AWS SAM template automated embedding of environment variables using the Doppler CLI

.gitignore

template-deployment.yaml

README.md

AWS SAM template automated embedding of environment variables using the Doppler CLI

Local development

./deploy-template.sh > template-deploy.yaml;sam local start-api --template template-deploy.yaml;rm template-deploy.yaml;

Deployment

./deploy-template.sh > template-deploy.yaml;sam deploy --template template-deploy.yaml;rm template-deploy.yaml;

deploy-template.sh

#!/usr/bin/env bash

SECRETS=$(jq -r '. | to_entries[] | "          \(.key): \(.value)"' <(doppler secrets download --no-file))
ENV_TEMPLATE="Environment:
        Variables:"
ENV_VARS="$ENV_TEMPLATE\n$SECRETS"
TEMPLATE=$(cat template.yaml)

echo -e "${TEMPLATE/\#\$ENVIRONMENT/$ENV_VARS}"

template.yaml

# Used by deploy-template.sh to replace `#$ENVIRONMENT` with the list of Doppler secrets
AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: >
  sam-app

  Sample SAM Template for sam-app

Globals:
  Function:
    Timeout: 3

Resources:
  HelloWorldFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: hello_world/
      Handler: app.lambda_handler
      Runtime: python3.8
      #$ENVIRONMENT
      Events:
        HelloWorld:
          Type: Api
          Properties:
            Path: /hello
            Method: get

Outputs:
  # ServerlessRestApi is an implicit API created out of Events key under Serverless::Function
  # Find out more about other implicit resources you can reference within SAM
  # https://github.com/awslabs/serverless-application-model/blob/master/docs/internals/generated_resources.rst#api
  HelloWorldApi:
    Description: "API Gateway endpoint URL for Prod stage for Hello World function"
    Value: !Sub "https://${ServerlessRestApi}.execute-api.${AWS::Region}.amazonaws.com/Prod/hello/"
  HelloWorldFunction:
    Description: "Hello World Lambda Function ARN"
    Value: !GetAtt HelloWorldFunction.Arn
  HelloWorldFunctionIamRole:
    Description: "Implicit IAM Role created for Hello World function"
    Value: !GetAtt HelloWorldFunctionRole.Arn