Feat/devops

.eslintignore

@@ -1,2 +1,3 @@
 dist/*
 env/*
+serverless.yml

.prettierignore

@@ -1,3 +1,4 @@
 coverage
 dist
-node_modules
+node_modules
+serverless.yml

env/config.yml

@@ -0,0 +1,20 @@
+---
+#-----------------------------------
+# Lemon Basic Environment Variables.
+#-----------------------------------
+lemon:
+    name: lemon-app
+    runtime: nodejs16.x
+    region: ap-northeast-2
+    env: lemon.yml # environment file
+    bucketName: 'lemon-lemonade' # WARN! main bucket used (create before deploy).
+    identityPool: 'ap-northeast-2:71aca5df-260e-4c65-ab21-48bf1877ea13' # ade-user-pool-identity-pool
+    securityGroupIds:
+    subnetIds:
+none:
+    name: none-app
+    runtime: nodejs16.x
+    region: ap-northeast-2
+    env: none.yml # environment file
+    securityGroupIds:
+    subnetIds:

package.json

@@ -28,6 +28,8 @@
         "express.adam": "ENV=adam STAGE=local npm run start",
         "!deploy": "----- deploy to AWS by serverless -----",
         "deploy.lemon": "npm run build && sls deploy --param='profile=lemon'  --stage dev",
+        "deploy.devops": "npm run build && sls deploy --param='profile=devops'  --stage dev",
+        "deploy.ian": "npm run build && sls deploy --param='profile=ian'  --stage dev",
         "deploy.lemon.prod": "npm run build && sls deploy --param='profile=lemon'  --stage prod",
         "deploy.jober": "npm run build && sls deploy --param='profile=jober' --stage prod",
         "deploy.neuro": "npm run build && sls deploy --param='profile=neuro' --stage prod",
@@ -66,7 +68,7 @@
         "plato": "plato -r -d complexity dist"
     },
     "dependencies": {
-        "lemon-core": "^3.2.5"
+        "lemon-core": "^3.2.7"
     },
     "devDependencies": {
         "@cruglobal/serverless-merge-config": "^1.1.0",
@@ -95,10 +97,7 @@
         "supertest": "^4.0.2",
         "ts-jest": "^27.1.4",
         "ts-node": "8.1.0",
-        "tsconfig-paths": "^4.1.2",
-        "ttypescript": "^1.5.15",
-        "typedoc": "^0.22.15",
-        "typescript": "^4.6.4"
+        "typedoc": "^0.22.15"
     },
     "private": false,
     "author": "Steve Jung <steve@lemoncloud.io> (https://lemoncloud.io)",

serverless.yml

@@ -23,7 +23,7 @@ custom:
     region: ${opt:region, 'ap-northeast-2'}     # run option `--region` `-r`
     stage: ${opt:stage, 'dev'}                  # run option `--stage` `-s`
     env: ${param:env, './env/none.yml'}         # run option `--env`
-  CONF: ${file(./env/config.js):CONF}           # merge config from `config.js` by profile.
+  CONF: ${file(./env/config.yml):${self:custom.CORE.profile}}          # merge config from `config.js` by profile.
   #------------------------------------------------
   # serverless-offline
   #------------------------------------------------
@@ -110,9 +110,9 @@ provider:
   region: ${self:custom.CONF.${self:custom.CORE.profile}.region, self:custom.CORE.region}      # profile의 region를 먼저 사용하고, 없으면 실행 옵션값.
 
   # VPC Configuration for Lambda.
-  vpc:
-    securityGroupIds: ${self:custom.CONF.${self:custom.CORE.profile}.securityGroupIds}
-    subnetIds: ${self:custom.CONF.${self:custom.CORE.profile}.subnetIds}
+#   vpc:
+#     securityGroupIds: ${self:custom.CONF.${self:custom.CORE.profile}.securityGroupIds}
+#     subnetIds: ${self:custom.CONF.${self:custom.CORE.profile}.subnetIds}
 
   # Lambda function's IAM Role here
   iamRoleStatements:
@@ -189,7 +189,7 @@ provider:
     MY_S3_BUCKET: '${self:custom.bucketName.${self:custom.CORE.stage}}'
     MY_SQS_ENDPOINT: 'https://sqs.${self:provider.region}.amazonaws.com/${aws:accountId}/${self:custom.queueName.${self:custom.CORE.stage}}' # see `sqs-service`
     MY_SNS_ENDPOINT: 'arn:aws:sns:${self:provider.region}:${aws:accountId}:${self:custom.topicName.${self:custom.CORE.stage}}'               # see `sns-service`
-    $<<: ${file(./env/${self:custom.CONF.${self:custom.CORE.profile}.env}):${self:custom.CORE.stage}}
+    $<<: ${file(./env/${self:custom.CONF.env}):${self:custom.CORE.stage}}
 
 #------------------------------------------------
 # Functions
@@ -391,7 +391,6 @@ resources:
     MyS3Bucket:
       Type: AWS::S3::Bucket
       Properties:
-        AccessControl: PublicRead
         BucketName: ${self:custom.bucketName.${self:custom.CORE.stage}}
         WebsiteConfiguration:
           IndexDocument: index.html
@@ -406,6 +405,11 @@ resources:
                   - GET
                   - HEAD
                 MaxAge: 3000
+        PublicAccessBlockConfiguration:
+          BlockPublicAcls: false
+        OwnershipControls:
+          Rules:
+            - ObjectOwnership: ObjectWriter
 
     # -------------------------------
     # S3 Bucket
@@ -431,4 +435,4 @@ resources:
                     },
                     "/*"
                   ]
-                ]
+                ]