function-template.yaml

AWSTemplateFormatVersion: '2010-09-09'
Description: Lambda functions and API Gateway resources for the ALIS application.

Parameters:
  AlisAppId:
    Type: String
  ArticleInfoTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  ArticleContentTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  ArticleHistoryTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  UsersTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  UserConfigurationsTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  ExternalProviderUsersTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  NotificationTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  UnreadNotificationManagerTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  PrivateChainAwsAccessKey:
    Type: 'AWS::SSM::Parameter::Value<String>'
  PrivateChainAwsSecretAccessKey:
    Type: 'AWS::SSM::Parameter::Value<String>'
  PrivateChainExecuteApiHost:
    Type: 'AWS::SSM::Parameter::Value<String>'
  PrivateChainAlisTokenAddress:
    Type: 'AWS::SSM::Parameter::Value<String>'
  PrivateChainBridgeAddress:
    Type: 'AWS::SSM::Parameter::Value<String>'
  BurnAddress:
    Type: 'AWS::SSM::Parameter::Value<String>'
  CognitoUserPoolId:
    Type: 'AWS::SSM::Parameter::Value<String>'
  CognitoUserPoolArn:
    Type: 'AWS::SSM::Parameter::Value<String>'
  CognitoUserPoolAppId:
    Type: 'AWS::SSM::Parameter::Value<String>'
  SaltForArticleId:
    Type: 'AWS::SSM::Parameter::Value<String>'
  TwitterConsumerKey:
    Type: 'AWS::SSM::Parameter::Value<String>'
  TwitterConsumerSecret:
    Type: 'AWS::SSM::Parameter::Value<String>'
  TwitterOauthCallbackUrl:
    Type: 'AWS::SSM::Parameter::Value<String>'
  LineChannelId:
    Type: 'AWS::SSM::Parameter::Value<String>'
  LineChannelSecret:
    Type: 'AWS::SSM::Parameter::Value<String>'
  NonceTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  TokenSendTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  ExternalProviderLoginCommonTempPassword:
    Type: 'AWS::SSM::Parameter::Value<String>'
  ExternalProviderLoginMark:
    Type: 'AWS::SSM::Parameter::Value<String>'
  LoginSalt:
    Type: 'AWS::SSM::Parameter::Value<String>'
  YahooClientId:
    Type: 'AWS::SSM::Parameter::Value<String>'
  YahooSecret:
    Type: 'AWS::SSM::Parameter::Value<String>'
  YahooOauthCallbackUrl:
    Type: 'AWS::SSM::Parameter::Value<String>'
  FacebookAppId:
    Type: 'AWS::SSM::Parameter::Value<String>'
  FacebookAppSecret:
    Type: 'AWS::SSM::Parameter::Value<String>'
  FacebookOauthCallbackUrl:
    Type: 'AWS::SSM::Parameter::Value<String>'
  FacebookAppToken:
    Type: 'AWS::SSM::Parameter::Value<String>'
  PaidArticlesTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  PaidStatusTableName:
    Type: 'AWS::SSM::Parameter::Value<String>'
  AuthleteApiKey:
    Type: 'AWS::SSM::Parameter::Value<String>'
  AuthleteApiSecret:
    Type: 'AWS::SSM::Parameter::Value<String>'
  DailyLimitTokenSendValue:
    Type: 'AWS::SSM::Parameter::Value<String>'

Resources:
  LambdaRole:
    Type: "AWS::IAM::Role"
    Properties:
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: "Allow"
            Principal:
              Service:
                - "lambda.amazonaws.com"
                - "cognito-idp.amazonaws.com"
            Action:
              - "sts:AssumeRole"
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess
        - arn:aws:iam::aws:policy/CloudWatchLogsFullAccess
        - arn:aws:iam::aws:policy/AmazonS3FullAccess
        - arn:aws:iam::aws:policy/AmazonCognitoPowerUser
        - arn:aws:iam::aws:policy/AWSXRayDaemonWriteAccess
        - arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole

  #  Functions

  LoginYahoo:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/login_yahoo_index.zip
      Environment:
        Variables:
          YAHOO_CLIENT_ID: !Ref YahooClientId
          YAHOO_SECRET: !Ref YahooSecret
          YAHOO_OAUTH_CALLBACK_URL: !Ref YahooOauthCallbackUrl
          EXTERNAL_PROVIDER_LOGIN_COMMON_TEMP_PASSWORD: !Ref ExternalProviderLoginCommonTempPassword
          COGNITO_USER_POOL_ID: !Ref CognitoUserPoolId
          COGNITO_USER_POOL_APP_ID: !Ref CognitoUserPoolAppId
          EXTERNAL_PROVIDER_LOGIN_MARK: !Ref ExternalProviderLoginMark
          LOGIN_SALT: !Ref LoginSalt
          NONCE_TABLE_NAME: !Ref NonceTableName
          EXTERNAL_PROVIDER_USERS_TABLE_NAME: !Ref ExternalProviderUsersTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  LoginFacebook:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/login_facebook_index.zip
      Environment:
        Variables:
          FACEBOOK_APP_ID: !Ref FacebookAppId
          FACEBOOK_APP_SECRET: !Ref FacebookAppSecret
          FACEBOOK_OAUTH_CALLBACK_URL: !Ref FacebookOauthCallbackUrl
          FACEBOOK_APP_TOKEN: !Ref FacebookAppToken
          EXTERNAL_PROVIDER_LOGIN_COMMON_TEMP_PASSWORD: !Ref ExternalProviderLoginCommonTempPassword
          COGNITO_USER_POOL_ID: !Ref CognitoUserPoolId
          COGNITO_USER_POOL_APP_ID: !Ref CognitoUserPoolAppId
          EXTERNAL_PROVIDER_LOGIN_MARK: !Ref ExternalProviderLoginMark
          LOGIN_SALT: !Ref LoginSalt
          NONCE_TABLE_NAME: !Ref NonceTableName
          EXTERNAL_PROVIDER_USERS_TABLE_NAME: !Ref ExternalProviderUsersTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  LoginFacebookAuthorizationUrl:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/login_facebook_authorization_url.zip
      Environment:
        Variables:
          FACEBOOK_APP_ID: !Ref FacebookAppId
          FACEBOOK_APP_SECRET: !Ref FacebookAppSecret
          FACEBOOK_OAUTH_CALLBACK_URL: !Ref FacebookOauthCallbackUrl
          FACEBOOK_APP_TOKEN: !Ref FacebookAppToken
          NONCE_TABLE_NAME: !Ref NonceTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  LoginYahooAuthorizationUrl:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/login_yahoo_authorization_url.zip
      Environment:
        Variables:
          YAHOO_CLIENT_ID: !Ref YahooClientId
          YAHOO_SECRET: !Ref YahooSecret
          YAHOO_OAUTH_CALLBACK_URL: !Ref YahooOauthCallbackUrl
          NONCE_TABLE_NAME: !Ref NonceTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  ArticlesPriceShow:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/articles_price_show.zip
      Environment:
        Variables:
          ARTICLE_INFO_TABLE_NAME: !Ref ArticleInfoTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeArticlesPurchasedShow:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/me_articles_purchased_show.zip
      Environment:
        Variables:
          ARTICLE_INFO_TABLE_NAME: !Ref ArticleInfoTableName
          ARTICLE_CONTENT_TABLE_NAME: !Ref ArticleContentTableName
          PAID_ARTICLES_TABLE_NAME: !Ref PaidArticlesTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeArticlesPurchasedArticleIdsIndex:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/me_articles_purchased_article_ids_index.zip
      Environment:
        Variables:
          PAID_ARTICLES_TABLE_NAME: !Ref PaidArticlesTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeArticlesPurchaseCreate:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/me_articles_purchase_create.zip
      Environment:
        Variables:
          PAID_ARTICLES_TABLE_NAME: !Ref PaidArticlesTableName
          NOTIFICATION_TABLE_NAME: !Ref NotificationTableName
          UNREAD_NOTIFICATION_MANAGER_TABLE_NAME: !Ref UnreadNotificationManagerTableName
          ARTICLE_INFO_TABLE_NAME: !Ref ArticleInfoTableName
          ARTICLE_HISTORY_TABLE_NAME: !Ref ArticleHistoryTableName
          PRIVATE_CHAIN_AWS_ACCESS_KEY: !Ref PrivateChainAwsAccessKey
          PRIVATE_CHAIN_AWS_SECRET_ACCESS_KEY: !Ref PrivateChainAwsSecretAccessKey
          PRIVATE_CHAIN_EXECUTE_API_HOST: !Ref PrivateChainExecuteApiHost
          PRIVATE_CHAIN_ALIS_TOKEN_ADDRESS: !Ref PrivateChainAlisTokenAddress
          PRIVATE_CHAIN_BRIDGE_ADDRESS: !Ref PrivateChainBridgeAddress
          BURN_ADDRESS: !Ref BurnAddress
          COGNITO_USER_POOL_ID: !Ref CognitoUserPoolId
          COGNITO_USER_POOL_APP_ID: !Ref CognitoUserPoolAppId
          PAID_STATUS_TABLE_NAME: !Ref PaidStatusTableName
          USER_CONFIGURATIONS_TABLE_NAME: !Ref UserConfigurationsTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeArticlesPurchasedIndex:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/me_articles_purchased_index.zip
      Environment:
        Variables:
          PAID_ARTICLES_TABLE_NAME: !Ref PaidArticlesTableName
          ARTICLE_INFO_TABLE_NAME: !Ref ArticleInfoTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeWalletTokenSend:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/me_wallet_token_send.zip
      Environment:
        Variables:
          PRIVATE_CHAIN_BRIDGE_ADDRESS: !Ref PrivateChainBridgeAddress
          PRIVATE_CHAIN_AWS_ACCESS_KEY: !Ref PrivateChainAwsAccessKey
          PRIVATE_CHAIN_AWS_SECRET_ACCESS_KEY: !Ref PrivateChainAwsSecretAccessKey
          PRIVATE_CHAIN_EXECUTE_API_HOST: !Ref PrivateChainExecuteApiHost
          PRIVATE_CHAIN_ALIS_TOKEN_ADDRESS: !Ref PrivateChainAlisTokenAddress
          BURN_ADDRESS: !Ref BurnAddress
          TOKEN_SEND_TABLE_NAME: !Ref TokenSendTableName
          DAILY_LIMIT_TOKEN_SEND_VALUE: !Ref DailyLimitTokenSendValue
          USER_CONFIGURATIONS_TABLE_NAME: !Ref UserConfigurationsTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  WalletBridgeInformationShow:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/wallet_bridge_information_show.zip
      Environment:
        Variables:
          PRIVATE_CHAIN_AWS_ACCESS_KEY: !Ref PrivateChainAwsAccessKey
          PRIVATE_CHAIN_AWS_SECRET_ACCESS_KEY: !Ref PrivateChainAwsSecretAccessKey
          PRIVATE_CHAIN_EXECUTE_API_HOST: !Ref PrivateChainExecuteApiHost
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeWalletTokenHistoriesIndex:
    Type: "AWS::Lambda::Function"
    Properties:
      Code: ./deploy/me_wallet_token_histories_index.zip
      Environment:
        Variables:
          PRIVATE_CHAIN_BRIDGE_ADDRESS: !Ref PrivateChainBridgeAddress
          PRIVATE_CHAIN_AWS_ACCESS_KEY: !Ref PrivateChainAwsAccessKey
          PRIVATE_CHAIN_AWS_SECRET_ACCESS_KEY: !Ref PrivateChainAwsSecretAccessKey
          PRIVATE_CHAIN_EXECUTE_API_HOST: !Ref PrivateChainExecuteApiHost
          USER_CONFIGURATIONS_TABLE_NAME: !Ref UserConfigurationsTableName
      Handler: handler.lambda_handler
      MemorySize: 3008
      Role: !GetAtt LambdaRole.Arn
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeApplicationsIndex:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: handler.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Code: ./deploy/me_applications_index.zip
      Environment:
        Variables:
          AUTHLETE_API_KEY: !Ref AuthleteApiKey
          AUTHLETE_API_SECRET: !Ref AuthleteApiSecret
      MemorySize: 3008
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeApplicationsShow:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: handler.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Code: ./deploy/me_applications_show.zip
      Environment:
        Variables:
          AUTHLETE_API_KEY: !Ref AuthleteApiKey
          AUTHLETE_API_SECRET: !Ref AuthleteApiSecret
      MemorySize: 3008
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeApplicationsCreate:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: handler.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Code: ./deploy/me_applications_create.zip
      Environment:
        Variables:
          AUTHLETE_API_KEY: !Ref AuthleteApiKey
          AUTHLETE_API_SECRET: !Ref AuthleteApiSecret
      MemorySize: 3008
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeApplicationsUpdate:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: handler.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Code: ./deploy/me_applications_update.zip
      Environment:
        Variables:
          AUTHLETE_API_KEY: !Ref AuthleteApiKey
          AUTHLETE_API_SECRET: !Ref AuthleteApiSecret
      MemorySize: 3008
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeApplicationsDelete:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: handler.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Code: ./deploy/me_applications_delete.zip
      Environment:
        Variables:
          AUTHLETE_API_KEY: !Ref AuthleteApiKey
          AUTHLETE_API_SECRET: !Ref AuthleteApiSecret
      MemorySize: 3008
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeAllowedApplicationsIndex:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: handler.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Code: ./deploy/me_allowed_applications_index.zip
      Environment:
        Variables:
          AUTHLETE_API_KEY: !Ref AuthleteApiKey
          AUTHLETE_API_SECRET: !Ref AuthleteApiSecret
      MemorySize: 3008
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  MeAllowedApplicationsDelete:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: handler.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Code: ./deploy/me_allowed_applications_delete.zip
      Environment:
        Variables:
          AUTHLETE_API_KEY: !Ref AuthleteApiKey
          AUTHLETE_API_SECRET: !Ref AuthleteApiSecret
      MemorySize: 3008
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"
  ApplicationsShow:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: handler.lambda_handler
      Role: !GetAtt LambdaRole.Arn
      Code: ./deploy/applications_show.zip
      Environment:
        Variables:
          AUTHLETE_API_KEY: !Ref AuthleteApiKey
          AUTHLETE_API_SECRET: !Ref AuthleteApiSecret
      MemorySize: 3008
      Runtime: python3.9
      Timeout: 300
      TracingConfig:
        Mode: "Active"

Outputs:
  LambdaRole:
    Value: !GetAtt LambdaRole.Arn
    Export:
      Name: !Sub "${AlisAppId}-LambdaRole"
  LoginYahoo:
    Value: !GetAtt LoginYahoo.Arn
    Export:
      Name: !Sub "${AlisAppId}-LoginYahoo"
  LoginYahooAuthorizationUrl:
    Value: !GetAtt LoginYahooAuthorizationUrl.Arn
    Export:
      Name: !Sub "${AlisAppId}-LoginYahooAuthorizationUrl"
  LoginFacebook:
    Value: !GetAtt LoginFacebook.Arn
    Export:
      Name: !Sub "${AlisAppId}-LoginFacebook"
  LoginFacebookAuthorizationUrl:
    Value: !GetAtt LoginFacebookAuthorizationUrl.Arn
    Export:
      Name: !Sub "${AlisAppId}-LoginFacebookAuthorizationUrl"
  ArticlesPriceShow:
    Value: !GetAtt ArticlesPriceShow.Arn
    Export:
      Name: !Sub "${AlisAppId}-ArticlesPriceShow"
  MeArticlesPurchasedShow:
    Value: !GetAtt MeArticlesPurchasedShow.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeArticlesPurchasedShow"
  MeArticlesPurchasedArticleIdsIndex:
    Value: !GetAtt MeArticlesPurchasedArticleIdsIndex.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeArticlesPurchasedArticleIdsIndex"
  MeArticlesPurchasedIndex:
    Value: !GetAtt MeArticlesPurchasedIndex.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeArticlesPurchasedIndex"
  MeWalletTokenSend:
    Value: !GetAtt MeWalletTokenSend.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeWalletTokenSend"
  MeArticlesPurchaseCreate:
    Value: !GetAtt MeArticlesPurchaseCreate.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeArticlesPurchaseCreate"
  WalletBridgeInformationShow:
    Value: !GetAtt WalletBridgeInformationShow.Arn
    Export:
      Name: !Sub "${AlisAppId}-WalletBridgeInformationShow"
  MeWalletTokenHistoriesIndex:
    Value: !GetAtt MeWalletTokenHistoriesIndex.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeWalletTokenHistoriesIndex"
  MeApplicationsIndex:
    Value: !GetAtt MeApplicationsIndex.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeApplicationsIndex"
  MeApplicationsShow:
    Value: !GetAtt MeApplicationsShow.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeApplicationsShow"
  MeApplicationsCreate:
    Value: !GetAtt MeApplicationsCreate.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeApplicationsCreate"
  MeApplicationsUpdate:
    Value: !GetAtt MeApplicationsUpdate.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeApplicationsUpdate"
  MeApplicationsDelete:
    Value: !GetAtt MeApplicationsDelete.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeApplicationsDelete"
  MeAllowedApplicationsIndex:
    Value: !GetAtt MeAllowedApplicationsIndex.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeAllowedApplicationsIndex"
  MeAllowedApplicationsDelete:
    Value: !GetAtt MeAllowedApplicationsDelete.Arn
    Export:
      Name: !Sub "${AlisAppId}-MeAllowedApplicationsDelete"
  ApplicationsShow:
    Value: !GetAtt ApplicationsShow.Arn
    Export:
      Name: !Sub "${AlisAppId}-ApplicationsShow"