Added org s3 bucket for storing lambda code (#116)

SocialFinanceDigitalLabs · Oct 11, 2024 · c41d451 · c41d451
1 parent 547d018
commit c41d451
Showing 1 changed file with 13 additions and 4 deletions.
diff --git a/infrastructure/environments/cloudformation/full/organisation/s3.yaml b/infrastructure/environments/cloudformation/full/organisation/s3.yaml
@@ -122,10 +122,6 @@ Resources:
             Id: Backup
             Prefix: ''
             Status: Enabled
-#            SourceSelectionCriteria:
-#              ReplicaModifications:
-#                Status: Disabled
-#                Status: Disabled
 
   EgressBucketBackupRole:
     Type: 'AWS::IAM::Role'
@@ -267,6 +263,16 @@ Resources:
                   - "s3:DeleteObject"
                 Resource: !Sub "${EgressBucket.Arn}/*"
 
+  LambdaCodeBucket:
+    Type: 'AWS::S3::Bucket'
+    Properties:
+      BucketName: !Sub "${AppName}-lambda-code-${OrganisationName}-${Environment}"
+      AccessControl: Private
+      BucketEncryption:
+        ServerSideEncryptionConfiguration:
+          - ServerSideEncryptionByDefault:
+              SSEAlgorithm: AES256
+
 Outputs:
   ExternalDataStoreBucketName:
     Value: !Ref ExternalDataStoreBucket
@@ -295,3 +301,6 @@ Outputs:
   EgressRoleARN:
     Value: !GetAtt EgressStorageRole.Arn
     Description: ARN of the role used to access the egress bucket
+  LambdaCodeBucket:
+    Value: !Ref LambdaCodeBucket
+    Description: Name of the Code Bucket to store lambda functions