new project

sehrish30 · May 22, 2023 · 5956284 · 5956284
1 parent 994f5e5
commit 5956284
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 13 deletions.
diff --git a/external-verification-service/resources/CodePipeline.yml b/external-verification-service/resources/CodePipeline.yml
@@ -3,7 +3,7 @@ CodePipeline:
   Properties:
     Name: external-verification-service-pipeline-${self:provider.stage}
     # allow code pipeline to create a service role so it can be used with new pipeline
-    RoleArn: !GetAtt CodePipelineServiceRole.Arn
+    RoleArn: !GetAtt CodeDeployServiceRole.Arn
     ArtifactStore:
       Type: S3
       Location: !Ref CodePipelineArtifactStore
@@ -38,18 +38,18 @@ CodePipeline:
               - Name: BuildOutput
             InputArtifacts:
               - Name: SourceCode
-      # - Name: Dev
-      #   Actions:
-      #     - Name: Deploy
-      #       ActionTypeId:
-      #         Category: Build
-      #         Owner: AWS
-      #         Provider: CodeBuild
-      #         Version: "1"
-      #       Configuration:
-      #         ProjectName: !Ref CodeBuildDevProject
-      #       InputArtifacts:
-      #         - Name: SourceCode
+      - Name: Deploy
+        Actions:
+          - Name: Deploy
+            ActionTypeId:
+              Category: Build
+              Owner: AWS
+              Provider: CodeBuild
+              Version: "1"
+            Configuration:
+              ProjectName: !Ref CodeBuildDeployDevProject
+            InputArtifacts:
+              - Name: SourceCode
       # - Name: QA
       #   Actions:
       #     - Name: Deploy
@@ -202,6 +202,30 @@ CodeBuildProdProject:
         - Name: ENV_NAME
           Value: prod
 
+# because we need to deploy it serverless deploy which will deploy to many resoirces
+CodeDeployServiceRole:
+  Type: "AWS::IAM::Role"
+  Properties:
+    AssumeRolePolicyDocument:
+      Version: "2012-10-17"
+      Statement:
+        - Effect: "Allow"
+          Principal:
+            Service:
+              - codepipeline.amazonaws.com
+              - codedeploy.amazonaws.com
+              - codebuild.amazonaws.com
+          Action: "sts:AssumeRole"
+    Path: "/"
+    Policies:
+      - PolicyName: "AdministratorAccess"
+        PolicyDocument:
+          Version: "2012-10-17"
+          Statement:
+            - Effect: "Allow"
+              Action: "*"
+              Resource: "*"
+
 CodePipelineServiceRole:
   Type: AWS::IAM::Role
   Properties:

diff --git a/external-verification-service/serverless.yml b/external-verification-service/serverless.yml
@@ -80,6 +80,7 @@ resources:
     CodePipeline: ${file(./resources/CodePipeline.yml):CodePipeline}
     CodeBuildSourceCredentials: ${file(./resources/CodePipeline.yml):CodeBuildSourceCredentials}
     CodePipelineServiceRole: ${file(./resources/CodePipeline.yml):CodePipelineServiceRole}
+    CodeDeployServiceRole: ${file(./resources/CodePipeline.yml):CodeDeployServiceRole}
     CodeBuildProject: ${file(./resources/CodePipeline.yml):CodeBuildProject}
     CodeBuildDeployDevProject: ${file(./resources/CodePipeline.yml):CodeBuildDeployDevProject}
     # CodeBuildDevProject: ${file(./resources/CodePipeline.yml):CodeBuildDevProject}