-
Notifications
You must be signed in to change notification settings - Fork 0
/
coustom_resources.ymal
109 lines (103 loc) · 3.62 KB
/
coustom_resources.ymal
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
AWSTemplateFormatVersion: 2010-09-09
Transform: AWS::Serverless-2016-10-31
Description: AWS Device Farm custom resources, most of these are service token function
Resources:
AndroidDevOpsDeployBucket:
Type: AWS::S3::Bucket
AndroidDevOpsResourceLambdaArtifactsBucket:
Type: AWS::S3::Bucket
AndroidDevOpsInstrumentationFunction:
Type: AWS::Lambda::Function
Properties:
Description: Custom resource lambda to manage device-farm projects
Handler: device_farm.project_resource.lambda_handler
Role: !GetAtt AndroidDevOpsInstrumentationResourceRole.Arn
Code: lambda_build/build/device-farm-resources
Runtime: python3.6
Timeout: 60
AndroidDevOpsDevicePoolFunction:
Type: AWS::Lambda::Function
Properties:
Description: Custom resource lambda to manage device-farm device pools
Handler: device_farm.device_pool_resource.lambda_handler
Role: !GetAtt AndroidDevOpsInstrumentationResourceRole.Arn
Code: lambda_build/build/device-farm-resources
Runtime: python3.6
Timeout: 60
AndroidDevOpsInstrumentationResourceRole:
Type: AWS::IAM::Role
Properties:
AssumeRolePolicyDocument:
Version: 2012-10-17
Statement:
- Effect: Allow
Principal:
Service: lambda.amazonaws.com
Action:
- sts:AssumeRole
ManagedPolicyArns:
- arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
Policies:
- PolicyName: LambdaPolicy
PolicyDocument:
Version: 2012-10-17
Statement:
- Effect: Allow
Action:
- devicefarm:CreateProject
- devicefarm:UpdateProject
- devicefarm:DeleteProject
- devicefarm:ListDevicePools
- devicefarm:CreateDevicePool
- devicefarm:UpdateDevicePool
- devicefarm:DeleteDevicePool
Resource: '*'
- Effect: Allow
Action:
- s3:*
- s3:ListBucket
- s3:GetBucketAcl
- s3:GetBucketLocation
- s3:GetObject
- s3:GetObjectVersion
- s3:PutObject
Resource: !Sub "arn:aws:s3:::${AndroidDevOpsResourceLambdaArtifactsBucket}/*"
ProjectLogGroup:
Type: AWS::Logs::LogGroup
Properties:
LogGroupName: !Sub /aws/lambda/${AndroidDevOpsInstrumentationFunction}
RetentionInDays: 7
DevicePoolLogGroup:
Type: AWS::Logs::LogGroup
Properties:
LogGroupName: !Sub /aws/lambda/${AndroidDevOpsDevicePoolFunction}
RetentionInDays: 7
UseCustomResourcesPolicy:
Type: AWS::IAM::ManagedPolicy
Properties:
PolicyDocument:
Version: 2012-10-17
Statement:
- Effect: Allow
Action:
- lambda:InvokeFunction
Resource:
- !GetAtt AndroidDevOpsInstrumentationFunction.Arn
- !GetAtt AndroidDevOpsDevicePoolFunction.Arn
Outputs:
AndroidDevOpsInstrumentationLambdaArn:
Value: !GetAtt AndroidDevOpsInstrumentationFunction.Arn
Export:
Name: 'android-instrumentation-function-arn'
AndroidDevOpsDevicePoolFunctionArn:
Value: !GetAtt AndroidDevOpsDevicePoolFunction.Arn
Export:
Name: 'android-device-pool-function-arn'
UseFunctionPolicyArn:
Value: !Ref UseCustomResourcesPolicy
Export:
Name: 'android-device-farm-custom-resource-policy-arn'
DeployBucketArn:
Value: !Ref AndroidDevOpsDeployBucket
Export:
Name: 'android-deploy-bucket-arn'