          AllowedMethods:
+            - GET
+            - PUT
+            - POST
+            - DELETE
+            - HEAD
+          AllowedOrigins:
+            - '*'
+          MaxAge: 3000
+

package/src/emit/resource/templates/SharedResource_Yaml.ejs

@@ -1,15 +1,15 @@
 Resources:
-<% roles.forEach(({ roleName, statements }) => { -%>
+  <% roles.forEach(({ roleName, statements }) => { -%>
   <%- roleName %>:
     Type: AWS::IAM::Role
     Properties:
       RoleName: ${self:custom.iz_resourcePrefix}<%- roleName %>
       AssumeRolePolicyDocument:
-        Version: "2012-10-17"
+        Version: '2012-10-17'
         Statement:
           - Effect: Allow
             Principal:
-              Service: "lambda.amazonaws.com"
+              Service: 'lambda.amazonaws.com'
             Action: sts:AssumeRole
           #<#<%- roleName %>AssumeRoleStatementHookCode#>
           #<#/<%- roleName %>AssumeRoleStatementHookCode#>
@@ -20,20 +20,20 @@ Resources:
       Policies:
         - PolicyName: ${self:custom.iz_resourcePrefix}<%- roleName.replace(/role$/i, '') %>Policy
           PolicyDocument:
-            Version: "2012-10-17"
+            Version: '2012-10-17'
             Statement:
-<% statements.forEach((stmt) => { -%>
+              <% statements.forEach((stmt) => { -%>
               - Effect: Allow
                 Action:
-<% stmt.action.forEach((a) => { -%>
+                  <% stmt.action.forEach((a) => { -%>
                   - <%- a %>
-<% }) -%>
+                <% }) -%>
                 Resource:
-<% stmt.resource.forEach((r) => { -%>
-                  - "<%- r %>"
+                  <% stmt.resource.forEach((r) => { -%>
+                  - '<%- r %>'
 <% }) -%>
 <% }) -%>
-              #<#<%- roleName %>StatementHookCode#>
-              #<#/<%- roleName %>StatementHookCode#>
+#<#<%- roleName %>StatementHookCode#>
+#<#/<%- roleName %>StatementHookCode#>
 
 <% }) -%>