@izara_project/izara-core-generate-service-code 1.0.69 → 1.0.70

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@izara_project/izara-core-generate-service-code",
-  "version": "1.0.69",
+  "version": "1.0.70",
   "description": "Code for locally generating per service files",
   "homepage": "https://bitbucket.org/izara-core-support-services/izara-core-support-services-generate-service-code#readme",
   "repository": {

package/scripts/format-ejs.js

@@ -57,38 +57,42 @@ export async function formatEjsFiles(targetDir = 'src/emit') {
       return replacement;
     });
 
-    const parser = isYaml ? 'yaml' : 'babel';
-    let formatted = await prettier.format(masked, {
-      parser,
-      singleQuote: true,
-      semi: true,
-      tabWidth: 2,
-      useTabs: false,
-      trailingComma: 'none',
-      printWidth: 80,
-      endOfLine: 'lf'
-    });
+    try {
+      const parser = isYaml ? 'yaml' : 'babel';
+      let formatted = await prettier.format(masked, {
+        parser,
+        singleQuote: true,
+        semi: true,
+        tabWidth: 2,
+        useTabs: false,
+        trailingComma: 'none',
+        printWidth: 80,
+        endOfLine: 'lf'
+      });
 
-    for (const item of placeholders) {
-      if (item.isConditionalComma) {
-        formatted = formatted.replace(item.replacement, item.original);
-        formatted = formatted.replace(
-          `, /*__EJS_COMMA_${item.id}__*/`,
-          item.original
-        );
-      } else {
-        formatted = formatted.replace(item.replacement, item.original);
+      for (const item of placeholders) {
+        if (item.isConditionalComma) {
+          formatted = formatted.replace(item.replacement, item.original);
+          formatted = formatted.replace(
+            `, /*__EJS_COMMA_${item.id}__*/`,
+            item.original
+          );
+        } else {
+          formatted = formatted.replace(item.replacement, item.original);
+        }
       }
-    }
 
-    // Ensure unix newline at EOF
-    if (!formatted.endsWith('\n')) {
-      formatted += '\n';
-    }
+      // Ensure unix newline at EOF
+      if (!formatted.endsWith('\n')) {
+        formatted += '\n';
+      }
 
-    if (formatted !== content) {
-      fs.writeFileSync(filePath, formatted, 'utf8');
-      updatedCount++;
+      if (formatted !== content) {
+        fs.writeFileSync(filePath, formatted, 'utf8');
+        updatedCount++;
+      }
+    } catch (err) {
+      console.warn(`[WARN] Skipping ${filePath}: prettier error: ${err.message}`);
     }
   }
 
@@ -96,9 +100,10 @@ export async function formatEjsFiles(targetDir = 'src/emit') {
 }
 
 if (process.argv[1] === new URL(import.meta.url).pathname) {
-  formatEjsFiles().then(({ total, updated }) => {
+  const targetDir = process.argv[2] || 'src/emit';
+  formatEjsFiles(targetDir).then(({ total, updated }) => {
     console.log(
-      `Successfully formatted ${updated} / ${total} EJS template files in src/emit.`
+      `Successfully formatted ${updated} / ${total} EJS template files in ${targetDir}.`
     );
   });
 }

package/src/compile/loadSchemas.js

@@ -97,63 +97,102 @@ export async function loadLocalSchemaDirectory(project, directoryName) {
  * @returns {Promise<Object[]>} The same array with extended storageResources
  *   merged in.
  */
-export async function resolveExtendedObjectSchemas(objectSchemas, bucketName) {
+export async function resolveExtendedObjectSchemas(
+  objectSchemas,
+  bucketName = process.env.iz_serviceSchemaBucketName
+) {
   if (!Array.isArray(objectSchemas)) {
     throw new TypeError('objectSchemas must be an array');
   }
   const resolvedSchemas = [];
   for (const schema of objectSchemas) {
-    if (!schema.hasOwnProperty('extendObjType')) {
-      resolvedSchemas.push(schema);
-      continue;
-    }
-    try {
-      // Track which storageResource keys existed in the child before merge
-      const initialResources = schema.storageResources || {};
-      const childStorageResourceKeys = new Set(Object.keys(initialResources));
-      const parentServiceTag = schema.extendObjType.serviceTag;
+    let currentSchema = schema;
+    if (currentSchema.hasOwnProperty('extendObjType')) {
+      try {
+        Logger.debug(
+          `[DEBUG] [resolveExtendedObjectSchemas] Merging extendObjType for objectType=${currentSchema.objectType}`,
+          { extendObjType: currentSchema.extendObjType }
+        );
+        const initialResources = currentSchema.storageResources || {};
+        const childStorageResourceKeys = new Set(Object.keys(initialResources));
+        const parentServiceTag = currentSchema.extendObjType.serviceTag;
 
-      const mergedSchema = await getObjectSchema.mergeExtendObjSchema(
-        { logger: Logger },
-        schema,
-        bucketName
-      );
+        const mergedSchema = await getObjectSchema.mergeExtendObjSchema(
+          { logger: Logger },
+          currentSchema,
+          bucketName
+        );
 
-      // Separate parent DynamoDB resources from child's own storageResources.
-      // Parent DynamoDB tables exist in the parent service — they must NOT be
-      // re-created here. Instead, track them as external references so that
-      // emitResourceArtifacts can add cross-service ARNs to IAM roles.
-      const externalDynamoResources = [];
-      const ownStorageResources = {};
-      const mergedStorageResources = mergedSchema.storageResources || {};
-      for (const [key, resource] of Object.entries(mergedStorageResources)) {
-        if (
-          resource?.storageType === 'dynamoDB' &&
-          !childStorageResourceKeys.has(key)
-        ) {
-          externalDynamoResources.push({
-            serviceTag: parentServiceTag,
-            tableName: resource.tableName
-          });
-        } else {
-          ownStorageResources[key] = resource;
+        const externalDynamoResources = [];
+        const ownStorageResources = {};
+        const mergedStorageResources = mergedSchema.storageResources || {};
+        for (const [key, resource] of Object.entries(mergedStorageResources)) {
+          if (
+            resource &&
+            resource.storageType === 'dynamoDB' &&
+            !childStorageResourceKeys.has(key)
+          ) {
+            externalDynamoResources.push({
+              serviceTag: parentServiceTag,
+              tableName: resource.tableName
+            });
+          } else {
+            ownStorageResources[key] = resource;
+          }
         }
-      }
 
-      mergedSchema.storageResources = ownStorageResources;
-      if (externalDynamoResources.length > 0) {
-        mergedSchema.externalDynamoResources = externalDynamoResources;
+        mergedSchema.storageResources = ownStorageResources;
+        if (externalDynamoResources.length > 0) {
+          mergedSchema.externalDynamoResources = externalDynamoResources;
+        }
+
+        currentSchema = mergedSchema;
+      } catch (error) {
+        Logger.error(
+          `[ERROR] [resolveExtendedObjectSchemas] Failed to merge extendObjType for objectType=${currentSchema.objectType}`,
+          { error }
+        );
+        throw error;
       }
+    }
 
-      resolvedSchemas.push(mergedSchema);
-    } catch (error) {
-      Logger.error(
-        `resolveExtendedObjectSchemas: failed to merge extendObjType` +
-          ` for objectType=${schema.objectType}`,
-        { error }
-      );
-      throw error;
+    /*
+    if (
+      currentSchema.hasOwnProperty('belongTo') &&
+      currentSchema.belongTo &&
+      currentSchema.belongTo.serviceTag &&
+      currentSchema.belongTo.objectType
+    ) {
+      try {
+        Logger.debug(
+          `[DEBUG] [resolveExtendedObjectSchemas] Fetching belongTo schema for objectType=${currentSchema.objectType}`,
+          { belongTo: currentSchema.belongTo }
+        );
+        const belongToObjType = {
+          serviceTag: currentSchema.belongTo.serviceTag,
+          objectType: currentSchema.belongTo.objectType
+        };
+        const belongToSchema = await getObjectSchema.getObjSchemaS3(
+          { logger: Logger },
+          belongToObjType,
+          false,
+          bucketName
+        );
+        currentSchema.belongToSchema = belongToSchema;
+        Logger.debug(
+          `[DEBUG] [resolveExtendedObjectSchemas] Successfully fetched belongTo schema for objectType=${currentSchema.objectType}`,
+          { belongToObjectType: belongToSchema?.objectType }
+        );
+      } catch (error) {
+        Logger.warn(
+          `[WARN] [resolveExtendedObjectSchemas] Failed to fetch belongTo schema for objectType=${currentSchema.objectType}`,
+          { error }
+        );
+      }
     }
+    */
+
+    resolvedSchemas.push(currentSchema);
   }
   return resolvedSchemas;
 }

package/src/emit/coreFunction/emitCoreFunctionArtifacts.js

@@ -0,0 +1,163 @@
+import ejsLib from 'ejs';
+import { readFile } from 'node:fs/promises';
+
+const TEMPLATE_URL = new URL('./templates/', import.meta.url);
+const APP_ROOT = 'app/sls_yaml/generatedCode/source';
+const SRC_ROOT = 'app/src/generatedCode/CoreFunctions';
+
+export const coreFunctionManagedPaths = [
+  `${APP_ROOT}/core-function.yml`,
+  `${APP_ROOT}/core-resource.yml`,
+  `${SRC_ROOT}/UploadSchema_HdrInv.js`,
+  `${SRC_ROOT}/UploadSchema_Main.js`,
+  `${SRC_ROOT}/GenerateSeedDataDynamo_HdrInv.js`,
+  `${SRC_ROOT}/GenerateSeedDataDynamo_Main.js`,
+  `${SRC_ROOT}/RemoveSeedDataDynamo_HdrInv.js`,
+  `${SRC_ROOT}/RemoveSeedDataDynamo_Main.js`,
+  `${SRC_ROOT}/GenerateSeedDataGraphData_HdrInv.js`,
+  `${SRC_ROOT}/GenerateSeedDataGraphData_Main.js`,
+  `${SRC_ROOT}/GenerateSeedDataGraphSchema_HdrInv.js`,
+  `${SRC_ROOT}/GenerateSeedDataGraphSchema_Main.js`,
+  `${SRC_ROOT}/InitialSetup_HdrInv.js`,
+  `${SRC_ROOT}/InitialSetup_Main.js`,
+  `${SRC_ROOT}/generated/GeneratedTableConfigs.js`,
+  `${SRC_ROOT}/generated/GeneratedGraphNodeSchemas.js`,
+  `${SRC_ROOT}/generated/GeneratedGraphRelSchemas.js`,
+  `${SRC_ROOT}/InitialSetupConfig.js`
+];
+
+export async function emitCoreFunctionArtifacts({ project, objects = [], relationships = [] }) {
+  const state = { 
+    project, 
+    objects, 
+    relationships,
+    hasGenerateGraph: objects.length > 0 || relationships.length > 0
+  };
+
+  const [
+    coreFunctionYaml,
+    coreResourceYaml,
+    uploadSchemaHdrInv,
+    uploadSchemaMain,
+    generateSeedDataDynamoHdrInv,
+    generateSeedDataDynamoMain,
+    removeSeedDataDynamoHdrInv,
+    removeSeedDataDynamoMain,
+    generateSeedDataGraphDataHdrInv,
+    generateSeedDataGraphDataMain,
+    generateSeedDataGraphSchemaHdrInv,
+    generateSeedDataGraphSchemaMain,
+    generatedTableConfigs,
+    generatedGraphNodeSchemas,
+    generatedGraphRelSchemas,
+    initialSetupConfig,
+    initialSetupHdrInv,
+    initialSetupMain
+  ] = await Promise.all([
+    render('CoreFunction_Yaml.ejs', state),
+    render('CoreResource_Yaml.ejs', state),
+    render('UploadSchema_HdrInv.ejs', state),
+    render('UploadSchema_Main.ejs', state),
+    render('GenerateSeedDataDynamo_HdrInv.ejs', state),
+    render('GenerateSeedDataDynamo_Main.ejs', state),
+    render('RemoveSeedDataDynamo_HdrInv.ejs', state),
+    render('RemoveSeedDataDynamo_Main.ejs', state),
+    render('GenerateSeedDataGraphData_HdrInv.ejs', state),
+    render('GenerateSeedDataGraphData_Main.ejs', state),
+    render('GenerateSeedDataGraphSchema_HdrInv.ejs', state),
+    render('GenerateSeedDataGraphSchema_Main.ejs', state),
+    render('GeneratedTableConfigs.ejs', state),
+    render('GeneratedGraphNodeSchemas.ejs', state),
+    render('GeneratedGraphRelSchemas.ejs', state),
+    render('InitialSetupConfig.ejs', state),
+    render('InitialSetup_HdrInv.ejs', state),
+    render('InitialSetup_Main.ejs', state)
+  ]);
+
+  return [
+    {
+      path: `${APP_ROOT}/core-function.yml`,
+      content: normalizeYaml(coreFunctionYaml)
+    },
+    {
+      path: `${APP_ROOT}/core-resource.yml`,
+      content: normalizeYaml(coreResourceYaml)
+    },
+    {
+      path: `${SRC_ROOT}/UploadSchema_HdrInv.js`,
+      content: uploadSchemaHdrInv
+    },
+    {
+      path: `${SRC_ROOT}/UploadSchema_Main.js`,
+      content: uploadSchemaMain
+    },
+    {
+      path: `${SRC_ROOT}/GenerateSeedDataDynamo_HdrInv.js`,
+      content: generateSeedDataDynamoHdrInv
+    },
+    {
+      path: `${SRC_ROOT}/GenerateSeedDataDynamo_Main.js`,
+      content: generateSeedDataDynamoMain
+    },
+    {
+      path: `${SRC_ROOT}/RemoveSeedDataDynamo_HdrInv.js`,
+      content: removeSeedDataDynamoHdrInv
+    },
+    {
+      path: `${SRC_ROOT}/RemoveSeedDataDynamo_Main.js`,
+      content: removeSeedDataDynamoMain
+    },
+    {
+      path: `${SRC_ROOT}/GenerateSeedDataGraphData_HdrInv.js`,
+      content: generateSeedDataGraphDataHdrInv
+    },
+    {
+      path: `${SRC_ROOT}/GenerateSeedDataGraphData_Main.js`,
+      content: generateSeedDataGraphDataMain
+    },
+    {
+      path: `${SRC_ROOT}/GenerateSeedDataGraphSchema_HdrInv.js`,
+      content: generateSeedDataGraphSchemaHdrInv
+    },
+    {
+      path: `${SRC_ROOT}/GenerateSeedDataGraphSchema_Main.js`,
+      content: generateSeedDataGraphSchemaMain
+    },
+    {
+      path: `${SRC_ROOT}/generated/GeneratedTableConfigs.js`,
+      content: generatedTableConfigs
+    },
+    {
+      path: `${SRC_ROOT}/generated/GeneratedGraphNodeSchemas.js`,
+      content: generatedGraphNodeSchemas
+    },
+    {
+      path: `${SRC_ROOT}/generated/GeneratedGraphRelSchemas.js`,
+      content: generatedGraphRelSchemas
+    },
+    {
+      path: `${SRC_ROOT}/InitialSetupConfig.js`,
+      content: initialSetupConfig,
+      writeWhenFileExist: false // Don't overwrite the file that dev modifies
+    },
+    {
+      path: `${SRC_ROOT}/InitialSetup_HdrInv.js`,
+      content: initialSetupHdrInv
+    },
+    {
+      path: `${SRC_ROOT}/InitialSetup_Main.js`,
+      content: initialSetupMain
+    }
+  ];
+}
+
+function normalizeYaml(content) {
+  return `${content.trimEnd()}\n`;
+}
+
+async function render(templateName, data) {
+  return ejsLib.render(
+    await readFile(new URL(templateName, TEMPLATE_URL), 'utf8'),
+    data
+  );
+}

package/src/emit/coreFunction/templates/CoreFunction_Yaml.ejs

@@ -0,0 +1,38 @@
+# --- FOR PROD STAGE
+UploadSchemaHdrInv:
+  handler: src/generatedCode/CoreFunctions/UploadSchema_HdrInv.main
+  name: ${self:custom.iz_resourcePrefix}UploadSchemaHdrInv
+  role: UploadSchemaRole
+  timeout: 30
+  #<#UploadSchemaHdrInvHookCode#>
+  #<#/UploadSchemaHdrInvHookCode#>
+
+# --- FOR TEST STAGE
+GenerateSeedGraph: # --- FOR TEST STAGE
+  handler: src/generatedCode/CoreFunctions/GenerateSeedDataGraphData_HdrInv.main
+  name: ${self:custom.iz_resourcePrefix}GenerateSeedDataGraphDataTestEnv
+  role: GenerateSeedGraphRole
+  #<#GenerateSeedGraphHookCode#>
+  #<#/GenerateSeedGraphHookCode#>
+
+GenerateGraphSchema:
+  handler: src/generatedCode/CoreFunctions/GenerateSeedDataGraphSchema_HdrInv.main
+  name: ${self:custom.iz_resourcePrefix}GenerateSeedDataGraphSchemaTestEnv
+  role: GenerateGraphSchemaRole
+  #<#GenerateGraphSchemaHookCode#>
+  #<#/GenerateGraphSchemaHookCode#>
+
+RemoveSeedDataDynamo:
+  handler: src/generatedCode/CoreFunctions/RemoveSeedDataDynamo_HdrInv.main
+  name: ${self:custom.iz_resourcePrefix}RemoveSeedDataDynamo
+  role: RemoveSeedDataDynamoRole
+  #<#RemoveSeedDataDynamoHookCode#>
+  #<#/RemoveSeedDataDynamoHookCode#>
+
+InitialSetup:
+  handler: src/generatedCode/CoreFunctions/InitialSetup_HdrInv.main
+  name: ${self:custom.iz_resourcePrefix}InitialSetup
+  role: InitialSetupRole
+  timeout: 300
+  #<#InitialSetupHookCode#>
+  #<#/InitialSetupHookCode#>

package/src/emit/coreFunction/templates/CoreResource_Yaml.ejs

@@ -0,0 +1,235 @@
+Resources:
+  UploadSchemaRole:
+    Type: AWS::IAM::Role
+    Properties:
+      RoleName: ${self:custom.iz_resourcePrefix}UploadSchemaRole
+      AssumeRolePolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+          - Effect: Allow
+            Principal:
+              Service: 'lambda.amazonaws.com'
+            Action: sts:AssumeRole
+          #<#UploadSchemaRoleAssumeRoleStatementHookCode#>
+          #<#/UploadSchemaRoleAssumeRoleStatementHookCode#>
+      ManagedPolicyArns:
+        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
+        #<#UploadSchemaRoleManagedPolicyArns#>
+        #<#/UploadSchemaRoleManagedPolicyArns#>
+      Policies:
+        - PolicyName: ${self:custom.iz_resourcePrefix}UploadSchemaPolicy
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - s3:PutObject
+                  - s3:GetObject
+                  - s3:ListBucket
+                  - s3:DeleteObject
+                Resource:
+                  - arn:aws:s3:::${self:custom.iz_serviceSchemaBucketName}
+                  - arn:aws:s3:::${self:custom.iz_serviceSchemaBucketName}/*
+                  - arn:aws:s3:::${self:custom.iz_serviceSchemaBucketName}/perServiceSchemas/${self:custom.iz_serviceTag}/*
+              - Effect: Allow
+                Action:
+                  - apigateway:GET
+                Resource:
+                  - arn:aws:apigateway:${self:custom.iz_region}::/*
+              - Effect: Allow
+                Action:
+                  - lambda:InvokeFunction
+                Resource:
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:${self:custom.iz_resourcePrefix}AddLinkCreateByRelHdrInv
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:${self:custom.iz_resourcePrefix}AddLinkBelongToHdrInv
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:GraphHandler${self:custom.iz_stage}CreateAllIndexSchemasHdrInv
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:TranslateIds${self:custom.iz_stage}CreatePermissionHdrInv
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:Translations${self:custom.iz_stage}AddLinkToTranslationLinksHdrInv
+              - Effect: Allow
+                Action:
+                  - sns:Publish
+                Resource:
+                  - arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:Translations_${self:custom.iz_stage}_RegisterSystemTag_In
+              #<#UploadSchemaRoleStatementHookCode#>
+              #<#/UploadSchemaRoleStatementHookCode#>
+
+  GenerateSeedDynamoRole:
+    Type: AWS::IAM::Role
+    Properties:
+      RoleName: ${self:custom.iz_resourcePrefix}GenerateSeedDynamoRole
+      AssumeRolePolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+          - Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+            Action: sts:AssumeRole
+          #<#GenerateSeedDynamoRoleAssumeRoleStatementHookCode#>
+          #<#/GenerateSeedDynamoRoleAssumeRoleStatementHookCode#>
+      ManagedPolicyArns:
+        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
+        #<#GenerateSeedDynamoRoleManagedPolicyArns#>
+        #<#/GenerateSeedDynamoRoleManagedPolicyArns#>
+      Policies:
+        - PolicyName: ${self:custom.iz_resourcePrefix}GenerateSeedDynamoPolicy
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - dynamodb:PutItem
+                Resource:
+                  - arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/${self:custom.iz_resourcePrefix}Config
+              #<#GenerateSeedDynamoRoleStatementHookCode#>
+              #<#/GenerateSeedDynamoRoleStatementHookCode#>
+
+  GenerateSeedGraphRole:
+    Type: AWS::IAM::Role
+    Properties:
+      RoleName: ${self:custom.iz_resourcePrefix}GenerateSeedGraphRole
+      AssumeRolePolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+          - Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+            Action: sts:AssumeRole
+          #<#GenerateSeedGraphRoleAssumeRoleStatementHookCode#>
+          #<#/GenerateSeedGraphRoleAssumeRoleStatementHookCode#>
+      ManagedPolicyArns:
+        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
+        #<#GenerateSeedGraphRoleManagedPolicyArns#>
+        #<#/GenerateSeedGraphRoleManagedPolicyArns#>
+      Policies:
+        - PolicyName: ${self:custom.iz_resourcePrefix}GenerateSeedGraphPolicy
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - dynamodb:GetItem
+                Resource:
+                  - arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/${self:custom.iz_resourcePrefix}Config
+              - Effect: Allow
+                Action:
+                  - SNS:Publish
+                Resource:
+                  - arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:GraphHandler_${self:custom.iz_stage}_CreateNode_In
+                  - arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:GraphHandler_${self:custom.iz_stage}_UpdateNode_In
+                  - arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:GraphHandler_${self:custom.iz_stage}_CreateRelationship_In
+              #<#GenerateSeedGraphRoleStatementHookCode#>
+              #<#/GenerateSeedGraphRoleStatementHookCode#>
+
+  GenerateGraphSchemaRole:
+    Type: AWS::IAM::Role
+    Properties:
+      RoleName: ${self:custom.iz_resourcePrefix}GenerateGraphSchemaRole
+      AssumeRolePolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+          - Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+            Action: sts:AssumeRole
+          #<#GenerateGraphSchemaRoleAssumeRoleStatementHookCode#>
+          #<#/GenerateGraphSchemaRoleAssumeRoleStatementHookCode#>
+      ManagedPolicyArns:
+        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
+        #<#GenerateGraphSchemaRoleManagedPolicyArns#>
+        #<#/GenerateGraphSchemaRoleManagedPolicyArns#>
+      Policies:
+        - PolicyName: ${self:custom.iz_resourcePrefix}GenerateGraphSchemaPolicy
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - lambda:InvokeFunction
+                  - dynamodb:GetItem
+                Resource:
+                  - arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/*NodeSchema
+                  - arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/*RelationshipSchema
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:*AddNodeSchemasHdrInv
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:*AddRelationshipSchemasHdrInv
+              #<#GenerateGraphSchemaRoleStatementHookCode#>
+              #<#/GenerateGraphSchemaRoleStatementHookCode#>
+
+  RemoveSeedDataDynamoRole:
+    Type: AWS::IAM::Role
+    Properties:
+      RoleName: ${self:custom.iz_resourcePrefix}RemoveSeedDataDynamoRole
+      AssumeRolePolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+          - Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+            Action: sts:AssumeRole
+          #<#RemoveSeedDataDynamoRoleAssumeRoleStatementHookCode#>
+          #<#/RemoveSeedDataDynamoRoleAssumeRoleStatementHookCode#>
+      ManagedPolicyArns:
+        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
+        #<#RemoveSeedDataDynamoRoleManagedPolicyArns#>
+        #<#/RemoveSeedDataDynamoRoleManagedPolicyArns#>
+      Policies:
+        - PolicyName: ${self:custom.iz_resourcePrefix}RemoveSeedDataDynamoPolicy
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - dynamodb:Scan
+                  - dynamodb:DescribeTable
+                  - dynamodb:GetItem
+                  - dynamodb:PutItem
+                  - dynamodb:DeleteItem
+                Resource:
+                  - arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/${self:custom.iz_resourcePrefix}Config
+              #<#RemoveSeedDataDynamoRoleStatementHookCode#>
+              #<#/RemoveSeedDataDynamoRoleStatementHookCode#>
+
+  InitialSetupRole:
+    Type: AWS::IAM::Role
+    Properties:
+      RoleName: ${self:custom.iz_resourcePrefix}InitialSetupRole
+      AssumeRolePolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+          - Effect: Allow
+            Principal:
+              Service: lambda.amazonaws.com
+            Action: sts:AssumeRole
+          #<#InitialSetupRoleAssumeRoleStatementHookCode#>
+          #<#/InitialSetupRoleAssumeRoleStatementHookCode#>
+      ManagedPolicyArns:
+        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
+        - arn:aws:iam::aws:policy/IAMFullAccess
+        #<#InitialSetupRoleManagedPolicyArns#>
+        #<#/InitialSetupRoleManagedPolicyArns#>
+      Policies:
+        - PolicyName: ${self:custom.iz_resourcePrefix}InitialSetupPolicy
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - dynamodb:PutItem
+                  - dynamodb:GetItem
+                Resource:
+                  - arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/${self:custom.iz_resourcePrefix}Config
+              - Effect: Allow
+                Action:
+                  - lambda:InvokeFunction
+                  - dynamodb:GetItem
+                Resource:
+                  - arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/*NodeSchema
+                  - arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/*RelationshipSchema
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:*AddNodeSchemasHdrInv
+                  - arn:aws:lambda:${self:custom.iz_region}:${self:custom.iz_accountId}:function:*AddRelationshipSchemasHdrInv
+              - Effect: Allow
+                Action:
+                  - sns:Publish
+                Resource:
+                  - arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:*
+              #<#InitialSetupRoleStatementHookCode#>
+              #<#/InitialSetupRoleStatementHookCode#>