serverless.yml

service: brokalys-pinger
useDotenv: true

package:
  individually: true
  patterns:
    - '!**/*'
    - src/shared/**
    - '!src/shared/*.test.js'
    - '!**/__fixtures__/**'
    - '!**/__mocks__/**'
    - '!**/__snapshots__/**'

provider:
  name: aws
  region: eu-west-1
  runtime: nodejs20.x
  logRetentionInDays: 7
  versionFunctions: false
  stage: ${opt:stage, 'dev'}
  tags:
    group: pinger
  iam:
    role:
      statements:
        - Effect: Allow
          Action:
            - SNS:Publish
          Resource: '${self:custom.emailSnsTopicArn}'
        - Effect: Allow
          Action:
            - SES:SendEmail
          Resource: '*'
        - Effect: Allow
          Action:
            - S3:PutObject
            - S3:GetObject
          Resource: !Join
            - ''
            - - 'arn:aws:s3:::'
              - !Ref ChartBucket
              - /*
  environment:
    STAGE: ${self:provider.stage}
    EMAIL_SNS_TOPIC_NAME: ${self:custom.emailSnsTopicName}
    DB_HOST: ${env:DB_HOST}
    DB_DATABASE: ${env:DB_DATABASE}
    DB_USERNAME: ${env:DB_USERNAME}
    DB_PASSWORD: ${env:DB_PASSWORD}

functions:
  email:
    name: BrokalysPinger-Email-${self:provider.stage}
    description: Send email and log it.
    reservedConcurrency: 4
    timeout: 3
    handler: src/email.run
    package:
      patterns:
        - src/email.js
        - src/templates/*
        - src/test/email.json
        - src/test/email-summary.json
    events:
      - sns:
          arn: ${self:custom.emailSnsTopicArn}
          topicName: ${self:custom.emailSnsTopicName}
    alarms:
      - name: emailErrors
        description: 'Pinger: email sending errors'
        namespace: 'AWS/Lambda'
        metric: Errors
        threshold: 1
        statistic: Sum
        period: 300 # 5 minutes
        evaluationPeriods: 10
        datapointsToAlarm: 5
        comparisonOperator: GreaterThanOrEqualToThreshold
        treatMissingData: notBreaching
      - name: emailInvocations
        description: 'Pinger: email sending invocations'
        namespace: 'AWS/Lambda'
        metric: Invocations
        threshold: 800
        statistic: Sum
        period: 86400 # 1 day
        evaluationPeriods: 1
        datapointsToAlarm: 1
        comparisonOperator: GreaterThanOrEqualToThreshold
        treatMissingData: breaching

  limit-locker:
    name: BrokalysPinger-LimitLocker-${self:provider.stage}
    description: Lock pingers that have reached the monthly lockout threshold.
    timeout: 3
    handler: src/limit-locker.run
    package:
      patterns:
        - src/limit-locker.js
    events:
      - schedule:
          rate: rate(10 minutes)
    alarms:
      - name: limitLockerErrors
        description: 'Pinger: limit locker errors'
        namespace: 'AWS/Lambda'
        metric: Errors
        threshold: 1
        statistic: Sum
        period: 300 # 5 minutes
        evaluationPeriods: 1
        datapointsToAlarm: 1
        comparisonOperator: GreaterThanOrEqualToThreshold
        treatMissingData: notBreaching

  process-sqs:
    name: BrokalysPinger-ProcessSqs-${self:provider.stage}
    description: Process SQS to trigger pinger email sending.
    handler: src/process-sqs.run
    package:
      patterns:
        - src/process-sqs.js
        - src/test/process-sqs.json
    reservedConcurrency: 5
    events:
      - sqs:
          arn:
            Fn::GetAtt:
              - PingerQueue
              - Arn
          batchSize: 10

  process-summary-queue:
    name: BrokalysPinger-ProcessSummaryQueue-${self:provider.stage}
    description: Process pinger summary queue
    handler: src/process-summary-queue.run
    package:
      patterns:
        - src/process-summary-queue.js
    reservedConcurrency: 1
    events:
      - schedule:
          rate: cron(0 9 * * ? *)
          input:
            frequency: daily
      - schedule:
          rate: cron(0 9 ? * 2 *)
          input:
            frequency: weekly
      - schedule:
          rate: cron(0 9 1 * ? *)
          input:
            frequency: monthly
    dependsOn:
      - ChartBucket
    alarms:
      - name: processQueueErrors
        description: 'Pinger: summary queue processing errors'
        namespace: 'AWS/Lambda'
        metric: Errors
        threshold: 1
        statistic: Sum
        period: 300 # 5 minutes
        evaluationPeriods: 1
        datapointsToAlarm: 1
        comparisonOperator: GreaterThanOrEqualToThreshold
        treatMissingData: notBreaching

custom:
  emailSnsTopicName: ${self:service}-${self:provider.stage}-email
  emailSnsTopicArn: !Join
    - ':'
    - - 'arn:aws:sns'
      - !Ref AWS::Region
      - !Ref AWS::AccountId
      - !GetAtt EmailSnsTopic.TopicName
  alerts:
    stages:
      - prod
    nameTemplate: $[functionName]-$[metricName]
    topics:
      ok:
        topic: ${self:service}-${self:provider.stage}-ok
        notifications:
          - protocol: email
            endpoint: matiss@brokalys.com
      alarm:
        topic: ${self:service}-${self:provider.stage}-alarm
        notifications:
          - protocol: email
            endpoint: matiss@brokalys.com

  serverless-layers:
    packageManager: yarn
    dependenciesPath: ./package.json
    layersDeploymentBucket: brokalys-lambda-layers
    customInstallationCommand: yarn install --production --ignore-scripts

plugins:
  - serverless-plugin-aws-alerts
  - serverless-layers

resources:
  Resources:
    EmailSnsTopic:
      Type: AWS::SNS::Topic
      Properties:
        TopicName: ${self:custom.emailSnsTopicName}
    PingerQueue:
      Type: AWS::SQS::Queue
      Properties:
        QueueName: ${self:provider.stage}-pinger.fifo
        FifoQueue: true
    PingerQueuePolicy:
      Type: AWS::SQS::QueuePolicy
      Properties:
        PolicyDocument:
          Statement:
            - Sid: Allow-SNS-SendMessage
              Effect: Allow
              Principal:
                AWS: '*'
              Resource: !GetAtt PingerQueue.Arn
              Action:
                - SQS:SendMessage
              Condition:
                ArnEquals:
                  aws:SourceArn: !ImportValue PropertyCreationTopic-Arn-${self:provider.stage}
        Queues:
          - !Ref PingerQueue
    ChartBucket:
      Type: AWS::S3::Bucket
      Properties:
        BucketName: ${self:provider.stage}-pinger-charts
        AccessControl: PublicRead
        CorsConfiguration:
          CorsRules:
            - AllowedHeaders: ['*']
              AllowedMethods: [GET]
              AllowedOrigins: ['*']
              MaxAge: '3600'
    ChartBucketPolicy:
      Type: AWS::S3::BucketPolicy
      Properties:
        Bucket: !Ref ChartBucket
        PolicyDocument:
          Statement:
            - Sid: AllowPublicRead
              Effect: Allow
              Principal:
                AWS: '*'
              Action: s3:GetObject
              Resource: !Join
                - ''
                - - 'arn:aws:s3:::'
                  - !Ref ChartBucket
                  - /*
    NewPropertySubscription:
      Type: AWS::SNS::Subscription
      Properties:
        Endpoint: !GetAtt PingerQueue.Arn
        Protocol: sqs
        TopicArn: !ImportValue PropertyCreationTopic-Arn-${self:provider.stage}
        RawMessageDelivery: true