Skip to content

Commit e997d39

Browse files
nicki-nhsnicki-nhs
committed
CCM-13003 Lambda infra
1 parent e45829b commit e997d39

File tree

5 files changed

+91
-19
lines changed

5 files changed

+91
-19
lines changed

‎infrastructure/terraform/modules/backend-api/README.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,7 @@ No requirements.
4444
| <a name="module_delete_template_lambda"></a> [delete\_template\_lambda](#module\_delete\_template\_lambda) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip | n/a |
4545
| <a name="module_get_client_lambda"></a> [get\_client\_lambda](#module\_get\_client\_lambda) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip | n/a |
4646
| <a name="module_get_routing_config_lambda"></a> [get\_routing\_config\_lambda](#module\_get\_routing\_config\_lambda) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip | n/a |
47+
| <a name="module_get_routing_configs_by_template_id_lambda"></a> [get\_routing\_configs\_by\_template\_id\_lambda](#module\_get\_routing\_configs\_by\_template\_id\_lambda) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip | n/a |
4748
| <a name="module_get_template_lambda"></a> [get\_template\_lambda](#module\_get\_template\_lambda) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip | n/a |
4849
| <a name="module_lambda_copy_scanned_object_to_internal"></a> [lambda\_copy\_scanned\_object\_to\_internal](#module\_lambda\_copy\_scanned\_object\_to\_internal) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip | n/a |
4950
| <a name="module_lambda_delete_failed_scanned_object"></a> [lambda\_delete\_failed\_scanned\_object](#module\_lambda\_delete\_failed\_scanned\_object) | https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip | n/a |

‎infrastructure/terraform/modules/backend-api/iam_role_api_gateway_execution_role.tf‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,7 @@ data "aws_iam_policy_document" "api_gateway_execution_policy" {
5757
module.delete_template_lambda.function_arn,
5858
module.get_client_lambda.function_arn,
5959
module.get_routing_config_lambda.function_arn,
60+
module.get_routing_configs_by_template_id_lambda.function_arn,
6061
module.get_template_lambda.function_arn,
6162
module.list_routing_configs_lambda.function_arn,
6263
module.list_template_lambda.function_arn,

‎infrastructure/terraform/modules/backend-api/locals.tf‎

Lines changed: 20 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -11,25 +11,26 @@ locals {
1111
client_ssm_path_pattern = "arn:aws:ssm:${var.region}:${var.aws_account_id}:parameter${local.client_ssm_path_prefix}/*"
1212

1313
openapi_spec = templatefile("${path.module}/spec.tmpl.json", {
14-
APIG_EXECUTION_ROLE_ARN = aws_iam_role.api_gateway_execution_role.arn
15-
AUTHORIZER_LAMBDA_ARN = module.authorizer_lambda.function_arn
16-
AWS_REGION = var.region
17-
COUNT_ROUTING_CONFIGS_LAMBDA_ARN = module.count_routing_configs_lambda.function_arn
18-
CREATE_LAMBDA_ARN = module.create_template_lambda.function_arn
19-
CREATE_ROUTING_CONFIG_LAMBDA_ARN = module.create_routing_config_lambda.function_arn
20-
DELETE_LAMBDA_ARN = module.delete_template_lambda.function_arn
21-
DELETE_ROUTING_CONFIG_LAMBDA_ARN = module.delete_routing_config_lambda.function_arn
22-
GET_CLIENT_LAMBDA_ARN = module.get_client_lambda.function_arn
23-
GET_LAMBDA_ARN = module.get_template_lambda.function_arn
24-
GET_ROUTING_CONFIG_LAMBDA_ARN = module.get_routing_config_lambda.function_arn
25-
LIST_LAMBDA_ARN = module.list_template_lambda.function_arn
26-
LIST_ROUTING_CONFIGS_LAMBDA_ARN = module.list_routing_configs_lambda.function_arn
27-
REQUEST_PROOF_LAMBDA_ARN = module.request_proof_lambda.function_arn
28-
SUBMIT_LAMBDA_ARN = module.submit_template_lambda.function_arn
29-
SUBMIT_ROUTING_CONFIG_LAMBDA_ARN = module.submit_routing_config_lambda.function_arn
30-
UPDATE_LAMBDA_ARN = module.update_template_lambda.function_arn
31-
UPDATE_ROUTING_CONFIG_LAMBDA_ARN = module.update_routing_config_lambda.function_arn
32-
UPLOAD_LETTER_LAMBDA_ARN = module.upload_letter_template_lambda.function_arn
14+
APIG_EXECUTION_ROLE_ARN = aws_iam_role.api_gateway_execution_role.arn
15+
AUTHORIZER_LAMBDA_ARN = module.authorizer_lambda.function_arn
16+
AWS_REGION = var.region
17+
COUNT_ROUTING_CONFIGS_LAMBDA_ARN = module.count_routing_configs_lambda.function_arn
18+
CREATE_LAMBDA_ARN = module.create_template_lambda.function_arn
19+
CREATE_ROUTING_CONFIG_LAMBDA_ARN = module.create_routing_config_lambda.function_arn
20+
DELETE_LAMBDA_ARN = module.delete_template_lambda.function_arn
21+
DELETE_ROUTING_CONFIG_LAMBDA_ARN = module.delete_routing_config_lambda.function_arn
22+
GET_CLIENT_LAMBDA_ARN = module.get_client_lambda.function_arn
23+
GET_LAMBDA_ARN = module.get_template_lambda.function_arn
24+
GET_ROUTING_CONFIG_LAMBDA_ARN = module.get_routing_config_lambda.function_arn
25+
GET_ROUTING_CONFIGS_BY_TEMPLATE_ID_LAMBDA_ARN = module.get_routing_configs_by_template_id_lambda.function_arn
26+
LIST_LAMBDA_ARN = module.list_template_lambda.function_arn
27+
LIST_ROUTING_CONFIGS_LAMBDA_ARN = module.list_routing_configs_lambda.function_arn
28+
REQUEST_PROOF_LAMBDA_ARN = module.request_proof_lambda.function_arn
29+
SUBMIT_LAMBDA_ARN = module.submit_template_lambda.function_arn
30+
SUBMIT_ROUTING_CONFIG_LAMBDA_ARN = module.submit_routing_config_lambda.function_arn
31+
UPDATE_LAMBDA_ARN = module.update_template_lambda.function_arn
32+
UPDATE_ROUTING_CONFIG_LAMBDA_ARN = module.update_routing_config_lambda.function_arn
33+
UPLOAD_LETTER_LAMBDA_ARN = module.upload_letter_template_lambda.function_arn
3334
})
3435

3536
backend_lambda_environment_variables = {

‎infrastructure/terraform/modules/backend-api/module_get_routing_configs_by_template_id_lambda.tf‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
module "get_routing_configs_by_template_id_lambda" {
2+
source = "https://github.com/NHSDigital/nhs-notify-shared-modules/releases/download/v2.0.29/terraform-lambda.zip"
3+
4+
project = var.project
5+
environment = var.environment
6+
component = var.component
7+
aws_account_id = var.aws_account_id
8+
region = var.region
9+
10+
kms_key_arn = var.kms_key_arn
11+
12+
function_name = "get-routing-configs-by-template-id"
13+
14+
function_module_name = "get-routing-configs-by-template-id"
15+
handler_function_name = "handler"
16+
description = "Get Routing Configs by Template ID API endpoint"
17+
18+
memory = 2048
19+
timeout = 3
20+
runtime = "nodejs20.x"
21+
22+
log_retention_in_days = var.log_retention_in_days
23+
24+
iam_policy_document = {
25+
body = data.aws_iam_policy_document.get_routing_configs_by_template_id_lambda_policy.json
26+
}
27+
28+
lambda_env_vars = local.backend_lambda_environment_variables
29+
function_s3_bucket = var.function_s3_bucket
30+
function_code_base_path = local.lambdas_dir
31+
function_code_dir = "backend-api/dist/get-routing-configs-by-template-id"
32+
33+
send_to_firehose = var.send_to_firehose
34+
log_destination_arn = var.log_destination_arn
35+
log_subscription_role_arn = var.log_subscription_role_arn
36+
}
37+
38+
data "aws_iam_policy_document" "get_routing_configs_by_template_id_lambda_policy" {
39+
statement {
40+
sid = "AllowDynamoAccess"
41+
effect = "Allow"
42+
43+
actions = [
44+
"dynamodb:Query",
45+
]
46+
47+
resources = [
48+
aws_dynamodb_table.routing_configuration.arn,
49+
]
50+
}
51+
52+
statement {
53+
sid = "AllowKMSAccess"
54+
effect = "Allow"
55+
56+
actions = [
57+
"kms:Decrypt",
58+
"kms:DescribeKey",
59+
"kms:Encrypt",
60+
"kms:GenerateDataKey*",
61+
"kms:ReEncrypt*",
62+
]
63+
64+
resources = [
65+
var.kms_key_arn
66+
]
67+
}
68+
}

‎lambdas/backend-api/build.sh‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,7 @@ npx esbuild \
2323
src/delete-routing-config.ts \
2424
src/get-client.ts \
2525
src/get-routing-config.ts \
26+
src/get-routing-configs-by-template-id.ts \
2627
src/get.ts \
2728
src/list-routing-configs.ts \
2829
src/list.ts \

0 commit comments

Comments
 (0)