serverless-watttime-demo.yml

service: watttime-demo
frameworkVersion: '3'
plugins:
  - serverless-prune-plugin
custom:
  wattTimeUsername: ${file(./private.${opt:stage, 'dev'}.json):wattTimeUsername}
  wattTimePassword: ${file(./private.${opt:stage, 'dev'}.json):wattTimePassword}
provider:
  name: aws
  runtime: go1.x
  memorySize: 256
  timeout: 10
package:
  individually: false
  patterns:
    - '!./**'
    - bazel-out/darwin_arm64-fastbuild-ST-5fa8105c1248/bin/func/watttime_demo/watttime_demo_/watttime_demo
resources:
  Resources:
    WattTimeDemoRole:
      Type: AWS::IAM::Role
      Properties:
        Path: "/"
        RoleName: watttime-demo-${opt:region, 'us-east-1'}-lambdaRole
        AssumeRolePolicyDocument:
          Version: '2012-10-17'
          Statement:
            - Effect: Allow
              Principal:
                Service:
                  - lambda.amazonaws.com
                  - apigateway.amazonaws.com
              Action: sts:AssumeRole   
        ManagedPolicyArns:
          - arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole
        Policies:
          - PolicyName: watttime-demo-lambda
            PolicyDocument:
              Version: '2012-10-17'
              Statement:
                - Effect: Allow
                  Action:
                    - logs:CreateLogGroup
                    - logs:CreateLogStream
                    - logs:PutLogEvents
                    - logs:DescribeLogGroups
                    - logs:DescribeLogStreams
                    - logs:GetLogEvents
                    - logs:FilterLogEvents
                  Resource:
                    - 'Fn::Join':
                      - ':'
                      -
                        - 'arn:aws:logs'
                        - Ref: 'AWS::Region'
                        - Ref: 'AWS::AccountId'
                        - 'log-group:/aws/lambda/*:*:*'
                - Effect: "Allow"
                  Action:
                    - "lambda:InvokeFunction"
                  Resource: "*"
                - Effect: "Allow"
                  Action:
                    - "execute-api:Invoke"
                    - "execute-api:ManageConnections"
                  Resource: "*"
functions:
  WattTimeDemo:
    handler: bazel-out/darwin_arm64-fastbuild-ST-5fa8105c1248/bin/func/watttime_demo/watttime_demo_/watttime_demo
    role: WattTimeDemoRole
    environment:
      WATTTIME_USERNAME: ${self:custom.wattTimeUsername}
      WATTTIME_PASSWORD: ${self:custom.wattTimePassword}
      STAGE: ${opt:stage, 'dev'}