@izara_project/izara-market-library-service-schemas 1.0.23 → 1.0.25

package/src/reStructure/TemplateData/externalService/lambdaRole/data.js

@@ -0,0 +1,435 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+'use strict';
+
+const path = require('path');
+const { ACTIONS, HANDLER, STORAGE_TYPES } = require('@izara_project/izara-core-library-service-schemas/src/Consts')
+const {
+  getGraphServiceNameFromGraphServerTagWithCache,
+  getGraphServiceTagWithCache
+} = require('@izara_project/izara-core-library-service-schemas/src/ServiceConfig')
+
+const { firstLetterLowerCase: lowerCase, firstLetterUpperCase: upperCase } = require("../../../../MainLibs/src/Utils");
+const {
+  DEFAULT_HANDLER_PER_ACTION,
+  createIamRole,
+  RESOURCE_CLASSES,
+  SOURCE_PATH,
+  externalResourceName,
+  getGraphServiceNameFromAllRelSchema,
+  SAVE_FILE_NAME,
+  LAMBDA_RESOURCE,
+  SNS_RESOURCE,
+  getGraphServiceNameFromObjectSchema,
+  shortNameHandler,
+  SHORT_FUNCTION_NAME,
+  defaultIamRolePerAction,
+  resourceNames,
+  SOURCE_GENERATE_IAM_ROLE
+} = require("../../../../MainLibs/src/Consts");
+const templatePath = path.join(__dirname, "./template.ejs");
+const { getAllLocalRelationshipSchema } = require('@izara_project/izara-core-library-service-schemas/src/GetObjectSchema')
+const { EXTERNAL_SERVICE_NAME } = require("../../../../GenerateCodeLibs/src/Consts");
+
+const createExternalLambdaRole = async (_izContext, allObjSchemas, allRelSchemas, allLocalFlowSchemas, srcPath) => {
+  const allRelationshipSchemas = getAllLocalRelationshipSchema(_izContext, srcPath)
+  // console.log("allRelationshipSchemas", allRelationshipSchemas);
+  const externalLambdaIamRoleArray = [];
+  for (const objectSchema of allObjSchemas) {
+
+    // per action external lambda role
+    for (const action of Object.values(ACTIONS)) {
+      if (objectSchema.overWriteHandlers?.[action]) {
+        for (const handler of objectSchema.overWriteHandlers[action]) {
+          const externalLambdaIamRole = await externalLambdaIamRoleDataPerAction(_izContext, objectSchema, action, handler)
+          externalLambdaIamRole && externalLambdaIamRoleArray.push(externalLambdaIamRole);
+        }
+
+      } else {
+        for (const handler of DEFAULT_HANDLER_PER_ACTION[action]) {
+          const externalLambdaIamRole = await externalLambdaIamRoleDataPerAction(_izContext, objectSchema, action, handler)
+          externalLambdaIamRole && externalLambdaIamRoleArray.push(externalLambdaIamRole);
+        }
+      }
+    }
+
+  }
+
+  // validate relationship in ObjectRelationship
+  if (allRelationshipSchemas.length) {
+
+    // updateRelationship external lambda role
+    for (const handler of Object.values(HANDLER)) {
+      const externalLambdaIamRoleUpdateRelationship = await externalLambdaIamRoleDataUpdateRelationshipSchema(_izContext, allRelSchemas, handler);
+      externalLambdaIamRoleUpdateRelationship && externalLambdaIamRoleArray.push(externalLambdaIamRoleUpdateRelationship)
+    }
+
+    // CreateRelationship external lambda role
+    for (const handler of Object.values(HANDLER)) {
+      const externalLambdaIamRoleCreateRelationship = await externalLambdaIamRoleDataCreateRelationshipSchema(_izContext, allRelSchemas, handler);
+      externalLambdaIamRoleCreateRelationship && externalLambdaIamRoleArray.push(externalLambdaIamRoleCreateRelationship)
+    }
+
+    for (const handler of Object.values(HANDLER)) {
+      const externalLambdaIamRoleDeleteRelationship = await externalLambdaIamRoleDataDeleteRelationshipSchema(_izContext, allRelSchemas, handler);
+      externalLambdaIamRoleDeleteRelationship && externalLambdaIamRoleArray.push(externalLambdaIamRoleDeleteRelationship)
+    }
+
+    // findData external lambda role
+    const externalLambdaIamRoleFindData = externalLambdaIamRoleDataFindData(_izContext);
+    externalLambdaIamRoleFindData && externalLambdaIamRoleArray.push(externalLambdaIamRoleFindData)
+
+    // updateRelationshipComplete external lambda role
+
+    // ... another external lambda role data
+
+    // ProcessLogical
+    const externalLambdaIamRoleProcessLogical = await externalLambdaIamRoleDataProcessLogical(_izContext, allObjSchemas);
+    externalLambdaIamRoleProcessLogical && externalLambdaIamRoleArray.push(externalLambdaIamRoleProcessLogical)
+  }
+
+  if (allLocalFlowSchemas) {
+    for (const localFlowSchema of allLocalFlowSchemas) {
+      if (localFlowSchema.hasOwnProperty("uploadS3") && localFlowSchema.uploadS3 === true) {
+        const externalLambdaIamRoleGetPresignUrl = await externalLambdaIamRoleDataGetPresignUrl(_izContext);
+        externalLambdaIamRoleGetPresignUrl && externalLambdaIamRoleArray.push(externalLambdaIamRoleGetPresignUrl);
+
+        const externalLambdaIamRoleReservedLimitComplete = await externalLambdaIamRoleDataReservedLimitComplete(_izContext);
+        externalLambdaIamRoleReservedLimitComplete && externalLambdaIamRoleArray.push(externalLambdaIamRoleReservedLimitComplete);
+
+        const externalLambdaIamRoleProcessAfterUpload = await externalLambdaIamRoleDataProcessAfterUpload(_izContext);
+        externalLambdaIamRoleProcessAfterUpload && externalLambdaIamRoleArray.push(externalLambdaIamRoleProcessAfterUpload);
+
+        const externalLambdaIamRoleConfirmReservedAfterUpload = await externalLambdaIamRoleDataConfirmReservedAfterUpload(_izContext);
+        externalLambdaIamRoleConfirmReservedAfterUpload && externalLambdaIamRoleArray.push(externalLambdaIamRoleConfirmReservedAfterUpload);
+      }
+    }
+  }
+
+  // console.log("externalLambdaIamRoleArray", externalLambdaIamRoleArray)
+  // console.log("createSourceArrayIamRole", JSON.stringify(externalLambdaIamRoleArray))
+  // return externalLambdaIamRoleArray
+
+  return {
+    templatePath: templatePath,
+    templateData: { datas: externalLambdaIamRoleArray },
+    setting: {
+      savePath: path.join(srcPath, SOURCE_PATH.externalService),
+      saveFileName: SAVE_FILE_NAME.externalLambdaRole,
+      fileExtension: ".js",
+      isAppend: false
+    }
+  }
+}
+
+async function externalLambdaIamRoleDataPerAction(_izContext, objectSchema, action, handler) {
+  const objectType = objectSchema?.shortNameObjectType ? objectSchema?.shortNameObjectType : objectSchema.objectType;
+  const additionalResourcePermission = [];
+  const graphServiceNames = [];
+  for (const storgaeResource of Object.values(objectSchema.storageResources)) {
+    if (storgaeResource.storageType === STORAGE_TYPES.graph) {
+      let getGraphServiceName = await getGraphServiceTagWithCache(_izContext, storgaeResource.graphServerTag)
+      if (!graphServiceNames.includes(getGraphServiceName)) {
+        getGraphServiceName && graphServiceNames.push(getGraphServiceName)
+      }
+    }
+  }
+
+
+  // let functionName = upperCase(objectType) + upperCase(action) + upperCase(shortNameHandler(handler));
+  let functionName = upperCase(objectType) + upperCase(action) + upperCase(shortNameHandler(handler));
+
+  if (!graphServiceNames.length) {
+    return
+  } else {
+    if (action === ACTIONS.get) {
+      additionalResourcePermission.push(
+        createIamRole(
+          { [RESOURCE_CLASSES.lambda]: [LAMBDA_RESOURCE.invokeFunction] },
+          graphServiceNames.map(graphServiceName =>
+            externalResourceName(RESOURCE_CLASSES.lambda, "GetNodeV2HdrInv", graphServiceName),
+          )
+        )
+      )
+      // }
+    } else if (action === ACTIONS.update) {
+      additionalResourcePermission.push(
+        createIamRole(
+          {
+            [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+          },
+          graphServiceNames.map(graphServiceName =>
+            externalResourceName(RESOURCE_CLASSES.sns, "InUpdateNode", graphServiceName)
+          )
+        )
+      )
+      // }
+    } else if (action === ACTIONS.create) {
+      additionalResourcePermission.push(
+        createIamRole(
+          {
+            [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+          },
+          graphServiceNames.map(graphServiceName =>
+            externalResourceName(RESOURCE_CLASSES.sns, "InCreateNodeV2", graphServiceName)
+          )
+        )
+      )
+      // }
+    } else if (action === ACTIONS.delete) {
+      return
+      // additionalResourcePermission.push(
+      //   createIamRole(
+      //     {
+      //       [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+      //     },
+      //     graphServiceNames.map(graphServiceName =>
+      //       externalResourceSns("InDeleteNode", graphServiceName)
+      //     )
+      //   )
+      // )
+    } else {
+      throw new error("Invalid action")
+    }
+  }
+
+
+  return {
+    objectType: upperCase(objectType),
+    functionName: functionName,
+    action: action,
+    additionalResourcePermission
+  }
+}
+
+
+// update Relationship
+async function externalLambdaIamRoleDataUpdateRelationshipSchema(_izContext, allRelSchemas, handler) {
+  const functionName = upperCase(SHORT_FUNCTION_NAME.updateRel) + upperCase(shortNameHandler(handler));
+  const additionalResourcePermission = [];
+  const graphServiceNamesFromAllRelSchemas = await getGraphServiceNameFromAllRelSchema(_izContext, allRelSchemas);
+  const objectType = SOURCE_GENERATE_IAM_ROLE.RelationshipRole
+
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+      },
+      graphServiceNamesFromAllRelSchemas.map(graphServiceName =>
+        externalResourceName(RESOURCE_CLASSES.sns, "InUpdateRelationship", graphServiceName)
+      )
+    )
+  )
+
+  return {
+    functionName,
+    additionalResourcePermission,
+    objectType
+  }
+}
+
+
+// create relationship
+
+async function externalLambdaIamRoleDataCreateRelationshipSchema(_izContext, allRelSchemas, handler) {
+  const functionName = upperCase(SHORT_FUNCTION_NAME.createRel) + upperCase(shortNameHandler(handler));
+  const additionalResourcePermission = [];
+  const graphServiceNamesFromAllRelSchemas = await getGraphServiceNameFromAllRelSchema(_izContext, allRelSchemas);
+  const objectType = SOURCE_GENERATE_IAM_ROLE.RelationshipRole
+
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+      },
+      graphServiceNamesFromAllRelSchemas.map(graphServiceName =>
+        externalResourceName(RESOURCE_CLASSES.sns, "InCreateRelationshipV2", graphServiceName)
+      )
+    )
+  )
+  return {
+    functionName,
+    additionalResourcePermission,
+    objectType
+  }
+}
+
+// delete Relationship
+async function externalLambdaIamRoleDataDeleteRelationshipSchema(_izContext, allRelSchemas, handler) {
+  const functionName = upperCase(SHORT_FUNCTION_NAME.deleteRel) + upperCase(shortNameHandler(handler))
+  const additionalResourcePermission = [];
+  const graphServiceNamesFromAllRelSchemas = await getGraphServiceNameFromAllRelSchema(_izContext, allRelSchemas);
+  const objectType = SOURCE_GENERATE_IAM_ROLE.RelationshipRole
+
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+      },
+      graphServiceNamesFromAllRelSchemas.map(graphServiceName =>
+        externalResourceName(RESOURCE_CLASSES.sns, "InDeleteRelationshipV2", graphServiceName)
+      )
+    )
+  )
+  return {
+    functionName,
+    additionalResourcePermission,
+    objectType
+  }
+}
+
+function externalLambdaIamRoleDataFindData(_izContext) {
+  let functionName = upperCase(SHORT_FUNCTION_NAME.findData) + upperCase(shortNameHandler(HANDLER.hdrSqs));
+  let additionalResourcePermission = [];
+  let objectType = SOURCE_GENERATE_IAM_ROLE.ProcessFindDataRole
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.lambda]: [LAMBDA_RESOURCE.invokeFunction]
+      },
+      [
+        externalResourceName(RESOURCE_CLASSES.lambda, "GetNodeV2HdrInv", "GraphHandler")
+      ]
+    )
+  )
+  // console.log("findData template data:", { functionName, additionalResourcePermission })
+  return {
+    functionName,
+    additionalResourcePermission,
+    objectType
+  }
+}
+
+
+async function externalLambdaIamRoleDataProcessLogical(_izContext, allObjectSchemas) {
+  let functionName = upperCase(SHORT_FUNCTION_NAME.processLogical) + upperCase(shortNameHandler(HANDLER.hdrSqs));
+  let additionalResourcePermission = [];
+  let graphServiceNames = await getGraphServiceNameFromObjectSchema(_izContext, allObjectSchemas)
+  let objectType = SOURCE_GENERATE_IAM_ROLE.ProcessFindDataRole
+
+  // console.log("graphServiceNameFromProcessLogical::", graphServiceNames)
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.lambda]: [LAMBDA_RESOURCE.invokeFunction]
+      },
+      graphServiceNames.map(graphServiceName => (
+        externalResourceName(RESOURCE_CLASSES.lambda, "GetNodeV2HdrInv", graphServiceName)
+      ))
+    )
+  )
+  return {
+    functionName,
+    additionalResourcePermission,
+    objectType
+  }
+}
+
+function externalLambdaIamRoleDataGetPresignUrl(_izContext) {
+  let functionName = "GetPresignUrl" + upperCase(shortNameHandler(HANDLER.hdrSqs));
+  let additionalResourcePermission = [];
+
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+      },
+      [
+        externalResourceName(RESOURCE_CLASSES.sns, "InReservedDynamicUsage", EXTERNAL_SERVICE_NAME.accountLimits)
+      ]
+    ),
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.lambda]: [LAMBDA_RESOURCE.invokeFunction]
+      },
+      [
+        externalResourceName(RESOURCE_CLASSES.lambda, "StaticLimitProcessHdrInv", EXTERNAL_SERVICE_NAME.accountLimits)
+      ]
+    )
+  )
+  // console.log("additionalResourcePermission GetPresignUrl::", JSON.stringify(additionalResourcePermission))
+  return {
+    functionName,
+    additionalResourcePermission
+  }
+}
+
+function externalLambdaIamRoleDataReservedLimitComplete(_izContext) {
+  let functionName = "ReservedLimitComp" + upperCase(shortNameHandler(HANDLER.hdrSqs));
+  let additionalResourcePermission = [];
+
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+      },
+      [
+        externalResourceName(RESOURCE_CLASSES.sns, "InCancelUsage", EXTERNAL_SERVICE_NAME.accountLimits)
+      ]
+    )
+  )
+  return {
+    functionName,
+    additionalResourcePermission
+  }
+}
+
+function externalLambdaIamRoleDataConfirmReservedAfterUpload(_izContext) {
+  let functionName = "ConfirmNewReserved" + upperCase(shortNameHandler(HANDLER.hdrSqs));
+  let additionalResourcePermission = []
+
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+      },
+      [
+        externalResourceName(RESOURCE_CLASSES.sns, "OutReservedDynamicUsageComplet", EXTERNAL_SERVICE_NAME.accountLimits),
+        externalResourceName(RESOURCE_CLASSES.sns, "InConfirmUsage", EXTERNAL_SERVICE_NAME.accountLimits)
+      ]
+    ),
+  )
+  return {
+    functionName,
+    additionalResourcePermission
+  }
+}
+
+function externalLambdaIamRoleDataProcessAfterUpload(_izContext) {
+  let functionName = "ProcessAfterUploadS3" + shortNameHandler(upperCase("HdrS3"));
+  let additionalResourcePermission = []
+
+  additionalResourcePermission.push(
+    createIamRole(
+      {
+        [RESOURCE_CLASSES.sns]: [SNS_RESOURCE.publish]
+      },
+      [
+        externalResourceName(RESOURCE_CLASSES.sns, "InCancelUsage", EXTERNAL_SERVICE_NAME.accountLimits),
+        externalResourceName(RESOURCE_CLASSES.sns, "InConfirmUsage", EXTERNAL_SERVICE_NAME.accountLimits),
+        externalResourceName(RESOURCE_CLASSES.sns, "InReservedDynamicUsage", EXTERNAL_SERVICE_NAME.accountLimits),
+      ]
+    )
+  )
+  return {
+    functionName,
+    additionalResourcePermission
+  }
+}
+
+module.exports = createExternalLambdaRole;

package/src/reStructure/TemplateData/externalService/lambdaRole/request.json

@@ -0,0 +1,18 @@
+{
+  "functionName": "xx",
+  "additionalResourcePermission": [
+    {
+      "effect": "Allow",
+      "action": {
+        "dynamodb": [
+          "GetItem",
+          "PutItem"
+        ]
+      },
+      "resource": [
+        "aws:sqs",
+        "..."
+      ]
+    }
+  ]
+}

package/src/reStructure/TemplateData/externalService/lambdaRole/template.ejs

@@ -0,0 +1,57 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+'use strict';
+
+const Logger = require('@izara_project/izara-core-library-logger')
+const izaraShared = require('@izara_project/izara-shared')
+const dynamodbSharedLib = izaraShared.dynamodbSharedLib
+const lambdaSharedLib = izaraShared.lambdaSharedLib
+const snsSharedLib = izaraShared.snsSharedLib
+const initialSetupConfig = require('../../config/Config') // config external serviceName
+const basicNodeSchemaLib = require('@izara_project/izara-attribute-tree').basicNodeSchemaLib
+const _izContext = {logger : Logger}
+
+module.exports.generatedLambdaRole = async () => {
+  let externalLambdaRole = [ <%_ datas.forEach((data,dataIndex) => { %>
+  {
+    roleName: "<%- data.objectType %>",
+    statement: [
+    <%_ data.additionalResourcePermission.forEach((resourcePermission, resourceIdx) => { _%>
+      {
+        "Sid": "<%- data.functionName %>Test<%- resourceIdx %>",
+        "Effect": "<%- resourcePermission.effect %>",
+        "Action":
+          [
+          <%_ Object.keys(resourcePermission.action).forEach(resourcePerAction => { _%>
+            <%_ resourcePermission.action[resourcePerAction].forEach(permission => { _%>
+            "<%- resourcePerAction %>:<%- permission %>",
+          ],
+        "Resource":[
+          <%_ resourcePermission.resource.forEach(resource => { _%>
+            `<%- resource _%>`,
+            <%_ }) _%>
+            ]
+        <%_ }) _%>
+        <%_ }) _%>
+        }<% if(resourceIdx < data.additionalResourcePermission.length-1) {_%>, <%_} %>
+      <%_ }) _%>
+      ]
+    }, <%_ }) %>
+  ]
+   return externalLambdaRole
+}

package/src/reStructure/TemplateData/externalService/snsTopicSubscriptions/data.js

@@ -0,0 +1,177 @@
+/*
+Copyright (C) 2020 Sven Mason <http://izara.io>
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+'use strict';
+
+const path = require('path');
+
+const { ACTIONS, HANDLER, STORAGE_TYPES } = require('@izara_project/izara-core-library-service-schemas/src/Consts')
+const { getGraphServiceNameFromGraphServerTagWithCache, getServiceNameWithCache } = require('@izara_project/izara-core-library-service-schemas/src/ServiceConfig')
+const { firstLetterLowerCase: lowerCase, firstLetterUpperCase: upperCase } = require("../../../../MainLibs/src/Utils");
+const {
+  DEFAULT_HANDLER_PER_ACTION,
+  createIamRole,
+  resourceNames,
+  RESOURCE_CLASSES,
+  DEFAULT_LAMBDA_ROLE_PER_ACTION,
+  SOURCE_PATH,
+  externalResourceName,
+  getGraphServiceNameFromAllRelSchema,
+  FUNCTION_NAME,
+  SAVE_FILE_NAME,
+  getGraphServiceNameFromObjectSchema
+} = require("../../../../MainLibs/src/Consts");
+const {
+  TOPIC_NAME_GRAPH_HANDLER,
+  TOPIC_NAME_GENERATE_CODE,
+  EXTERNAL_SERVICE_NAME,
+  TOPIC_NAME_EXTERNAL_SERVICE
+} = require('../../../../GenerateCodeLibs/src/Consts');
+const templatePath = path.join(__dirname, "./template.ejs");
+
+
+const createExternalSnsSubscriptions = async (_izContext, allObjSchemas, allRelSchemas, allLocalFlowSchemas, srcPath) => {
+  const snsServiceConfigArray = [];
+
+  const snsServiceConfigUpdateRelationshipComplete = await snsSubScriptionUpdateRelationshipComplete(_izContext, allRelSchemas)
+  snsServiceConfigUpdateRelationshipComplete && snsServiceConfigArray.push(snsServiceConfigUpdateRelationshipComplete)
+
+  const snsServiceConfigCreateRelationshipComplete = await snsSubscriptionCreateRelationshipComplete(_izContext, allRelSchemas)
+  snsServiceConfigCreateRelationshipComplete && snsServiceConfigArray.push(snsServiceConfigCreateRelationshipComplete)
+
+  const snsServiceConfigDeleteRelationshipComplete = await snsSubscriptionDeleteRelatipnshipComplete(_izContext, allRelSchemas)
+  snsServiceConfigDeleteRelationshipComplete && snsServiceConfigArray.push(snsServiceConfigDeleteRelationshipComplete);
+
+  const snsServiceConfigUpdateNodeComplete = await snsSubscriptionOutUpdateNodeComplete(_izContext, allObjSchemas)
+  snsServiceConfigUpdateNodeComplete && snsServiceConfigArray.push(snsServiceConfigUpdateNodeComplete)
+
+  const snsServiceConfigCreateNodeComplete = await snsSubscriptionCreateNodeComplete(_izContext, allObjSchemas)
+  snsServiceConfigCreateNodeComplete && snsServiceConfigArray.push(snsServiceConfigCreateNodeComplete);
+
+  const snsServiceConfigDeleteNodeComplete = await snsSubscriptionDeleteNodeComplate(_izContext, allObjSchemas)
+  snsServiceConfigDeleteNodeComplete && snsServiceConfigArray.push(snsServiceConfigDeleteNodeComplete);
+
+  if (allLocalFlowSchemas) {
+    for (const flowSchema of allLocalFlowSchemas) {
+      if (flowSchema.hasOwnProperty("uploadS3") && flowSchema.uploadS3 === true) {
+        const snsServiceConfigForReservedDynamicUsage = await snsSubscriptionReservedLimitCompleteForReservedDynamicUsage(_izContext);
+        snsServiceConfigForReservedDynamicUsage && snsServiceConfigArray.push(snsServiceConfigForReservedDynamicUsage);
+
+        const snsServiceConfigForConfirmReserved = await snsSubscriptionConfirmReserved(_izContext);
+        snsServiceConfigForConfirmReserved && snsServiceConfigArray.push(snsServiceConfigForConfirmReserved);
+      }
+    }
+  }
+  console.log("snsServiceConfigArray::", snsServiceConfigArray)
+
+  return {
+    templatePath: templatePath,
+    templateData: { datas: snsServiceConfigArray },
+    setting: {
+      savePath: path.join(srcPath, SOURCE_PATH.externalService),
+      saveFileName: SAVE_FILE_NAME.snsSubscription,
+      fileExtension: ".js",
+      isAppend: true
+    }
+  }
+}
+
+
+// update Relationship
+async function snsSubScriptionUpdateRelationshipComplete(_izContext, allRelSchemas) {
+  let serviceNames = await getGraphServiceNameFromAllRelSchema(_izContext, allRelSchemas)
+
+  return {
+    serviceNames: serviceNames,
+    topicName: TOPIC_NAME_GRAPH_HANDLER.outUpdateRel, // external service
+    sqsEndpoint: TOPIC_NAME_GENERATE_CODE.updateRelComplete // in service
+  }
+}
+
+// create Relationship
+async function snsSubscriptionCreateRelationshipComplete(_izContext, allRelSchemas) {
+  let serviceNames = await getGraphServiceNameFromAllRelSchema(_izContext, allRelSchemas)
+
+  return {
+    serviceNames: serviceNames,
+    topicName: TOPIC_NAME_GRAPH_HANDLER.outCreateRel,
+    sqsEndpoint: TOPIC_NAME_GENERATE_CODE.createRelComplete
+  }
+}
+
+// topic not create yet will return error when initialSetup
+// create topic for OutUpdateNodeComplete
+async function snsSubscriptionOutUpdateNodeComplete(_izContext, allObjSchemas) {
+  let serviceNames = await getGraphServiceNameFromObjectSchema(_izContext, allObjSchemas)
+
+  return {
+    serviceNames: serviceNames,
+    topicName: TOPIC_NAME_GRAPH_HANDLER.outUpdateNode,
+    sqsEndpoint: TOPIC_NAME_GENERATE_CODE.updateNodeComplete
+  }
+}
+
+async function snsSubscriptionCreateNodeComplete(_izContext, allObjectSchemas) {
+  let serviceNames = await getGraphServiceNameFromObjectSchema(_izContext, allObjectSchemas)
+
+  return {
+    serviceNames: serviceNames,
+    topicName: TOPIC_NAME_GRAPH_HANDLER.outCreateNode,
+    sqsEndpoint: TOPIC_NAME_GENERATE_CODE.createNodeComplete
+  }
+}
+
+async function snsSubscriptionDeleteNodeComplate(_izContext, allObjectSchemas) {
+  // let serviceNames = await getGraphServiceNameFromAllRelSchema(_izContext, allObjectSchemas)
+
+  // return {
+  //   serviceNames: serviceNames,
+  //   topicName: "OutDeleteNode",
+  //   sqsEndpoint: "DeleteNodeComplete"
+  // }
+}
+
+async function snsSubscriptionDeleteRelatipnshipComplete(_izContext, allRelSchemas) {
+  let serviceNames = await getGraphServiceNameFromAllRelSchema(_izContext, allRelSchemas)
+
+  return {
+    serviceNames: serviceNames,
+    topicName: TOPIC_NAME_GRAPH_HANDLER.outDeleteRel,
+    sqsEndpoint: TOPIC_NAME_GENERATE_CODE.deleteRelComplete
+  }
+}
+
+function snsSubscriptionReservedLimitCompleteForReservedDynamicUsage(_izContext) {
+  let serviceNames = [EXTERNAL_SERVICE_NAME.accountLimits]
+  return {
+    serviceNames: serviceNames,
+    topicName: TOPIC_NAME_EXTERNAL_SERVICE.reservedDynamicUsageComplete,
+    sqsEndpoint: TOPIC_NAME_GENERATE_CODE.reservedLimitComplete + upperCase(HANDLER.hdrSqs)
+  }
+}
+
+
+function snsSubscriptionConfirmReserved(_izContext) {
+  let serviceNames = [EXTERNAL_SERVICE_NAME.accountLimits];
+  return {
+    serviceNames: serviceNames,
+    topicName: TOPIC_NAME_EXTERNAL_SERVICE.reservedDynamicUsageComplete,
+    sqsEndpoint: "ConfirmNewReserved" + upperCase(HANDLER.hdrSqs)
+  }
+}
+
+module.exports = createExternalSnsSubscriptions;