-
-
Notifications
You must be signed in to change notification settings - Fork 2
/
serverless.yml
109 lines (100 loc) · 2.94 KB
/
serverless.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
# Welcome to Serverless!
#
# This file is the main config file for your service.
# It's very minimal at this point and uses default values.
# You can always add more config options for more control.
# We've included some commented out config examples here.
# Just uncomment any of them to get that config option.
#
# For full config options, check the docs:
# docs.serverless.com
#
# Happy Coding!
useDotenv: true
service: matthewbots # NOTE: update this with your service name
plugins:
- serverless-prune-plugin
# You can pin your service to only deploy with a specific Serverless version
# Check out our docs for more details
# frameworkVersion: "=X.X.X"
provider:
name: aws
runtime: nodejs20.x
architecture: arm64
stage: prod
region: us-east-1
iam:
role:
statements:
- Effect: 'Allow'
Action:
- 'lambda:InvokeFunction'
Resource:
- Fn::Join:
- ':'
- - arn:aws:lambda
- Ref: AWS::Region
- Ref: AWS::AccountId
- function:${self:service}-${opt:stage, self:provider.stage}-*
resources:
Resources:
botRole:
Type: AWS::IAM::Role
Properties:
RoleName: botRole
AssumeRolePolicyDocument:
Version: '2012-10-17'
Statement:
- Effect: Allow
Principal:
Service:
- lambda.amazonaws.com
Action: sts:AssumeRole
Policies:
- PolicyName: botPolicy
PolicyDocument:
Version: '2012-10-17'
Statement:
- Effect: Allow # note that these rights are given in the default policy and are required if you want logs out of your lambda(s)
Action:
- logs:CreateLogGroup
- logs:CreateLogStream
- logs:PutLogEvents
Resource:
- 'Fn::Join':
- ':'
-
- 'arn:aws:logs'
- Ref: 'AWS::Region'
- Ref: 'AWS::AccountId'
- 'log-group:/aws/lambda/*:*:*'
- Effect: Allow
Action:
- secretsmanager:GetSecretValue
Resource:
- "arn:aws:secretsmanager:us-east-1:455563481328:secret:midsomerplots-hwtnWE"
- "arn:aws:secretsmanager:us-east-1:455563481328:secret:austenquotebot-13yHbH"
functions:
austenquotebot:
handler: bot.handler
environment:
BOT_NAME: austenquotebot
events:
- schedule: rate(6 hours)
memorySize: 128
timeout: 60
role: botRole
midsomerbot:
handler: bot.handler
environment:
BOT_NAME: midsomerplots
events:
- schedule: rate(4 hours)
memorySize: 128
timeout: 60
role: botRole
custom:
prune:
automatic: true
includeLayers: true
number: 3