First commit

Author: alfonsof

awslambdas3move-capi/README.md

@@ -0,0 +1,109 @@
+# AWS Lambda Function S3 Move Python example
+
+This folder contains an AWS Lambda Function example in Python on AWS (Amazon Web Services).
+
+It handles an AWS Lambda function that moves an object when it appears in a S3 bucket to another S3 bucket using the Client API (low-level) of Boto 3.
+
+## Requirements
+
+* You must have an [Amazon Web Services (AWS)](http://aws.amazon.com/) account.
+
+* The code was written for Python 3 and AWS SDK for Python (Boto 3).
+
+* This example uses Client API (low-level) of Boto 3.
+
+* The AWS Lambda execution environment include SDK for Python (Boto 3).
+
+## Using the code
+
+* You can select the destination bucket name changing the value of `DESTINATION_BUCKET` variable in the code.
+
+* Access the AWS console.
+
+* Create a S3 bucket for the source and another S3 bucket for the target.
+
+* Create an IAM Policy: ex. `Policy-VM-buckets`
+
+  Content of the IAM policy:
+
+  ```bash
+  {
+      "Version": "2012-10-17",
+      "Statement": [
+          {
+              "Effect": "Allow",
+              "Action": [
+                  "s3:GetObject"
+              ],
+              "Resource": [
+                  "arn:aws:s3:::sourcevm/*"
+              ]
+          },
+          {
+              "Effect": "Allow",
+              "Action": [
+                  "s3:PutObject"
+              ],
+              "Resource": [
+                  "arn:aws:s3:::targetvm/*"
+              ]
+          },
+          {
+              "Sid": "Stmt1430872844000",
+              "Effect": "Allow",
+              "Action": [
+                  "cloudwatch:*"
+              ],
+              "Resource": [
+                  "*"
+              ]
+          },
+          {
+              "Sid": "Stmt1430872852000",
+              "Effect": "Allow",
+              "Action": [
+                  "logs:*"
+              ],
+              "Resource": [
+                  "*"
+              ]
+          }
+      ]
+  }
+  ```
+
+* Create a role: `Role-VM-buckets`.
+
+  This role uses the policy `Policy-VM-buckets`
+
+* Create an AWS lambda function.
+  * Name: `<LAMBDA_NAME>`
+  * Runtime: `Python 3.6`
+  * Handler: `lambda_function.lambda_handler`
+  * Role: `Role-VM-buckets`
+  * The triggers:
+    * `S3`
+      * Bucket: `<BUCKET_NAME>`
+      * Event type: `ObjectCreated`
+      * Enable trigger: `Yes`
+  * The resources that the function's role has access to:
+    * `Amazon CloudWatch`
+    * `Amazon CloudWatch Logs`
+    * `Amazon S3`
+  * Basic Settings for the lambda function:
+    * Memory (MB): `1024`
+    * Timeout: `10 sec`
+
+* Write the code.
+
+  The content of `lambda_function.py` file.
+
+* Save the Lambda function.
+
+  It deploys the Lambda function.
+
+* Test the function:
+
+  Copy a file in the source S3 bucket.
+
+  The object from the source S3 bucket should be copied to the target S3 bucket and deleted in the source S3 bucket.

awslambdas3move-capi/lambda_function.py

@@ -0,0 +1,44 @@
+# lamdda_function.py
+# It handles an AWS Lambda function that moves an object when it appears
+# in a S3 bucket to another S3 bucket.
+# It uses Client API (low-level) of Boto3.
+
+import boto3
+import botocore
+
+# Create as S3 Client
+s3client = boto3.client('s3')
+
+def lambda_handler(event, context):
+  DESTINATION_BUCKET = 'targetvm'      # Destination bucket name
+
+  source_bucket_name = event['Records'][0]['s3']['bucket']['name']
+  source_key = event['Records'][0]['s3']['object']['key']
+  destination_bucket_name = DESTINATION_BUCKET
+  destination_key = source_key
+  print('From - bucket: ' + source_bucket_name)
+  print('From - object: ' + source_key)
+  print('To   - bucket: ' + destination_bucket_name)
+  print('To   - object: ' + destination_key)
+
+  try:
+    # Copy the object
+    print('Moving object ...')
+    copy_source = {
+      'Bucket': source_bucket_name,
+      'Key': source_key
+    }
+    s3client.copy(copy_source, destination_bucket_name, destination_key)
+    # Delete the object from source bucket
+    response = s3client.delete_object(Bucket=source_bucket_name, Key=source_key)
+    print(response)
+    print('\nMoved')
+  except botocore.exceptions.ClientError as e:
+    if e.response['Error']['Code'] == "AccessDenied":
+      print("Error: Access denied!!")
+    elif e.response['Error']['Code'] == "InvalidBucketName":
+      print("Error: Invalid bucket name!!")
+    elif e.response['Error']['Code'] == "NoSuchBucket":
+      print("Error: No such bucket!!")
+    else:
+      raise