Using Python Lambda behind and ALB

Just a quick note to self about ALB and Lambda. When using Lambda behind and ALB for routing your response has to be formatted properly else you will get a 502. https://pypi.org/project/alb-response/ solved this problem. from alb_response import alb_response def lambda_handler(event, context): response_dict = process_the_event(event) return alb_response( http_status=200, json=response_dict, is_base64_encoded=False, ) The results are easy enough to do by hand but I had a bit of time really finding out the format to respond with other than JavaScript and that casing there was a bit confusing.

February 6, 2020 Read
Lambda Tips

@WIP Taking advantage of a running Lambda function and it’s state https://aws.amazon.com/blogs/compute/sharing-secrets-with-aws-lambda-using-aws-systems-manager-parameter-store/ under the section Lambda function has a nice “trick” of setting above the class app = None then later on it will see if that is set def lambda_handler(event, context): global app # Initialize app if it doesn't yet exist if app is None: print("Loading config and creating new MyApp...") config = load_config(full_config_path) app = MyApp(config) return "MyApp config is " + str(app.

August 1, 2019 Read
Cognito and OAuth

make your App Client Make sure to check Make some scopes uner Resource Server Then “App Client Settings” Connect it to “Cognito User Pool” And choose “Client Credentials” from “Allowed OAuth Flow” choosing some scopes

March 14, 2019 Read
Deploying Fargate

Just some notes on the process. This will show how to deploy both a Staging build and then Production. Staging Staging is done by TravisCI after all tests pass Here is the gist of it the deploy step calls to a bash file. deploy: skip_cleanup: true provider: script script: bash deploy/travis_deploy.sh on: branch: mainline Then #!/usr/bin/env bash # Bail out on first error set -e ## Get the directory of the build script DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )" ## Get the current git commit sha HASH=$(git rev-parse HEAD) ## Get any secret files aws s3 cp s3://foo/environments/$STACK_ENV_FILE $DIR/app/packaged/.

October 27, 2018 Read
Dusk Screenshots to S3 of Failing tests

I can be really annoying to troubleshoot a failed test in Dusk when using CI systems. What I ended up doing was setting up my project to send these files to S3 on fail. Here are the steps Setup You App This is just S3 storage so make sure you have a bucket and a folder in the bucket to write to. Basically for AWS you make an IAM with a key and secret and let it read/write to this folder.

June 26, 2018 Read
Lambda and Github Webhooks

Related to https://developer.github.com/webhooks/ and pushing data to Lambda AWS. I can check the token by just having this check in my handler. const crypto = require('crypto'); exports.handler = (event, context, callback) => { let headers = event.headers; let body = event.body; if (typeof body === 'object') { body = JSON.stringify(event.body); } let github_event = headers['X-GitHub-Event']; if ( github_event === undefined || typeof github_event !== 'string' || github_event.length < 1 ) { callback(null, { statusCode: 400, body: 'Missing X-GitHub-Event' }); return; } let github_signature = headers['X-Hub-Signature']; if ( github_signature === undefined || typeof github_signature !

May 8, 2018 Read
WIP AWS Batch and Workers with Laravel

Sending Docker Commands to Get A Task Done This article will show how to get started with AWS Batch and Docker to spin up a “worker” By the time you are done reading it you will: Have a Docker image to run your command in. Deploy the Docker image to AWS ECR And Run a Task on the AWS Batch system, or a 100 tasks, does not matter. Finally you will have the scripts needed to fully build AWS Batch with CloudFormation, e.

September 6, 2017 Read
Serverless and Custom Tags for Resources

Because much of serveless.com is CloudFormation based, you can easily update existing resources. They talk about this feature here For me this was required for adding tags # you can add CloudFormation resource templates here resources: Resources: ServerlessDeploymentBucket: Properties: Tags: - { Key: "project", Value: "${self:provider.project}" } - { Key: "environment", Value: "${opt:stage, self:provider.stage}" } - { Key: "parent_project", Value: "${self:custom.parent}" } - { Key: "key_contact", Value: "${self:custom.contact}" } - { Key: "billing_ref", Value: "${self:custom.

August 22, 2017 Read
Serverless, AWS API Gateway and Authentication

Just a note2self really. Setting up Auth was super easy As seen below I had to add to my serverless.yml authorizer addQuote: handler: quote/handler.add events: - http: path: quote method: post cors: true authorizer: aws_iam authorizer: aws_iam From here I then needed, in this case Postman, to pass an AWS KEY and SECRET made for this app. When making the user I attached this Policy to the user { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "execute-api:Invoke" ], "Resource": "arn:aws:execute-api:us-east-1:AWS_ID:*/dev/POST/quote" } ] } I an easily make this in the serverless.

July 18, 2017 Read
AWS, S3 Storage and limited Visibility

Storing files on S3 is great. And many times those files are private so I only want to give temporary access to them. Using Laravel Storage I can interact with the file-system quite easily and seamlessly especially between Cloud and Local. In this case I want to return a file only for 10 minutes public function getSignedUrl($filename_and_path, $expires_minutes = '10') { $client = Storage::disk('s3')->getDriver()->getAdapter()->getClient(); $bucket = env('BUCKET'); $command = $client->getCommand('GetObject', [ 'Bucket' => $bucket, 'Key' => $filename_and_path ]); $request = $client->createPresignedRequest($command, Carbon::now()->addMinutes($expires_minutes)); return (string) $request->getUri(); } That is it!

April 27, 2016 Read