Point lambda to cross-account kinesis stream

guardian · Jul 22, 2024 · 8b3f194 · 8b3f194
1 parent efdb581
commit 8b3f194
Show file tree

Hide file tree

Showing 2 changed files with 50 additions and 10 deletions.
diff --git a/cdk/lib/__snapshots__/index.test.ts.snap b/cdk/lib/__snapshots__/index.test.ts.snap
@@ -108,6 +108,10 @@ exports[`The typerighter stack matches the snapshot 1`] = `
       "Description": "A list of private subnets",
       "Type": "AWS::SSM::Parameter::Value<List<AWS::EC2::Subnet::Id>>",
     },
+    "SsmParameterValueTESTtyperightertyperighterlivecontentlambdafirehoseARNC96584B6F00A464EAD1953AFF4B05118Parameter": {
+      "Default": "/TEST/typerighter/typerighter-live-content-lambda/firehose-ARN",
+      "Type": "AWS::SSM::Parameter::Value<String>",
+    },
     "VpcId": {
       "Default": "/account/vpc/primary/id",
       "Description": "Virtual Private Cloud to run EC2 instances within. Should NOT be the account default VPC.",
@@ -1722,6 +1726,19 @@ exports[`The typerighter stack matches the snapshot 1`] = `
       },
       "Type": "AWS::Lambda::Function",
     },
+    "TyperighterLiveContentLambdaKinesisEventSourcetyperighterContentApiFirehose12B21953B7975807": {
+      "Properties": {
+        "BatchSize": 100,
+        "EventSourceArn": {
+          "Ref": "SsmParameterValueTESTtyperightertyperighterlivecontentlambdafirehoseARNC96584B6F00A464EAD1953AFF4B05118Parameter",
+        },
+        "FunctionName": {
+          "Ref": "TyperighterLiveContentLambdaF35D688E",
+        },
+        "StartingPosition": "LATEST",
+      },
+      "Type": "AWS::Lambda::EventSourceMapping",
+    },
     "TyperighterLiveContentLambdaServiceRole47E0FE94": {
       "Properties": {
         "AssumeRolePolicyDocument": {
@@ -1875,6 +1892,29 @@ exports[`The typerighter stack matches the snapshot 1`] = `
                 ],
               },
             },
+            {
+              "Action": [
+                "kinesis:DescribeStreamSummary",
+                "kinesis:GetRecords",
+                "kinesis:GetShardIterator",
+                "kinesis:ListShards",
+                "kinesis:SubscribeToShard",
+                "kinesis:DescribeStream",
+                "kinesis:ListStreams",
+                "kinesis:DescribeStreamConsumer",
+              ],
+              "Effect": "Allow",
+              "Resource": {
+                "Ref": "SsmParameterValueTESTtyperightertyperighterlivecontentlambdafirehoseARNC96584B6F00A464EAD1953AFF4B05118Parameter",
+              },
+            },
+            {
+              "Action": "kinesis:DescribeStream",
+              "Effect": "Allow",
+              "Resource": {
+                "Ref": "SsmParameterValueTESTtyperightertyperighterlivecontentlambdafirehoseARNC96584B6F00A464EAD1953AFF4B05118Parameter",
+              },
+            },
           ],
           "Version": "2012-10-17",
         },

diff --git a/cdk/lib/index.ts b/cdk/lib/index.ts
@@ -354,15 +354,15 @@ EOF
       ManagedPolicy.fromAwsManagedPolicyName("service-role/AWSLambdaKinesisExecutionRole")
     );
 
-    // const streamARN = StringParameter.valueForStringParameter(this,
-    //   // This has been manually created in the console for now
-    //   `/${this.stage}/typerighter/typerighter-live-content-lambda/firehose-ARN`
-    // );
-    //
-    // const stream = Stream.fromStreamArn(this, 'ContentApiFirehose', streamARN);
-    //
-    // liveContentLambda.addEventSource(new KinesisEventSource(stream, {
-    //   startingPosition: StartingPosition.LATEST,
-    // }));
+    const streamARN = StringParameter.valueForStringParameter(this,
+      // This has been manually created in the console for now
+      `/${this.stage}/typerighter/typerighter-live-content-lambda/firehose-ARN`
+    );
+
+    const stream = Stream.fromStreamArn(this, 'ContentApiFirehose', streamARN);
+
+    liveContentLambda.addEventSource(new KinesisEventSource(stream, {
+      startingPosition: StartingPosition.LATEST,
+    }));
   }
 }