services/github-bots/LabelBotFullFunctionality/serverless.yml

# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.
# Configurations

service: LabelBotFull

plugins:
  - serverless-domain-manager

custom:
  queueName: LabelSQS
  customDomain:
    domainName: 'labelbot-webhook.mxnet-ci-dev.amazon-ml.com'
    basePath: 'dev'
    stage: dev
    createRoute53Record: true

package:
  exclude:
    - ./**
  include:
    - LabelBot.py
    - secret_manager.py
    - handler.py

provider:
  name: aws
  runtime: python3.6
  region: us-west-2
  timeout: 180
  iamRoleStatements:
    -  Effect: "Allow"
       Action:
         - "secretsmanager:GetSecretValue"
         - "secretsmanager:DescribeSecret"
       Resource: "arn:aws:secretsmanager:us-west-2:REDACTED:secret:REDACTED"
    -  Effect: "Allow"
       Action:
         - "secretsmanager:ListSecrets"
       Resource: "*"
    -  Effect: "Allow"
       Action:
         - "sqs:SendMessage"
         - "sqs:ReceiveMessage"
         - "sqs:DeleteMessage"
         - "sqs:GetQueueAttributes"
       Resource:
         Fn::GetAtt: [ SQSQueue, Arn ]

functions:
  send:
    handler: handler.send_to_sqs
    environment:
      SQS_URL:
        Ref: SQSQueue
    timeout: 30
    events:
      - http: POST send_to_sqs

  label:
    handler: handler.label_bot_lambda
    events:
      - sqs:
          arn:
            Fn::GetAtt: [ SQSQueue, Arn ]
    environment:
      region_name : "us-west-2"
      secret_name : "GitHubLabelBotCredentials"
      repo : "apache/incubator-mxnet"

resources:
  Resources:
    SQSQueue:
      Type: AWS::SQS::Queue
      Properties:
        QueueName: ${self:custom.queueName}
        VisibilityTimeout: 210