forked from aws/serverless-application-model
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathfunction_with_function_url_config.json
More file actions
102 lines (102 loc) · 2.32 KB
/
function_with_function_url_config.json
File metadata and controls
102 lines (102 loc) · 2.32 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
{
"AWSTemplateFormatVersion": "2010-09-09",
"Parameters": {},
"Resources": {
"MyFunction": {
"Properties": {
"Code": {
"S3Bucket": "sam-demo-bucket",
"S3Key": "hello.zip"
},
"Description": "Created by SAM",
"Handler": "index.handler",
"MemorySize": 1024,
"Role": {
"Fn::GetAtt": [
"MyFunctionRole",
"Arn"
]
},
"Runtime": "nodejs12.x",
"Tags": [
{
"Key": "lambda:createdBy",
"Value": "SAM"
}
],
"Timeout": 3
},
"Type": "AWS::Lambda::Function"
},
"MyFunctionRole": {
"Properties": {
"AssumeRolePolicyDocument": {
"Statement": [
{
"Action": [
"sts:AssumeRole"
],
"Effect": "Allow",
"Principal": {
"Service": [
"lambda.amazonaws.com"
]
}
}
],
"Version": "2012-10-17"
},
"ManagedPolicyArns": [
"arn:aws-cn:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
],
"Tags": [
{
"Key": "lambda:createdBy",
"Value": "SAM"
}
]
},
"Type": "AWS::IAM::Role"
},
"MyFunctionUrl": {
"Properties": {
"AuthType": "NONE",
"Cors": {
"AllowCredentials": true,
"AllowHeaders": [
"x-Custom-Header"
],
"AllowMethods": [
"GET"
],
"AllowOrigins": [
"https://example.com",
"example1.com",
"example2.com",
"example2.com"
],
"ExposeHeaders": [
"x-amzn-header"
],
"MaxAge": 10
},
"InvokeMode": "RESPONSE_STREAM",
"TargetFunctionArn": {
"Ref": "MyFunction"
}
},
"Type": "AWS::Lambda::Url"
},
"MyFunctionUrlPublicPermissions": {
"Properties": {
"Action": "lambda:InvokeFunctionUrl",
"FunctionName": {
"Ref": "MyFunction"
},
"FunctionUrlAuthType": "NONE",
"Principal": "*"
},
"Type": "AWS::Lambda::Permission"
}
}
}