Merge pull request #693 from pagopa/feat/assertion_lambda_count_metric

feat: assertion lambda count metric

Author: uolter

src/infra/modules/backend/lambda.tf

@@ -486,6 +486,12 @@ data "aws_iam_policy_document" "assertion_lambda" {
     resources = ["${var.assertion_lambda.s3_assertion_bucket_arn}/*"]
   }
 
+  statement {
+    effect    = "Allow"
+    actions   = ["cloudwatch:PutMetricData"]
+    resources = ["*"]
+  }
+
   statement {
     effect    = "Allow"
     actions   = ["kms:GenerateDataKey"]

src/oneid/oneid-lambda-assertion/index.py

@@ -12,7 +12,10 @@
 logger.setLevel(logging.INFO)
 
 s3 = boto3.resource("s3")
+cloudwatch = boto3.client('cloudwatch')
+
 bucket_name = os.environ['S3_BUCKET']
+CW_NAMESPACE = os.environ.get("CLOUDWATCH_CUSTOM_METRIC_NAMESPACE", "Assertions/TestCounter")
 
 def decode_base64_content(content):
 
@@ -34,6 +37,18 @@ def get_fiscal_number(token):
     except Exception as e:
       logger.error(f'Error parsing fiscalNumber: {str(e)}')
       return ""
+    
+def publish_metric(value: float, metric_name: str) -> None:
+    """Publish a single metric to CloudWatch"""
+    cloudwatch.put_metric_data(
+        Namespace=CW_NAMESPACE,
+        MetricData=[{
+            'MetricName': metric_name,
+            'Value': float(value),
+            'Unit': 'Count',
+            'StorageResolution': 60,
+        }]
+    )    
 
 def lambda_handler(event, context):
 
@@ -49,8 +64,10 @@ def lambda_handler(event, context):
             if record_type == "SAML" :
                 record['SAMLRequest'] = decode_base64_content(record['SAMLRequest'])
                 record['SAMLResponse'] = decode_base64_content(record['SAMLResponse'])
+                publish_metric(1, "Saml")
             elif record_type == "ACCESS_TOKEN":
                 record['fiscalNumber'] = get_fiscal_number(record['idToken'])
+                publish_metric(1, "AccessToken")
 
             # Write the file to S3
             file_key = cet_time.strftime(f"year=%Y/month=%m/day=%d/hour=%H/type={record_type}/{saml_request_id}.json")