# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.

# Permission is hereby granted, free of charge, to any person obtaining a copy of
# this software and associated documentation files (the "Software"), to deal in
# the Software without restriction, including without limitation the rights to
# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
# the Software, and to permit persons to whom the Software is furnished to do so.

# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

AWSTemplateFormatVersion: 2010-09-09
Description: >-
  (uksb-1tsflhn8p/v1/backend) AWS CloudFormation Template to create IAM role and DDB tables

Metadata:
    ID: uksb-1tsflhn8p
    Version: 1
    Stack: backend

Resources:

  GAexecutionRole:
    Type: 'AWS::IAM::Role'
    Properties:
      AssumeRolePolicyDocument:
        Version: 2008-10-17
        Statement:
          - Sid: ''
            Effect: Allow
            Principal:
              Service: sagemaker.amazonaws.com
            Action: 'sts:AssumeRole'
      ManagedPolicyArns:
        # allow logging
        - arn:aws:iam::aws:policy/AWSLambdaBasicExecutionRole
        # read and write into DDB
        - arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess
        # ability to get the container image from ECR
        - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
        # sagemaker needs the ability to read S3 buckets
        - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess

  ResultsTable:
    Type: AWS::DynamoDB::Table
    Properties:
      TableName: "ga-blog-stack-Results"
      AttributeDefinitions:
        - AttributeName: GUID
          AttributeType: "S"
      KeySchema:
        - AttributeName: GUID
          KeyType: HASH
      BillingMode: PAY_PER_REQUEST

  DeliveryStopsTable:
    Type: AWS::DynamoDB::Table
    Properties:
      TableName: "ga-blog-stack-DeliveryStops"
      AttributeDefinitions:
        - AttributeName: StopsSetID
          AttributeType: "N"
      KeySchema:
        - AttributeName: StopsSetID
          KeyType: HASH
      BillingMode: PAY_PER_REQUEST

Outputs:
  ResultTableName:
    Value: !Ref ResultsTable
  DeliveryStopsTableName:
    Value: !Ref DeliveryStopsTable