template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Transform: AWS::Serverless-2016-10-31
Description: partial batch response sample

Globals:
  Function:
    Timeout: 5
    Runtime: python3.11
    Tracing: Active
    Environment:
      Variables:
        POWERTOOLS_SERVICE_NAME: scoreboard
        LOG_LEVEL: INFO
        POWERTOOLS_METRICS_NAMESPACE: PowertoolsScoreboard

    Layers:
      - !Sub arn:aws:lambda:${AWS::Region}:017000801446:layer:AWSLambdaPowertoolsPythonV2:40 # v2.22.0

Resources:
  # RESOURCES FOR PRODUCER: EventBridge -> Lambda -> Kinesis
  ProducerFunction:
    Type: AWS::Serverless::Function
    Properties:
      Handler: app.lambda_handler
      CodeUri: producer
      FunctionName: scoreboard_producer
      Policies:
        # Lambda Destinations require additional permissions
        # to send failure records to DLQ from Kinesis/DynamoDB
        - Version: "2012-10-17"
          Statement:
            Effect: "Allow"
            Action:
              - kinesis:PutRecords
            Resource: !GetAtt ScoreBoardStream.Arn

  ScoreBoardStream:
    Type: AWS::Kinesis::Stream
    Properties:
      Name: kds_scoreboard
      ShardCount: 1
      StreamEncryption:
        EncryptionType: KMS
        KeyId: alias/aws/kinesis

  EventRuleScheduledProducer:
    Type: AWS::Events::Rule
    Properties:
      Name: scheduled-producer-scoreboard
      ScheduleExpression: rate(1 minute)
      State: ENABLED
      Targets:
        - Arn: !GetAtt ProducerFunction.Arn
          Id: !Ref ProducerFunction

  ProducerPermissionScheduler:
    Type: AWS::Lambda::Permission
    Properties:
      FunctionName: !Ref ProducerFunction
      Action: lambda:InvokeFunction
      Principal: events.amazonaws.com
      SourceArn: !GetAtt EventRuleScheduledProducer.Arn

  # RESOURCES FOR STREAM PROCESSOR: Kinesis -> Lambda -> DynamoDB
  StreamProcessorFunction:
    Type: AWS::Serverless::Function
    Properties:
      Handler: app.lambda_handler
      CodeUri: stream_processor
      FunctionName: scoreboard_stream_processor
      Timeout: 30
      Policies:
        # Lambda Destinations require additional permissions
        # to send failure records to DLQ from Kinesis/DynamoDB
        - Version: "2012-10-17"
          Statement:
            Effect: "Allow"
            Action:
              - sqs:GetQueueAttributes
              - sqs:GetQueueUrl
              - sqs:SendMessage
            Resource: !GetAtt DLQStreamProcessor.Arn
        - DynamoDBCrudPolicy:
            TableName: !Ref ScoreboardRawData
      Events:
        KinesisStream:
          Type: Kinesis
          Properties:
            Stream: !GetAtt ScoreBoardStream.Arn
            BatchSize: 100
            MaximumBatchingWindowInSeconds: 2
            StartingPosition: LATEST
            MaximumRetryAttempts: 2
            DestinationConfig:
              OnFailure:
                Destination: !GetAtt DLQStreamProcessor.Arn
            FunctionResponseTypes:
              - ReportBatchItemFailures

  StreamProcessorFunctionPermissionKinesisInvoke:
    Type: AWS::Lambda::Permission
    Properties:
      Action: lambda:InvokeFunction
      FunctionName: !GetAtt StreamProcessorFunction.Arn
      Principal: "kinesis.amazonaws.com"
      SourceArn: !GetAtt ScoreBoardStream.Arn

  DLQStreamProcessor:
    Type: AWS::SQS::Queue

  ScoreboardRawData:
    Type: AWS::DynamoDB::Table
    Properties:
      TableName: ScoreboardRawData
      AttributeDefinitions:
        - AttributeName: player_name
          AttributeType: S
        - AttributeName: timestamp
          AttributeType: S
      KeySchema:
        - AttributeName: player_name
          KeyType: HASH
        - AttributeName: timestamp
          KeyType: RANGE
      ProvisionedThroughput:
        ReadCapacityUnits: 5
        WriteCapacityUnits: 5
      TimeToLiveSpecification:
        AttributeName: expiration
        Enabled: true
      StreamSpecification:
        StreamViewType: NEW_IMAGE

  # RESOURCES FOR SUMMARIZE: DynamoDB -> Lambda -> DynamoDB
  SummarizeDataFunction:
    Type: AWS::Serverless::Function
    Properties:
      Handler: app.lambda_handler
      CodeUri: summarize
      FunctionName: scoreboard_summarize
      Timeout: 30
      Policies:
        - Version: "2012-10-17"
          Statement:
            Effect: "Allow"
            Action:
              - sqs:GetQueueAttributes
              - sqs:GetQueueUrl
              - sqs:SendMessage
            Resource: !GetAtt DLQSummarize.Arn
        - DynamoDBCrudPolicy:
            TableName: !Ref ScoreboardSummedUpData
      Events:
        DynamoDBStreamEvent:
          Type: DynamoDB
          Properties:
            Stream: !GetAtt ScoreboardRawData.StreamArn
            StartingPosition: LATEST
            BatchSize: 10
            MaximumBatchingWindowInSeconds: 2
            MaximumRetryAttempts: 2
            DestinationConfig:
              OnFailure:
                Destination: !GetAtt DLQSummarize.Arn
            FunctionResponseTypes:
              - ReportBatchItemFailures

  ScoreboardSummedUpData:
    Type: AWS::DynamoDB::Table
    Properties:
      TableName: ScoreboardSummedUpData
      AttributeDefinitions:
        - AttributeName: player_name
          AttributeType: S
      KeySchema:
        - AttributeName: player_name
          KeyType: HASH
      ProvisionedThroughput:
        ReadCapacityUnits: 5
        WriteCapacityUnits: 5

  DLQSummarize:
    Type: AWS::SQS::Queue

  # RESOURCES FOR RESTAPI: API Gateway -> Lambda -> DynamoDB

  RestApiScoreboard:
    Type: AWS::Serverless::Api
    Properties:
      StageName: prod
      ApiKeySourceType: HEADER
      Cors: # see CORS section
        AllowOrigin: "'*'" # NEVER in Prod ;)
        AllowHeaders: "'Content-Type,Authorization,X-Amz-Date,X-Api-Key'"
        MaxAge: "'300'"

  QueryFunction:
    Type: AWS::Serverless::Function
    Properties:
      Handler: app.lambda_handler
      CodeUri: score_api
      FunctionName: scoreboard_query
      Timeout: 5
      Policies:
        - DynamoDBReadPolicy:
            TableName: !Ref ScoreboardSummedUpData
      Events:
        GetResource:
          Type: Api
          Properties:
            RestApiId: !Ref RestApiScoreboard
            Path: /score
            Method: GET
            RequestParameters:
              - method.request.querystring.order:
                  Required: true
              - method.request.querystring.filter:
                  Required: false

  ResourcesMapParameter:
    Type: AWS::SSM::Parameter
    Properties:
        Name: "/service/scorecard/test/config"
        Type: String
        Description: Service Map with common resources used for integ/e2e testing
        Value: !Sub |
            {
                "KinesisStream": "kds_scoreboard",
                "SummarizedTable": "ScoreboardSummedUpData",
                "ScoreEndpoint": "https://${RestApiScoreboard}.execute-api.${AWS::Region}.amazonaws.com/prod/score"
            }
Outputs:
  ApiEndpoint:
    Description: API endpoint URL for the deployed application
    Value: !Sub "https://${RestApiScoreboard}.execute-api.${AWS::Region}.amazonaws.com/prod/score"