Cloudformation - Create ApiGateway resources (#3659)
* Cloudformation - Create ApiGateway resources * Cleanup * Linting
This commit is contained in:
Bert Blommers
GitHub
parent
2f50f9cb24
commit
f64532ed40
6 changed files with 541 additions and 32 deletions
350
tests/test_apigateway/test_apigateway_cloudformation.py
Normal file
350
tests/test_apigateway/test_apigateway_cloudformation.py
Normal file
|
|
@ -0,0 +1,350 @@
|
|||
import boto3
|
||||
import json
|
||||
import sure # noqa
|
||||
|
||||
from moto import mock_lambda, mock_cloudformation, mock_apigateway, mock_iam, mock_logs
|
||||
from string import Template
|
||||
|
||||
template = """{
|
||||
"AWSTemplateFormatVersion": "2010-09-09",
|
||||
"Description": "The AWS CloudFormation template for this Serverless application",
|
||||
"Resources": {
|
||||
"ServerlessDeploymentBucket": {
|
||||
"Type": "AWS::S3::Bucket"
|
||||
},
|
||||
"HelloLogGroup": {
|
||||
"Type": "AWS::Logs::LogGroup",
|
||||
"Properties": {
|
||||
"LogGroupName": "/aws/lambda/timeseries-service-dev-hello"
|
||||
}
|
||||
},
|
||||
"IamRoleLambdaExecution": {
|
||||
"Type": "AWS::IAM::Role",
|
||||
"Properties": {
|
||||
"AssumeRolePolicyDocument": {
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Principal": {
|
||||
"Service": [
|
||||
"lambda.amazonaws.com"
|
||||
]
|
||||
},
|
||||
"Action": [
|
||||
"sts:AssumeRole"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"Policies": [
|
||||
{
|
||||
"PolicyName": {
|
||||
"Fn::Join": [
|
||||
"-",
|
||||
[
|
||||
"dev",
|
||||
"timeseries-service",
|
||||
"lambda"
|
||||
]
|
||||
]
|
||||
},
|
||||
"PolicyDocument": {
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Action": [
|
||||
"logs:CreateLogStream"
|
||||
],
|
||||
"Resource": [
|
||||
{
|
||||
"Fn::Sub": "arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/lambda/timeseries-service-dev-hello:*"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Action": [
|
||||
"logs:PutLogEvents"
|
||||
],
|
||||
"Resource": [
|
||||
{
|
||||
"Fn::Sub": "arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/lambda/timeseries-service-dev-hello:*:*"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
],
|
||||
"Path": "/",
|
||||
"RoleName": {
|
||||
"Fn::Join": [
|
||||
"-",
|
||||
[
|
||||
"timeseries-service",
|
||||
"dev",
|
||||
"us-east-1",
|
||||
"lambdaRole"
|
||||
]
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"HelloLambdaFunction": {
|
||||
"Type": "AWS::Lambda::Function",
|
||||
"Properties": {
|
||||
"Code": {
|
||||
"S3Bucket": {
|
||||
"Ref": "ServerlessDeploymentBucket"
|
||||
},
|
||||
"S3Key": "serverless/timeseries-service/dev/1542744572309-2018-11-20T20:09:32.309Z/timeseries-service.zip"
|
||||
},
|
||||
"FunctionName": "timeseries-service-dev-hello",
|
||||
"Handler": "handler.hello",
|
||||
"MemorySize": 1024,
|
||||
"Role": {
|
||||
"Fn::GetAtt": [
|
||||
"IamRoleLambdaExecution",
|
||||
"Arn"
|
||||
]
|
||||
},
|
||||
"Runtime": "python2.7",
|
||||
"Timeout": 6
|
||||
},
|
||||
"DependsOn": [
|
||||
"HelloLogGroup",
|
||||
"IamRoleLambdaExecution"
|
||||
]
|
||||
},
|
||||
"HelloLambdaVersionU88Ag36tX5K6Yuze3R8jedH2g7q2TTGuafWQxEnUmo": {
|
||||
"Type": "AWS::Lambda::Version",
|
||||
"DeletionPolicy": "Retain",
|
||||
"Properties": {
|
||||
"FunctionName": {
|
||||
"Ref": "HelloLambdaFunction"
|
||||
},
|
||||
"CodeSha256": "+pq+8RveA979z1DNF8UKnFGZfgE07blNyJGust5VJnU="
|
||||
}
|
||||
},
|
||||
"ApiGatewayRestApi": {
|
||||
"Type": "AWS::ApiGateway::RestApi",
|
||||
"Properties": {
|
||||
"Name": "dev-timeseries-service",
|
||||
"EndpointConfiguration": {
|
||||
"Types": [
|
||||
"EDGE"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"ApiGatewayResourceHello": {
|
||||
"Type": "AWS::ApiGateway::Resource",
|
||||
"Properties": {
|
||||
"ParentId": {
|
||||
"Fn::GetAtt": [
|
||||
"ApiGatewayRestApi",
|
||||
"RootResourceId"
|
||||
]
|
||||
},
|
||||
"PathPart": "hello",
|
||||
"RestApiId": {
|
||||
"Ref": "ApiGatewayRestApi"
|
||||
}
|
||||
}
|
||||
},
|
||||
"ApiGatewayMethodHelloGet": {
|
||||
"Type": "AWS::ApiGateway::Method",
|
||||
"Properties": {
|
||||
"HttpMethod": "GET",
|
||||
"RequestParameters": {},
|
||||
"ResourceId": {
|
||||
"Ref": "ApiGatewayResourceHello"
|
||||
},
|
||||
"RestApiId": {
|
||||
"Ref": "ApiGatewayRestApi"
|
||||
},
|
||||
"ApiKeyRequired": false,
|
||||
"AuthorizationType": "NONE",
|
||||
"Integration": {
|
||||
"IntegrationHttpMethod": "POST",
|
||||
"Type": "AWS_PROXY",
|
||||
"Uri": {
|
||||
"Fn::Join": [
|
||||
"",
|
||||
[
|
||||
"arn:",
|
||||
{
|
||||
"Ref": "AWS::Partition"
|
||||
},
|
||||
":apigateway:",
|
||||
{
|
||||
"Ref": "AWS::Region"
|
||||
},
|
||||
":lambda:path/2015-03-31/functions/",
|
||||
{
|
||||
"Fn::GetAtt": [
|
||||
"HelloLambdaFunction",
|
||||
"Arn"
|
||||
]
|
||||
},
|
||||
"/invocations"
|
||||
]
|
||||
]
|
||||
}
|
||||
},
|
||||
"MethodResponses": []
|
||||
}
|
||||
},
|
||||
"ApiGatewayDeployment1542744572805": {
|
||||
"Type": "AWS::ApiGateway::Deployment",
|
||||
"Properties": {
|
||||
"RestApiId": {
|
||||
"Ref": "ApiGatewayRestApi"
|
||||
},
|
||||
"StageName": "dev"
|
||||
},
|
||||
"DependsOn": [
|
||||
"ApiGatewayMethodHelloGet"
|
||||
]
|
||||
},
|
||||
"HelloLambdaPermissionApiGateway": {
|
||||
"Type": "AWS::Lambda::Permission",
|
||||
"Properties": {
|
||||
"FunctionName": {
|
||||
"Fn::GetAtt": [
|
||||
"HelloLambdaFunction",
|
||||
"Arn"
|
||||
]
|
||||
},
|
||||
"Action": "lambda:InvokeFunction",
|
||||
"Principal": {
|
||||
"Fn::Join": [
|
||||
"",
|
||||
[
|
||||
"apigateway.",
|
||||
{
|
||||
"Ref": "AWS::URLSuffix"
|
||||
}
|
||||
]
|
||||
]
|
||||
},
|
||||
"SourceArn": {
|
||||
"Fn::Join": [
|
||||
"",
|
||||
[
|
||||
"arn:",
|
||||
{
|
||||
"Ref": "AWS::Partition"
|
||||
},
|
||||
":execute-api:",
|
||||
{
|
||||
"Ref": "AWS::Region"
|
||||
},
|
||||
":",
|
||||
{
|
||||
"Ref": "AWS::AccountId"
|
||||
},
|
||||
":",
|
||||
{
|
||||
"Ref": "ApiGatewayRestApi"
|
||||
},
|
||||
"/*/*"
|
||||
]
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
},
|
||||
"Outputs": {
|
||||
"ServerlessDeploymentBucketName": {
|
||||
"Value": {
|
||||
"Ref": "ServerlessDeploymentBucket"
|
||||
}
|
||||
},
|
||||
"HelloLambdaFunctionQualifiedArn": {
|
||||
"Description": "Current Lambda function version",
|
||||
"Value": {
|
||||
"Ref": "HelloLambdaVersionU88Ag36tX5K6Yuze3R8jedH2g7q2TTGuafWQxEnUmo"
|
||||
}
|
||||
},
|
||||
"ServiceEndpoint": {
|
||||
"Description": "URL of the service endpoint",
|
||||
"Value": {
|
||||
"Fn::Join": [
|
||||
"",
|
||||
[
|
||||
"https://",
|
||||
{
|
||||
"Ref": "ApiGatewayRestApi"
|
||||
},
|
||||
".execute-api.us-east-1.",
|
||||
{
|
||||
"Ref": "AWS::URLSuffix"
|
||||
},
|
||||
"/dev"
|
||||
]
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
}"""
|
||||
|
||||
|
||||
@mock_cloudformation
|
||||
@mock_lambda
|
||||
@mock_iam
|
||||
@mock_logs
|
||||
@mock_apigateway
|
||||
def test_simple_apigateway_with_lambda_proxy():
|
||||
region = "us-east-1"
|
||||
apigw = boto3.client("apigateway", region_name=region)
|
||||
cf = boto3.client("cloudformation", region_name=region)
|
||||
awslambda = boto3.client("lambda", region_name=region)
|
||||
cf.create_stack(StackName="teststack", TemplateBody=template)
|
||||
#
|
||||
cf.describe_stacks(StackName="teststack")["Stacks"]
|
||||
resources = cf.describe_stack_resources(StackName="teststack")["StackResources"]
|
||||
api_id = [
|
||||
r["PhysicalResourceId"]
|
||||
for r in resources
|
||||
if r["ResourceType"] == "AWS::ApiGateway::RestApi"
|
||||
][0]
|
||||
fn_name = [
|
||||
r["PhysicalResourceId"]
|
||||
for r in resources
|
||||
if r["LogicalResourceId"] == "HelloLambdaFunction"
|
||||
][0]
|
||||
#
|
||||
# Verify Rest API was created
|
||||
api = apigw.get_rest_apis()["items"][0]
|
||||
api["id"].should.equal(api_id)
|
||||
api["name"].should.equal("dev-timeseries-service")
|
||||
#
|
||||
# Verify Gateway Resource was created
|
||||
paths = apigw.get_resources(restApiId=api_id)["items"]
|
||||
root_path = [p for p in paths if p["path"] == "/"][0]
|
||||
hello_path = [p for p in paths if p["path"] == "/hello"][0]
|
||||
hello_path["parentId"].should.equal(root_path["id"])
|
||||
#
|
||||
# Verify Gateway Method was created
|
||||
m = apigw.get_method(
|
||||
restApiId=api_id, resourceId=hello_path["id"], httpMethod="GET"
|
||||
)
|
||||
m["httpMethod"].should.equal("GET")
|
||||
#
|
||||
# Verify a Gateway Deployment was created
|
||||
d = apigw.get_deployments(restApiId=api_id)["items"]
|
||||
d.should.have.length_of(1)
|
||||
#
|
||||
# Verify Lambda function was created
|
||||
awslambda.get_function(FunctionName=fn_name) # Will throw 404 if it doesn't exist
|
||||
#
|
||||
# Verify Lambda Permission was created
|
||||
policy = json.loads(awslambda.get_policy(FunctionName=fn_name)["Policy"])
|
||||
statement = policy["Statement"][0]
|
||||
statement["FunctionName"].should.contain(fn_name)
|
||||
statement["Condition"]["ArnLike"]["AWS:SourceArn"].should.equal(
|
||||
"arn:aws:execute-api:us-east-1:123456789012:{}/*/*".format(api_id)
|
||||
)
|
||||
|
|
@ -14,7 +14,7 @@ def test_list_apis():
|
|||
test_client = backend.test_client()
|
||||
|
||||
res = test_client.get("/restapis")
|
||||
res.data.should.equal(b'{"item": []}')
|
||||
json.loads(res.data).should.contain("item")
|
||||
|
||||
|
||||
def test_usage_plans_apis():
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue