AWS CloudFormation と AWS SAM を使用したサーバーレスアプリケーションの開発とデプロイ

$ sam init --runtime python3.8 --name amazon-celeb-rekognition
Which template source would you like to use?
        1 - AWS Quick Start Templates
        2 - Custom Template Location
Choice: 1
What package type would you like to use?
        1 - Zip (artifact is a zip uploaded to S3)
        2 - Image (artifact is an image uploaded to an ECR image repository)
Package type: 1

Cloning from https://github.com/aws/aws-sam-cli-app-templates

AWS quick start application templates:
        1 - Hello World Example
        2 - EventBridge Hello World
        3 - EventBridge App from scratch (100+ Event Schemas)
        4 - Step Functions Sample App (Stock Trader)
        5 - Elastic File System Sample App
Template selection: 1

    -----------------------
    Generating application:
    -----------------------
    Name: amazon-celeb-rekognition
    Runtime: python3.8
    Dependency Manager: pip
    Application Template: hello-world
    Output Directory: .

    Next steps can be found in the README file at ./amazon-celeb-rekognition/README.md

$ tree amazon-celeb-rekognition
amazon-celeb-rekognition
├── README.md
├── __init__.py
├── events
│   └── event.json
├── hello_world
│   ├── __init__.py
│   ├── app.py
│   └── requirements.txt
├── template.yaml
└── tests
    ├── __init__.py
    ├── integration
    │   ├── __init__.py
    │   └── test_api_gateway.py
    ├── requirements.txt
    └── unit
        ├── __init__.py
        └── test_handler.py

5 directories, 13 files

cd amazon-celeb-rekognition
rm -rf ./events
rm -rf ./hello_world
rm -rf ./tests
mkdir imganalyzer

AWSTemplateFormatVersion: '2010-09-09'
Transform: 'AWS::Serverless-2016-10-31'
Resources:
  uploader:
    Type: AWS::Serverless::Application
    Properties:
      Location:
        ApplicationId: arn:aws:serverlessrepo:us-east-1:233054207705:applications/uploader
        SemanticVersion: 1.1.0
      Parameters: 
        # Name of the S3 Bucket to put uploaded files into (must exist prior to deployment)
        destBucket: YOUR_VALUE

AWSTemplateFormatVersion: '2010-09-09'
Transform: 'AWS::Serverless-2016-10-31'

Resources:
  uploader:
   Type: AWS::Serverless::Application
   Properties:
     Location:
       ApplicationId: arn:aws:serverlessrepo:us-east-1:233054207705:applications/uploader
       SemanticVersion: 1.1.0
     Parameters: 
       # Name of the S3 Bucket to put uploaded files into (must exist prior to deployment)
       destBucket: YOUR_VALUE

  imganalyzer:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: imganalyzer/
      Handler: app.lambda_handler
      Runtime: python3.8
      Description: An Amazon S3 trigger that uses rekognition APIs to detect faces
      MemorySize: 128
      Timeout: 3
      Policies:
        - AmazonRekognitionReadOnlyAccess
        - S3ReadPolicy:
            BucketName: !Sub "${AWS::StackName}-${AWS::Region}-${AWS::AccountId}"
      Events:
        BucketEvent1:
          Type: S3
          Properties:
            Bucket: !Ref Bucket1
            Events:
              - 's3:ObjectCreated:*'
  Bucket1:
    Type: 'AWS::S3::Bucket'
    Properties:
      BucketName: !Sub "${AWS::StackName}-${AWS::Region}-${AWS::AccountId}"

      Description: An Amazon S3 trigger that uses rekognition APIs to detect faces
      MemorySize: 128
      Timeout: 3

      Policies:
        - AmazonRekognitionReadOnlyAccess
        - S3ReadPolicy:
            BucketName: !Sub "${AWS::StackName}-${AWS::Region}-${AWS::AccountId}"

  Events:
    BucketEvent1:
      Type: S3
      Properties:
        Bucket: !Ref Bucket1
        Events:
          - 's3:ObjectCreated:*'

  Bucket1:
    Type: 'AWS::S3::Bucket'
    Properties:
      BucketName: !Sub "${AWS::StackName}-${AWS::Region}-${AWS::AccountId}"

        # Name of the S3 Bucket to put uploaded files into (must exist prior to deployment)
        destBucket: !Ref Bucket1

AWSTemplateFormatVersion: '2010-09-09'
Transform: 'AWS::Serverless-2016-10-31'
Description: An Amazon S3 trigger that uses Amazon Rekognition APIs to detect faces
Resources:
  uploader:
    Type: AWS::Serverless::Application
    Properties:
      Location:
        ApplicationId: arn:aws:serverlessrepo:us-east-1:233054207705:applications/uploader
        SemanticVersion: 1.1.0
      Parameters: 
        # Name of the S3 Bucket to put uploaded files into (must exist prior to deployment)
        destBucket: !Ref Bucket1      
  imganalyzer:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: imganalyzer/
      Handler: app.lambda_handler
      Runtime: python3.8
      Description: An Amazon S3 trigger that uses rekognition APIs to detect faces
      MemorySize: 128
      Timeout: 3
      Policies:
        - AmazonRekognitionReadOnlyAccess
        - S3ReadPolicy:
            BucketName: !Sub "${AWS::StackName}-${AWS::Region}-${AWS::AccountId}"
      Events:
        BucketEvent1:
          Type: S3
          Properties:
            Bucket: !Ref Bucket1
            Events:
              - 's3:ObjectCreated:*'
  Bucket1:
    Type: 'AWS::S3::Bucket'
    Properties:
      BucketName: !Sub "${AWS::StackName}-${AWS::Region}-${AWS::AccountId}"

touch imganalyzer/app.py

import boto3
import urllib

#print('Loading function')
rekognition = boto3.client('rekognition')

# --------------- Main handler ------------------
def lambda_handler(event, context):
    # Get the object from the event
    bucket = event['Records'][0]['s3']['bucket']['name']
    key = urllib.parse.unquote_plus(event['Records'][0]['s3']['object']['key'])
    try:
        response = rekognition.recognize_celebrities(Image={"S3Object": {"Bucket": bucket, "Name": key}})
        for celebrity in response['CelebrityFaces']:
            print('Name: {}'.format(celebrity['Name']))
            print('Id: {}'.format(celebrity['Id']))
            print('Position:')
            print('   Left: {:.2f}'.format(celebrity['Face']['BoundingBox']['Height']))
            print('   Top: {:.2f}'.format(celebrity['Face']['BoundingBox']['Top']))
            print('Info')
            for url in celebrity['Urls']:
                print('   {}'.format(url))
        # Print response to console.
        print(response)
        #return response
    except Exception as e:
        #print(e)
        print("Error processing object {} from bucket {}. ".format(key, bucket) +
              "Make sure your object and bucket exist and your bucket is in the same region as this function.")
        raise e

touch imganalyzer/requirements.txt

$ tree
.
├── README.md
├── __init__.py
├── imganalyzer
│   ├── app.py
│   └── requirements.txt
└── template.yaml

1 directory, 5 files

cfn-lint template.yaml

sam build

Build Succeeded

Built Artifacts  : .aws-sam/build
Built Template   : .aws-sam/build/template.yaml

Commands you can use next
=========================
[*] Invoke Function: sam local invoke
[*] Deploy: sam deploy --guided

Running PythonPipBuilder:ResolveDependencies
Running PythonPipBuilder:CopySource

$ sam deploy --guided --capabilities CAPABILITY_IAM CAPABILITY_AUTO_EXPAND

Configuring SAM deploy
======================

        Looking for config file [samconfig.toml] :  Not found

        Setting default arguments for 'sam deploy'
        =========================================
        Stack Name [sam-app]: celebrityrekognition
        AWS Region [ap-northeast-1]:
        ...
        #Shows you resources changes to be deployed and require a 'Y' to initiate deploy
        Confirm changes before deploy [y/N]: y
        #SAM needs permission to be able to create roles to connect to the resources in your template
        Allow SAM CLI IAM role creation [Y/n]: Y
        ...
        Save arguments to configuration file [Y/n]: Y
        SAM configuration file [samconfig.toml]:
        SAM configuration environment [default]:

        Looking for resources needed for deployment: Not found.
        Creating the required resources...
        Successfully created!

                Managed S3 bucket: aws-sam-cli-managed-default-samclisourcebucket-xxxxxxxxxxxxxx
                A different default S3 bucket can be set in samconfig.toml

        Saved arguments to config file
        Running 'sam deploy' for future deployments will use the parameters saved above.
        The above parameters can be changed by modifying samconfig.toml
        Learn more about samconfig.toml syntax at
        https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/serverless-sam-cli-config.html

        ...
        Deploying with following values
        ===============================
        Stack name                   : celebrityrekognition
        Region                       : ap-northeast-1
        Confirm changeset            : True
        Deployment s3 bucket         : aws-sam-cli-managed-default-samclisourcebucket-xxxxxxxxxxxxxx
        Capabilities                 : ["CAPABILITY_IAM", "CAPABILITY_AUTO_EXPAND"]
        Parameter overrides          : {}
        Signing Profiles             : {}

Initiating deployment
=====================
...

Waiting for changeset to be created..

CloudFormation stack changeset
-------------------------------------------------------------------------------------------------
Operation                LogicalResourceId        ResourceType             Replacement
-------------------------------------------------------------------------------------------------
+ Add                    Bucket1                  AWS::S3::Bucket          N/A  
+ Add                    imganalyzerBucketEvent   AWS::Lambda::Permissio   N/A  
                         1Permission              n                             
+ Add                    imganalyzerRole          AWS::IAM::Role           N/A  
+ Add                    imganalyzer              AWS::Lambda::Function    N/A  
+ Add                    uploader                 AWS::CloudFormation::S   N/A  
                                                  tack                          
-------------------------------------------------------------------------------------------------

Changeset created successfully. arn:aws:cloudformation:ap-northeast-1:123456789012:changeSet/samcli-deploy....


Previewing CloudFormation changeset before deployment
======================================================
Deploy this changeset? [y/N]: y

2021-06-24 22:10:25 - Waiting for stack create/update to complete

CloudFormation events from changeset
-------------------------------------------------------------------------------------------------
ResourceStatus           ResourceType             LogicalResourceId        ResourceStatusReason
-------------------------------------------------------------------------------------------------
CREATE_IN_PROGRESS       AWS::IAM::Role           imganalyzerRole          -    
CREATE_IN_PROGRESS       AWS::IAM::Role           imganalyzerRole          Resource creation
                                                                           Initiated
CREATE_COMPLETE          AWS::IAM::Role           imganalyzerRole          -    
CREATE_IN_PROGRESS       AWS::Lambda::Function    imganalyzer              -    
CREATE_IN_PROGRESS       AWS::Lambda::Function    imganalyzer              Resource creation
                                                                           Initiated
CREATE_COMPLETE          AWS::Lambda::Function    imganalyzer              -    
CREATE_IN_PROGRESS       AWS::Lambda::Permissio   imganalyzerBucketEvent   -    
                         n                        1Permission                   
CREATE_IN_PROGRESS       AWS::Lambda::Permissio   imganalyzerBucketEvent   Resource creation
                         n                        1Permission              Initiated
CREATE_COMPLETE          AWS::Lambda::Permissio   imganalyzerBucketEvent   -    
                         n                        1Permission                   
CREATE_IN_PROGRESS       AWS::S3::Bucket          Bucket1                  -    
CREATE_IN_PROGRESS       AWS::S3::Bucket          Bucket1                  Resource creation
                                                                           Initiated
CREATE_COMPLETE          AWS::S3::Bucket          Bucket1                  -    
CREATE_IN_PROGRESS       AWS::CloudFormation::S   uploader                 -    
                         tack                                                   
CREATE_IN_PROGRESS       AWS::CloudFormation::S   uploader                 Resource creation
                         tack                                              Initiated
CREATE_COMPLETE          AWS::CloudFormation::S   uploader                 -    
                         tack                                                   
CREATE_COMPLETE          AWS::CloudFormation::S   celebrityrekognition     -    
                         tack                                                   
-------------------------------------------------------------------------------------------------

Successfully created/updated stack - celebrityrekognition in ap-northeast-1