updating packaged template name. Adding deploy sh file to deploy SAM app. Adding serverless to template.

Author: sourabh

cloudwatchevents/guardduty/template.yaml

@@ -1,37 +1,56 @@
 AWSTemplateFormatVersion: '2010-09-09'
 Transform: AWS::Serverless-2016-10-31
 Description: >
-    This function is invoked by AWS CloudWatch events in response to state change in your AWS resources which matches a event target definition. The event payload received is then forwarded to Sumo Logic HTTP source endpoint.
+  This function is invoked by AWS CloudWatch events in response to state change in your AWS resources which matches a event target definition. The event payload received is then forwarded to Sumo Logic HTTP source endpoint.
 
 # More info about Globals: https://github.com/awslabs/serverless-application-model/blob/master/docs/globals.rst
 Globals:
-    Function:
-        Timeout: 300
+  Function:
+    Timeout: 300
+
+Metadata:
+  AWS::ServerlessRepo::Application:
+    Author: Sumo Logic
+    Description: This function is invoked by AWS CloudWatch events in response to state change in your AWS resources which matches a event target definition. The event payload received is then forwarded to Sumo Logic HTTP source endpoint.
+    HomePageUrl: https://github.com/SumoLogic/sumologic-aws-lambda
+    Labels:
+      - sumologic
+      - serverless
+      - guardduty
+      - security
+      - cloudwatchevents
+      - guardduty
+    Name: sumologic-guardduty-events-processor
+    LicenseUrl: ../LICENSE
+    ReadmeUrl: ./README.md
+    SemanticVersion: 1.0.3
+    SourceCodeUrl: https://github.com/SumoLogic/sumologic-aws-lambda/tree/master/cloudwatchevents/guardduty
+    SpdxLicenseId: Apache-2.0
 
 Parameters:
-    SumoEndpointUrl:
-        Type: String
+  SumoEndpointUrl:
+    Type: String
 
 Resources:
 
-    CloudWatchEventFunction:
-        Type: AWS::Serverless::Function # More info about Function Resource: https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#awsserverlessfunction
-        Properties:
-            CodeUri: ../src/
-            Handler: cloudwatchevents.handler
-            Runtime: nodejs12.x
-            Environment:
-              Variables:
-                SUMO_ENDPOINT: !Ref SumoEndpointUrl
-            Events:
-                CloudWatchEventTrigger:
-                    Type: CloudWatchEvent
-                    Properties:
-                      Pattern:
-                        source:
-                          - aws.guardduty
+  CloudWatchEventFunction:
+    Type: AWS::Serverless::Function # More info about Function Resource: https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#awsserverlessfunction
+    Properties:
+      CodeUri: ../src/
+      Handler: cloudwatchevents.handler
+      Runtime: nodejs12.x
+      Environment:
+        Variables:
+          SUMO_ENDPOINT: !Ref SumoEndpointUrl
+      Events:
+        CloudWatchEventTrigger:
+          Type: CloudWatchEvent
+          Properties:
+            Pattern:
+              source:
+                - aws.guardduty
 Outputs:
 
-    CloudWatchEventFunction:
-      Description: "CloudWatchEvent Processor Function ARN"
-      Value: !GetAtt CloudWatchEventFunction.Arn
+  CloudWatchEventFunction:
+    Description: "CloudWatchEvent Processor Function ARN"
+    Value: !GetAtt CloudWatchEventFunction.Arn

cloudwatchevents/guarddutybenchmark/template_v2.yaml

@@ -56,7 +56,7 @@ Metadata:
     Name: sumologic-guardduty-benchmark
     LicenseUrl: ../LICENSE
     ReadmeUrl: ./README.md
-    SemanticVersion: 1.0.10
+    SemanticVersion: 1.0.11
     SourceCodeUrl: https://github.com/SumoLogic/sumologic-aws-lambda/tree/master/cloudwatchevents/guarddutybenchmark
     SpdxLicenseId: Apache-2.0
 

cloudwatchevents/guarddutybenchmark/testdeploy.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+
+export AWS_REGION="us-east-1"
+export AWS_PROFILE="personal"
+
+if [[ "${AWS_PROFILE}" == "personal" ]]
+then
+    SAM_S3_BUCKET="cf-templates-1qpf3unpuo1hw-us-east-1"
+else
+    SAM_S3_BUCKET="appdevstore"
+fi
+
+# define all application names that needs to be published.
+app_names=(
+    "GuardDuty:template.yaml"
+    "guarddutybenchmark:template_V2.yaml"
+)
+
+sam --version
+# Regex to deploy only expected templates.
+match_case=""
+
+for app_name in "${app_names[@]}"
+do
+    KEY="${app_name%%:*}"
+    VALUE="${app_name##*:}"
+
+    if [[ "${KEY}" == *"${match_case}"* ]]; then
+        # Grep Version from the SAM Template.
+        version=$(grep AWS::ServerlessRepo::Application: ../"${KEY}/${VALUE}" -A 20 | grep SemanticVersion | cut -d ':' -f 2 | xargs)
+        echo "Package and publish the Template file ${VALUE} with version ${version}."
+
+        sam validate -t ../"${KEY}/${VALUE}"
+
+        sam package --profile ${AWS_PROFILE} --template-file ../"${KEY}/${VALUE}" --s3-bucket ${SAM_S3_BUCKET}  --output-template-file ../"${KEY}"/packaged.yaml \
+        --s3-prefix "${KEY}/v${version}"
+
+        sam publish --template ../"${KEY}"/packaged.yaml --region ${AWS_REGION} --semantic-version "${version}"
+        echo "Publish done"
+    fi
+done