template.yaml

AWSTemplateFormatVersion: 2010-09-09
Transform: AWS::Serverless-2016-10-31
Description: Lambda@Edge functions

Globals:
  Function:
    Timeout: 15

Resources:
  RestfulApiHandler:
    Type: AWS::Serverless::Function
    Properties:
      Description: Handler example with preconfigured routes and middleware.
      CodeUri: ./restfulApiHandler
      Handler: app.handler
      Runtime: nodejs20.x
      AutoPublishAlias: Auto
      Role: !GetAtt LambdaEdgeRole.Arn
    Metadata:
      BuildMethod: makefile

  LambdaEdgeRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Sub ${AWS::StackName}-restfulApiHandler
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          Effect: Allow
          Principal:
            Service:
              - lambda.amazonaws.com
              - edgelambda.amazonaws.com
          Action: sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole

  CloudFrontConfig:
    Type: AWS::CloudFront::Distribution
    Properties:
      DistributionConfig:
        Comment: RestfulApiHandler
        Enabled: true
        Origins:
          -
            Id: restfulApiHandler
            DomainName: aws.amazon.com
            CustomOriginConfig:
              HTTPPort: 443
              OriginProtocolPolicy: https-only
        DefaultCacheBehavior:
          TargetOriginId: restfulApiHandler
          ForwardedValues:
            QueryString: false
            Cookies:
              Forward: none
          ViewerProtocolPolicy: allow-all
        CacheBehaviors:
          -
            TargetOriginId: restfulApiHandler
            PathPattern: '/api*'
            AllowedMethods:
              - GET
              - HEAD
              - OPTIONS
              - PUT
              - PATCH
              - POST
              - DELETE
            ForwardedValues:
              Headers:
                - Accept
                - Authorization
              QueryString: false
              Cookies:
                Forward: none
            LambdaFunctionAssociations:
              -
                EventType: origin-request
                LambdaFunctionARN: !Ref RestfulApiHandler.Version
                IncludeBody: true
            ViewerProtocolPolicy: allow-all