template.yaml

AWSTemplateFormatVersion: 2010-09-09
Transform: AWS::Serverless-2016-10-31
Resources:
  Images:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub ${AWS::StackName}-images-${AWS::AccountId}
  CollectionImages:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub ${AWS::StackName}-collectio-${AWS::AccountId}
  CollectionTable:
    Type: AWS::DynamoDB::Table
    Properties:
      AttributeDefinitions:
        - AttributeName: ObjectKey
          AttributeType: S
      BillingMode: PAY_PER_REQUEST
      KeySchema:
        - AttributeName: ObjectKey
          KeyType: HASH
      TableName: !Sub ${AWS::StackName}-CollectionTable
  CompareFaces:
    Type: AWS::Serverless::Function
    Properties:
      Architectures:
        - arm64
      FunctionName: !Sub ${AWS::StackName}-CompareFaces
      Description: !Sub
        - Stack ${AWS::StackName} Function ${ResourceName}
        - ResourceName: CompareFaces
      CodeUri: src/CompareFaces
      Handler: index.handler
      Runtime: nodejs20.x
      MemorySize: 4008
      Timeout: 45
      Tracing: Active
      Policies:
        - AWSXrayWriteOnlyAccess
        - Version: 2012-10-17
          Statement:
            - Effect: Allow
              Resource: "*"
              Action:
                - rekognition:SearchFacesByImage
        - Version: 2012-10-17
          Statement:
            - Effect: Allow
              Resource: !Sub arn:aws:s3:::${AWS::StackName}-images-${AWS::AccountId}/*
              Action:
                - s3:GetObject
      Events:
        Images:
          Type: S3
          Properties:
            Bucket: !Ref Images
            Events:
              - s3:ObjectCreated:*
      Environment:
        Variables:
          COLLECTION_NAME: !Ref RekognitionId
  ManageCollection:
    Type: AWS::Serverless::Function
    Properties:
      Architectures:
        - arm64
      FunctionName: !Sub ${AWS::StackName}-ManageCollection
      Description: !Sub
        - Stack ${AWS::StackName} Function ${ResourceName}
        - ResourceName: ManageCollection
      CodeUri: src/ManageCollection
      Handler: index.handler
      Runtime: nodejs20.x
      MemorySize: 4008
      Timeout: 45
      Tracing: Active
      Policies:
        - AWSXrayWriteOnlyAccess
        - Version: 2012-10-17
          Statement:
            - Effect: Allow
              Resource: "*"
              Action:
                - rekognition:IndexFaces
                - rekognition:DeleteFaces
        - Version: 2012-10-17
          Statement:
            - Effect: Allow
              Resource: !Sub arn:aws:s3:::${AWS::StackName}-collectio-${AWS::AccountId}/*
              Action:
                - s3:GetObject
        - Version: 2012-10-17
          Statement:
            - Effect: Allow
              Resource: !GetAtt CollectionTable.Arn
              Action:
                - dynamodb:GetItem
                - dynamodb:PutItem
                - dynamodb:DeleteItem
      Events:
        CollectionImages:
          Type: S3
          Properties:
            Bucket: !Ref CollectionImages
            Events:
              - s3:ObjectCreated:*
              - s3:ObjectRemoved:*
      Environment:
        Variables:
          TABLE_NAME: !Ref CollectionTable
          TABLE_ARN: !GetAtt CollectionTable.Arn
          COLLECTION_NAME: !Ref RekognitionId
Parameters:
  RekognitionId:
    Type: String
    Description: Collection ID for Rekognition
    Default: facespace