github-ia-code-validation/serverless.yml at master · gugamainchein/github-ia-code-validation · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
org: mainchein
app: github-ia
service: github-ia-back-end

provider:
  name: aws
  runtime: python3.12
  endpointType: REGIONAL
  memorySize: 256
  stackTags:
    owner: "gustavo.mainchein"
    project: "study"
  deploymentBucket:
    name: ${param:API_NAME}-${aws:region}-${aws:accountId}
  iamRoleStatements:
    - Effect: Allow
      Resource:
        - arn:aws:bedrock:${aws:region}::foundation-model/deepseek.r1-v1:0
        - arn:aws:bedrock:us-east-2::foundation-model/deepseek.r1-v1:0
        - arn:aws:bedrock:us-west-2::foundation-model/deepseek.r1-v1:0
        - arn:aws:bedrock:${aws:region}:${aws:accountId}:inference-profile/us.deepseek.r1-v1:0
        - arn:aws:s3:::${param:API_NAME}-${aws:region}-${aws:accountId}/*
        - arn:aws:s3:::${param:API_NAME}-${aws:region}-${aws:accountId}
        - !GetAtt CommitsTable.Arn
      Action:
        - "s3:*"
        - "dynamodb:PutItem"
        - "logs:*"
        - "bedrock:InvokeModel"
  environment:
    DYNAMODB_TABLE_NAME: !Ref CommitsTable
  apiGateway:
    minimumCompressionSize: 1024

package:
  patterns:
    - "!src/layers"
    - "!venv"

layers:
  commonDependencies:
    path: src/layers/common
    compatibleRuntimes:
      - python3.12

functions:
  - ${file(./src/functions/functions.yml)}

resources:
  - ${file(./src/infrastructure/resources.yml)}