template.yaml

AWSTemplateFormatVersion: '2010-09-09'
Transform: 'AWS::Serverless-2016-10-31'
Description: SAM Serverless App to Track scaf runtime and produce a leaderboard.

Resources:
  LeaderboardApi:
    Type: AWS::Serverless::Api
    Properties:
      StageName: Prod
      Auth:
        DefaultAuthorizer: PassageTokenAuthorizer
        Authorizers:
          PassageTokenAuthorizer:
            FunctionArn: !GetAtt PassageAuthFunction.Arn
  PassageAuthFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./src
      Handler: authorizer.handler
      Runtime: python3.12
      Timeout: 10
      Environment:
        Variables:
          PASSAGE_APP_ID: dummy
          PASSAGE_API_KEY: dummy
  ReportFunction:
    Type: AWS::Serverless::Function
    Properties:
      Handler: app.report
      Runtime: python3.12
      CodeUri: ./src
      MemorySize: 128
      Timeout: 10
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref Sessions
      Environment:
        Variables:
          SESSIONS_TABLE: !Ref Sessions
          DYNAMODB_ENDPOINT: !Ref DynamoDbEndpoint
      Events:
        AuthenticatedApi:
          Type: Api
          Properties:
            Path: /report
            Method: post
            RestApiId: !Ref LeaderboardApi
  LeaderboardFunction:
    Type: AWS::Serverless::Function
    Properties:
      Handler: app.leaderboard
      Runtime: python3.12
      CodeUri: ./src
      MemorySize: 128
      Timeout: 10
      Policies:
        - DynamoDBReadPolicy:
            TableName: !Ref Sessions
      Environment:
        Variables:
          SESSIONS_TABLE: !Ref Sessions
          DYNAMODB_ENDPOINT: !Ref DynamoDbEndpoint
      Events:
        PublicApi:
          Type: Api
          Properties:
            Path: /leaderboard
            Method: get
            RestApiId: !Ref LeaderboardApi
            Auth:
              Authorizer: NONE
  Sessions:
    Type: AWS::DynamoDB::Table
    Properties:
      TableName: Sessions
      AttributeDefinitions:
        - AttributeName: user_name
          AttributeType: S
        - AttributeName: sessionid
          AttributeType: S
        - AttributeName: status
          AttributeType: S
        - AttributeName: duration
          AttributeType: N
      KeySchema:
        - AttributeName: user_name
          KeyType: HASH
        - AttributeName: sessionid
          KeyType: RANGE
      BillingMode: PROVISIONED
      ProvisionedThroughput:
        ReadCapacityUnits: 5
        WriteCapacityUnits: 5
      GlobalSecondaryIndexes:
        - IndexName: LeaderboardGSI
          KeySchema:
            - AttributeName: status
              KeyType: HASH
            - AttributeName: duration
              KeyType: RANGE
          Projection:
            ProjectionType: ALL
          ProvisionedThroughput:
            ReadCapacityUnits: 5
            WriteCapacityUnits: 5

Parameters:
  DynamoDbEndpoint:
    Type: String

Outputs:
  LeaderboardApiUrl:
    Description: "API Gateway endpoint URL"
    Value: !Sub "https://${LeaderboardApi}.execute-api.${AWS::Region}.amazonaws.com/Prod/"
  TableName:
    Description: DynamoDB Table Name
    Value: !Ref Sessions