serverless.yml

service: meraki-activity-log
custom:
  pythonRequirements:
    zip: false

provider:
  name: aws
  runtime: python3.7
  stage: ${opt:stage,'dev'}
  region: us-west-2
  environment:
    ENVIRONMENT: ${self:provider.stage}
    REGION: ${opt:region, self:provider.region}
    CONFIGFILE: config.${self:provider.stage}.yml
    FIREHOSE_DELIVERY_STREAM: ${file(config.${self:provider.stage}.yml):FIREHOSE_DELIVERY_STREAM}
    MERAKI_API_KEY_NAME: ${file(config.${self:provider.stage}.yml):MERAKI_API_KEY_NAME}
    MERAKI_PRODUCT_TYPES: ${file(config.${self:provider.stage}.yml):MERAKI_PRODUCT_TYPES}
  iamRoleStatements:
    - Effect: Allow
      Action:
        - ssm:*
      Resource:
        - "arn:aws:ssm:${opt:region, self:provider.region}:*:parameter/meraki-events/lastquerytime"
    - Effect: Allow
      Action:
        - secretsmanager:*
      Resource:
        - "arn:aws:secretsmanager:${opt:region, self:provider.region}:*:secret:${self:provider.environment.MERAKI_API_KEY_NAME}*"
    - Effect: Allow
      Action:
        - firehose:PutRecord
        - firehose:PutRecordBatch
      Resource:
        - "arn:aws:firehose:${opt:region, self:provider.region}:*:deliverystream/${self:provider.environment.FIREHOSE_DELIVERY_STREAM}"

functions:
  meraki-activity:
    handler: meraki-activity.handler
    timeout: 600
    reservedConcurrency: 1
    events:
      - schedule: rate(5 minutes)
package:
  exclude:
    - node_modules/**
    - .pytest_cache/**

plugins:
  - serverless-python-requirements