serverless.yml

service: daily-nyt
org: mrteale
app: web-services

plugins:
  - serverless-python-requirements
  - serverless-apigw-binary
  - serverless-domain-manager

provider:
  name: aws
  runtime: python3.9
  stage: prod

custom:
  pythonRequirements:
    dockerizePip: 'non-linux'
  apigwBinary:
    types:
      - '*/*'
  customDomain:
    domainName: nyt.lachlanteale.com
    basePath: ''
    stage: ${self:provider.stage}
    createRoute53Record: false

package:
  patterns:
    - '!node_modules/**'
    - '!.env/**'
    - '!layers/**'

layers:
  poppler:
    package:
      artifact: layers/poppler.zip

functions:
  main:
    handler: handler.main
    role: NYTIAMRole
    layers:
      - { Ref: PopplerLambdaLayer }
    events:
      - http:
          path: /
          method: get
          cors: true
          response:
            contentHandling: CONVERT_TO_BINARY

resources:
  Resources:
    NYTIAMRole:
      Type: AWS::IAM::Role
      Properties:
        Path: /api/
        RoleName: NYTIAMRole
        AssumeRolePolicyDocument:
          Version: '2012-10-17'
          Statement:
            - Effect: Allow
              Principal:
                Service:
                  - lambda.amazonaws.com
              Action: sts:AssumeRole
        Policies:
          - PolicyName: NYTIAMPolicy
            PolicyDocument:
              Version: '2012-10-17'
              Statement:
                - Effect: Allow
                  Action:
                    - logs:CreateLogGroup
                    - logs:CreateLogStream
                    - logs:PutLogEvents
                  Resource: 
                    - 'Fn::Join':
                      - ':'
                      -
                        - 'arn:aws:logs'
                        - Ref: 'AWS::Region'
                        - Ref: 'AWS::AccountId'
                        - 'log-group:/aws/lambda/*:*:*'