serverless/lib/plugins/interactiveCli/setupAws.js

'use strict';

const BbPromise = require('bluebird');
const chalk = require('chalk');
const inquirer = require('@serverless/utils/inquirer');
const awsCredentials = require('../aws/utils/credentials');
const { confirm } = require('./utils');
const openBrowser = require('../../utils/openBrowser');

const isValidAwsAccessKeyId = RegExp.prototype.test.bind(/^[A-Z0-9]{10,}$/);
const isValidAwsSecretAccessKey = RegExp.prototype.test.bind(/^[a-zA-Z0-9/+]{10,}$/);

const awsAccessKeyIdInput = () =>
  inquirer
    .prompt({
      message: 'AWS Access Key Id:',
      type: 'input',
      name: 'accessKeyId',
      validate: (input) => {
        if (isValidAwsAccessKeyId(input.trim())) return true;
        return 'AWS Access Key Id seems not valid.\n   Expected something like AKIAIOSFODNN7EXAMPLE';
      },
    })
    .then(({ accessKeyId }) => accessKeyId.trim());

const awsSecretAccessKeyInput = () =>
  inquirer
    .prompt({
      message: 'AWS Secret Access Key:',
      type: 'input',
      name: 'secretAccessKey',
      validate: (input) => {
        if (isValidAwsSecretAccessKey(input.trim())) return true;
        return (
          'AWS Secret Access Key seems not valid.\n' +
          '   Expected something like wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY'
        );
      },
    })
    .then(({ secretAccessKey }) => secretAccessKey.trim());

const steps = {
  writeOnSetupSkip: () =>
    process.stdout.write(`\nYou can setup your AWS account later. More details available here:

  http://slss.io/aws-creds-setup\n`),
  shouldSetupAwsCredentials: () =>
    confirm('Do you want to set them up now?', { name: 'shouldSetupAwsCredentials' }).then(
      (isConfirmed) => {
        if (!isConfirmed) steps.writeOnSetupSkip();
        return isConfirmed;
      }
    ),
  ensureAwsAccount: () =>
    confirm('Do you have an AWS account?', { name: 'hasAwsAccount' }).then((hasAccount) => {
      if (!hasAccount) {
        openBrowser('https://portal.aws.amazon.com/billing/signup');
        return inquirer.prompt({
          message: 'Press Enter to continue after creating an AWS account',
          name: 'createAwsAccountPrompt',
        });
      }
      return null;
    }),
  ensureAwsCredentials: (serverless) => {
    const region = serverless.getProvider('aws').getRegion();
    openBrowser(
      `https://console.aws.amazon.com/iam/home?region=${region}#/users$new?step=final&accessKey&userNames=serverless&permissionType=policies&policies=arn:aws:iam::aws:policy%2FAdministratorAccess`
    );
    return inquirer.prompt({
      message: 'Press Enter to continue after creating an AWS user with access keys',
      name: 'generateAwsCredsPrompt',
    });
  },
  inputAwsCredentials: () => {
    return awsAccessKeyIdInput().then((accessKeyId) =>
      awsSecretAccessKeyInput().then((secretAccessKey) =>
        awsCredentials
          .saveFileProfiles(new Map([['default', { accessKeyId, secretAccessKey }]]))
          .then(() =>
            process.stdout.write(
              `\n${chalk.green(
                `AWS credentials saved on your machine at ${chalk.bold(
                  process.platform === 'win32'
                    ? '%userprofile%\\.aws\\credentials'
                    : '~/.aws/credentials'
                )}. Go there to change them at any time.`
              )}\n`
            )
          )
      )
    );
  },
};

module.exports = {
  check(serverless) {
    return BbPromise.try(() => {
      if (serverless.service.provider.name !== 'aws') return false;
      if (serverless.getProvider('aws').cachedCredentials) return false;
      return BbPromise.all([
        awsCredentials.resolveFileProfiles(),
        awsCredentials.resolveEnvCredentials(),
      ]).then(([fileProfiles, envCredentials]) => !fileProfiles.size && !envCredentials);
    });
  },
  run(serverless) {
    process.stdout.write(
      'No AWS credentials were found on your computer, ' +
        'you need these to host your application.\n\n'
    );
    return module.exports.runSteps(serverless);
  },
  steps,
  runSteps: (serverless) =>
    steps.shouldSetupAwsCredentials().then((isConfirmed) => {
      if (!isConfirmed) return null;
      return steps
        .ensureAwsAccount()
        .then(() => steps.ensureAwsCredentials(serverless))
        .then(steps.inputAwsCredentials);
    }),
};