serverless.yml

service: qgis-plugin-repo
configValidationMode: error

plugins:
  - serverless-python-requirements
  - serverless-wsgi
  - serverless-apigw-binary
  - serverless-plugin-git-variables
provider:
  name: aws
  runtime: python3.7
  region: ap-southeast-2
  environment:
    STAGE: ${opt:stage, self:provider.stage}
    RESOURCE_SUFFIX: ${param:resource-suffix, ''}
    REPO_BUCKET_NAME: "${self:service}-${self:provider.environment.RESOURCE_SUFFIX}"
    PLUGINS_TABLE_NAME: "${self:service}-${self:provider.environment.RESOURCE_SUFFIX}"
    GIT_SHA: ${git:sha1}
    GIT_TAG: ${git:describeLight}
  iam:
    role:
      statements:
        - Effect: Allow
          Action:
            - dynamodb:Query
            - dynamodb:Scan
            - dynamodb:GetItem
            - dynamodb:PutItem
            - dynamodb:UpdateItem
            - dynamodb:DescribeTable
          Resource: "arn:aws:dynamodb:${opt:region, self:provider.region}:*:table/${self:provider.environment.PLUGINS_TABLE_NAME}"
        - Effect: Allow
          Action:
            - s3:PutObject
          Resource:
            - Fn::Join:
              - ""
              - - "arn:aws:s3:::"
                - "Ref" : "RepoBucket"
                - '/*'

custom:
  pythonRequirements:
   usePoetry: false
   noDeploy:
      - boto3
      - botocore
  apigwBinary:
    types:
      - application/octet-stream
      - application/zip
  wsgi:
    app: src/plugin/api.app
    textMimeTypes:
      - application/octet-stream
      - application/zip

package:
  patterns:
    - '!./.venv/**'

functions:
  app:
    handler: wsgi_handler.handler
    events:
      - http:
          path: /
          method: ANY
          cors: true
      - http:
          path: '{proxy+}'
          method: ANY
          cors: true

resources:
  Resources:
    # Configure Repo Bucket Policy
    RepoBucket:
      Type: AWS::S3::Bucket
      Properties:
        BucketName: ${self:provider.environment.REPO_BUCKET_NAME}
        AccessControl: PublicRead
    RepoBucketPolicy:
      Type: AWS::S3::BucketPolicy
      Properties:
        Bucket: !Ref RepoBucket
        PolicyDocument:
          Id: RepoBucketPolicy
          Version: '2012-10-17'
          Statement:
            - Sid: PublicGetObj
              Effect: Allow
              Principal: '*'
              Action:
                - "s3:GetObject"
              Resource:
                - Fn::Join:
                  - ""
                  - - "arn:aws:s3:::"
                    - "Ref" : "RepoBucket"
                    - '/*'
                - Fn::Join:
                  - ""
                  - - "arn:aws:s3:::"
                    - "Ref" : "RepoBucket"
    PluginsDynamoDBTable:
      Type: 'AWS::DynamoDB::Table'
      DeletionPolicy: Retain
      Properties:
        TableName: ${self:provider.environment.PLUGINS_TABLE_NAME}
        AttributeDefinitions:
          - AttributeName: id
            AttributeType: S
          - AttributeName: item_version
            AttributeType: S
        KeySchema:
          - AttributeName: id
            KeyType: HASH
          - AttributeName: item_version
            KeyType: RANGE
        BillingMode: PAY_PER_REQUEST