// CloudFormationのStackと同様にインフラを定義したファイル

import cdk = require('@aws-cdk/core');

export class CdkLambdaStack extends cdk.Stack {
  constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    // The code that defines your stack goes here
  }
}

// cdk build 実施時に呼び出されるファイル
#!/usr/bin/env node
import 'source-map-support/register';
import cdk = require('@aws-cdk/core');
import { CdkLambdaStack } from '../lib/cdk-lambda-stack';

const app = new cdk.App();
new CdkLambdaStack(app, 'CdkLambdaStack');

// TypeScriptの設定ファイル
{
  "compilerOptions": {
    "target":"ES2018",
    "module": "commonjs",
    "lib": ["es2018"],
    "declaration": true,
    "strict": true,
    "noImplicitAny": true,
    "strictNullChecks": true,
    "noImplicitThis": true,
    "alwaysStrict": true,
    "noUnusedLocals": false,
    "noUnusedParameters": false,
    "noImplicitReturns": true,
    "noFallthroughCasesInSwitch": false,
    "inlineSourceMap": true,
    "inlineSources": true,
    "experimentalDecorators": true,
    "strictPropertyInitialization":false,
    "typeRoots": ["./node_modules/@types"]
  },
  "exclude": ["cdk.out"]
}

// CDKの設定ファイル(環境変数などで使えるが、今回は使わない)
{
  "app": "npx ts-node bin/sub.ts",
  "context": {
    "@aws-cdk/core:enableStackNameDuplicates": "true"
  }
}

#!/usr/bin/env node
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
require("source-map-support/register");
const cdk = require("@aws-cdk/core");
const cdk_lambda_stack_1 = require("../lib/cdk-lambda-stack");
const app = new cdk.App();
new cdk_lambda_stack_1.CdkLambdaStack(app, 'CdkLambdaStack');
//# sourceMappingURL=data:application/json;base64,hogehogehogefugafugafugafugafuga

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const cdk = require("@aws-cdk/core");
const aws_lambda_1 = require("@aws-cdk/aws-lambda");
const aws_iam_1 = require("@aws-cdk/aws-iam");
const aws_events_1 = require("@aws-cdk/aws-events");
const aws_events_targets_1 = require("@aws-cdk/aws-events-targets");
const aws_ssm_1 = require("@aws-cdk/aws-ssm");


const fs = require("fs");
class CdkLambdaStack extends cdk.Stack {
    constructor(scope, id, props) {
        super(scope, id, props);
        // The code that defines your stack goes here
        // IAM Role for Lambda with SSM policy.
        const executionLambdaRole = new aws_iam_1.Role(this, 'secureLambdaRole', {
            roleName: 'lambdaSecureExecutionRole',
            assumedBy: new aws_iam_1.ServicePrincipal('lambda.amazonaws.com'),
            managedPolicies: [
                aws_iam_1.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole'),
                aws_iam_1.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMReadOnlyAccess'),
            ]
        });
        // Call Slack channel by plain text.
        const slackChannel = aws_ssm_1.StringParameter.fromStringParameterAttributes(this, 'slackChannel', {
            parameterName: '/Lambda/production/slack-channel',
        });
        // Configure for Lambda function.
        const adventarNotifyFunction = new aws_lambda_1.Function(this, 'SlackAdventar', {
            functionName: 'slack-adventar-notify',
            runtime: aws_lambda_1.Runtime.NODEJS_10_X,
            code: new aws_lambda_1.InlineCode(fs.readFileSync('./src/index.js', { encoding: 'utf-8' })),
            handler: 'index.handler',
            timeout: cdk.Duration.seconds(300),
            role: executionLambdaRole,
            environment: {
                TZ: "Asia/Tokyo",
                SLACK_CHANNEL: slackChannel.stringValue,
            }
        });
        // Cloudwatch event for run notification at 1PM JST in Advent Calendar term.
        const rule = new aws_events_1.Rule(this, 'Rule', {
            schedule: aws_events_1.Schedule.expression('cron(0 4 1-25 12 * 2019)')
        });
        rule.addTarget(new aws_events_targets_1.LambdaFunction(adventarNotifyFunction));
    }
}
exports.CdkLambdaStack = CdkLambdaStack;
const app = new cdk.App();
new CdkLambdaStack(app, 'adventarNotification');
app.synth();
//# sourceMappingURL=data:application/json;base64,hogehogehogefugafugafuga

import cdk = require('@aws-cdk/core');
export declare class CdkLambdaStack extends cdk.Stack {
    constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps);
}

 ls -l cdk.out
total 80
-rw-r--r--  1 user  staff   4902 12  1 22:41 CdkLambdaStack.template.json
-rw-r--r--  1 user  staff   4938 12  1 22:41 adventarNotification.template.json
-rw-r--r--  1 user  staff     20 12  1 22:41 cdk.out
-rw-r--r--  1 user  staff  11674 12  1 22:41 manifest.json
-rw-r--r--  1 user  staff   7352 12  1 22:41 tree.json

{
  "Resources": {
    "secureLambdaRole067C996A": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Action": "sts:AssumeRole",
              "Effect": "Allow",
              "Principal": {
                "Service": "lambda.amazonaws.com"
              }
            }
          ],
          "Version": "2012-10-17"
        },
        "ManagedPolicyArns": [
          {
            "Fn::Join": [
              "",
              [
                "arn:",
                {
                  "Ref": "AWS::Partition"
                },
                ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
              ]
            ]
          },
          {
            "Fn::Join": [
              "",
              [
                "arn:",
                {
                  "Ref": "AWS::Partition"
                },
                ":iam::aws:policy/AmazonSSMReadOnlyAccess"
              ]
            ]
          }
        ],
        "RoleName": "lambdaSecureExecutionRole"
      },
      "Metadata": {
        "aws:cdk:path": "CdkLambdaStack/secureLambdaRole/Resource"
      }
    },
    "SlackAdventar6AF5ACBE": {
      "Type": "AWS::Lambda::Function",
      "Properties": {
        "Code": {
          "ZipFile": "const request = require('request');\nconst AWS = require('aws-sdk');\nconst ssm = new AWS.SSM();\n\nexports.handler = async function(event, context) {\n\n  // Get WebHook URL from SSM parameter store.\n  const slackWebhook = await ssm.getParameter({\n    Name: '/Lambda/production/slack-webhook',\n    WithDecryption: true,\n  }).promise();\n  let SLACK_WEBHOOK = slackWebhook.Parameter.Value;\n\n  // Get user_id from SSM parameter store.\n  const slackMember = await ssm.getParameter({\n      Name: '/Lambda/production/slack-members',\n      WithDecryption: true,\n  }).promise();\n  let member = slackMember.Parameter.Value.split(',');\n\n  // Inject SLACK_CHANNEL value.\n  const SLACK_CHANNEL = process.env.SLACK_CHANNEL;\n\n  // create message\n  const now = new Date();\n  const Today =  now.getDate();\n  const mention = \"<@\" + member[Today] + \">\";\n  let message = mention + \"\\n\";\n  message += '*' + \"Advent Calendar \" + Today + \"日目 よろしくお願いします！\" + '*' + \"\\n\";\n  message += 'https://adventar.org/calendars/4548';\n\n  // Request configure\n  const options = {\n    url: SLACK_WEBHOOK,\n    headers: {\n      'Content-type': 'application/json'\n    },\n    body: {\n      \"text\": message,\n      \"channel\": SLACK_CHANNEL,\n      \"username\": \"uluru\",\n      \"icon_emoji\": \"uluru\",\n    },\n    json: true\n  };\n\n  // Sending message\n  request.post(options, function(error, response, body) {\n    if (!error && response.statusCode == 200) {\n      context.done(null, body);\n    } else {\n      console.log('error: ' + response.statusCode);\n      context.done(null, 'error');\n    }\n  });\n}\n"
        },
        "Handler": "index.handler",
        "Role": {
          "Fn::GetAtt": [
            "secureLambdaRole067C996A",
            "Arn"
          ]
        },
        "Runtime": "nodejs10.x",
        "Environment": {
          "Variables": {
            "TZ": "Asia/Tokyo",
            "SLACK_CHANNEL": {
              "Ref": "slackChannelParameter"
            }
          }
        },
        "FunctionName": "slack-adventar-notify",
        "Timeout": 300
      },
      "DependsOn": [
        "secureLambdaRole067C996A"
      ],
      "Metadata": {
        "aws:cdk:path": "CdkLambdaStack/SlackAdventar/Resource"
      }
    },
    "SlackAdventarAllowEventRuleCdkLambdaStackRule69AC60575315E536": {
      "Type": "AWS::Lambda::Permission",
      "Properties": {
        "Action": "lambda:InvokeFunction",
        "FunctionName": {
          "Fn::GetAtt": [
            "SlackAdventar6AF5ACBE",
            "Arn"
          ]
        },
        "Principal": "events.amazonaws.com",
        "SourceArn": {
          "Fn::GetAtt": [
            "Rule4C995B7F",
            "Arn"
          ]
        }
      },
      "Metadata": {
        "aws:cdk:path": "CdkLambdaStack/SlackAdventar/AllowEventRuleCdkLambdaStackRule69AC6057"
      }
    },
    "Rule4C995B7F": {
      "Type": "AWS::Events::Rule",
      "Properties": {
        "ScheduleExpression": "cron(0 4 1-25 12 * 2019)",
        "State": "ENABLED",
        "Targets": [
          {
            "Arn": {
              "Fn::GetAtt": [
                "SlackAdventar6AF5ACBE",
                "Arn"
              ]
            },
            "Id": "Target0"
          }
        ]
      },
      "Metadata": {
        "aws:cdk:path": "CdkLambdaStack/Rule/Resource"
      }
    }
  },
  "Parameters": {
    "slackChannelParameter": {
      "Type": "AWS::SSM::Parameter::Value<String>",
      "Default": "/Lambda/production/slack-channel"
    }
  }
}