archive-gh-me/serverless
1
0
Fork 0
mirror of https://github.com/serverless/serverless.git synced 2026-01-18 14:58:43 +00:00
Code Issues Projects Releases Wiki Activity

Wrap code into BbPromise.try

Browse Source
This commit is contained in:
Philipp Muens 2019-10-23 13:17:23 +02:00
parent 25bb4e2da1
commit 8f8975b205
1 changed files with 45 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

88
lib/plugins/aws/package/compile/events/lib/ensureApiGatewayCloudWatchRole.js
View File

@ -4,54 +4,56 @@ const { memoize } = require('lodash');
const BbPromise = require('bluebird');
const { addCustomResourceToService } = require('../../../../customResources');
module.exports = memoize(provider => {
const cfTemplate = provider.serverless.service.provider.compiledCloudFormationTemplate;
const logicalId = provider.naming.getApiGatewayAccountCloudWatchRoleResourceLogicalId();
const customResourceLogicalId = provider.naming.getCustomResourceApiGatewayAccountCloudWatchRoleResourceLogicalId();
const customResourceFunctionLogicalId = provider.naming.getCustomResourceApiGatewayAccountCloudWatchRoleHandlerFunctionLogicalId();
module.exports = memoize(provider =>
BbPromise.try(() => {
const cfTemplate = provider.serverless.service.provider.compiledCloudFormationTemplate;
const logicalId = provider.naming.getApiGatewayAccountCloudWatchRoleResourceLogicalId();
const customResourceLogicalId = provider.naming.getCustomResourceApiGatewayAccountCloudWatchRoleResourceLogicalId();
const customResourceFunctionLogicalId = provider.naming.getCustomResourceApiGatewayAccountCloudWatchRoleHandlerFunctionLogicalId();
// There may be a specific role ARN provided in the configuration
const config = provider.serverless.service.provider;
const restApi = config.logs && config.logs.restApi;
const configuredRoleArn = restApi && restApi.role;
// There may be a specific role ARN provided in the configuration
const config = provider.serverless.service.provider;
const restApi = config.logs && config.logs.restApi;
const configuredRoleArn = restApi && restApi.role;
if (configuredRoleArn) {
cfTemplate.Resources[logicalId] = {
Type: 'AWS::ApiGateway::Account',
if (configuredRoleArn) {
cfTemplate.Resources[logicalId] = {
Type: 'AWS::ApiGateway::Account',
Properties: {
CloudWatchRoleArn: configuredRoleArn,
},
};
return cfTemplate;
}
cfTemplate.Resources[customResourceLogicalId] = {
Type: 'Custom::ApiGatewayAccountRole',
Version: 1.0,
Properties: {
CloudWatchRoleArn: configuredRoleArn,
ServiceToken: {
'Fn::GetAtt': [customResourceFunctionLogicalId, 'Arn'],
},
},
};
return BbPromise.resolve(cfTemplate);
}
cfTemplate.Resources[customResourceLogicalId] = {
Type: 'Custom::ApiGatewayAccountRole',
Version: 1.0,
Properties: {
ServiceToken: {
'Fn::GetAtt': [customResourceFunctionLogicalId, 'Arn'],
return addCustomResourceToService(provider, 'apiGatewayCloudWatchRole', [
{
Effect: 'Allow',
Resource: {
'Fn::Join': [':', ['arn:aws:iam:', { Ref: 'AWS::AccountId' }, 'role/*']],
},
Action: [
'iam:AttachRolePolicy',
'iam:CreateRole',
'iam:ListAttachedRolePolicies',
'iam:PassRole',
],
},
},
};
return addCustomResourceToService(provider, 'apiGatewayCloudWatchRole', [
{
Effect: 'Allow',
Resource: {
'Fn::Join': [':', ['arn:aws:iam:', { Ref: 'AWS::AccountId' }, 'role/*']],
{
Effect: 'Allow',
Resource: 'arn:aws:apigateway:*::/account',
Action: ['apigateway:GET', 'apigateway:PATCH'],
},
Action: [
'iam:AttachRolePolicy',
'iam:CreateRole',
'iam:ListAttachedRolePolicies',
'iam:PassRole',
],
},
{
Effect: 'Allow',
Resource: 'arn:aws:apigateway:*::/account',
Action: ['apigateway:GET', 'apigateway:PATCH'],
},
]);
});
]);
})
);