codepipeline-github-status/serverless.yml at master · fishbrain/codepipeline-github-status · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
service: codepipeline-github-status

plugins:
  - serverless-scriptable-plugin
  - serverless-plugin-datadog
  - serverless-plugin-resource-tagging

custom:
  scriptHooks:
    before:package:createDeploymentArtifacts: npm run build
  datadog:
    apiKey: ${ssm:/accounts-${opt:stage, self:provider.stage}/datadog_api_key}

package:
  individually: true
  exclude:
    - node_modules/aws-sdk/**

provider:
  name: aws
  memorySize: 128
  runtime: nodejs16.x
  lambdaHashingVersion: 20201221
  region: eu-west-1
  iamRoleStatements:
    - Effect: Allow
      Action:
        - 'ssm:GetParametersByPath'
      Resource:
        - 'arn:aws:ssm:${self:provider.region}:*:parameter/codepipeline-github-status'
    - Effect: Allow
      Action:
        - 'kms:Decrypt'
      Resource:
        - 'arn:aws:kms:${self:provider.region}:*:key/*'
    - Effect: Allow
      Action:
        - 'codepipeline:GetPipelineExecution'
      Resource:
        - arn:aws:codepipeline:${self:provider.region}:*:*
  stackTags:
    environment: ${opt:stage, self:provider.stage}
    env: ${opt:stage, self:provider.stage}
    service: "codepipeline-github-status"
    repository: "https://github.com/fishbrain/codepipeline-github-status"
    FibOwner: "platform-team"

functions:
  main:
    handler: dist/index.handler
    reservedConcurrency: 1
    events:
      - cloudwatchEvent:
          event:
            source:
              - 'aws.codepipeline'
            detail-type:
              - 'CodePipeline Pipeline Execution State Change'