template.yaml

AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: |
  API that processes invoices.

Parameters:
  AppBucketName:
    Description: Bucket name to use for image storage.
    Type: String
    Default: bucket-api-receipt-processing
  AppStageName:
    Description: dev | prod
    Type: String
    Default: dev

Resources:

  StateMachineLogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: "/aws/vendedlogs/states/PostInvoiceStateMachine-Logs"
      RetentionInDays: 30

  InvoiceProxy:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: functions/InvoiceProxy/
      Handler: InvoiceProxy.lambda_handler
      Runtime: python3.12
      Architectures:
        - x86_64
      Policies:
        - S3CrudPolicy:
            BucketName: !Ref AppBucketName
        - Statement:
            - Effect: Allow
              Action:
                - states:StartSyncExecution
              Resource: !GetAtt PostInvoiceStateMachine.Arn
      Events:
        APIGatewayEvent:
          Type: Api
          Properties:
            Method: post
            Path: /api/v1/invoice
            RestApiId: !Ref ApiGateway
      Timeout: 40
      Environment:
        Variables:
          BUCKET_NAME: !Ref AppBucketName
          STATE_MACHINE_ARN: !GetAtt PostInvoiceStateMachine.Arn

  ExtractInfo:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: functions/ExtractInfo/
      Handler: ExtractInfo.lambda_handler
      Runtime: python3.12
      Architectures:
        - x86_64
      Policies:
        - S3CrudPolicy:
            BucketName: !Ref AppBucketName
        - Statement:
            - Effect: Allow
              Action:
                - textract:AnalyzeExpense
              Resource: '*'
      Timeout: 20
      Environment:
        Variables:
          BUCKET_NAME: !Ref AppBucketName

  NLTKDependenciesLayer:
    Type: AWS::Lambda::LayerVersion
    Properties:
      LayerName: nltk-layer
      Description: Layer with necessary NLTK dependencies for RefineData.
      Content: ./layers/nltk-dependencies.zip
      CompatibleRuntimes:
        - python3.12

  RefineData:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: functions/RefineData/
      Handler: RefineData.lambda_handler
      Runtime: python3.12
      Architectures:
        - x86_64
      Timeout: 50
      Layers:
        - !Ref NLTKDependenciesLayer
      Policies:
        - Statement:
            - Effect: Allow
              Action:
                - bedrock:InvokeModel
              Resource: '*'

  ResultHandler:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: functions/ResultHandler/
      Handler: ResultHandler.lambda_handler
      Runtime: python3.12
      Architectures:
        - x86_64
      Policies:
        - S3CrudPolicy:
            BucketName: !Ref AppBucketName
      Environment:
        Variables:
          BUCKET_NAME: !Ref AppBucketName
      Timeout: 10

  MainPage:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: functions/MainPage/
      Handler: MainPage.lambda_handler
      Runtime: python3.12
      Architectures:
        - x86_64
      Events:
        APIGatewayEvent:
          Type: Api
          Properties:
            Method: get
            Path: /
            RestApiId: !Ref ApiGateway
      Timeout: 3

  ApiGateway:
    Type: AWS::Serverless::Api
    Properties:
      Name: receipt-api
      StageName: !Ref AppStageName
      DefinitionBody:

        x-amazon-apigateway-binary-media-types:
          - multipart~1form-data
          - image~1jpg
          - image~1jpeg
          - image~1png
        openapi: 3.0.3
        info:
          title: API for Receipt Processing
          description: API for Receipt/Invoice Processing
          version: v1.0
        paths:
          /api/v1/invoice:
            post:
              description: Processes invoice.
              responses:
                '200':
                  description: Success.
                '500':
                  description: An error ocurred.
              x-amazon-apigateway-integration:
                type: aws_proxy
                contentHandling: CONVERT_TO_BINARY
                uri: !Sub arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${InvoiceProxy.Arn}/invocations
                httpMethod: POST
          /:
            get:
              description: Web page for invoice processing.
              responses:
                '200':
                  description: Success.
                '500':
                  description: An error ocurred.
              x-amazon-apigateway-integration:
                type: aws_proxy
                uri: !Sub arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${MainPage.Arn}/invocations
                httpMethod: POST

  PostInvoiceStateMachine:
    Type: AWS::Serverless::StateMachine
    Properties:
      Type: EXPRESS
      Logging: # Nova seção adicionada
        Level: ALL
        IncludeExecutionData: false # !Equals [!Ref AppStageName, dev]
        Destinations:
          - CloudWatchLogsLogGroup:
              LogGroupArn: !GetAtt StateMachineLogGroup.Arn
      DefinitionSubstitutions:
        # variables to be used in .asl.json
        ExtractInfoArn: !GetAtt ExtractInfo.Arn
        RefineDataArn: !GetAtt RefineData.Arn
        ResultHandlerArn: !GetAtt ResultHandler.Arn
      Policies:
        - Statement:
            - Effect: Allow
              Action:
                - lambda:InvokeFunction
              Resource:
                - !GetAtt ExtractInfo.Arn
                - !GetAtt RefineData.Arn
                - !GetAtt ResultHandler.Arn
            - Effect: Allow # Novas permissões para logs
              Action:
                - logs:CreateLogDelivery
                - logs:GetLogDelivery
                - logs:UpdateLogDelivery
                - logs:DeleteLogDelivery
                - logs:ListLogDeliveries
                - logs:PutResourcePolicy
                - logs:DescribeResourcePolicies
                - logs:DescribeLogGroups
              Resource: "*"
      DefinitionUri: PostInvoiceStateMachine/PostInvoiceStateMachine.asl.json

  AppBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Ref AppBucketName


  InvoiceProxyLogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: !Join [ "/", ["/aws/lambda", !Ref InvoiceProxy ] ]
      RetentionInDays: 14

  ExtractInfoLogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: !Join [ "/", ["/aws/lambda", !Ref ExtractInfo ] ]
      RetentionInDays: 14

  RefineDataLogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: !Join [ "/", ["/aws/lambda", !Ref RefineData ] ]
      RetentionInDays: 14

  ResultHandlerLogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: !Join [ "/", ["/aws/lambda", !Ref ResultHandler ] ]
      RetentionInDays: 14

  MainPageLogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: !Join [ "/", ["/aws/lambda", !Ref MainPage ] ]
      RetentionInDays: 14

Outputs:

  PostInvoiceStateMachineArn:
    Description: Post Invoice State machine ARN
    Value: !GetAtt PostInvoiceStateMachine.Arn


Globals:
  Function:
    LoggingConfig:
      LogFormat: JSON
  Api:
    BinaryMediaTypes:
      - '*~1*'