aws.yaml

version: "3.8"

secrets:
  PRIVATE_KEY:
    x-secrets:
      Name: /sftp/test-secret-key
      VarName: PRIVATE_KEY_SECRET_ARN


services:
  s3-to-sftp:
    secrets:
      - PRIVATE_KEY
    environment:
      QUEUE_NAME: x-sqs::JobsQueue::QueueName
    deploy:
      replicas: 3
    x-monitoring:
      CWAgentCollectEmf: True
    x-scaling:
      Range: 0-5

x-sqs:
  JobsQueue:
    Properties:
      ReceiveMessageWaitTimeSeconds: 10
    Services:
      s3-to-sftp:
        Access: RWMessages
        Scaling:
          Steps:
            - LowerBound: 1
              UpperBound: 10
              Count: 1
            - LowerBound: 10
              UpperBound: 20
              Count: 3
            - LowerBound: 20
              Count: 5

x-s3:
  SourceBucket:
    Properties:
      AccessControl: BucketOwnerFullControl
      PublicAccessBlockConfiguration:
        BlockPublicAcls: True
        BlockPublicPolicy: True
        IgnorePublicAcls: True
        RestrictPublicBuckets: True
      BucketEncryption:
        ServerSideEncryptionConfiguration:
          - ServerSideEncryptionByDefault:
              SSEAlgorithm: "aws:kms"
              KMSMasterKeyID: "alias/aws/s3"
      NotificationConfiguration:
        QueueConfigurations:
          - Queue: x-sqs::JobsQueue
            Event: s3:ObjectCreated:*

    Services:
      s3-to-sftp:
        Access:
          bucket: RO
          objects: RO