s-resources-cf.json

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "The AWS CloudFormation template for this Serverless application's resources outside of Lambdas and Api Gateway",
  "Resources": {
    "IamRoleLambda": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Effect": "Allow",
              "Principal": {
                "Service": [
                  "lambda.amazonaws.com"
                ]
              },
              "Action": [
                "sts:AssumeRole"
              ]
            }
          ]
        },
        "Path": "/"
      }
    },
    "IamPolicyLambda": {
      "Type": "AWS::IAM::Policy",
      "Properties": {
        "PolicyName": "${stage}-${project}-lambda",
        "PolicyDocument": {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Effect": "Allow",
              "Action": [
                "logs:CreateLogGroup",
                "logs:CreateLogStream",
                "logs:PutLogEvents"
              ],
              "Resource": "arn:aws:logs:${region}:*:*"
            },
            {
              "Effect": "Allow",
              "Action": [
                "sns:Publish"
              ],
              "Resource": "arn:aws:sns:${region}:*:${project}-contactform-*"
            },
            {
              "Effect": "Allow",
              "Action": [
                "dynamodb:GetItem",
                "dynamodb:PutItem",
                "dynamodb:Query",
                "dynamodb:Scan"
              ],
              "Resource": "arn:aws:dynamodb:${region}:*:table/${project}-*"
            }
          ]
        },
        "Roles": [
          {
            "Ref": "IamRoleLambda"
          }
        ]
      }
    },
    "OAuthTokensTable": {
      "Type" : "AWS::DynamoDB::Table",
      "Properties": {
        "TableName": "${project}-oauthtokens-${stage}",
        "AttributeDefinitions": [
          {
            "AttributeName": "slackUserId",
            "AttributeType": "S"
          },
          {
            "AttributeName": "teamId",
            "AttributeType": "S"
          }
        ],
        "KeySchema": [
          {
            "AttributeName": "slackUserId",
            "KeyType": "HASH"
          },
          {
            "AttributeName": "teamId",
            "KeyType": "RANGE"
          }
        ],
        "ProvisionedThroughput": {
          "ReadCapacityUnits": 1,
          "WriteCapacityUnits": 1
        }
      }
    },
    "FavoritesTable": {
      "Type" : "AWS::DynamoDB::Table",
      "Properties": {
        "TableName": "${project}-favorites-${stage}",
        "AttributeDefinitions": [
          {
            "AttributeName": "slackUserId",
            "AttributeType": "S"
          },
          {
            "AttributeName": "mediaId",
            "AttributeType": "N"
          },
          {
            "AttributeName": "service",
            "AttributeType": "S"
          }
        ],
        "KeySchema": [
          {
            "AttributeName": "slackUserId",
            "KeyType": "HASH"
          },
          {
            "AttributeName": "mediaId",
            "KeyType": "RANGE"
          }
        ],
        "LocalSecondaryIndexes": [
          {
            "IndexName": "userFavoritesByType",
            "KeySchema": [
              {
                "AttributeName": "slackUserId",
                "KeyType": "HASH"
              },
              {
                "AttributeName": "service",
                "KeyType": "RANGE"
              }
            ],
            "Projection": {
              "NonKeyAttributes": ["mediaId"],
              "ProjectionType": "INCLUDE"
            }
          }
        ],
        "ProvisionedThroughput": {
          "ReadCapacityUnits": 1,
          "WriteCapacityUnits": 1
        }
      }
    }
  },
  "Outputs": {
    "IamRoleArnLambda": {
      "Description": "ARN of the lambda IAM role",
      "Value": {
        "Fn::GetAtt": [
          "IamRoleLambda",
          "Arn"
        ]
      }
    },
    "FavoritesTableName": {
      "Description": "Favorites Table",
      "Value": {
        "Ref": "FavoritesTable"
      }
    },
    "OAuthTokensTableName": {
      "Description": "OAuth Tokens Table",
      "Value": {
        "Ref": "OAuthTokensTable"
      }
    }
  }
}