create the appropriate roles

Author: devksingh4

Makefile

@@ -54,6 +54,7 @@ build: src/ cloudformation/ docs/
 	yarn -D
 	VITE_BUILD_HASH=$(GIT_HASH) yarn build
 	cp -r src/api/resources/ dist/api/resources
+	rm -rf dist/lambda/sqs
 	sam build --template-file cloudformation/main.yml
 
 local:

cloudformation/iam.yml

@@ -16,6 +16,8 @@ Resources:
   ApiLambdaIAMRole:
     Type: AWS::IAM::Role
     Properties:
+      ManagedPolicyArns:
+        - arn:aws:iam::aws:policy/service-role/AWSLambdaSQSQueueExecutionRole
       AssumeRolePolicyDocument:
         Version: '2012-10-17'
         Statement:

cloudformation/main.yml

@@ -182,6 +182,13 @@ Resources:
         SecurityGroupIds: !If [ShouldAttachVpc, !FindInMap [EnvironmentToCidr, !Ref RunEnvironment, SecurityGroupIds], !Ref AWS::NoValue]
         SubnetIds: !If [ShouldAttachVpc, !FindInMap [EnvironmentToCidr, !Ref RunEnvironment, SubnetIds], !Ref AWS::NoValue]
 
+  SQSLambdaEventMapping:
+    Type: AWS::Lambda::EventSourceMapping
+    Properties:
+      BatchSize: 5
+      EventSourceArn: !GetAtt AppSecurityRoles.Outputs.MainQueueArn
+      FunctionName: !Sub ${ApplicationPrefix}-sqs-lambda
+
   IamGroupRolesTable:
     Type: 'AWS::DynamoDB::Table'
     DeletionPolicy: "Retain"

src/api/build.js

@@ -33,8 +33,9 @@ const commonParams = {
 esbuild
   .build({
     ...commonParams,
-    entryPoints: ["api/lambda.js", "api/index.js"],
+    entryPoints: ["api/lambda.js"],
     outdir: "../../dist/lambda/",
+    external: [...commonParams.external, "sqs/*"],
   })
   .then(() => console.log("API server build completed successfully!"))
   .catch((error) => {