extern/web-check
1
0
Fork 0
mirror of https://github.com/Lissy93/web-check.git synced 2025-06-19 03:16:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

Read env vars from AWS secret manager

Browse Source
This commit is contained in:
Alicia Sykes 2023-09-02 15:21:36 +01:00
parent 393dafbf84
commit 76cce7ef9a
1 changed files with 28 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
serverless.yml
View File

@ -4,7 +4,34 @@ provider:
name: aws name: aws
runtime: nodejs14.x runtime: nodejs14.x
region: us-east-1 region: us-east-1
environment:
GOOGLE_CLOUD_API_KEY: ${ssm:GOOGLE_CLOUD_API_KEY~true, ''}
TORRENT_IP_API_KEY: ${ssm:TORRENT_IP_API_KEY~true, ''}
SECURITY_TRAILS_API_KEY: ${ssm:SECURITY_TRAILS_API_KEY~true, ''}
BUILT_WITH_API_KEY: ${ssm:BUILT_WITH_API_KEY~true, ''}
URL_SCAN_API_KEY: ${ssm:URL_SCAN_API_KEY~true, ''}
TRANCO_USERNAME: ${ssm:TRANCO_USERNAME~true, ''}
TRANCO_API_KEY: ${ssm:TRANCO_API_KEY~true, ''}
CLOUDMERSIVE_API_KEY: ${ssm:CLOUDMERSIVE_API_KEY~true, ''}
CHROME_PATH: ${ssm:CHROME_PATH~true, ''}
API_TIMEOUT_LIMIT: ${ssm:API_TIMEOUT_LIMIT~true, ''}
API_CORS_ORIGIN: ${ssm:API_CORS_ORIGIN~true, ''}
iamRoleStatements:
- Effect: Allow
Action:
- ssm:GetParameter
Resource:
- arn:aws:ssm:us-east-1:590320761284:parameter/GOOGLE_CLOUD_API_KEY
- arn:aws:ssm:us-east-1:590320761284:parameter/TORRENT_IP_API_KEY
- arn:aws:ssm:us-east-1:590320761284:parameter/SECURITY_TRAILS_API_KEY
- arn:aws:ssm:us-east-1:590320761284:parameter/BUILT_WITH_API_KEY
- arn:aws:ssm:us-east-1:590320761284:parameter/URL_SCAN_API_KEY
- arn:aws:ssm:us-east-1:590320761284:parameter/TRANCO_USERNAME
- arn:aws:ssm:us-east-1:590320761284:parameter/TRANCO_API_KEY
- arn:aws:ssm:us-east-1:590320761284:parameter/CLOUDMERSIVE_API_KEY
- arn:aws:ssm:us-east-1:590320761284:parameter/CHROME_PATH
- arn:aws:ssm:us-east-1:590320761284:parameter/API_TIMEOUT_LIMIT
- arn:aws:ssm:us-east-1:590320761284:parameter/API_CORS_ORIGIN
functions: functions:
archives: archives:
handler: api/archives.handler handler: api/archives.handler