serverless.yml

service: api-database

frameworkVersion: '2'

provider:
  name: aws
  runtime: nodejs14.x
  lambdaHashingVersion: 20201221
  region: eu-west-1
  environment:
    AWS_NODEJS_CONNECTION_REUSE_ENABLED: '1'
  iam:
    role:
      statements:
        - Effect: Allow
          Action:
            - ssm:GetParameter
          Resource:
            - !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/examples/infra/database/cluster/arn'
            - !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/examples/infra/database/endpoint/hostname'
            - !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/examples/infra/database/secret/arn'
        - Effect: 'Allow'
          Action:
            - secretsmanager:GetSecretValue
          Resource:
            - ${ssm:/examples/infra/database/secret/arn}
        - Effect: Allow
          Action:
            - rds-data:BatchExecuteStatement
            - rds-data:BeginTransaction
            - rds-data:CommitTransaction
            - rds-data:ExecuteStatement
            - rds-data:RollbackTransaction
          Resource:
            - ${ssm:/examples/infra/database/cluster/arn}
package:
  individually: true

plugins:
  - serverless-webpack

custom:
  webpack:
    webpackConfig: 'webpack.config.js'
    packager: 'yarn'
    includeModules:
      forceInclude:
        - pg
functions:
  data-api:
    handler: src/data-api/index.handler
    timeout: 28
    events:
      - httpApi:
          method: get
          path: /data-api
  postgres:
    handler: src/postgres/index.handler
    timeout: 28
    vpc:
      securityGroupIds:
        - !Ref SecurityGroup
      subnetIds:
        - ${ssm:/examples/infra/vpc/private-subnet-0/id}
        - ${ssm:/examples/infra/vpc/private-subnet-1/id}
    events:
      - httpApi:
          method: get
          path: /postgres

resources:
  Resources:
    SecurityGroup:
      Type: AWS::EC2::SecurityGroup
      Properties:
        GroupName: example-lambda
        GroupDescription: example-lambda
        VpcId: ${ssm:/examples/infra/vpc/id}