Skip to content
This repository has been archived by the owner on Apr 22, 2021. It is now read-only.

Commit

Permalink
remove proof_resolution for now
Browse files Browse the repository at this point in the history
  • Loading branch information
zachmargolis committed Oct 1, 2020
1 parent a4b495c commit 3d47d11
Show file tree
Hide file tree
Showing 5 changed files with 2 additions and 140 deletions.
1 change: 0 additions & 1 deletion Gemfile
Expand Up @@ -4,7 +4,6 @@ gemspec

gem "aws-sdk", '~> 3'

gem 'aamva', github: '18F/identity-aamva-api-client-gem', tag: 'v3.4.1'
gem 'lexisnexis', github: '18F/identity-lexisnexis-api-client-gem', tag: 'v2.4.1'
gem 'proofer', github: '18F/identity-proofer-gem', tag: 'v2.7.0'
gem 'retries'
Expand Down
9 changes: 0 additions & 9 deletions source/proof_resolution/lib/Gemfile

This file was deleted.

13 changes: 0 additions & 13 deletions source/proof_resolution/lib/proof_resolution.rb

This file was deleted.

7 changes: 0 additions & 7 deletions source/proof_resolution/spec/proof_resolution_spec.rb

This file was deleted.

112 changes: 2 additions & 110 deletions source/template.yaml
Expand Up @@ -242,107 +242,6 @@ Resources:
# Should be another security group or VPC CIDR block
CidrIp: 0.0.0.0/0

ProofResolutionFunction:
Type: AWS::Serverless::Function # More info about Function Resource: https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#awsserverlessfunction
Properties:
CodeUri: proof_resolution/lib/
Handler: proof_resolution.IdentityIdpFunctions::ProofResolution.handle
MemorySize: 128
AutoPublishAlias: !Ref environment
DeploymentPreference:
Type: AllAtOnce
VersionDescription: !Ref gitsha
Layers:
- !Ref AWSRubySDKLayer
Environment:
Variables:
S3_BUCKET_NAME: !Sub
- login-gov-idp-doc-capture-${Environment}.${AccountId}-${Region}
- Environment: !Ref environment
AccountId: !Ref AWS::AccountId
Region: !Ref AWS::Region
KMS_KEY_ALIAS: !Sub
- ${Environment}-idp-doc-capture
- Environment: !Ref environment
ENVIRONMENT_NAME: !Ref environment
Policies:
- Statement:
- Sid: S3ObjectAccess
Effect: Allow
Action:
- s3:PutObject
- s3:GetObject
- s3:DeleteObject
Resource: !Sub
- arn:aws:s3:::login-gov-idp-doc-capture-${Environment}.${AccountId}-${Region}/*
- Environment: !Ref environment
AccountId: !Ref AWS::AccountId
Region: !Ref AWS::Region
- Statement:
- Sid: S3BucketAccess
Effect: Allow
Action:
- s3:ListBucket
Resource: !Sub
- arn:aws:s3:::login-gov-idp-doc-capture-${Environment}.${AccountId}-${Region}
- Environment: !Ref environment
AccountId: !Ref AWS::AccountId
Region: !Ref AWS::Region
- Statement:
- Sid: KMS
Effect: Allow
Action:
- kms:GenerateDataKey
- kms:Encrypt
- kms:DescribeKey
- kms:Decrypt
Resource: !Sub
- '{{resolve:ssm:/${Environment}/idp/lambda/upload/kms/arn:1}}'
- Environment: !Ref environment
VpcConfig:
SecurityGroupIds:
- !GetAtt ProofResolutionSecurityGroup.GroupId
SubnetIds:
- !Sub
- '{{resolve:ssm:/${Environment}/network/subnet/private1/id:1}}'
- Environment: !Ref environment
- !Sub
- '{{resolve:ssm:/${Environment}/network/subnet/private2/id:1}}'
- Environment: !Ref environment
- !Sub
- '{{resolve:ssm:/${Environment}/network/subnet/private3/id:1}}'
- Environment: !Ref environment
Tags:
environment: !Ref environment

ProofResolutionFunctionArn:
Type: AWS::SSM::Parameter
Properties:
Type: String
Name: !Sub
- /${Environment}/idp/lambda/ProofResolution/arn
- Environment: !Ref environment
Value: !GetAtt ProofResolutionFunction.Arn

ProofResolutionSecurityGroup:
Type: AWS::EC2::SecurityGroup
Properties:
VpcId: !Sub
- '{{resolve:ssm:/${Environment}/network/vpc/id:1}}'
- Environment: !Ref environment
GroupDescription: Proof Resolution Lambda Function
SecurityGroupEgress:
- IpProtocol: tcp
FromPort: 443
ToPort: 443
CidrIp: 0.0.0.0/0
SecurityGroupIngress:
- IpProtocol: tcp
FromPort: 443
ToPort: 443
# Should be another security group or VPC CIDR block
CidrIp: 0.0.0.0/0

AWSRubySDKLayer:
Type: "AWS::Serverless::LayerVersion"
Properties:
Expand All @@ -360,18 +259,11 @@ Outputs:
Value: !GetAtt DemoFunctionFunction.Arn
DemoFunctionFunctionIamRole:
Description: "Implicit IAM Role created for Demo function"
Value: !GetAtt DemoFunctionFunctionRole.Arn
Value: !GetAtt DemoFunctionFunctionIamRole.Arn

ProofAddressFunction:
Description: "Proof Address Lambda Function ARN"
Value: !GetAtt ProofAddressFunction.Arn
ProofAddressFunctionIamRole:
Description: "Proof Address Role created for Proof Address function"
Value: !GetAtt DemoFunctionFunctionRole.Arn

ProofResolutionFunction:
Description: "Proof Resolution Lambda Function ARN"
Value: !GetAtt ProofResolutionFunction.Arn
ProofResolutionFunctionIamRole:
Description: "Implicit IAM Role created for Proof Resolution function"
Value: !GetAtt DemoFunctionFunctionRole.Arn
Value: !GetAtt ProofAddressFunctionIamRole.Arn

0 comments on commit 3d47d11

Please sign in to comment.