AWSTemplateFormatVersion: 2010-09-09
Description: AppSync setup
Parameters:
  FunctionStack:
    Description: The stack name that deploys the Lambda functions to invoke.
    Type: String
Resources:
  DataSourceRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          - Action: sts:AssumeRole
            Effect: Allow
            Principal:
              Service: appsync.amazonaws.com
      Policies:
        - PolicyName: LambdaInvoker
          PolicyDocument:
            Version: 2012-10-17
            Statement:
              - Action: lambda:InvokeFunction
                Effect: Allow
                Resource:
                  - Fn::Join:
                    - ''
                    - - 'arn:aws:lambda:'
                      - !Ref AWS::Region
                      - ':'
                      - !Ref AWS::AccountId
                      - ':function:'
                      - Fn::ImportValue:
                          !Sub '${FunctionStack}-functions-Service'
                  - Fn::Join:
                    - ''
                    - - 'arn:aws:lambda:'
                      - !Ref AWS::Region
                      - ':'
                      - !Ref AWS::AccountId
                      - ':function:'
                      - Fn::ImportValue:
                          !Sub '${FunctionStack}-functions-Service'
                      - ':*'
      RoleName: !Sub '${AWS::StackName}-lambda-role'
  GqlApi:
    Type: AWS::AppSync::GraphQLApi
    Properties:
      AuthenticationType:  AWS_IAM
      Name: !Ref AWS::StackName
  GqlSchema:
    Type: AWS::AppSync::GraphQLSchema
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      Definition: |
        type Mutation {

          deleteService(serviceName: String, cognitoIdentityId__: String): !

          postService(serviceName: String, version: String, config: AWSDateTime, cognitoIdentityId__: String): !

          postService(serviceName: String, version: String, config: AWSDateTime, force: Boolean, cognitoIdentityId__: String): !

          putService(serviceConfig: ServiceConfigInput! , serviceName: String, cognitoIdentityId__: String): !

        }

        type Query {

          getService(cognitoIdentityId__: String): 

          getService(serviceName: String, cognitoIdentityId__: String): Service

          getService(serviceName: String, from: AWSDateTime, to: AWSDateTime, cognitoIdentityId__: String): 

          getService(serviceName: String, cognitoIdentityId__: String): ServiceConfig

          getService(serviceName: String, timestamp: AWSDateTime, cognitoIdentityId__: String): ServiceConfig

        }

        input EbConfigInput {
          commands: AWSJSON
          containerCommands: AWSJSON
          deploymentBucket: String
          files: AWSJSON
          groups: AWSJSON
          packages: AWSJSON
          resources: AWSJSON
          services: AWSJSON
          settings: [option_settingInput]
          sources: AWSJSON
          stack: String
          users: AWSJSON
        }
        type EbConfig {
          commands: AWSJSON
          containerCommands: AWSJSON
          deploymentBucket: String! 
          files: AWSJSON
          groups: AWSJSON
          packages: AWSJSON
          resources: AWSJSON
          services: AWSJSON
          settings: [option_setting]
          sources: AWSJSON
          stack: String
          users: AWSJSON
        }
        input ElbSettingsInput {
          name: String
          rolloutDelayMinutes: Int
          securityGroup: String
        }
        type ElbSettings {
          name: String! 
          rolloutDelayMinutes: Int! 
          securityGroup: String! 
        }
        input EnvironmentInput {
          health: String
          release: releaseInput
        }
        type Environment {
          health: String! 
          release: release! 
        }
        input OptionSettingInput {
          namespace: String
          optionName: String
          value: String
        }
        type OptionSetting {
          namespace: String! 
          optionName: String! 
          value: String! 
        }
        input PortMappingInput {
          external: Int
          internal: Int
        }
        type PortMapping {
          external: Int! 
          internal: Int! 
        }
        input ReleaseInput {
          config: AWSDateTime
          image: String
          rolloutStatus: rollout_statusInput
          tag: String
        }
        type Release {
          config: AWSDateTime! 
          image: String! 
          rolloutStatus: rollout_status
          tag: String! 
        }
        input RolloutStatusInput {
          completedAt: AWSDateTime
          numInstances: Int
        }
        type RolloutStatus {
          completedAt: AWSDateTime
          numInstances: Int
        }
        input ServiceInput {
          name: String
          state: service_stateInput
        }
        type Service {
          name: String! 
          state: service_state! 
        }
        input ServiceConfigInput {
          awsAccountId: String
          eb: eb_configInput
          externalElb: elb_settingsInput
          hostedZoneId: String
          image: String
          portMappings: [port_mappingInput]
          removeUnusedAfterMinutes: Int
          runArgs: [String]
          serviceRole: String
          timestamp: AWSDateTime
          url: String
          volumeMappings: [volume_mappingInput]
        }
        type ServiceConfig {
          awsAccountId: String! 
          eb: eb_config! 
          externalElb: elb_settings
          hostedZoneId: String! 
          image: String! 
          portMappings: [port_mapping]! 
          removeUnusedAfterMinutes: Int
          runArgs: [String]! 
          serviceRole: String! 
          timestamp: AWSDateTime
          url: String! 
          volumeMappings: [volume_mapping]
        }
        input ServiceCurrentStateInput {
          environments: [environmentInput]
        }
        type ServiceCurrentState {
          environments: [environment]! 
        }
        input ServiceDesiredStateInput {
          current: releaseInput
          future: releaseInput
          next: releaseInput
        }
        type ServiceDesiredState {
          current: release
          future: release
          next: release
        }
        input ServiceStateInput {
          current: service_current_stateInput
          desired: service_desired_stateInput
        }
        type ServiceState {
          current: service_current_state! 
          desired: service_desired_state
        }
        input VolumeMappingInput {
          external: String
          internal: String
        }
        type VolumeMapping {
          external: String! 
          internal: String! 
        }


        schema {
          query: Query
          mutation: Mutation
        }
    DependsOn:
      - GqlApi
  ServiceDataSource:
    Type: AWS::AppSync::DataSource
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      LambdaConfig:
        LambdaFunctionArn:
          Fn::Join:
            - ''
            - - 'arn:aws:lambda:'
              - !Ref AWS::Region
              - ':'
              - !Ref AWS::AccountId
              - ':function:'
              - Fn::ImportValue:
                  !Sub '${FunctionStack}-functions-Service'
      Name: service_lambda
      ServiceRoleArn: !GetAtt DataSourceRole.Arn
      Type: AWS_LAMBDA
    DependsOn:
      - DataSourceRole
      - GqlApi
  DeleteServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: deleteService
      TypeName: Mutation
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "delete",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {
              "serviceName": "$util.escapeJavaScript($context.args.serviceName)"
            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
  GetServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getService
      TypeName: Query
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {

            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
  GetServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getService
      TypeName: Query
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {
              "serviceName": "$util.escapeJavaScript($context.args.serviceName)"
            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
  GetServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getService
      TypeName: Query
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {
              "serviceName": "$util.escapeJavaScript($context.args.serviceName)"
            },
            "queryStringParameters": {
              "from": "$util.escapeJavaScript($context.args.from)",
              "to": "$util.escapeJavaScript($context.args.to)"
            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
  GetServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getService
      TypeName: Query
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {
              "serviceName": "$util.escapeJavaScript($context.args.serviceName)"
            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
  GetServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: getService
      TypeName: Query
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "get",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {
              "serviceName": "$util.escapeJavaScript($context.args.serviceName)",
              "timestamp": "$util.escapeJavaScript($context.args.timestamp)"
            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
  PostServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: postService
      TypeName: Mutation
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "post",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {
              "serviceName": "$util.escapeJavaScript($context.args.serviceName)"
            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
  PostServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: postService
      TypeName: Mutation
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "post",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {
              "serviceName": "$util.escapeJavaScript($context.args.serviceName)"
            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
  PutServiceResolver:
    Type: AWS::AppSync::Resolver
    Properties:
      ApiId: !GetAtt GqlApi.ApiId
      FieldName: putService
      TypeName: Mutation
      DataSourceName: !GetAtt ServiceDataSource.Name
      RequestMappingTemplate: |
        #set( $cognitoIdentityId = $context.identity.cognitoIdentityId )
        #if($context.identity.userArn.matches('arn:aws:iam::\d+:user/.*'))
          #if($context.args.cognitoIdentityId__)
            #set( $cognitoIdentityId = $context.args.cognitoIdentityId__ )
          #elseif( $context.source.cognitoIdentityId__ )
            #set( $cognitoIdentityId = $context.source.cognitoIdentityId__ )
          #end
        #end
        #set( $unamepwd = "$util.urlEncode($cognitoIdentityId):" )
        {
          "version" : "2017-02-28",
          "operation": "Invoke",
          "payload": {
            "source": "AppSync",
            "httpMethod": "put",
            "body": "$util.escapeJavaScript($util.toJson($context.args.serviceConfig))",
            "headers": {
              "Authorization": "Basic $util.base64Encode($unamepwd)",
            },
            "pathParameters": {
              "serviceName": "$util.escapeJavaScript($context.args.serviceName)"
            },
            "queryStringParameters": {

            }
          }
        }
      ResponseMappingTemplate: |
        #if($context.result.statusCode >= 200 && $context.result.statusCode <= 299)
          #set( $result = $util.parseJson($context.result.body) )
          #if($context.args.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.args.cognitoIdentityId__ )
          #elseif($context.source.cognitoIdentityId__)
            #set( $result.cognitoIdentityId__ = $context.source.cognitoIdentityId__ )
          #end
          $util.toJson($result)
        #else
          $utils.error($util.parseJson($context.result.body).message, $context.result.statusCode.toString(), $util.parseJson($context.result.body))
        #end
    DependsOn:
      - GqlApi
      - GqlSchema
      - ServiceDataSource
Outputs:
  ApiEndpoint:
    Description: The endpoint for the AppSync API.
    Value: !GetAtt GqlApi.GraphQLUrl