自动部署基于Lambda的应用程序
Posted
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了自动部署基于Lambda的应用程序相关的知识，希望对你有一定的参考价值。
我在下面链接检查了教程并尝试了。 http://docs.aws.amazon.com/lambda/latest/dg/automating-deployment.html
它适用于我，但如何部署与该lambda相关的环境变量和配置更改。从教程我可以了解如何部署代码更改，但我不知道如何部署配置更改。
答案
对于Lambda pull配置信息，有许多选项：
- 对于非常基本的配置，您可以简单地使用可以在CLI调用期间根据文档设置的环境变量（rep阻止我添加两个以上的链接，因此您必须谷歌“lambda环境变量”来获取它）
- Lambda可以从SSM Parameter Store读取，虽然它通常用于提取EC2实例的配置信息（DB字符串，但不包括）。但是，如果你主要是无服务器，这是一种方法
- 您可以使用选择的DB（RDS / DynamoDB）来提取/存储数据。请记住，如果您通过免费套餐限制，您将获得每小时收费。
- 您可以使用存储在S3存储桶中的选择格式（JSON，YAML，CSV等）并具有python加载（它将违背您的调用分配）
- 对于Lambda函数的复杂链接，您可能需要考虑Step Functions
至于如何自动化上述内容，它实际上取决于您现有的自动化。可以使用CLI来编排整个内容，也可以使用适当的AWS开发工具包使用您选择的脚本语言。
另一答案
我没有手动执行http://docs.aws.amazon.com/lambda/latest/dg/automating-deployment.html中描述的步骤，而是编写了一个执行相同功能的CloudFormation模板。换句话说，您可以部署我的模板，结果是新创建的代码提交存储库和关联的代码管道，它可以构建和部署您定义的任何SAM模板到新的CloudFormation堆栈。您需要做的就是将buildspec.yml和samTemplate.yaml添加到新创建的Code Commit repo中并推送您的更改。
我的模板可在以下链接中找到。请注意，这是一个早期的草案，并且有很大的改进空间......但它确实与上面链接的AWS指南非常相似：https://github.com/matwerber1/cloudformation-pipeline-template
这是模板代码，samTemplate.yaml：
AWSTemplateFormatVersion: '2010-09-09'
Description: Creates Private Code Commit repo and Deployment Pipeline to CloudFormation
Parameters:
ProjectNameParameter:
Type: String
Default: myProject
Description: "the name to assign to your newly-created code repo, build project, pipeline, and IAM resources."
CodeBuildS3BucketParameter:
Type: String
Default: "myCodeBuildS3Bucket"
Description: "a pre-existing S3 bucket in which to store Code Build artifacts."
CodePipelineS3BucketParameter:
Type: String
Default: "myCodePipelineS3Bucket"
Description: "a pre-existing S3 bucket in which to store Code Pipeline resources."
Resources:
MyRepo:
Type: "AWS::CodeCommit::Repository"
Properties:
RepositoryName: !Sub '${ProjectNameParameter}'
CloudFormationRole:
Type: "AWS::IAM::Role"
Properties:
RoleName: !Sub "${AWS::Region}-${ProjectNameParameter}-cloudformation"
AssumeRolePolicyDocument:
Statement:
- Effect: Allow
Principal:
Service:
- cloudformation.amazonaws.com
Action:
- "sts:AssumeRole"
Path: "/"
Policies:
- PolicyName: cloudformation-service
PolicyDocument:
Version: "2012-10-17"
Statement:
- Action:
- "*"
Resource: "*"
Effect: Allow
CodePipelineRole:
Type: "AWS::IAM::Role"
Properties:
RoleName: !Sub "${AWS::Region}-${ProjectNameParameter}-codepipeline"
AssumeRolePolicyDocument:
Statement:
- Effect: Allow
Principal:
Service:
- codepipeline.amazonaws.com
Action:
- "sts:AssumeRole"
Path: "/"
Policies:
- PolicyName: codepipeline-service
PolicyDocument:
Version: "2012-10-17"
Statement:
- Action:
- "codecommit:GetBranch"
- "codecommit:GetCommit"
- "codecommit:UploadArchive"
- "codecommit:GetUploadArchiveStatus"
- "codecommit:CancelUploadArchive"
Resource: "*"
Effect: Allow
- Action:
- "s3:GetObject"
- "s3:GetObjectVersion"
- "s3:GetBucketVersioning"
Resource: "*"
Effect: Allow
- Action:
- "s3:PutObject"
Resource:
- "arn:aws:s3:::codepipeline*"
- "arn:aws:s3:::elasticbeanstalk*"
Effect: Allow
- Action:
- "codedeploy:CreateDeployment"
- "codedeploy:GetApplicationRevision"
- "codedeploy:GetDeployment"
- "codedeploy:GetDeploymentConfig"
- "codedeploy:RegisterApplicationRevision"
Resource: "*"
Effect: Allow
- Action:
- "elasticbeanstalk:*"
- "ec2:*"
- "elasticloadbalancing:*"
- "autoscaling:*"
- "cloudwatch:*"
- "s3:*"
- "sns:*"
- "cloudformation:*"
- "rds:*"
- "sqs:*"
- "ecs:*"
- "iam:PassRole"
Resource: "*"
Effect: Allow
- Action:
- "lambda:InvokeFunction"
- "lambda:ListFunctions"
Resource: "*"
Effect: Allow
- Action:
- "opsworks:CreateDeployment"
- "opsworks:DescribeApps"
- "opsworks:DescribeCommands"
- "opsworks:DescribeDeployments"
- "opsworks:DescribeInstances"
- "opsworks:DescribeStacks"
- "opsworks:UpdateApp"
- "opsworks:UpdateStack"
Resource: "*"
Effect: Allow
- Action:
- "cloudformation:CreateStack"
- "cloudformation:DeleteStack"
- "cloudformation:DescribeStacks"
- "cloudformation:UpdateStack"
- "cloudformation:CreateChangeSet"
- "cloudformation:DeleteChangeSet"
- "cloudformation:DescribeChangeSet"
- "cloudformation:ExecuteChangeSet"
- "cloudformation:SetStackPolicy"
- "cloudformation:ValidateTemplate"
- "iam:PassRole"
Resource: "*"
Effect: Allow
- Action:
- "codebuild:BatchGetBuilds"
- "codebuild:StartBuild"
Resource: "*"
Effect: Allow
CodeBuildRole:
Type: "AWS::IAM::Role"
Properties:
RoleName: !Sub "${AWS::Region}-${ProjectNameParameter}-codebuild"
AssumeRolePolicyDocument:
Statement:
- Effect: Allow
Principal:
Service:
- codebuild.amazonaws.com
Action:
- "sts:AssumeRole"
Path: "/"
Policies:
- PolicyName: codebuild-service
PolicyDocument:
Version: "2012-10-17"
Statement:
- Action:
- "logs:CreateLogGroup"
- "logs:CreateLogStream"
- "logs:PutLogEvents"
Resource:
- !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/codebuild/${ProjectNameParameter}"
- !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/codebuild/${ProjectNameParameter}:*"
Effect: Allow
- Action:
- "s3:PutObject"
- "s3:GetObject"
- "s3:GetObjectVersion"
Resource: !Sub "arn:aws:s3:::codepipeline-${AWS::Region}-*"
Effect: Allow
- Action: "ssm:GetParameters"
Resource: !Sub "arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/CodeBuild/*"
Effect: Allow
- Action: "s3:PutObject"
Resource: !Sub "arn:aws:s3:::${CodeBuildS3BucketParameter}*"
Effect: Allow
MyBuild:
Type: "AWS::CodeBuild::Project"
Properties:
Artifacts:
Type: CODEPIPELINE
BadgeEnabled: false
Environment:
ComputeType: BUILD_GENERAL1_SMALL
Image: "aws/codebuild/python:3.5.2"
Type: LINUX_CONTAINER
Name: !Sub '${ProjectNameParameter}'
ServiceRole: !Ref CodeBuildRole
Source:
Type: CODEPIPELINE
TimeoutInMinutes: 60
MyPipeline:
以上是关于自动部署基于Lambda的应用程序的主要内容，如果未能解决你的问题，请参考以下文章
如何使用 lambda 将 s3 中的最新代码部署到 lambda 函数
AWS攻略——使用CodeBuild进行自动化构建和部署Lambda（Python）
AWS攻略——使用CodeBuild进行自动化构建和部署Lambda（Python）