2313 Commits

Author SHA1 Message Date
Mariusz Nowak
38ed445e8a
Ensure default bucket policy is not configured for custom bucket 2019-10-31 12:57:13 +01:00
Mariusz Nowak
f5405a60e6
Remove obsolete lint instruction 2019-10-31 12:56:11 +01:00
Philipp Muens
f7838880dd
Merge pull request #6880 from DanConway/master
Find origin by domain name and path
2019-10-28 12:34:17 +01:00
Philipp Muens
8ba7461459
Merge pull request #6747 from JackDanger/jackdanger/allow-specific-apigateway-logs-role
Allow specifying ApiGateway logs role ARN
2019-10-25 16:58:09 +02:00
Philipp Muens
425ee5cf26 Fix lint issue 2019-10-25 13:48:36 +02:00
Philipp Muens
5313b2a4df Fix region error handling in Lambda@Edge implementation 2019-10-25 13:46:53 +02:00
Philipp Muens
7accce7c1b Fix typo 2019-10-25 12:19:28 +02:00
Dan Conway
a5480ce483 fix: prettify 2019-10-24 20:02:08 +01:00
Dan Conway
cbb42ce240 fix: Find origins using domain name and path 2019-10-24 18:04:46 +01:00
Philipp Muens
aba27192c0 Remove naming function for logical id 2019-10-24 13:34:54 +02:00
Philipp Muens
3d24e8af38 Pass role arn into custom CloudFormation resource 2019-10-24 13:30:34 +02:00
Mariusz Nowak
67db1647d4
Merge pull request #6823 from neverendingqs/aws/httpsbucket
AWS - deployment bucket policy for HTTPS only
2019-10-23 07:05:49 -05:00
Philipp Muens
8f8975b205 Wrap code into BbPromise.try 2019-10-23 13:17:23 +02:00
Philipp Muens
25bb4e2da1 Merge branch 'master' into jackdanger/allow-specific-apigateway-logs-role 2019-10-23 13:03:47 +02:00
Mariusz Nowak
b749213029
Fix custom resource tests 2019-10-23 11:49:58 +02:00
Mariusz Nowak
ce6d155948
Fix DependsOn handling 2019-10-23 11:10:02 +02:00
Mariusz Nowak
88f60a48ab
Honor cfnRole in custom resources handling 2019-10-22 17:13:17 +02:00
Mariusz Nowak
ae1696084b
Reorganize custom role setup 2019-10-22 16:59:28 +02:00
Philipp Muens
68c46b434f Merge branch 'master' into jackdanger/allow-specific-apigateway-logs-role 2019-10-22 12:59:48 +02:00
Philipp Muens
3d2879ef56 Introduce logical id naming function 2019-10-22 11:45:06 +02:00
Philipp Muens
3cede35cc9 Add / Update tests 2019-10-22 11:38:30 +02:00
Philipp Muens
ee25a30f8a Update code to return Promise 2019-10-22 11:38:12 +02:00
Eetu Tuomala
7927148f54
fix arn name 2019-10-18 13:06:16 +03:00
Eetu Tuomala
51aacdfd71
add missing tests 2019-10-18 12:05:29 +03:00
Eetu Tuomala
886057864b
allow ref in stream arn property 2019-10-18 10:42:48 +03:00
Philipp Muens
bf06e727ce Add spacing to constructed error message 2019-10-16 12:54:34 +02:00
Philipp Muens
09a2e285dc Add spacing in error message 2019-10-16 12:50:48 +02:00
Calle Kabo
cc76b93b5c prettier 2019-10-16 12:08:29 +13:00
Calle Kabo
5c9eb2e81c support NotAction and NotResource 2019-10-16 11:52:52 +13:00
Philipp Muens
6e55723505
Merge pull request #6827 from bgaillard/master
Fix perms with several CloudWatch log subscriptions
2019-10-15 11:26:54 +02:00
Mark Tse
7dd70bc973 chore - forgot to run prettier. 2019-10-14 21:36:35 -04:00
Mark Tse
af6d78e003 aws - adding deployment bucket policy to naming.js. 2019-10-14 21:31:34 -04:00
Mariusz Nowak
fe044758fd
Revert "Pause for mfa input" 2019-10-14 13:25:13 +02:00
Mariusz Nowak
a4342239ea
Merge pull request #6828 from neverendingqs/aws/s3templatename
AWS - adding naming function for S3 compiled template file name.
2019-10-14 04:00:46 -05:00
Mark Tse
f3d2f620ee chore - undo unintended change. 2019-10-13 15:21:34 -04:00
Mark Tse
e62ddadc9d chore - stop using deprecated 'new Buffer()' method. 2019-10-13 15:15:26 -04:00
Baptiste Gaillard
d565234543
Fix perms with several CloudWatch log subscriptions. 2019-10-13 20:50:37 +02:00
Mark Tse
525fe8a07e aws - adding naming function for S3 compiled template file name. 2019-10-13 14:30:55 -04:00
Mark Tse
238068cfc5 chore - prettified. 2019-10-11 22:38:16 -04:00
Mark Tse
060dc2c050 aws - deployment bucket policy for HTTPS only. 2019-10-11 22:33:16 -04:00
Philipp Muens
03fe15d11c Run Prettier 2019-10-10 12:48:42 +02:00
drexler
8f5d59987c test: update cover test 2019-10-10 06:34:53 -04:00
drexler
e8f6026566 fix: remove unneeded validation check 2019-10-10 06:34:41 -04:00
Philipp Muens
36d3f01a9c
Merge pull request #6779 from jessedoyle/s3-deployment-block-public
S3 Block Public Access
2019-10-08 15:09:34 +02:00
Lasantha Kularatne
c11c9efe21 Issue 4867 - Allowing InvokeBridge to find handleRequest method from super classes 2019-10-04 14:15:29 -05:00
Jesse Doyle
f1c768c42b
S3 Block Public Access
* Add a new boolean property named `blockPublicAccess`to the
  `deploymentBucket` config object for the AWS provider.
* The property defaults to `false` to retain backwords
  compatibility with existing infrastructure.
* When `true`, the configuration property will enable the
  [S3 Block Public Access][1]. This will prevent all future
  policies or ACLs that may grant public access to the
  deployment bucket.
* Update the serverless.yml reference docs to reflect the
  addition.

[1]: https://aws.amazon.com/blogs/aws/amazon-s3-block-public-access-another-layer-of-protection-for-your-accounts-and-buckets/

resolves: https://github.com/serverless/serverless/issues/6706
2019-10-01 22:21:10 -06:00
Jack Danger
4ad1ded244 Allow specifying ApiGateway logs role ARN
Since #6531 improved how we manage API Gateway's CloudWatch log IAM role
it's now simpler to allow hardcoding a role ARN in the YAML config.

This addresses [this
comment](https://github.com/serverless/serverless/pull/6591#discussion_r321010087)
and unblocks anyone who needs to keep the IAM permissions for an app
scoped to just that app.

Example usage:

    provider:
      name: aws
      logs:
        restApi:
          role:
            arn:aws:iam::123456789:role/a-service-with-all-necessary-permissions
2019-09-26 15:32:46 -07:00
Philipp Muens
975040b6ef
Merge pull request #6746 from JackDanger/jackdanger/fixing-typos-in-variable-names
Fixing typos in variable names
2019-09-25 13:32:03 +02:00
Philipp Muens
f11792e382 Update Jackson versions 2019-09-25 10:20:16 +02:00
Jack Danger
28d38c5ae2 fixing typos in variable names
nane -> name
resouce -> resource
2019-09-24 19:21:00 -07:00