template.yaml

AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: ServerlessOps Catalog API for Backstage

Parameters:
  Domain:
    Type: String
    Description: 'Application Platform'

  System:
    Type: String
    Description: 'Application System'

  Component:
    Type: String
    Description: 'Application Component'

  CodeBranch:
    Type: String
    Description: "Name of deployment branch"

  Hostname:
    Type: String
    Description: Site FQDN

  DnsZoneId:
    Type: AWS::SSM::Parameter::Value<String>
    Description: Route53 Hosted Zone ID

  CognitoUserPoolArn:
    Type: String
    Description: Cognito User Pool ARN

  EnableSourceMaps:
    Type: String
    Description: Enable source maps for debugging
    Default: false


Globals:
  Function:
    Runtime: nodejs20.x
    Timeout: 5
    MemorySize: 128
    Environment:
      Variables:
        DDB_TABLE_NAME: !Ref DdbTable
        POWERTOOLS_SERVICE_NAME: !Ref AWS::StackName


Resources:
  # DDB
  DdbTable:
    Type: AWS::DynamoDB::Table
    Properties:
      AttributeDefinitions:
        - AttributeName: pk
          AttributeType: S
        - AttributeName: sk
          AttributeType: S
      KeySchema:
        - AttributeName: pk
          KeyType: HASH
        - AttributeName: sk
          KeyType: RANGE
      BillingMode: PAY_PER_REQUEST

  # Functions
  CreateEntityFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./dist/handlers/CreateEntity
      Handler: function.handler_create
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref DdbTable
    Metadata:
      BuildMethod: esbuild
      BuildProperties:
        Minify: true
        Target: "es2020"
        Format: "esm"
        MainFields: module,main # This is to help with ESM modules
        Sourcemap: !Ref EnableSourceMaps
        OutExtension:
          - .js=.mjs
        EntryPoints:
          - function.js

  CreateEntityFunctionInvokePermission:
    Type: AWS::Lambda::Permission
    Properties:
      FunctionName: !GetAtt CreateEntityFunction.Arn
      Action: lambda:InvokeFunction
      Principal: apigateway.amazonaws.com


  UpsertEntityFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./dist/handlers/CreateEntity
      Handler: function.handler_upsert
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref DdbTable
    Metadata:
      BuildMethod: esbuild
      BuildProperties:
        Minify: true
        Target: "es2020"
        Format: "esm"
        MainFields: module,main # This is to help with ESM modules
        Sourcemap: !Ref EnableSourceMaps
        OutExtension:
          - .js=.mjs
        EntryPoints:
          - function.js

  UpsertEntityFunctionInvokePermission:
    Type: AWS::Lambda::Permission
    Properties:
      FunctionName: !GetAtt UpsertEntityFunction.Arn
      Action: lambda:InvokeFunction
      Principal: apigateway.amazonaws.com


  GetEntityFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./dist/handlers/GetEntity
      Handler: function.handler
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref DdbTable
    Metadata:
      BuildMethod: esbuild
      BuildProperties:
        Minify: true
        Target: "es2020"
        Format: "esm"
        MainFields: module,main # This is to help with ESM modules
        Sourcemap: !Ref EnableSourceMaps
        OutExtension:
          - .js=.mjs
        EntryPoints:
          - function.js

  GetEntityFunctionInvokePermission:
    Type: AWS::Lambda::Permission
    Properties:
      FunctionName: !GetAtt GetEntityFunction.Arn
      Action: lambda:InvokeFunction
      Principal: apigateway.amazonaws.com


  DeleteEntityFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./dist/handlers/DeleteEntity
      Handler: function.handler
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref DdbTable
    Metadata:
      BuildMethod: esbuild
      BuildProperties:
        Minify: true
        Target: "es2020"
        Format: "esm"
        MainFields: module,main # This is to help with ESM modules
        Sourcemap: !Ref EnableSourceMaps
        OutExtension:
          - .js=.mjs
        EntryPoints:
          - function.js

  DeleteEntityFunctionInvokePermission:
    Type: AWS::Lambda::Permission
    Properties:
      FunctionName: !GetAtt DeleteEntityFunction.Arn
      Action: lambda:InvokeFunction
      Principal: apigateway.amazonaws.com

  # APIG
  SiteCertificate:
    Type: AWS::CertificateManager::Certificate
    Properties:
      DomainName: !Ref Hostname
      ValidationMethod: DNS
      DomainValidationOptions:
        - DomainName: !Ref Hostname
          HostedZoneId: !Ref DnsZoneId

  RestApiIamRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service: apigateway.amazonaws.com
            Action: sts:AssumeRole
      Policies:
        - PolicyName: ApiGatewayPolicy
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                  - dynamodb:Query
                Resource: !GetAtt DdbTable.Arn

  RestApiLogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: !Sub "/aws/api-gateway/${AWS::StackName}"
      RetentionInDays: 7

  RestApi:
    Type: AWS::Serverless::Api
    Properties:
      StageName: !Ref CodeBranch
      Domain:
        DomainName: !Ref Hostname
        CertificateArn: !Ref SiteCertificate
        Route53:
          HostedZoneId: !Ref DnsZoneId
        EndpointConfiguration: REGIONAL
      AccessLogSetting:
        DestinationArn: !GetAtt RestApiLogGroup.Arn
        Format: |
          {"requestId":"$context.requestId","extendedRequestId":"$context.extendedRequestId","xrayTraceId":"$context.xrayTraceId","ip":"$context.identity.sourceIp","requestTime":"$context.requestTime","httpMethod":"$context.httpMethod","resourcePath":"$context.resourcePath","status":"$context.status","protocol":"$context.protocol","responseLength":"$context.responseLength","userAgent":"$context.identity.userAgent","authorizer":{"error":"$context.authorizer.error","status":"$context.authorizer.status","claims":{"sub":"$context.authorizer.claims.sub","scope":"$context.authorizer.claims.scope","exp":"$context.authorizer.claims.exp","iat":"$context.authorizer.claims.iat","jti":"$context.authorizer.claims.jti"}},"integration":{"requestId":"$context.integration.requestId","functionStatus":"$context.integration.status","lambdaStatus":"$context.integrationStatus"}}
      MethodSettings:
        - ResourcePath: "/*"
          HttpMethod: "*"
          LoggingLevel: INFO
          MetricsEnabled: true
          DataTraceEnabled: false
      DefinitionBody:
        Fn::Transform:
          Name: "AWS::Include"
          Parameters:
            Location: "openapi.yaml"