cloudformation/locktable.yaml at develop · glawit/cloudformation · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
---


AWSTemplateFormatVersion: 2010-09-09


Description: 'git LFS: Lock table'


Resources:

   Table:
      Type: AWS::DynamoDB::Table
      Properties:
         AttributeDefinitions:
            -
               AttributeName: path
               AttributeType: S
         BillingMode: PAY_PER_REQUEST
         KeySchema:
            -
               AttributeName: path
               KeyType: HASH

   LockCreationPolicy:
      Type: AWS::IAM::ManagedPolicy
      Properties:
         Description:
            Fn::Sub: Manage git LFS locks on DynamoDB table ${Table}
         PolicyDocument:
            Version: 2012-10-17
            Statement:
               -
                  Action:
                     - dynamodb:PutItem
                  Resource:
                     -
                        Fn::GetAtt:
                           - Table
                           - Arn
                  Effect: Allow

   LockDeletionPolicy:
      Type: AWS::IAM::ManagedPolicy
      Properties:
         Description:
            Fn::Sub: Manage git LFS locks on DynamoDB table ${Table}
         PolicyDocument:
            Version: 2012-10-17
            Statement:
               -
                  Action:
                     - dynamodb:DeleteItem
                  Resource:
                     -
                        Fn::GetAtt:
                           - Table
                           - Arn
                  Effect: Allow

   LockLookupPolicy:
      Type: AWS::IAM::ManagedPolicy
      Properties:
         Description:
            Fn::Sub: Manage git LFS locks on DynamoDB table ${Table}
         PolicyDocument:
            Version: 2012-10-17
            Statement:
               -
                  Action:
                     - dynamodb:GetItem
                     - dynamodb:Scan
                  Resource:
                     -
                        Fn::GetAtt:
                           - Table
                           - Arn
                  Effect: Allow


Outputs:

   LockCreationPolicyArn:
      Description: ARN of the lock creation policy.
      Value:
         Ref: LockCreationPolicy

   LockDeletionPolicyArn:
      Description: ARN of the lock deletion policy.
      Value:
         Ref: LockDeletionPolicy

   LockLookupPolicyArn:
      Description: ARN of the lock lookup policy.
      Value:
         Ref: LockLookupPolicy

   TableArn:
      Description: ARN of the DynamoDB table.
      Value:
         Fn::GetAtt:
            - Table
            - Arn

   TableName:
      Description: Name of the DynamoDB table.
      Value:
         Ref: Table