template.yaml

# https://github.com/awslabs/serverless-application-model/blob/develop/versions/2016-10-31.md
# Indentation needs to be set with spaces, because YAML...
AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: Sync some data with third parties


Resources:
    AssignArchetypeQueue:
        Type: AWS::SQS::Queue
        Properties:
            QueueName: assign-archetype-queue
            VisibilityTimeout: 601
    AssignArchetypeSqsQueuePolicy:
        Type: AWS::SQS::QueuePolicy
        Properties:
            PolicyDocument:
                Version: '2012-10-17'
                Id: AssignArchetypeQueuePolicy
                Statement:
                    - Sid: Allow-SNS-SendMessage
                      Effect: Allow
                      Principal:
                          AWS: '*'
                      Action:
                          - sqs:SendMessage
                      Resource: !GetAtt AssignArchetypeQueue.Arn
                      Condition:
                          ArnEquals:
                              aws:SourceArn: arn:aws:sns:us-west-2:478062583808:archetype-assigned
            Queues:
                - !Ref AssignArchetypeQueue
    AssignArchetypeSnsSubscription:
        Type: AWS::SNS::Subscription
        Properties:
            Protocol: SQS
            Endpoint: !GetAtt AssignArchetypeQueue.Arn
            TopicArn: arn:aws:sns:us-west-2:478062583808:archetype-assigned

    ProcessAssignArchetypeFunction:
        Type: AWS::Serverless::Function
        Properties:
            Handler: assign-archetype/process-assign-archetype.default
            Runtime: nodejs18.x
            CodeUri: ./dist/assign-archetype/process-assign-archetype
            Timeout: 120
            MemorySize: 500
            ReservedConcurrentExecutions: 30
            # Layers:
            #     - !Sub "arn:aws:lambda:${AWS::Region}:580247275435:layer:LambdaInsightsExtension:14"
            Policies:
                - AWSLambdaVPCAccessExecutionRole
                - SecretsManagerReadWrite
                - AmazonSESFullAccess
                - AmazonSQSFullAccess
                - AmazonSNSFullAccess
                - AmazonS3FullAccess
                - arn:aws:iam::aws:policy/CloudWatchLambdaInsightsExecutionRolePolicy
                - arn:aws:iam::478062583808:policy/CloudWatchPolicyForLambda # See https://stackoverflow.com/questions/51166504/disable-cloudwatch-to-monitor-logs-for-lambda-function
            Tags:
                LambdaName: process-assign-archetype
            Events:
                SQSEvent:
                    Type: SQS
                    Properties:
                        Queue: !GetAtt AssignArchetypeQueue.Arn
                        BatchSize: 10
    GetArchetypeForDeck:
        Type: AWS::Serverless::Function
        Properties:
            Handler: get-archetype/_get-archetype.default
            Runtime: nodejs18.x
            CodeUri: ./dist/get-archetype/_get-archetype
            Timeout: 15
            # Layers:
            #     - !Sub "arn:aws:lambda:${AWS::Region}:580247275435:layer:LambdaInsightsExtension:14"
            Policies:
                - AWSLambdaVPCAccessExecutionRole
                - SecretsManagerReadWrite
                - AmazonSESFullAccess
                - AWSLambda_FullAccess
                - arn:aws:iam::aws:policy/CloudWatchLambdaInsightsExecutionRolePolicy
                - arn:aws:iam::478062583808:policy/CloudWatchPolicyForLambda # See https://stackoverflow.com/questions/51166504/disable-cloudwatch-to-monitor-logs-for-lambda-function
            Tags:
                LambdaName: api-get-archetype-for-deck
            AutoPublishAlias: live
            FunctionUrlConfig:
                AuthType: NONE