template.yml

AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: Sends money to ILP addresses
Parameters:
  ILPSecurityGroup:
    Type: String
    Description: The security group that the lambda should be part of to access the ILP connector
  ILPSubnet:
    Type: String
    Description: The subnet that the lambda should have to access the ILP connector
  MongoUri:
    Type: AWS::SSM::Parameter::Value<String>
    Default: '/api/db/mongo_uri'
  IlpAddress:
    Type: AWS::SSM::Parameter::Value<String>
    Default: '/lambda/ilp/internal_lb_address'
Resources:
  ILPPayoutSenderDeadLetterQueue:
    Type: AWS::SQS::Queue
  ILPPayoutSenderQueue:
    Type: AWS::SQS::Queue
    Properties:
      QueueName: ilp-payout-sender-input
      RedrivePolicy:
        deadLetterTargetArn: !GetAtt ILPPayoutSenderDeadLetterQueue.Arn
        maxReceiveCount: 3
      VisibilityTimeout: 960
  ILPPayoutSenderFunction:
    Type: AWS::Serverless::Function
    Properties:
      Timeout: 900
      Handler: index.handler
      Runtime: nodejs12.x
      CodeUri: ./
      VpcConfig:
        SecurityGroupIds:
          - !Ref ILPSecurityGroup
        SubnetIds:
          - !Ref ILPSubnet
      Events:
        ILPPayoutSenderEvent:
          Type: SQS
          Properties:
            Queue: !GetAtt ILPPayoutSenderQueue.Arn
            BatchSize: 1
      Policies:
        - AmazonSQSFullAccess
        - AmazonDynamoDBFullAccess
        - AWSLambdaVPCAccessExecutionRole
        - Statement:
          - Effect: Allow
            Action:
              - 'kms:Decrypt'
              - 'kms:ListKeys'
            Resource: '*'
      Environment:
        Variables:
          MONGO_URI: !Ref MongoUri
          ILP_CONNECTOR_ADDRESS: !Ref IlpAddress