cloudformation-template.json

{
	"Description": "Human Made Tachyon Image Server with Lambda v2.1.9",
	"Parameters": {
		"NodeTachyonBucket" : {
			"Type" : "String",
			"Description" : "The S3 Bucket containing the Lambda code ZIP",
			"MinLength" : 1
		},
		"NodeTachyonLambdaPath" : {
			"Type" : "String",
			"Description" : "The path to the Lambda code ZIP",
			"Default" : "lambda/node-tachyon/lambda-nodejs6.10.zip"
		},
		"SSLACMCertificateARN" : {
			"Type" : "String",
			"Description" : "SSL ACM Certificate ARN.",
			"MinLength" : 1
		},
		"Domains" : {
			"Type" : "CommaDelimitedList",
			"Description" : "Domain Name(s)"
		},
		"UploadsS3Bucket" : {
			"Type" : "String",
			"Description" : "The S3 Bucket to resize images from.",
			"MinLength" : 1
		},
		"WebPDetectionLambdaFunctionARN" : {
			"Type" : "String",
			"Description" : "ARN for a WebP detection lambda@edge function. Must be versioned."
		},
		"LambdaFunctionMemoryLimit" : {
			"Type" : "Number",
			"Description" : "The amount of memory the AWS Lambda function will get.",
			"Default" : 256
		},
		"PrivateS3Bucket": {
			"Type" : "String",
			"Description" : "Wether or not the S3 Bucket will be private.",
			"AllowedValues" : ["false", "true"],
			"Default" : "false"
		}
	},
	"Conditions" : {
		"UseWebPDetectionFunction" : {"Fn::Not" : [{"Fn::Equals" : [{"Ref" : "WebPDetectionLambdaFunctionARN"}, ""]} ] }
	},
	"Resources" : {
		"ApiGatewayRestApi": {
			"Type": "AWS::ApiGateway::RestApi",
			"Properties": {
				"Name" : "Tachyon",
				"BinaryMediaTypes": [ "image/*" ]
			}
		},
		"ApiGatewayMethod": {
			"Type": "AWS::ApiGateway::Method",
			"Properties": {
				"RestApiId": {"Ref":"ApiGatewayRestApi"},
				"ResourceId": {"Ref":"ApiGatewayResource"},
				"HttpMethod": "GET",
				"AuthorizationType": "NONE",
				"Integration": {
					"Type": "AWS_PROXY",
					"IntegrationHttpMethod": "POST",
					"ContentHandling": "CONVERT_TO_BINARY",
					"Uri": { "Fn::Sub":"arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${LambdaFunction.Arn}/invocations"}
				}
			}
		},
		"ApiGatewayResource": {
			"Type": "AWS::ApiGateway::Resource",
			"Properties": {
				"RestApiId": { "Ref":"ApiGatewayRestApi"},
				"ParentId": { "Fn::GetAtt" : [
					"ApiGatewayRestApi",
					"RootResourceId"
				]},
				"PathPart": "{proxy+}"
			}
		},
		"ApiGatewayDeployment": {
			"Type": "AWS::ApiGateway::Deployment",
			"Properties": {
				"RestApiId": { "Ref": "ApiGatewayRestApi" },
				"Description": "Production",
				"StageName": "Prod"
			},
			"DependsOn":"ApiGatewayMethod"
		},
		"LambdaInvokePermission": {
			"Type": "AWS::Lambda::Permission",
			"Properties": {
				"FunctionName" : { "Fn::GetAtt" : ["LambdaFunction", "Arn"] },
				"Action": "lambda:InvokeFunction",
				"Principal": "apigateway.amazonaws.com",
				"SourceArn": {
					"Fn::Join": [
						"",
						[
							"arn:aws:execute-api:",
							{"Ref": "AWS::Region"},
							":",
							{"Ref": "AWS::AccountId"},
							":",
							{"Ref": "ApiGatewayRestApi"},
							"/*"
						]
					]
				}
			}
		},
		"LambdaFunctionIAMRole" : {
			"Type": "AWS::IAM::Role",
			"Properties": {
				"AssumeRolePolicyDocument": {
					"Version": "2012-10-17",
					"Statement": [
						{
							"Sid": "",
							"Effect": "Allow",
							"Principal": {
								"Service": "lambda.amazonaws.com"
							},
							"Action": "sts:AssumeRole"
						}
					]
				},
				"Path": "/",
				"Policies": [ {
					"PolicyName": "LambdaFunctionIAMRole",
					"PolicyDocument" : {
						"Version": "2012-10-17",
						"Statement": [
							{
								"Effect": "Allow",
								"Action": [
									"s3:GetObject"
								],
								"Resource": [
									{"Fn::Sub" : "arn:aws:s3:::${UploadsS3Bucket}/*"}
								]
							},
							{
								"Effect": "Allow",
								"Action": [
									"logs:CreateLogGroup",
									"logs:CreateLogStream",
									"logs:PutLogEvents",
									"logs:DescribeLogStreams"
								],
								"Resource": [
									"arn:aws:logs:*:*:*"
								]
							}
						]
					}
				} ]
			}
		},
		"LambdaFunction": {
			"Type": "AWS::Lambda::Function",
			"Properties": {
				"Role": { "Fn::GetAtt" : [ "LambdaFunctionIAMRole", "Arn"] },
				"Code": {
					"S3Bucket": { "Ref" : "NodeTachyonBucket" },
					"S3Key": { "Ref" : "NodeTachyonLambdaPath" }
				},
				"Runtime": "nodejs10.x",
				"Timeout": "60",
				"MemorySize": { "Ref": "LambdaFunctionMemoryLimit" },
				"Handler": "lambda-handler.handler",
				"Environment" : {
					"Variables" : {
						"S3_BUCKET" : { "Ref": "UploadsS3Bucket" },
						"S3_REGION": {"Ref": "AWS::Region"},
						"S3_AUTHENTICATED_REQUEST": {"Ref": "PrivateS3Bucket"}
					}
				}
			}
		},
		"CloudFrontDistribution" : {
			"Type" : "AWS::CloudFront::Distribution",
			"Properties" : {
				"DistributionConfig" : {
					"Aliases": { "Ref" : "Domains" },
					"DefaultCacheBehavior": {
						"AllowedMethods" : [ "HEAD", "GET" ],
						"CachedMethods" : [ "HEAD", "GET" ],
						"ForwardedValues" : {
							"Cookies" : {
								"Forward" : "none"
							},
							"Headers" : [ "X-WebP" ],
							"QueryString" : "true"
						},
						"MinTTL" : 0,
						"DefaultTTL": 63115201,
						"MaxTTL": 63115202,
						"TargetOriginId" : { "Ref" : "AWS::StackName" },
						"ViewerProtocolPolicy" : "allow-all",
						"LambdaFunctionAssociations" : { "Fn::If" : [
							"UseWebPDetectionFunction",
							[
								{
									"EventType" : "viewer-request",
									"LambdaFunctionARN" : { "Ref" : "WebPDetectionLambdaFunctionARN" }
								}
							],
							[]
							]
						}
					},
					"CacheBehaviors" : [
						{
							"AllowedMethods" : [ "GET", "HEAD" ],
							"CachedMethods" : [ "HEAD", "GET" ],
							"ForwardedValues" : {
								"QueryString" : "true",
								"Headers" : [ "Origin", "Access-Control-Request-Method", "Access-Control-Request-Headers" ]
							},
							"PathPattern" : "*.gif",
							"MinTTL" : 0,
							"DefaultTTL": 63115201,
							"MaxTTL": 63115202,
							"TargetOriginId" : "S3-Proxy",
							"ViewerProtocolPolicy" : "allow-all"
						}
					],
					"Enabled" : true,
					"Origins" : [
						{
							"CustomOriginConfig" : {
								"OriginProtocolPolicy" : "https-only"
							},
							"DomainName" : { "Fn::Sub":"${ApiGatewayRestApi}.execute-api.${AWS::Region}.amazonaws.com"},
							"OriginPath" : "/Prod",
							"Id" : { "Ref" : "AWS::StackName" },
							"OriginCustomHeaders" : [
								{
									"HeaderName" : "Accept",
									"HeaderValue" : "image/*"
								}
							],
							"Id" : { "Ref" : "AWS::StackName" }
						},
						{
							"DomainName" : { "Fn::Join" : [ "", [
								{ "Ref" : "UploadsS3Bucket" }, ".s3.amazonaws.com"
							] ] },
							"Id" : "S3-Proxy",
							"S3OriginConfig" : {

							}
						}
					],
					"CustomErrorResponses": [
						{
							"ErrorCachingMinTTL" : 10,
							"ErrorCode" : 400
						},
						{
							"ErrorCachingMinTTL" : 300,
							"ErrorCode" : 404
						},
						{
							"ErrorCachingMinTTL" : 10,
							"ErrorCode" : 500
						},
						{
							"ErrorCachingMinTTL" : 10,
							"ErrorCode" : 501
						},
						{
							"ErrorCachingMinTTL" : 10,
							"ErrorCode" : 502
						},
						{
							"ErrorCachingMinTTL" : 10,
							"ErrorCode" : 503
						},
						{
							"ErrorCachingMinTTL" : 10,
							"ErrorCode" : 504
						}
					],
					"ViewerCertificate" : {
						"AcmCertificateArn" : { "Ref" : "SSLACMCertificateARN" },
						"SslSupportMethod" : "sni-only",
						"MinimumProtocolVersion" : "TLSv1"
					},
					"HttpVersion" : "http2"
				}
			}
		}
	},
	"Outputs": {
	}
}