template.yml

AWSTemplateFormatVersion: "2010-09-09"
Transform: AWS::Serverless-2016-10-31
Description: Code Pipeline Slack Notifier

Parameters:
  SlackBotUserOAuthAccessToken:
    MinLength: 1
    Type: String
    NoEcho: True
  SlackChannel:
    Type: String
    MinLength: 1
    Default: builds
  SlackBotName:
    MinLength: 1
    Type: String
    Default: PipelineBuildBot
  SlackBotIcon:
    MinLength: 1
    Type: String
    Default: ":robot_face:"

Resources:
  Notifier:
    Type: AWS::Serverless::Function
    Properties:
      Runtime: python3.7
#       FunctionUrlConfig:
#         AuthType: NONE #AWS_IAM for security
      Timeout: 30
      MemorySize: 256
      CodeUri: src/
      Handler: notifier.run
      # Layers:
      #   - arn:aws:lambda:eu-west-1:553035198032:layer:git:14
      # ReservedConcurrentExecutions: 1
      Environment:
        Variables:
          SLACK_BOT_TOKEN: !Ref SlackBotUserOAuthAccessToken
          SLACK_BOT_NAME: !Ref SlackBotName
          SLACK_BOT_ICON: !Ref SlackBotIcon
          SLACK_CHANNEL: !Ref SlackChannel

      Policies:
        - AWSLambdaBasicExecutionRole
        - Version: "2012-10-17"
          Statement:
            - Effect: Allow
              Action:
                - "codepipeline:Get*"
                - "codepipeline:List*"
              Resource: "*"
            - Effect: Allow
              Action:
                - "codebuild:Get*"
              Resource: "*"
      Events:
        CodePipelineEvent:
          Type: CloudWatchEvent
          Properties:
            Pattern:
              source:
                - aws.codepipeline
                - aws.codebuild