service: fpa-onboarding

frameworkVersion: '3'

provider:
  name: aws
  runtime: python3.11
  ecr:
    images:
      fpa-onboardings:
        path: ./function/task
        platform: linux/amd64

functions:
  handler:
    image:
      name: fpa-onboardings
    role: FPAOnboardingServerLessRole
    timeout: 300

resources:
 Resources:
  FPAOnboardingServerLessRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: fpa-onboarding-serverless-role
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service:
                - lambda.amazonaws.com
            Action:
              - sts:AssumeRole
      Policies:
        - PolicyName: FPA-Onboarding-CloudWatchLogsAccess
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                    - logs:CreateLogGroup
                    - logs:CreateLogStream
                    - logs:PutLogEvents
                Resource: "arn:aws:logs:*:*:*"
        - PolicyName: FPA-Onboarding-S3Access
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                    - s3:*
                Resource: "*"
        - PolicyName: FPA-Onboarding-events
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                    - events:*
                Resource: "*"
        - PolicyName: FPA-Onboarding-IAMPolicies
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                    - iam:TagRole
                Resource: "*"
        - PolicyName: FPA-Onboarding-SMAccess
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                    - ssm:GetParameter
                    - ssm:GetParameters
                    - ssm:GetParametersByPath
                Resource: "*"
        - PolicyName: FPA-Onboarding-SQSFullAccess
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                    - sqs:*
                Resource: "*"
        - PolicyName: FPA-Onboarding-SecretManagerAccess
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                    - secretsmanager:GetSecretValue
                    - secretsmanager:PutSecretValue
                Resource: "*"