CCM-11600: header name, targets, add alarm

Author: masl2

infrastructure/terraform/components/api/cloudwatch_metric_alarm_apim_auth_cert_expirty.tf

@@ -0,0 +1,22 @@
+resource "aws_cloudwatch_metric_alarm" "alm-apim-client-certificate-near-expiry" {
+  alarm_name        = "${local.csi}-alm-apim-client-certificate-near-expiry"
+  alarm_description = "RELIABILITY: An APIM client certificate is due to expire soon"
+
+  metric_name = "apim-client-certificate-near-expiry"
+  namespace   = "comms-apim-authorizer"
+
+  dimensions = {
+    Environment = local.parameter_bundle.environment
+  }
+
+  period              = 60 * 60 * 4 //4 hours
+  comparison_operator = "GreaterThanThreshold"
+  threshold           = "0"
+  evaluation_periods  = "1"
+  statistic           = "Sum"
+  treat_missing_data  = "notBreaching"
+
+  actions_enabled = "false"
+  alarm_actions   = []
+  ok_actions      = []
+}

infrastructure/terraform/components/api/module_authorizer_lambda.tf

@@ -38,7 +38,7 @@ module "authorizer_lambda" {
   lambda_env_vars = {
     CLOUDWATCH_NAMESPACE                     = "/aws/api-gateway/supplier/alarms",
     CLIENT_CERTIFICATE_EXPIRATION_ALERT_DAYS = 14,
-    APIM_APPLICATION_ID_HEADER               = "apim-application-id",
+    APIM_APPLICATION_ID_HEADER               = "NHSD-Supplier-ID",
     SUPPLIERS_TABLE_NAME                     = aws_dynamodb_table.suppliers.name
   }
 }

infrastructure/terraform/components/api/resources/spec.tmpl.json

@@ -9,7 +9,7 @@
           "authorizerCredentials": "${APIG_EXECUTION_ROLE_ARN}",
           "authorizerResultTtlInSeconds": 0,
           "authorizerUri": "arn:aws:apigateway:${AWS_REGION}:lambda:path/2015-03-31/functions/${AUTHORIZER_LAMBDA_ARN}/invocations",
-          "identitySource": "method.request.header.apim-application-id",
+          "identitySource": "method.request.header.NHSD-Supplier-ID",
           "type": "request"
         },
         "x-amazon-apigateway-authtype": "custom"

specification/api/components/x-nhsd-apim/target-attributes.yml

@@ -1,3 +1,3 @@
 - name: NHSD-Supplier-ID
   header: NHSD-Supplier-ID
-  required: false
+  required: true