andreidiaconu90

  MyDeployBucket:
    Type: AWS::S3::Bucket
    DeletionPolicy: Delete
    Properties:
      AccessControl: Private
      VersioningConfiguration:
        Status: Suspended

andreidiaconu90

  MyCodePipeline:
    Type: AWS::CodePipeline::Pipeline
    Properties:
      ArtifactStore:
        Type: S3
        Location: !Ref MyDeployBucket
      RoleArn: !GetAtt
        - MyCodePipelineServiceRole
        - Arn
      Stages:

andreidiaconu90

  MyCodePipeline:
    Type: AWS::CodePipeline::Pipeline
    Properties:
      ArtifactStore[...]
      RoleArn:[...]
      Stages:
        - Name: Source # this is the name that will show up in the AWS console, so consider this the user-friendly name
          Actions:
            - Name: Get-sources # this is the name used to reference a step by. Consider this the developer-friendly name
              ActionTypeId:

andreidiaconu90

  DeployToStaging:
    Type: AWS::CodeBuild::Project
    Properties:
      Name: "Deploy-to-staging" #this is the name that we'll later use to reference this project inside the CodePipeline definition
      ServiceRole: !GetAtt
        - ResourcesCodePipelineServiceRole #codepipeline will pass this role to the CodeBuild projects so that they have the rights to create/update/delete resources
        - Arn
      Artifacts:
        Type: CODEPIPELINE
      Environment:

andreidiaconu90

Policies:
  - PolicyName: mypolicy
    PolicyDocument:
      Version: "2012-10-17"
      Statement:
        - Effect: Allow
          Resource: *
          Action: *

andreidiaconu90

Policies:
  - PolicyName: my-pipeline-policy
    PolicyDocument:
      Version: "2012-10-17"
      Statement:
        - Effect: Allow
          Resource:
            - !Sub "arn:aws:logs:*:${AWS::AccountId}:log-group:/aws/codebuild/*"
            - !Sub "arn:aws:logs:*:${AWS::AccountId}:log-group:/aws/codebuild/*:log-stream:*"
          Action:

andreidiaconu90

MyCodePipelineServiceRole:
    Type: "AWS::IAM::Role"
    Properties:
      RoleName: "my-pipeline-role"
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service:

andreidiaconu90

  MyCloudWatchWebHookRole:
    Type: "AWS::IAM::Role"
    Properties:
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service:
                - events.amazonaws.com

andreidiaconu90

  MyCloudWatchWebHook:
    Type: "AWS::Events::Rule"
    Properties:
      EventPattern:
        source:
          - aws.codecommit
        detail-type:
          - "CodeCommit Repository State Change"
        resources:
          - !Join

andreidiaconu90

service:my service

provider:
  name: aws
  runtime: nodejs12.x
  region: my-region
  profile: default
  apiGateway:
    binaryMediaTypes:
      - "application/octet-stream"