AWS-Logger-Compressor-CDK/app.py at master · Asafbs94/AWS-Logger-Compressor-CDK · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
from constructs import Construct
from aws_cdk import App, Stack,Duration
from aws_cdk import aws_iam as iam
from aws_cdk import aws_lambda as _lambda
from aws_cdk import aws_apigateway as apigateway
from aws_cdk import aws_s3 as s3
import os
import aws_cdk as cdk
from aws_assignment.aws_assignment_stack import AwsAssignmentStack

class LogReceiverStack(Stack):

    def __init__(self, scope: Construct, id: str, **kwargs) -> None:
        super().__init__(scope, id, **kwargs)

        # Lambda function to handle incoming requests
        log_receiver_lambda = _lambda.Function(
            self, "LogReceiverLambda",
            runtime=_lambda.Runtime.PYTHON_3_8,
            handler="lambda_handler.lambda_handler",
            code=_lambda.Code.from_asset(r"lambda"),
            timeout=Duration.seconds(30)
        )

        # Grant necessary permissions to Lambda function
        log_receiver_lambda.add_to_role_policy(iam.PolicyStatement(
            actions=["logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents"],
            resources=["*"]
        ))
        # Create the first S3 bucket for uncompressed log files
        uncompressed_bucket = s3.Bucket(self, "UncompressedLogBucket")
        uncompressed_bucket.grant_put(log_receiver_lambda)

        # Create the second S3 bucket for compressed log files
        compressed_bucket = s3.Bucket(self, "CompressedLogBucket")
        compressed_bucket.grant_put(log_receiver_lambda)
        # Update Lambda function environment variables
        log_receiver_lambda.add_environment("UNCOMPRESSED_S3_BUCKET_NAME", uncompressed_bucket.bucket_name)
        log_receiver_lambda.add_environment("COMPRESSED_S3_BUCKET_NAME", compressed_bucket.bucket_name)


        # Create the CompressLambda function
        CompressLambda = _lambda.Function(
            self, "CompressLambda",
            runtime=_lambda.Runtime.PYTHON_3_8,
            function_name="CompressLambda922D65A6",
            handler="lambda_handler.compress_lambda_handler",
            code=_lambda.Code.from_asset(r"lambda"),
            timeout=Duration.seconds(30)
        )
        compress_lambda_arn = CompressLambda.function_arn
          # Grant necessary permissions to CompressLambda function
        CompressLambda.add_to_role_policy(iam.PolicyStatement(
            actions=["logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents"],
            resources=["*"]
        ))
        log_receiver_lambda.add_to_role_policy(iam.PolicyStatement(
            actions=["lambda:InvokeFunction"],
            resources=[compress_lambda_arn]
         ))


        compressed_bucket.grant_put(CompressLambda)  # Grant permission to put objects in the compressed bucket

        # API Gateway
        api = apigateway.RestApi(
            self, "LogReceiverApi",
            rest_api_name="LogReceiverApi",
            description="API to receive log file content"
        )

        # Lambda integration with API Gateway
        integration = apigateway.LambdaIntegration(
            log_receiver_lambda,
            proxy=True
        )

        # API Gateway resource and method
        api.root.add_method("POST", integration)

app = cdk.App()
LogReceiverStack(app, "LogReceiverStack")
app.synth()