serverless.yml

service: spotify-f2p-app
frameworkVersion: "3"

provider:
  name: aws
  region: eu-central-1
  stage: dev
  runtime: nodejs14.x
  environment:
    BITLY_SECRET: ${env:BITLY_SECRET}
    FRONTEND_URL: ${env:FRONTEND_URL}
    BACKEND_URL: ${env:BACKEND_URL}
    SPOTIFY_CLIENT_SECRET: ${env:SPOTIFY_CLIENT_SECRET}
    SPOTIFY_CLIENT_ID: ${env:SPOTIFY_CLIENT_ID}

plugins:
  - serverless-iam-roles-per-function
  - serverless-s3-deploy
  - serverless-dynamodb
  - serverless-offline

custom:
  stage: ${opt:stage, self:provider.stage}

  config:
    table: ${self:custom.stage}-f2p-table
    bucket: ${self:custom.stage}-f2p-frontend
    sync: ${self:service}-${self:custom.stage}-sync

  assets:
    targets:
      - bucket: ${self:custom.config.bucket}
        files:
          - source: ./packages/frontend/build
            globs: "**/*"

  dynamodb:
    stages:
      - dev
    inMemory: false
    start:
      port: 8000
      seed: true
      migrate: true
      sharedDb: true

package:
  individually: true
  patterns:
    - "!./**"

functions:
  backend:
    handler: ./packages/backend/build/handler.handle
    package:
      patterns:
        - "./packages/backend/build/handler.js"
    events:
      - http:
          path: /backend/{proxy+}
          method: get
          cors: true
    iamRoleStatements:
      - Effect: Allow
        Action:
          - dynamodb:GetItem
          - dynamodb:PutItem
          - dynamodb:UpdateItem
        Resource:
          - "arn:aws:dynamodb:${opt:region, self:provider.region}:*:table/${self:custom.config.table}"
          - "arn:aws:dynamodb:${opt:region, self:provider.region}:*:table/${self:custom.config.table}/index/*"
      - Effect: Allow
        Action:
          - lambda:InvokeFunction
        Resource:
          - "arn:aws:lambda:${opt:region, self:provider.region}:*:function:${self:custom.config.sync}"
    environment:
      TABLE_NAME: ${self:custom.config.table}
      SYNC_LAMBDA: ${self:custom.config.sync}

  sync:
    handler: ./packages/sync/build/handler.handle
    package:
      patterns:
        - "./packages/sync/build/handler.js"
    timeout: 900
    iamRoleStatements:
      - Effect: Allow
        Action:
          - dynamodb:GetItem
          - dynamodb:UpdateItem
        Resource:
          - "arn:aws:dynamodb:${opt:region, self:provider.region}:*:table/${self:custom.config.table}"
          - "arn:aws:dynamodb:${opt:region, self:provider.region}:*:table/${self:custom.config.table}/index/*"
    environment:
      TABLE_NAME: ${self:custom.config.table}

resources:
  Resources:
    Table:
      Type: "AWS::DynamoDB::Table"
      Properties:
        AttributeDefinitions:
          - AttributeName: id
            AttributeType: S
        KeySchema:
          - AttributeName: id
            KeyType: HASH
        BillingMode: PAY_PER_REQUEST
        TableName: ${self:custom.config.table}

    WebsiteBucket:
      Type: AWS::S3::Bucket
      Properties:
        AccessControl: PublicRead
        BucketName: ${self:custom.config.bucket}
        WebsiteConfiguration:
          ErrorDocument: "index.html"
          IndexDocument: "index.html"

    WebsiteBucketPolicy:
      Type: AWS::S3::BucketPolicy
      Properties:
        Bucket: !Ref WebsiteBucket
        PolicyDocument:
          Version: "2012-10-17"
          Statement:
            - Effect: "Allow"
              Action: "s3:GetObject"
              Principal: "*"
              Resource: !Sub "${WebsiteBucket.Arn}/*"