cfn-api-gateway-resource-tree
Version:
AWS CloudFormation Custom Lambda Resource | API Gateway Resource
155 lines (104 loc) • 6.76 kB
Markdown
# cfn-api-gateway-resource-tree
## Purpose
AWS CloudFormation does not support AWS API Gateway. This is a Lambda-backed custom resource to add [AWS API Gateway's Resource](http://docs.aws.amazon.com/apigateway/api-reference/resource/resource/) to CloudFormation. This module allows construction of an arbitrarily large tree of resources. The standalone module for a single resource is `cfn-gateway-resource` ([NPM](https://www.npmjs.com/package/cfn-api-gateway-resource) / [GitHub](https://www.github.com/andrew-templeton/cfn-api-gateway-resource)).
[This package on NPM](https://www.npmjs.com/package/cfn-api-gateway-resource)
[This package on GitHub](https://www.github.com/andrew-templeton/cfn-api-gateway-resource-tree)
## Implementation
This Lambda makes use of the Lambda-Backed CloudFormation Custom Resource flow module, `cfn-lambda` ([GitHub](https://github.com/andrew-templeton/cfn-lambda) / [NPM](https://www.npmjs.com/package/cfn-lambda)).
## Usage
See [`./example.template.json`](./example.template.json) for a sample CloudFormation template. The example uses `Condition` statements, `Parameters`, and dynamic `ServiceToken` generation fully.
"ResourceLogicalIdInResourcesObject": {
"Type": "Type": "Custom::ApiGatewayResourceTree",
"Properties": {
"ServiceToken": "arn:aws:lambda:<cfn-region-id>:<your-account-id>:function:<this-deployed-lambda-name>",
"ParentId": { // REQUIRED - can be any APIG Resource ID
"Fn::GetAtt": [ // This example uses the root of an API RestApi object.
"MyRestApi",
"RootResourceId"
]
},
"RestApiId": {
"Ref": "MyRestApiId" // REQUIRED 10 char alphanum ID for RestApi
},
"ChildResources": <A ChildResources Object>, // REQUIRED see struct below.
}
}
*CAUTION:* `ResourceTree` will destroy any other properties on the `ParentId` Resource.
*CAUTION:* Any modification to any property triggers a full replacement.
#### `ChildResources` Object
Recursively nestable tree structure definition for your API Gateway structure.
```
[
{
"PathPart": "pathwithoutchildren"
// Do not need to include ChildResources.
},
{
"PathPart": "pathwithchildren",
"ChildResources": <A ChildResourcesObject>
},
{
"PathPart": "{pathparam}",
"ChildResources": `<a ChildResourcesObject>`
}
]
```
#### `Ref` and `Fn::GetAtt`
`Fn::GetAtt` provides a key-value pair set for the ResourceId's of each path. These operate relative to the trees.
```
// This will return the `ResourceId` for the resource at relative path `/foo/{id}/bar`.
// The root is defined as the `ParentResourceId`'s Path on the `RestApi` object.
{"Fn::GetAtt": "/foo/{id}/bar"}
```
`Ref` returns a value only used for tracking internal state:
```
[
<RestApiId>,
<ParentResourceId>,
SHA256(JSON.stringify(<ChildResources>))
].join('---')
```
#### Prerequisites for the Sample Template
While the resource works on its own, the [`./example.template.json`](./example.template.json) requires use of some more custom resources...:
1. `Custom::ApiGatewayRestApi` ([GitHub](https://github.com/andrew-templeton/cfn-api-gateway-restapi) / [NPM](https://www.npmjs.com/package/cfn-api-gateway-restapi))
2. `Custom::ApiGatewayMethod` ([GitHub](https://github.com/andrew-templeton/cfn-api-gateway-method) / [NPM](https://www.npmjs.com/package/cfn-api-gateway-method))
3. `Custom::ApiGatewayMethodResponse` ([GitHub](https://github.com/andrew-templeton/cfn-api-gateway-method-response) / [NPM](https://www.npmjs.com/package/cfn-api-gateway-method-response))
4. `Custom::ApiGatewayIntegration` ([GitHub](https://github.com/andrew-templeton/cfn-api-gateway-integration) / [NPM](https://www.npmjs.com/package/cfn-api-gateway-integration))
5. `Custom::ApiGatewayIntegrationResponse` ([GitHub](https://github.com/andrew-templeton/cfn-api-gateway-integration-response) / [NPM](https://www.npmjs.com/package/cfn-api-gateway-integration-response))
6. `Custom::ApiGatewayDeployment` ([GitHub](https://github.com/andrew-templeton/cfn-api-gateway-deployment) / [NPM](https://www.npmjs.com/package/cfn-api-gateway-deployment))
## Installation of the Resource Service Lambda
#### Using the Provided Instant Install Script
The way that takes 10 seconds...
# Have aws CLI installed + permissions for IAM and Lamdba
$ npm run cfn-lambda-deploy
You will have this resource installed in every supported Region globally!
#### Using the AWS Console
... And the way more difficult way.
*IMPORTANT*: With this method, you must install this custom service Lambda in each AWS Region in which you want CloudFormation to be able to access the `ApiGatewayResourceTree` custom resource!
1. Go to the AWS Lambda Console Create Function view:
- [`us-east-1` / N. Virginia](https://console.aws.amazon.com/lambda/home?region=us-east-1#/create?step=2)
- [`us-west-2` / Oregon](https://console.aws.amazon.com/lambda/home?region=us-west-2#/create?step=2)
- [`eu-west-1` / Ireland](https://console.aws.amazon.com/lambda/home?region=eu-west-1#/create?step=2)
- [`ap-northeast-1` / Tokyo](https://console.aws.amazon.com/lambda/home?region=ap-northeast-1#/create?step=2)
2. Zip this repository into `/tmp/ApiGatewayResourceTree.zip`
`$ cd $REPO_ROOT && zip -r /tmp/ApiGatewayResourceTree.zip;`
3. Enter a name in the Name blank. I suggest: `CfnLambdaResouce-ApiGatewayResourceTree`
4. Enter a Description (optional).
5. Toggle Code Entry Type to "Upload a .ZIP file"
6. Click "Upload", navigate to and select `/tmp/ApiGatewayResourceTree.zip`
7. Set the Timeout under Advanced Settings to 10 sec
8. Click the Role dropdown then click "Basic Execution Role". This will pop out a new window.
9. Select IAM Role, then select option "Create a new IAM Role"
10. Name the role `lambda_cfn_api_gateway_resource` (or something descriptive)
11. Click "View Policy Document", click "Edit" on the right, then hit "OK"
12. Copy and paste the [`./execution-policy.json`](./execution-policy.json) document.
13. Hit "Allow". The window will close. Go back to the first window if you are not already there.
14. Click "Create Function". Finally, done! Now go to [Usage](#usage) or see [the example template](./example.template.json). Next time, stick to the instant deploy script.
#### Miscellaneous
##### Collaboration & Requests
Submit pull requests or Tweet [@ayetempleton](https://twitter.com/ayetempleton) if you want to get involved with roadmap as well, or if you want to do this for a living :)
##### License
[MIT](./License)
##### Want More CloudFormation or API Gateway?
Work is (extremely) active, published here:
[Andrew's NPM Account](https://www.npmjs.com/~andrew-templeton)