cfn.yaml

AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Parameters:
    FunctionName:
      Type: String
    FunctionAlias:
      Type: String
    DomainName:
      Type: String
    SubjectAlternativeNames:
      Type: CommaDelimitedList
Resources:
  Approve:
    Type: Custom::AcmApproverLambda
    DependsOn: Function
    Version: 1.0
    Properties:
      ServiceToken: !GetAtt Function.Arn
      DomainName: !Ref DomainName
      SubjectAlternativeNames: !Join [ ",", !Ref SubjectAlternativeNames ]
  Function:
    Type: AWS::Serverless::Function
    Properties:
      FunctionName: !Ref "FunctionName"
      DeploymentPreference:
        Type: AllAtOnce
      AutoPublishAlias: !Ref "FunctionAlias"
      Handler: main
      Tracing: Active
      Runtime: go1.x
      CodeUri: ./handler.zip
      Timeout: 30
      Policies:
        - AWSLambdaBasicExecutionRole
        - AWSXrayWriteOnlyAccess
        - Statement:
          - Effect: Allow
            Action:
              - acm:DescribeCertificate
              - acm:RequestCertificate
              - acm:DeleteCertificate
              - route53:ListHostedZones
              - route53:ChangeResourceRecordSets
            Resource: "*"
      Tracing: Active
Outputs:
  FunctionArn:
    Value: !GetAtt Function.Arn
    Export:
      Name: !Sub "${AWS::StackName}-FunctionArn"