macro.yaml

# The MIT License (MIT)
#
# Copyright (C) 2018 Jimmy Dahlqvist
#
# Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation
# files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy,
# modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software
# is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
# OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
# IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

AWSTemplateFormatVersion: '2010-09-09'
Transform: 'AWS::Serverless-2016-10-31'
Description: Macro Ec2KeyPair
Resources:
  MacroFunction:
    Type: AWS::Serverless::Function
    Properties:
      FunctionName: cfn-macro-ec2-keypair-manager
      Runtime: python2.7
      CodeUri: ./src
      Handler: index.handler
      Role: !GetAtt MacroFunctionRole.Arn

  MacroFunctionRole:
    Type: "AWS::IAM::Role"
    Properties: 
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement: 
          - 
            Effect: Allow
            Principal: 
              Service: 
                - lambda.amazonaws.com
            Action: 
              - sts:AssumeRole
      Path: /

  MacroFunctionPolicy:
    Type: "AWS::IAM::Policy"
    Properties:
      PolicyName: CfnMacroEc2KeypaiEc2Policy
      PolicyDocument: 
        Version: 2012-10-17
        Statement: 
          - 
            Effect: Allow
            Action: 
              - ec2:CreateKeyPair
              - ec2:DeleteKeyPair
              - ec2:DescribeKeyPairs
            Resource: '*'
      Roles: 
        - !Ref MacroFunctionRole

  S3AccessPolicy:
    Type: "AWS::IAM::Policy"
    Properties:
      PolicyName: CfnMacroEc2KeypairS3Policy
      PolicyDocument: 
        Version: 2012-10-17
        Statement: 
          - 
            Effect: Allow
            Action: 
              - s3:PutObject
            Resource: 'arn:aws:s3:::*'
      Roles: 
        - !Ref MacroFunctionRole

  CloudWatchLogsPolicy:
    Type: "AWS::IAM::Policy"
    Properties:
      PolicyName: CfnMacroEc2KeypairCloudwatchPolicy
      PolicyDocument: 
        Version: 2012-10-17
        Statement: 
          - 
            Effect: Allow
            Action: 
              - logs:*
            Resource: 'arn:aws:logs:*:*:*'
      Roles: 
        - !Ref MacroFunctionRole

  Macro:
    Type: AWS::CloudFormation::Macro
    Properties:
      Name: Ec2KeyPair
      FunctionName: !GetAtt MacroFunction.Arn