template.yaml

# https://github.com/awslabs/serverless-application-model/blob/develop/versions/2016-10-31.md
# Indentation needs to be set with spaces, because YAML...
AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: API endpoint to receive feedback from the Firestone feedback form


Resources:
    ProcessFeedbackFunction2:
        Type: AWS::Serverless::Function
        Properties:
            Handler: feedback.default
            Runtime: nodejs18.x
            CodeUri: ./dist/feedback
            Timeout: 15
            MemorySize: 512
            VpcConfig:
                SecurityGroupIds:
                    - sg-eccd2691
                SubnetIds:
                    - subnet-894624ec # Only the private subnet
            # Layers:
            #     - !Sub "arn:aws:lambda:${AWS::Region}:580247275435:layer:LambdaInsightsExtension:14"
            Policies:
                - AWSLambdaVPCAccessExecutionRole
                - SecretsManagerReadWrite
                - AmazonSESFullAccess
                - AWSLambda_FullAccess
                - arn:aws:iam::aws:policy/CloudWatchLambdaInsightsExecutionRolePolicy
                # For VPC
                - AWSLambdaENIManagementAccess
                # - arn:aws:iam::478062583808:policy/CloudWatchPolicyForLambda # See https://stackoverflow.com/questions/51166504/disable-cloudwatch-to-monitor-logs-for-lambda-function
            Tags:
                LambdaName: api-feedback-2
            AutoPublishAlias: live
            FunctionUrlConfig:
                AuthType: NONE