template.yaml

AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: >
  NotifyAwsBillingToSlack
  
  Sample SAM Template for NotifyBillingToSlack

# More info about Globals: https://github.com/awslabs/serverless-application-model/blob/master/docs/globals.rst
Globals:
  Function:
    Timeout: 5

Resources:
  NotifyAwsBillingToSlackFunctionRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service: lambda.amazonaws.com
            Action: "sts:AssumeRole"
      Policies:
        - PolicyName: NotifyAwsBillingToSlackFunctionPolicy
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Effect: Allow
                Action:
                  - "logs:CreateLogGroup"
                  - "logs:CreateLogStream"
                  - "logs:PutLogEvents"
                  - "ce:GetCostAndUsage"
                  - "xray:PutTraceSegments"
                  - "xray:PutTelemetryRecords"
                Resource: "*"
              - Effect: Allow
                Action:
                  - "ssm:GetParameter"
                Resource:   # https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/pseudo-parameter-reference.html
                  - Fn::Join:
                    - ''
                    - - 'arn:aws:ssm:ap-northeast-1:'
                      - !Ref AWS::AccountId
                      - ':parameter/NotifyAwsBillingToSlack.WebHookUrl'

  NotifyAwsBillingToSlackFunction:
    Type: AWS::Serverless::Function # More info about Function Resource: https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#awsserverlessfunction
    Properties:
      CodeUri: handler/
      #CodeUri: .
      Handler: main
      #Handler: bootstrap
      #Runtime: go1.x
      # https://docs.aws.amazon.com/ja_jp/lambda/latest/dg/lambda-golang.html
      Runtime: provided.al2023
      Architectures: [x86_64]
      Tracing: Active # https://docs.aws.amazon.com/lambda/latest/dg/lambda-x-ray.html
      Environment: # More info about Env Vars: https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md#environment-object
        Variables:
          PARAM1: VALUE
      Role: !GetAtt NotifyAwsBillingToSlackFunctionRole.Arn
      Events:
        ExecEventRule:
          Type: Schedule
          Properties:
            Schedule: cron(0 0 * * ? *) # 日本時間AM9時に毎日通知する
    Metadata:
      BuildMethod: go1.x

Outputs:
  NotifyAwsBillingToSlackFunction:
    Description: "First Lambda Function ARN"
    Value: !GetAtt NotifyAwsBillingToSlackFunction.Arn
  NotifyAwsBillingToSlackFunctionRole:
    Description: "Implicit IAM Role created for Hello World function"
    Value: !GetAtt NotifyAwsBillingToSlackFunctionRole.Arn