publish_github.yml

publish_github.yml

  publish_github:
    handler: publish_to_github.handler
    runtime: provided
    memorySize: 2048
    timeout: 600
    environment:
      GITHUB_REPO: ${self:custom.githubRepo}
      KEK_PARAMETER: ${self:custom.kekParameter}
      S3_KEYS: ${self:custom.s3KeysName}
      BUCKET_NAME: ${self:custom.s3LayersName}
    iamRoleStatementsName: ${self:provider.stage}-publish_github
    iamRoleStatements:
      - Effect: Allow
        Action:
        - s3:GetObject
        Resource: ${self:custom.s3LayersArn}/*
      - Effect: Allow
        Action:
        - s3:ListBucket
        Resource: ${self:custom.s3LayersArn}
      - Effect: Allow
        Action:
          - ssm:GetParameters
          - ssm:GetParameter
        Resource:
          Fn::Join:
            - ":"
            - - arn:aws:ssm
              - ${self:provider.region}
              - Ref: AWS::AccountId
              - parameter${self:custom.kekParameter}
      - Effect: Allow
        Action:
        - s3:GetObject
        Resource: ${self:custom.s3KeysArn}/*
    layers:
      - arn:aws:lambda:${self:provider.region}:744348701589:layer:bash:8