vault-core-dynamodb.json

{
"AWSTemplateFormatVersion" : "2010-09-09",
"Description" : "Hashicorp Vault Reference: Core DynamoDB: This template creates DynamoDB tables to run Hashicorp Vault.",

	"Metadata" :
	{
	},

	"Parameters" :
	{

      "VaultChildStackName":
      {
        "Description": "Name of the stack containing the vault security",
        "Type": "String",
        "Default": "Hashicorp-Vault-Reference-Security"
      }
  
  },

	"Mappings" :
	{
  },

	"Conditions" :
	{
  },

	"Resources" :
  {
    
	    "NetworkInfo":
	    {
	      "Type": "Custom::NetworkInfo",
	      "Properties":
	      {
	        "ServiceToken": {"Fn::GetAtt": ["LookupStackOutputs","Arn"]},
	        "StackName": {"Ref": "VaultChildStackName"}
	      }
	    },
	    
	    "LookupStackOutputs":
		  {
		        "Type": "AWS::Lambda::Function",
		        "Properties": {
		            "Handler": "index.handler",
		            "Role": {
		            "Fn::GetAtt": [
		                "LambdaExecutionRole",
		                "Arn"
		            ]
		            },
		            "Code": {
		            "ZipFile": {
		                "Fn::Join": [
		                "\n",
		                [
		                    "var response = require('cfn-response');",
		                    "exports.handler = function(event, context) {",
		                    "    console.log('REQUEST RECEIVED:\\n', JSON.stringify(event));",
		                    "    if (event.RequestType == 'Delete') {",
		                    "        response.send(event, context, response.SUCCESS);",
		                    "        return;",
		                    "    }",
		                    "    var stackName = event.ResourceProperties.StackName;",
		                    "    var responseData = {};",
		                    "    if (stackName) {",
		                    "        var aws = require('aws-sdk');",
		                    "        var cfn = new aws.CloudFormation();",
		                    "        cfn.describeStacks({StackName: stackName}, function(err, data) {",
		                    "            if (err) {",
		                    "                responseData = {Error: 'DescribeStacks call failed'};",
		                    "                console.log(responseData.Error + ':\\n', err);",
		                    "                response.send(event, context, response.FAILED, responseData);",
		                    "            }",
		                    "            else {",
		                    "                data.Stacks[0].Outputs.forEach(function(output) {",
		                    "                    responseData[output.OutputKey] = output.OutputValue.toLowerCase();",
		                    "                });",
		                    "                response.send(event, context, response.SUCCESS, responseData);",
		                    "            }",
		                    "        });",
		                    "    } else {",
		                    "        responseData = {Error: 'Stack name not specified'};",
		                    "        console.log(responseData.Error);",
		                    "        response.send(event, context, response.FAILED, responseData);",
		                    "    }",
		                    "};"
		                ]
		                ]
		            }
		            },
		            "Runtime": "nodejs4.3",
		            "Timeout": "30"
		        }
		        },
        
        
		        "LambdaExecutionRole": {
		        "Type": "AWS::IAM::Role",
		        "Properties": {
		            "AssumeRolePolicyDocument": {
		            "Version": "2012-10-17",
		            "Statement": [
		                {
		                "Effect": "Allow",
		                "Principal": {
		                    "Service": [
		                    "lambda.amazonaws.com"
		                    ]
		                },
		                "Action": [
		                    "sts:AssumeRole"
		                ]
		                }
		            ]
		            },
		            "Path": "/",
		            "Policies": [
		            {
		                "PolicyName": "root",
		                "PolicyDocument": {
		                "Version": "2012-10-17",
		                "Statement": [
		                    {
		                    "Effect": "Allow",
		                    "Action": [
		                        "logs:CreateLogGroup",
		                        "logs:CreateLogStream",
		                        "logs:PutLogEvents"
		                    ],
		                    "Resource": "arn:aws:logs:*:*:*"
		                    },
		                    {
		                    "Effect": "Allow",
		                    "Action": [
		                        "cloudformation:DescribeStacks",
		                        "ec2:DescribeImages"
		                    ],
		                    "Resource": "*"
		                    }
		                ]
		                }
		            }
		            ]
		        }
		  },
		  
		  "VaultDynamoDBTable" :
		  {
        "Type" : "AWS::DynamoDB::Table",
        "Properties" :
        {
          "TableName" : "vault-dynamodb-backend"
        }
      }
      
  },

	"Outputs" :
	{
  }
}