Current File : //usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m Z d d l
Z d d l j
j Z d d l Z d d l Z d d l m Z e j e � Z d � Z d d d d d d d d d
d d d d d d d � Z d d d d d � Z d d d d d
� Z d � Z d � Z d � Z d d d d d � Z d d d d d d � Z d d d d d � Z d d d d d � Z! e" d d d d d d � Z# d d d d d � Z$ d S( u
Manage Lambda Functions
=======================
.. versionadded:: 2016.3.0
Create and destroy Lambda Functions. Be aware that this interacts with Amazon's services,
and so may incur charges.
:depends:
- boto
- boto3
The dependencies listed above can be installed via package or pip.
This module accepts explicit vpc credentials but can also utilize
IAM roles assigned to the instance through Instance Profiles. Dynamic
credentials are then automatically obtained from AWS API and no further
configuration is necessary. More information available `here
<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_.
If IAM roles are not used you need to specify them either in a pillar file or
in the minion's config file:
.. code-block:: yaml
vpc.keyid: GKTADJGHEIQSXMKKRBJ08H
vpc.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile,
either passed in as a dict, or as a string to pull from pillars or minion
config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
.. code-block:: yaml
Ensure function exists:
boto_lambda.function_present:
- FunctionName: myfunction
- Runtime: python2.7
- Role: iam_role_name
- Handler: entry_function
- ZipFile: code.zip
- S3Bucket: bucketname
- S3Key: keyname
- S3ObjectVersion: version
- Description: "My Lambda Function"
- Timeout: 3
- MemorySize: 128
- region: us-east-1
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
i ( t absolute_importt print_functiont unicode_literalsN( t six( t SaltInvocationErrorc C@ s d t k r d St S( u)
Only load if boto is available.
u boto_lambda.function_existsu boto_lambda( t __salt__t False( ( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt __virtual__P s u i i� i c ' C@ s� i | d 6t d 6d d 6i d 6} | d7 k rt | t j � rX t j j j | � } n t d8 � } t d9 � } x� t j
| � D]� \ } } t | j � � } | j | � s� t
d j d j | � � � � n | | } | | } t | � r� t
d
j d j | � � � � q� q� Wn t d d | d | d | d | d | � } d | k rvt | d <d j | d d � | d <| S| j d � s�t d r�d j | � | d <d7 | d <| St d d | d | d | d | d | d | d | d! | d" | d# |
d$ | d% | d& | d' t d( |
d | d | d | d | � } | j d) � sgt | d <d j | d d � | d <| S| r�x� t j
| � D]w \ } } t d* d | d+ | d | d | d | d | | � } | j d, � s}t | d <d j | d d � | d <q}q}Wn t d- | d | d | d | d | �} t d. | d | d | d | d | �d/ | d0 d1 <i d7 d0 6| d d2 <| | d d3 <d4 j | � | d <| St j j | d d5 j | � g � | d <i | d <t | | | | |
| | | | | | | |
�
} | j d � s5| j d t � | d <| d | d <i | d <| St j | d | d � | d <d6 j | d | d g � | d <t | | | | | | | | | � } | j d � s�| j d t � | d <| d | d <i | d <| St j | d | d � | d <d6 j | d | d g � | d <t | | | | | | � } | j d � st| j d t � | d <| d | d <i | d <| St j | d | d � | d <d6 j | d | d g � | d <| S(: u�
Ensure function exists.
name
The name of the state definition
FunctionName
Name of the Function.
Runtime
The Runtime environment for the function. One of
'nodejs', 'java8', or 'python2.7'
Role
The name or ARN of the IAM role that the function assumes when it executes your
function to access any other AWS resources.
Handler
The function within your code that Lambda calls to begin execution. For Node.js it is the
module-name.*export* value in your function. For Java, it can be package.classname::handler or
package.class-name.
ZipFile
A path to a .zip file containing your deployment package. If this is
specified, S3Bucket and S3Key must not be specified.
S3Bucket
Amazon S3 bucket name where the .zip file containing your package is
stored. If this is specified, S3Key must be specified and ZipFile must
NOT be specified.
S3Key
The Amazon S3 object (the deployment package) key name you want to
upload. If this is specified, S3Key must be specified and ZipFile must
NOT be specified.
S3ObjectVersion
The version of S3 object to use. Optional, should only be specified if
S3Bucket and S3Key are specified.
Description
A short, user-defined function description. Lambda does not use this value. Assign a meaningful
description as you see fit.
Timeout
The function execution time at which Lambda should terminate this function. Because the execution
time has cost implications, we recommend you set this value based on your expected execution time.
The default is 3 seconds.
MemorySize
The amount of memory, in MB, your function is given. Lambda uses this memory size to infer
the amount of CPU and memory allocated to your function. Your function use-case determines your
CPU and memory requirements. For example, a database operation might need less memory compared
to an image processing function. The default value is 128 MB. The value must be a multiple of
64 MB.
VpcConfig
If your Lambda function accesses resources in a VPC, you must provide this parameter
identifying the list of security group IDs/Names and subnet IDs/Name. These must all belong
to the same VPC. This is a dict of the form:
.. code-block:: yaml
VpcConfig:
SecurityGroupNames:
- mysecgroup1
- mysecgroup2
SecurityGroupIds:
- sg-abcdef1234
SubnetNames:
- mysubnet1
SubnetIds:
- subnet-1234abcd
- subnet-abcd1234
If VpcConfig is provided at all, you MUST pass at least one security group and one subnet.
Permissions
A list of permission definitions to be added to the function's policy
RoleRetries
IAM Roles may take some time to propagate to all regions once created.
During that time function creation may fail; this state will
atuomatically retry this number of times. The default is 5.
Environment
The parent object that contains your environment's configuration
settings. This is a dictionary of the form:
.. code-block:: python
{
'Variables': {
'VariableName': 'VariableValue'
}
}
.. versionadded:: 2017.7.0
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu Actionu Principalu SourceArnu
SourceAccountu Qualifieru2 {0} are required for each permission specificationu , u Invalid permission value {0}u boto_lambda.function_existst FunctionNamet regiont keyt keyidt profileu erroru Failed to create function: {0}.u messageu existsu testu" Function {0} is set to be created.u boto_lambda.create_functiont Runtimet Rolet Handlert ZipFilet S3Buckett S3Keyt S3ObjectVersiont Descriptiont Timeoutt
MemorySizet VpcConfigt Environmentt WaitForRolet RoleRetriesu createdu boto_lambda.add_permissiont StatementIdu updatedu boto_lambda.describe_functionu boto_lambda.get_permissionsu permissionsu functionu Permissionsu oldu newu Function {0} created.u Function {0} is present.u N( u Actionu Principal( u SourceArnu
SourceAccountu Qualifier( t Truet Nonet
isinstanceR t string_typest saltt utilst jsont loadst sett iteritemst keyst
issupersetR t formatt joint boolR R t gett __opts__t ost linesept _function_config_presentt
dictupdatet updatet _function_code_presentt _function_permissions_present( t nameR R
R R R R R R R R R t PermissionsR R R
R R R R t rett
required_keyst
optional_keyst sidt
permissiont keysett rt _describet _ret( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt function_presentW s� v
%
!
!
!
!c C@ sH | j d � r | St d d | d | d | d | � } d j | | � S( Nu arn:aws:iam:u boto_iam.get_account_idR R
R R u arn:aws:iam::{0}:role/{1}( t
startswithR R( ( R4 R R
R R t
account_id( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt
_get_role_arn: s
c
C@ s0 t | t j � r* t j j j | � } n | sB i g d 6g d 6St | t � s` t d � � n g | j d g � D]: } t
d d | d | d | d | d
| �j d � ^ qs } g | j d g � D]. } t
d
| d | d | d | d
| �^ q� } | j d g � j
| � | j d g � j
| � | S( Nu SubnetIdsu SecurityGroupIdsu VpcConfig must be a dict.u SubnetNamesu boto_vpc.get_resource_idu subnetR R
R R u idu SecurityGroupNamesu boto_secgroup.get_group_id( R R R R R! R" R# t dictR t popR R+ t
setdefaultt extend( t confR R
R R t st snst sgs( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt _resolve_vpcconfigD s PDc
C@ s i t d 6d d 6i d 6}
t d | d | d | d |
d | �d
} t | | | |
| � } t } i d d 6d
d
6d d 6d d 6d d 6} x| t j | � D]k \ } } | | t � | k r� t } t � | |
d j d i � | <| | |
d j d i � | <q� q� W| j d � } | d k r;| j
d d � n t | | | |
| � } t d | � t d | � k r�t } | |
d j d i � d <| j d � |
d j d i � d <n | d k r#| j d � | k r#t } | |
d j d i � d <| j d � |
d j d i � d <q#n | rt
j j |
d d g � |
d <t d rtd j | � |
d <d |
d <|
St d d | d | d | d | d | d | d! | d" | d | d | d |
d | d# t d$ | � } | j d% � st |
d <d& j | d' d( � |
d <i |
d <qn |
S() Nu resultu u commentu changesu boto_lambda.describe_functionR R
R R u functionu role_arnu Roleu Handleru Descriptionu Timeoutu
MemorySizeu newu oldu VpcConfigu VpcIdu
boto3.orderedu Environmentu Function config to be modifiedu testu Function {0} set to be modified.u" boto_lambda.update_function_configR R R R R R R R R R u updatedu Failed to update function: {0}.u erroru message( R R RB R R R% t localsRE R+ R RD RK t __utils__R- R. R) R, R( ( R R R R R R R R R R
R R R R6 t funct role_arnt need_updatet optionst valt vart oldvalt fixed_VpcConfigt _r( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyR/ W sb
!% & #
c C@ sa i t d 6d d 6i d 6} t d | d | d | d | d | �d
}
t } | r� t j j | � } | |
d k r� t j � }
t j j
j | d � � } |
j | j
� � Wd QX|
j � j d
� j � } | |
d k r� t } q� q� t } n t } | r]t d r,d j | � | d <d | d <| Si |
d d 6|
d d 6| d d <t d | | | | | d | d | d | d | �}
|
j d � s�t | d <d j |
d d � | d <i | d <| S|
d
}
|
d | d d d k s|
d | d d d k rOt j j | d d g � | d <i |
d d 6|
d d 6| d d <q]| d d =n | S( Nu resultu u commentu changesu boto_lambda.describe_functionR R
R R u functionu CodeSizeu rbu base64u
CodeSha256u testu Function {0} set to be modified.u oldu boto_lambda.update_function_codeu updatedu Failed to update function: {0}.u erroru messageu Function code to be modifiedu new( R R R R- t patht getsizet hashlibt sha256R R! t filest fopenR1 t readt digestt encodet stripR, R( R R+ R. R) ( R R R R R R R
R R R6 RN R1 t sizet shat ft hashed( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyR2 � sX
c C@ s� i t d 6d d 6i d 6} t d | d | d | d | d | �j d
� } | d k ra i } n t } t j j j | | p i � } t | � r�t
j j | d d g � | d <t
d r� d
j | � | d <d | d <| Sx�t j | � D]�\ }
} | j d d � d k r�t d d | d |
d | d | d | d | � } i | d j d i � j d i � |
<| d | d j d i � j d i � |
<n | j d d � d k rLt d d | d |
d | d | d | d | | d � } | d | d j d i � j d i � |
<| d j d i � j d i � }
|
|
k rLi |
|
<qLn | j d � s� t | d <d j | d d � | d <i | d <q� q� Wn | S( Nu resultu u commentu changesu boto_lambda.get_permissionsR R
R R u permissionsu# Function permissions to be modifiedu testu Function {0} set to be modified.u oldu boto_lambda.remove_permissionR R u newu Permissionsu boto_lambda.add_permissionu updatedu Failed to update function: {0}.u erroru message( R R R+ R R R R! t datat
compare_dictsR* R- R. R) R, R( R R% RE ( R R5 R R
R R R6 t curr_permissionsRP t diffsR9 t diffRV t oldperms( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyR3 � sL
&-
*
c C@ sn i | d 6t d 6d d 6i d 6} t d | d | d | d | d
| �} d | k r t | d <d j | d d
� | d <| S| r� | d r� d j | � | d <| St d r� d j | � | d <d | d <| St d | d | d | d | d
| �} | d s-t | d <d j | d d
� | d <| Si | d 6| d d <i d d 6| d d <d j | � | d <| S( u�
Ensure function with passed properties is absent.
name
The name of the state definition.
FunctionName
Name of the function.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_lambda.function_existsR R
R R u erroru Failed to delete function: {0}.u messageu existsu Function {0} does not exist.u testu" Function {0} is set to be removed.u boto_lambda.delete_functionu deletedu functionu oldu newu Function {0} deleted.N( R R R R( R, R ( R4 R R R
R R R6 R< ( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt function_absent� s>
!
c C@ sU i | d 6t d 6d d 6i d 6} t d d | d | d | d
| d | d | � }
d
|
k r� t | d <d j |
d
d � | d <| S|
j d � s�t d r� d j | � | d <d$ | d <| St d | | | | | | | | � }
|
j d � s t | d <d j |
d
d � | d <| St d | | d | d
| d | d | �} i d$ d 6| d d <| | d d <d j | � | d <| St j j | d d j | � g � | d <i | d <t d | | d | d
| d | d | �d } t } i d d 6d d 6}
x| t
j |
� D]k \ } } | | t � | k rt } t � | | d j
d i � | <| | | d j
d i � | <qqW| rQt j j | d d g � | d <t d r�d j | � | d <d$ | d <| St d d | d | d | d! | d | d
| d | d | � } | j d" � sQt | d <d# j | d
d � | d <i | d <qQn | S(% u�
Ensure alias exists.
name
The name of the state definition.
FunctionName
Name of the function for which you want to create an alias.
Name
The name of the alias to be created.
FunctionVersion
Function version for which you are creating the alias.
Description
A short, user-defined function description. Lambda does not use this value. Assign a meaningful
description as you see fit.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_lambda.alias_existsR t NameR R
R R u erroru Failed to create alias: {0}.u messageu existsu testu Alias {0} is set to be created.u boto_lambda.create_aliasu createdu boto_lambda.describe_aliasu aliasu oldu newu Alias {0} created.u Alias {0} is present.u FunctionVersionu Descriptionu Alias config to be modifiedu Alias {0} set to be modified.u boto_lambda.update_aliast FunctionVersionR u updatedu Failed to update alias: {0}.N( R R R R( R+ R, R R- R. R) R R% RL RE ( R4 R Rl Rm R R R
R R R6 R< R= RP RQ RR RS RV ( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt
alias_present6 s~ "
!%
c C@ st i | d 6t d 6d d 6i d 6} t d | | d | d | d | d
| �} d | k r� t | d <d j | d d
� | d <| S| r� | d r� d j | � | d <| St d r� d j | � | d <d | d <| St d | | d | d | d | d
| �} | d s3t | d <d j | d d
� | d <| Si | d 6| d d <i d d 6| d d <d j | � | d <| S( u�
Ensure alias with passed properties is absent.
name
The name of the state definition.
FunctionName
Name of the function.
Name
Name of the alias.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_lambda.alias_existsR R
R R u erroru Failed to delete alias: {0}.u messageu existsu Alias {0} does not exist.u testu Alias {0} is set to be removed.u boto_lambda.delete_aliasu deletedu aliasu oldu newu Alias {0} deleted.N( R R R R( R, R ( R4 R Rl R R
R R R6 R< ( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt alias_absent� s>
c C@ s | j d � r | St d d | d | d | d | � } | rW d | k rW | d } n | d k rl d } n d j | | | � S(
Nu arn:aws:lambda:u boto_iam.get_account_idR R
R R u regionu us-east-1u# arn:aws:lambda:{0}:{1}:function:{2}( R@ R R R( ( R4 R R
R R RA ( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt _get_function_arn� s
id c
C@ s i d' d 6t d 6d d 6i d 6}
t d d | d | d | d
| d | d | � } d
| k r� t |
d <d j | d
d � |
d <|
S| j d � s�t d r� d j | � |
d <d' |
d <|
St d d | d | d | d | d | d | d
| d | d | � } | j d � s=t |
d <d j | d
d � |
d <|
St d d | d | d | d
| d | d | � } | d d |
d <i d' d 6|
d d <| |
d d <d j |
d � |
d <|
St j j |
d d g � |
d <i |
d <t d d | d | d | d
| d | d | � d } t }
i d d 6} x| t
j | � D]k \ } } | | t � | k r@t }
t � | |
d j
d i � | <| | |
d j
d i � | <q@q@Wt | d | d
| d | d | �} | d | k r$t }
| |
d j
d i � d <| d |
d j
d i � d <n |
r�t j j |
d d! g � |
d <t d ryd" j | d � |
d <d' |
d <|
St d# d$ | d d | d | d | d | d
| d | d | � } | j d% � s�t |
d <d& j | d
d � |
d <i |
d <q�n |
S(( ug
Ensure event source mapping exists.
name
The name of the state definition.
EventSourceArn
The Amazon Resource Name (ARN) of the Amazon Kinesis or the Amazon
DynamoDB stream that is the event source.
FunctionName
The Lambda function to invoke when AWS Lambda detects an event on the
stream.
You can specify an unqualified function name (for example, "Thumbnail")
or you can specify Amazon Resource Name (ARN) of the function (for
example, "arn:aws:lambda:us-west-2:account-id:function:ThumbNail"). AWS
Lambda also allows you to specify only the account ID qualifier (for
example, "account-id:Thumbnail"). Note that the length constraint
applies only to the ARN. If you specify only the function name, it is
limited to 64 character in length.
StartingPosition
The position in the stream where AWS Lambda should start reading.
(TRIM_HORIZON | LATEST)
Enabled
Indicates whether AWS Lambda should begin polling the event source. By
default, Enabled is true.
BatchSize
The largest number of records that AWS Lambda will retrieve from your
event source at the time of invoking your function. Your function
receives an event with all the retrieved records. The default is 100
records.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu' boto_lambda.event_source_mapping_existst EventSourceArnR R R
R R u erroru+ Failed to create event source mapping: {0}.u messageu existsu testu. Event source mapping {0} is set to be created.u' boto_lambda.create_event_source_mappingt StartingPositiont Enabledt BatchSizeu createdu) boto_lambda.describe_event_source_mappingu event_source_mappingu UUIDu oldu newu! Event source mapping {0} created.u Event source mapping is present.u BatchSizeu FunctionArnu# Event source mapping to be modifiedu, Event source mapping {0} set to be modified.u' boto_lambda.update_event_source_mappingt UUIDu updatedu Failed to update mapping: {0}.N( R R R R R( R+ R, R- R. R) R R% RL RE Rp ( R4 Rq R Rr Rs Rt R R
R R R6 R< R= RP RQ RR RS t function_arnRV ( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt event_source_mapping_present� s� 5
!%
c
C@ sn i d d 6t d 6d d 6i d 6} t d d | d | d | d
| d | d | � } d
| k r� t | d <d j | d
d � | d <| S| j d � s� d | d <| S| d d | d <t d r� d | d <d | d <| St d d | d | d | d
| d | d | � } | d s=t | d <d j | d
d � | d <| S| | d d <i d d 6| d d <d | d <| S( u�
Ensure event source mapping with passed properties is absent.
name
The name of the state definition.
EventSourceArn
ARN of the event source.
FunctionName
Name of the lambda function.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu) boto_lambda.describe_event_source_mappingRq R R R
R R u erroru+ Failed to delete event source mapping: {0}.u messageu event_source_mappingu$ Event source mapping does not exist.u UUIDu testu* Event source mapping is set to be removed.u' boto_lambda.delete_event_source_mappingu deletedu oldu newu Event source mapping deleted.N( R R R R R( R+ R, (
R4 Rq R R R
R R R6 t descR< ( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt event_source_mapping_absent~ s@
(% t __doc__t
__future__R R R t loggingR- RY t salt.extR t salt.utils.dataR t salt.utils.dictupdateR! R0 t salt.utils.filest salt.utils.jsont salt.exceptionsR t getLoggert __name__t logR R R? RB RK R/ R2 R3 Rk Rn Ro Rp R Rw Ry ( ( ( s; /usr/lib/python2.7/site-packages/salt/states/boto_lambda.pyt <module>= s@ �
; 8 /=i@ �
Mini Shell