monitoring-apache-iceberg-table-metadata-layer/template.yaml at eb7230e5b86cd99cb36e7bc8d2b8aa5aee2a9792 · aws-samples/monitoring-apache-iceberg-table-metadata-layer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Parameters:
  CWNamespace:
    Description: Amazon CloudWatch custom metric namespace
    Type: String
Globals:
  Function:
    Timeout: 360
    MemorySize: 512
Resources:
  IcebergMetricsLambda:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: lambda/
      Handler: app.lambda_handler
      Runtime: python3.9
      Policies:
        - CloudWatchPutMetricPolicy: {}
        - AWSLambdaBasicExecutionRole
        - AmazonS3ReadOnlyAccess
        - Statement:
          - Sid: GlueDataCatalogPolicy
            Effect: Allow
            Action:
            - glue:GetTable
            - glue:GetTableVersion
            - glue:GetTables
            - glue:GetDatabase
            - glue:GetDatabases
            - glue:SearchTables
            - glue:GetTableVersions
            - glue:GetPartitions
            - glue:ListSessions
            Resource: '*'
      Architectures:
        - x86_64
      Environment:
        Variables:
          CW_NAMESPACE: !Ref CWNamespace
  PermissionForEventBridgeToInvokeLambda:
    Type: AWS::Lambda::Permission
    Properties:
      FunctionName: !Ref IcebergMetricsLambda
      Action: 'lambda:InvokeFunction'
      Principal: 'events.amazonaws.com'
      SourceArn: !Sub 'arn:aws:events:${AWS::Region}:${AWS::AccountId}:rule/IcebergTablesUpdateRule*'
Outputs:
  IcebergMetricsLambda:
    Description: Lambda Function ARN
    Value: !GetAtt IcebergMetricsLambda.Arn