template.yaml

AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: >
  signal-functions:
    Serverless lambda functions to connect peers for Paper Cup Phone
  dynamo-db:
  DynamoDb tables to store socketIds and room names

Parameters:
  RoomTableName:
    Type: String
    Default: 'room'
    Description: stores room name and socketIds connected to that room
    MinLength: 3
    MaxLength: 50
    AllowedPattern: ^[A-Za-z_]+$
    ConstraintDescription: 'Required. Can be characters and underscore only. No numbers or special characters allowed.'
  UserTableName:
    Type: String
    Default: 'user'
    Description: stores user's socketId and room name connected
    MinLength: 3
    MaxLength: 50
    AllowedPattern: ^[A-Za-z_]+$
    ConstraintDescription: 'Required. Can be characters and underscore only. No numbers or special characters allowed.'
  AccountSid:
    Type: String
  AuthToken:
    Type: String

Resources:
  SignalApi:
    Type: AWS::Serverless::Api
    Properties:
      Name: SignalApi
      StageName: prod
  SignalSocket:
    Type: AWS::ApiGatewayV2::Api
    Properties:
      Name: SignalSocket
      ProtocolType: WEBSOCKET
      RouteSelectionExpression: "$request.body.action"
  ConnectRoute:
    Type: AWS::ApiGatewayV2::Route
    Properties:
      ApiId: !Ref SignalSocket
      RouteKey: $connect
      AuthorizationType: NONE
      OperationName: ConnectRoute
      Target: !Join
        - '/'
        - - 'integrations'
          - !Ref ConnectInteg
  ConnectInteg:
    Type: AWS::ApiGatewayV2::Integration
    Properties:
      ApiId: !Ref SignalSocket
      Description: Connect Integration
      IntegrationType: AWS_PROXY
      IntegrationUri:
        Fn::Sub:
          arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${ConnectFunction.Arn}/invocations
  DisconnectRoute:
    Type: AWS::ApiGatewayV2::Route
    Properties:
      ApiId: !Ref SignalSocket
      RouteKey: $disconnect
      AuthorizationType: NONE
      OperationName: DisconnectRoute
      Target: !Join
        - '/'
        - - 'integrations'
          - !Ref DisconnectInteg
  DisconnectInteg:
    Type: AWS::ApiGatewayV2::Integration
    Properties:
      ApiId: !Ref SignalSocket
      Description: Disconnect Integration
      IntegrationType: AWS_PROXY
      IntegrationUri:
        Fn::Sub:
          arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${DisconnectFunction.Arn}/invocations
  MessageRoute:
    Type: AWS::ApiGatewayV2::Route
    Properties:
      ApiId: !Ref SignalSocket
      RouteKey: message
      AuthorizationType: NONE
      OperationName: SendRoute
      Target: !Join
        - '/'
        - - 'integrations'
          - !Ref MessageInteg
  MessageInteg:
    Type: AWS::ApiGatewayV2::Integration
    Properties:
      ApiId: !Ref SignalSocket
      Description: Send Integration
      IntegrationType: AWS_PROXY
      IntegrationUri:
        Fn::Sub:
          arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${MessageFunction.Arn}/invocations
  JoinRoute:
    Type: AWS::ApiGatewayV2::Route
    Properties:
      ApiId: !Ref SignalSocket
      RouteKey: join
      AuthorizationType: NONE
      OperationName: SendRoute
      Target: !Join
        - '/'
        - - 'integrations'
          - !Ref JoinInteg
  JoinInteg:
    Type: AWS::ApiGatewayV2::Integration
    Properties:
      ApiId: !Ref SignalSocket
      Description: Send Integration
      IntegrationType: AWS_PROXY
      IntegrationUri:
        Fn::Sub:
          arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${JoinFunction.Arn}/invocations
  Deployment:
    Type: AWS::ApiGatewayV2::Deployment
    DependsOn:
      - ConnectRoute
      - DisconnectRoute
      - MessageRoute
      - JoinRoute
    Properties:
      ApiId: !Ref SignalSocket
  Stage:
    Type: AWS::ApiGatewayV2::Stage
    Properties:
      StageName: prod
      Description: prod Stage
      DeploymentId: !Ref Deployment
      ApiId: !Ref SignalSocket
  RoomTable:
    Type: AWS::DynamoDB::Table
    Properties:
      AttributeDefinitions:
        - AttributeName: "name"
          AttributeType: "S"
      KeySchema:
        - AttributeName: "name"
          KeyType: "HASH"
      ProvisionedThroughput:
        ReadCapacityUnits: 1
        WriteCapacityUnits: 1
      SSESpecification:
        SSEEnabled: True
      TableName: !Ref RoomTableName
  UserTable:
    Type: AWS::DynamoDB::Table
    Properties:
      AttributeDefinitions:
        - AttributeName: "id"
          AttributeType: "S"
      KeySchema:
        - AttributeName: "id"
          KeyType: "HASH"
      ProvisionedThroughput:
        ReadCapacityUnits: 1
        WriteCapacityUnits: 1
      SSESpecification:
        SSEEnabled: True
      TableName: !Ref UserTableName
  ConnectFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./
      Handler: ./handlers/connect.handler
      MemorySize: 256
      Runtime: nodejs14.x
      Timeout: 60
      FunctionName: ConnectFunction
      Environment:
        Variables:
          USER_TABLE_NAME: !Ref UserTableName
          ROOM_TABLE_NAME: !Ref RoomTableName
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref UserTableName
        - DynamoDBCrudPolicy:
            TableName: !Ref RoomTableName
        - Statement:
            - Effect: Allow
              Action:
                - 'execute-api:ManageConnections'
              Resource:
                - !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${SignalSocket}/*'
  ConnectPermission:
    Type: AWS::Lambda::Permission
    DependsOn:
      - SignalSocket
    Properties:
      Action: lambda:InvokeFunction
      FunctionName: !Ref ConnectFunction
      Principal: apigateway.amazonaws.com
  LeaveFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./
      Handler: handlers/leave.handler
      MemorySize: 256
      Runtime: nodejs14.x
      Timeout: 60
      FunctionName: LeaveFunction
      Events:
        ApiEvent:
          Type: Api
          Name: SignalApi
          StageName: prod
          Properties:
            Path: /leave
            Method: any
            RestApiId:
              Ref: SignalApi
          Cors:
            AllowHeaders: "'Content-Type'"
            AllowMethods: "'*'"
            AllowOrigin: "'*'"
      Environment:
        Variables:
          USER_TABLE_NAME: !Ref UserTableName
          ROOM_TABLE_NAME: !Ref RoomTableName
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref UserTableName
        - DynamoDBCrudPolicy:
            TableName: !Ref RoomTableName
  LeavePermission:
    Type: AWS::Lambda::Permission
    Properties:
      Action: lambda:InvokeFunction
      FunctionName: !Ref LeaveFunction
      Principal: apigateway.amazonaws.com
  DisconnectFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./
      Handler: handlers/disconnect.handler
      MemorySize: 256
      Runtime: nodejs14.x
      Timeout: 60
      FunctionName: DisconnectFunction
      Environment:
        Variables:
          USER_TABLE_NAME: !Ref UserTableName
          ROOM_TABLE_NAME: !Ref RoomTableName
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref UserTableName
        - DynamoDBCrudPolicy:
            TableName: !Ref RoomTableName
        - Statement:
            - Effect: Allow
              Action:
                - 'execute-api:ManageConnections'
              Resource:
                - !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${SignalSocket}/*'
  DisconnectPermission:
    Type: AWS::Lambda::Permission
    DependsOn:
      - SignalSocket
    Properties:
      Action: lambda:InvokeFunction
      FunctionName: !Ref DisconnectFunction
      Principal: apigateway.amazonaws.com
  MessageFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./
      Handler: handlers/message.handler
      Timeout: 60
      MemorySize: 256
      Runtime: nodejs14.x
      FunctionName: MessageFunction
      Environment:
        Variables:
          USER_TABLE_NAME: !Ref UserTableName
          ROOM_TABLE_NAME: !Ref RoomTableName
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref UserTableName
        - DynamoDBCrudPolicy:
            TableName: !Ref RoomTableName
        - Statement:
            - Effect: Allow
              Action:
                - 'execute-api:ManageConnections'
              Resource:
                - !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${SignalSocket}/*'
  MessagePermission:
    Type: AWS::Lambda::Permission
    DependsOn:
      - SignalSocket
    Properties:
      Action: lambda:InvokeFunction
      FunctionName: !Ref MessageFunction
      Principal: apigateway.amazonaws.com
  JoinFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: ./
      Handler: handlers/join.handler
      Timeout: 60
      MemorySize: 256
      Runtime: nodejs14.x
      FunctionName: JoinFunction
      Environment:
        Variables:
          USER_TABLE_NAME: !Ref UserTableName
          ROOM_TABLE_NAME: !Ref RoomTableName
          TWILIO_ACCOUNT_SID: !Ref AccountSid
          TWILIO_AUTH_TOKEN: !Ref AuthToken
      Policies:
        - DynamoDBCrudPolicy:
            TableName: !Ref UserTableName
        - DynamoDBCrudPolicy:
            TableName: !Ref RoomTableName
        - Statement:
            - Effect: Allow
              Action:
                - 'execute-api:ManageConnections'
              Resource:
                - !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${SignalSocket}/*'
  JoinPermission:
    Type: AWS::Lambda::Permission
    DependsOn:
      - SignalSocket
    Properties:
      Action: lambda:InvokeFunction
      FunctionName: !Ref JoinFunction
      Principal: apigateway.amazonaws.com


Outputs:
  UserTableArn:
    Description: "UserTable ARN"
    Value: !GetAtt UserTable.Arn

  RoomTableArn:
    Description: "RoomTable ARN"
    Value: !GetAtt RoomTable.Arn

  ConnectFunctionArn:
    Description: "Connect function ARN"
    Value: !GetAtt ConnectFunction.Arn

  DisconnectFunctionArn:
    Description: "Disconnect function ARN"
    Value: !GetAtt DisconnectFunction.Arn

  MessageFunctionArn:
    Description: "Message function ARN"
    Value: !GetAtt MessageFunction.Arn

  JoinFunctionArn:
    Description: "JoinFunction ARN"
    Value: !GetAtt JoinFunction.Arn

  WebSocketURI:
    Description: "The WSS Protocol URI to connect to"
    Value: !Join [ '', [ 'wss://', !Ref SignalSocket, '.execute-api.',!Ref 'AWS::Region','.amazonaws.com/',!Ref 'Stage'] ]