-
Notifications
You must be signed in to change notification settings - Fork 0
/
serverless.yml
94 lines (81 loc) · 2.4 KB
/
serverless.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
# Welcome to Serverless!
#
# This file is the main config file for your service.
# It's very minimal at this point and uses default values.
# You can always add more config options for more control.
# We've included some commented out config examples here.
# Just uncomment any of them to get that config option.
#
# For full config options, check the docs:
# docs.serverless.com
#
# Happy Coding!
service: unAttachedEBSManager
#app: your-app-name
#tenant: your-tenant-name
# You can pin your service to only deploy with a specific Serverless version
# Check out our docs for more details
# frameworkVersion: "=X.X.X"
frameworkVersion: ">=1.28.0 <2.0.0"
plugins:
- serverless-pseudo-parameters
provider:
name: aws
runtime: go1.x
timeout: 300
region: us-east-1
stage: dev
package:
exclude:
- ./**
include:
- ./bin/**
functions:
monitor:
handler: bin/monitor
events:
- schedule: cron(0 12 * * ? *)
role: arn:aws:iam::#{AWS::AccountId}:role/lambda-allow-ebs-cleaner-to-manage-volumes-role
environment:
SAVE_VOLUME_TAG: CCE_Meta_dont_delete_when_unmounted
APPLICATION_LOG_LEVEL: info
NO_OP_MODE_TRUE: false
resources:
Resources:
MainRole:
Type: AWS::IAM::Role
Properties:
Path: /
RoleName: 'lambda-allow-ebs-cleaner-to-manage-volumes-role'
AssumeRolePolicyDocument:
Version: '2012-10-17'
Statement:
- Effect: Allow
Principal:
Service: lambda.amazonaws.com
Action: sts:AssumeRole
Policies:
- PolicyName: ManageVolumeAndLogsForEbsVolumeManager
PolicyDocument:
Version: '2012-10-17'
Statement:
- Effect: Allow
Action:
- ec2:DeleteVolume
- ec2:DescribeVolumes
- ec2:DescribeRegions
Resource:
- '*'
- Effect: Allow
Action:
- logs:CreateLogGroup
- logs:CreateLogStream
- logs:PutLogEvents
Resource:
- 'Fn::Join':
- ':'
-
- 'arn:aws:logs'
- Ref: 'AWS::Region'
- Ref: 'AWS::AccountId'
- 'log-group:/aws/lambda/*:*:*'