cloudformation.yml

AWSTemplateFormatVersion: 2010-09-09

Parameters:

  LogBucket:
    Type: String

  LogPrefix:
    Type: String
    Default: s3-access/

  StorageExpirationInDays:
    Type: Number
    MinValue: 1
    Default: 1

  ProductPath:
    Type: String
    Default: https://grfn.asf.alaska.edu/door/download/

  UrsHostname:
    Type: String
    Default: urs.earthdata.nasa.gov
    AllowedValues:
    - urs.earthdata.nasa.gov
    - uat.urs.earthdata.nasa.gov

  UrsUsername:
    Type: String

  UrsPassword:
    Type: String
    NoEcho: true

  DomainName:
    Type: String

  CertificateArn:
    Type: String

Outputs:

  ApiEndpoint:
    Value: !Sub "https://${RestApi}.execute-api.${AWS::Region}.amazonaws.com/${Stage}/"

Resources:

  Secret:
    Type: AWS::SecretsManager::Secret
    Properties:
      Name: !Ref AWS::StackName
      SecretString: !Sub |-
        {
          "netrc_content": "machine ${UrsHostname} login ${UrsUsername} password ${UrsPassword}"
        }

  Bucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Ref AWS::StackName
      LifecycleConfiguration:
        Rules:
        - Status: Enabled
          AbortIncompleteMultipartUpload:
            DaysAfterInitiation: 1
        - Status: Enabled
          ExpirationInDays: !Ref StorageExpirationInDays
      LoggingConfiguration:
        DestinationBucketName: !Ref LogBucket
        LogFilePrefix: !Sub "${LogPrefix}${AWS::StackName}/"
      PublicAccessBlockConfiguration:
        BlockPublicAcls: true
        IgnorePublicAcls: true
      CorsConfiguration:
        CorsRules:
          - AllowedMethods:
              - GET
              - HEAD
            AllowedOrigins:
              - "*.asf.alaska.edu"
              - "null"

  BucketPolicy:
    Type: AWS::S3::BucketPolicy
    Properties:
      Bucket: !Ref Bucket
      PolicyDocument:
        Version: 2012-10-17
        Statement:
        - Effect: Allow
          Principal: "*"
          Action: s3:GetObject
          Resource: !Sub "${Bucket.Arn}/*"

  ReformatStack:
    Type: AWS::CloudFormation::Stack
    Properties:
      Parameters:
        Name: !Sub "${AWS::StackName}-reformat"
        Bucket: !Ref Bucket
        ProductPath: !Ref ProductPath
        SecretArn: !Ref Secret
      TemplateURL: reformat/cloudformation.yml

  CustomDomainName:
    Type: AWS::ApiGateway::DomainName
    Properties:
      DomainName: !Ref DomainName
      CertificateArn: !Ref CertificateArn

  BasePathMapping:
    Type: AWS::ApiGateway::BasePathMapping
    Properties:
      DomainName: !Ref CustomDomainName
      RestApiId: !Ref RestApi

  RestApi:
    Type: AWS::ApiGateway::RestApi
    Properties:
      Name: !Ref AWS::StackName
      Body:
        openapi: 3.0.1
        info:
          title: geospatial-services
          version: 0.0.1
        paths:
          /reformat:
            get:
              parameters:
              - name: product
                in: query
                required: true
              - name: layer
                in: query
                required: true
              responses:
                '307':
                  description: success
                default:
                  description: error
              x-amazon-apigateway-request-validator: parameters-only
              x-amazon-apigateway-integration:
                type: aws_proxy
                uri: !Sub "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${ReformatStack.Outputs.LambdaArn}/invocations"
                contentHandling: CONVERT_TO_TEXT
                httpMethod: POST
                passthroughBehvaior: when_no_match
                responses:
                  default:
                    statusCode: 200
        x-amazon-apigateway-request-validators:
          parameters-only:
            validateRequestParameters: true
            validateRequestBody: false

  DeploymentREPLACEME:
    Type: AWS::ApiGateway::Deployment
    Properties:
      RestApiId: !Ref RestApi

  Stage:
    Type: AWS::ApiGateway::Stage
    Properties:
      StageName: geospatial
      RestApiId: !Ref RestApi
      DeploymentId: !Ref DeploymentREPLACEME

  LambdaPermission:
    Type: AWS::Lambda::Permission
    Properties:
      FunctionName: !GetAtt ReformatStack.Outputs.LambdaArn
      Action: lambda:InvokeFunction
      Principal: apigateway.amazonaws.com
      SourceArn: !Sub "arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${RestApi}/*"