Viewing: boto_lambda.cpython-36.pyc
3 �N�b5� � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZddl m Z ej e �Z yTddlZddlZddlmZ ddlmZ ej d�jej� ej d�jej� dZW n ek r� d ZY nX d d � Zd d � ZdKdd�ZdLdd�Z dMdd�Z dd� Z dNdd�Z dOd d �Z dPd d �Z!dQd d!�Z"dRd"d#�Z#dSd$d%�Z$dTd&d'�Z%dUd(d)�Z&dVd*d+�Z'dWd,d-�Z(dXd.d/�Z)dYd0d1�Z*dZd2d3�Z+d[d4d5�Z,d\d6d7�Z-d]d8d9�Z.d^d:d;�Z/d_d=d>�Z0d`d?d@�Z1dadAdB�Z2dbdCdD�Z3dcdEdF�Z4dddGdH�Z5dedIdJ�Z6dS )fa� Connection module for Amazon Lambda .. versionadded:: 2016.3.0 :depends: - boto - boto3 The dependencies listed above can be installed via package or pip. :configuration: This module accepts explicit Lambda credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More Information available here__. .. __: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html If IAM roles are not used you need to specify them either in a pillar or in the minion's config file: .. code-block:: yaml lambda.keyid: GKTADJGHEIQSXMKKRBJ08H lambda.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs A region may also be specified in the configuration: .. code-block:: yaml lambda.region: us-east-1 If a region is not specified, the default is us-east-1. It's also possible to specify key, keyid and region via a profile, either as a passed in dict, or as a string to pull from pillars or minion config: .. code-block:: yaml myprofile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 .. versionchanged:: 2015.8.0 All methods now return a dictionary. Create and delete methods return: .. code-block:: yaml created: true or .. code-block:: yaml created: false error: message: error message Request methods (e.g., `describe_function`) return: .. code-block:: yaml function: - {...} - {...} or .. code-block:: yaml error: message: error message � N)�SaltInvocationError)� ClientError)� __version__�boto�boto3TFc C s t jjjdddd�S )zg Only load if boto libraries exist and if boto libraries are greater than a given version. z2.8.0z1.2.5z1.5.2)Zboto_verZ boto3_verZ botocore_ver)�salt�utilsZversionsZcheck_boto_reqs� r r �!/usr/lib/python3.6/boto_lambda.py� __virtual__p s r c C s t rtd td� d S )Nzboto3.assign_funcs�lambda)�HAS_BOTO� __utils__�__name__)Zoptsr r r �__init__~ s r c C sN t ||||d�}x8td |j�D ]&}x |d D ]}|d | kr.|S q.W q W dS )zK Given function name, find and return matching Lambda information. )�region�key�keyid�profilezboto3.paged_call� Functions� FunctionNameN)� _get_connr �list_functions)�namer r r r �conn�funcs�funcr r r �_find_function� s r c C sP y t | ||||d�}dt|�iS tk rJ } zdtd |�iS d}~X nX dS )a& Given a function name, check to see if the given function name exists. Returns True if the given function exists and returns False if the given function does not exist. CLI Example: .. code-block:: bash salt myminion boto_lambda.function_exists myfunction )r r r r �exists�errorzboto3.get_errorN)r �boolr r )r r r r r r �er r r �function_exists� s r" c C sN | j d�r| S td ||||d�}|r6d|kr6|d }|d krBd}dj|| �S )Nz arn:aws:iam:zboto_iam.get_account_id)r r r r r z us-east-1zarn:aws:iam::{}:role/{})� startswith�__salt__�format)r r r r r Z account_idr r r � _get_role_arn� s r& c C s$ t jjj| d�� }|j� S Q R X d S )N�rb)r r �filesZfopen�read)Zinfile�fr r r � _filedata� s r+ c s� t | t�rtjjj| �} | s d S t | t�s2td��� ���fdd�| jdg �D �}� ���fdd�| jdg �D �}| j dg �j |� | j dg �j |� | S ) NzVpcConfig must be a dict.c s* g | ]"}t d d|�� ��d�jd��qS )zboto_vpc.get_resource_idZsubnet)r r r r �id)r$ �get)�.0�s)r r r r r r � <listcomp>� s z&_resolve_vpcconfig.<locals>.<listcomp>Z SubnetNamesc s" g | ]}t d |�� ��d��qS )zboto_secgroup.get_group_id)r r r r )r$ )r. r/ )r r r r r r r0 � s ZSecurityGroupNamesZ SubnetIdsZSecurityGroupIds) � isinstance�strr r �json�loads�dictr �pop� setdefault�extend)Zconfr r r r ZsnsZsgsr )r r r r r �_resolve_vpcconfig� s r9 � � � � c C s t |||||d�}�y�t||||d�}|r�|s6|s6|r>td��d|krztd |d�}|dkrvdtd< dj|�td < tS |}d t|�i}n*| s�| r�td��||d �}|r�||d < i }|d k r�t|||||d�|d< |d k r�||d< | r�| }nd}x�t|dd!�D ]�}y(|j f | |||||| | | d� |��}W n| t k �r� } z^|dk�r�| j j di �j d�dk�r�t jd� tjd| | tjdd�d � �w n� W Y d d } ~ X nX P �q W |�r�t jd|d � d|d d �S t jd � d diS W n0 t k �r } zdtd | �d �S d } ~ X nX d S )"a .. versionadded:: 2017.7.0 Given a valid config, create a function. Environment The parent object that contains your environment's configuration settings. This is a dictionary of the form: .. code-block:: python { 'Variables': { 'VariableName': 'VariableValue' } } Returns ``{'created': True}`` if the function was created and ``{created: False}`` if the function was not created. CLI Example: .. code-block:: bash salt myminion boto_lamba.create_function my_function python2.7 my_role my_file.my_function my_function.zip salt myminion boto_lamba.create_function my_function python2.7 my_role my_file.my_function salt://files/my_function.zip )r r r r zIEither ZipFile must be specified, or S3Bucket and S3Key must be provided.z://z cp.cache_file)�pathF�resultz Failed to cache ZipFile `{}`.Zcomment�ZipFile)�S3Bucket�S3Key�S3ObjectVersionN� VpcConfig� Environment� r ) r �Runtime�Role�Handler�Code� Description�Timeout� MemorySize�Publish�ErrorrJ � InvalidParameterValueExceptionzEFunction not created but IAM role may not have propagated, will retry� i� z%The newly created function name is %sr T)�createdr zFunction was not createdrR zboto3.get_error)rR r ���)r& r r r$ �retr% r+ r9 �range�create_functionr �responser- �log�info�time�sleep�random�randint�warningr ) r rG rH rI r@ rA rB rC rK rL rM rN � WaitForRole� RoleRetriesr r r r rD rE Zrole_arnr Z dlZipFile�code�kwargs� retrycount�retryr r! r r r rV � s| 3 rV c C sl y8t ||||d�}|r&|j| |d� n |j| d� ddiS tk rf } zdtd |�d�S d }~X nX d S ) a0 Given a function name and optional version qualifier, delete it. Returns {deleted: true} if the function was deleted and returns {deleted: false} if the function was not deleted. CLI Example: .. code-block:: bash salt myminion boto_lambda.delete_function myfunction )r r r r )r � Qualifier)r �deletedTFzboto3.get_error)rf r N)r �delete_functionr r )r re r r r r r r! r r r rg \ s rg c sn y<t | ||||d�� � r2d}d� fdd�|D �iS ddiS W n, tk rh } zdtd |�iS d}~X nX dS )z� Given a function name describe its properties. Returns a dictionary of interesting properties. CLI Example: .. code-block:: bash salt myminion boto_lambda.describe_function myfunction )r r r r r rG rH rI � CodeSha256�CodeSizerK rL rM � FunctionArn� LastModifiedrD rE �functionc s i | ]}� j |�|�qS r )r- )r. �k)r r r � <dictcomp>� s z%describe_function.<locals>.<dictcomp>Nr zboto3.get_error) r rG rH rI rh ri rK rL rM rj rk rD rE )r r r )r r r r r �keysr! r )r r �describe_functionx s* rp c s� t | d�}||||| | d�}t|||| d�}x |j� D ]\}}|r6|||< q6W |rft||||| �|d< | r�t| |||| d�|d< � y�| r�| }nd}x�t|dd#�D ]�}y|jf |�� W nx tk �r, } zZ|dko�|jj di �j d �d k�rt j d � t j d | | tjdd �d � w�n� W Y dd}~X q�X P q�W � �rVd$}d� fdd �|D �d �S t jd � d d iS W n0 tk �r� } zd td! |�d"�S d}~X nX dS )%a� .. versionadded:: 2017.7.0 Update the named lambda function to the configuration. Environment The parent object that contains your environment's configuration settings. This is a dictionary of the form: .. code-block:: python { 'Variables': { 'VariableName': 'VariableValue' } } Returns ``{'updated': True}`` if the function was updated, and ``{'updated': False}`` if the function was not updated. CLI Example: .. code-block:: bash salt myminion boto_lamba.update_function_config my_function my_role my_file.my_function "my lambda function" )r )rI rK rL rM rD rE )r r r r rH rD rF r rO rJ rP zEFunction not updated but IAM role may not have propagated, will retryrQ i� Nr rG rI rh ri rK rL rM rj rk rE Tc s i | ]}� j |�|�qS r )r- )r. rm )�rr r rn s z*update_function_config.<locals>.<dictcomp>)�updatedrl zFunction was not updatedrr Fzboto3.get_error)rr r rS ) r rG rH rI rh ri rK rL rM rj rk rD rE )r5 r �itemsr& r9 rU Z update_function_configurationr rW r- rX rY rZ r[ r\ r] r^ r )r rH rI rK rL rM r r r r rD r_ r` rE �argsZoptionsr �val�varrc rd r! ro r )rq r �update_function_config� sj , rw c s� t |||| d�} y�|r@|s"|s"|r*td��| j| t|�|d�� n@| sL| rTtd��||d�} |rj|| d< | jf | |d�| ��� � r�d } d� fdd�| D �d�S tjd� ddiS W n0 tk � r� } zdtd | �d �S d } ~ X nX d S ) a= Upload the given code to the named lambda function. Returns {updated: true} if the function was updated and returns {updated: False} if the function was not updated. CLI Example: .. code-block:: bash salt myminion boto_lamba.update_function_code my_function ZipFile=function.zip )r r r r zIEither ZipFile must be specified, or S3Bucket and S3Key must be provided.)r r@ rN )rA rB rC )r rN r rG rH rI rh ri rK rL rM rj rk rD rE Tc s i | ]}� j |�|�qS r )r- )r. rm )rq r r rn X s z(update_function_code.<locals>.<dictcomp>)rr rl zFunction was not updatedrr Fzboto3.get_error)rr r N) r rG rH rI rh ri rK rL rM rj rk rD rE )r r �update_function_coder+ rX r^ r r )r r@ rA rB rC rN r r r r r rt ro r! r )rq r rx sH rx c C s� yht ||| | d�} i } x,d D ]$}t� | dk r tt� | �| |< q W | jf | ||t|�d�| �� ddiS tk r� } zd td | �d �S d} ~ X nX dS ) a� Add a permission to a lambda function. Returns {added: true} if the permission was added and returns {added: False} if the permission was not added. CLI Example: .. code-block:: bash salt myminion boto_lamba.add_permission my_function my_id "lambda:*" \ s3.amazonaws.com aws:arn::::bucket-name \ aws-account-id )r r r r � SourceArn� SourceAccountre N)r � StatementId�Action� Principalrr TFzboto3.get_error)rr r )ry rz re )r �localsr2 �add_permissionr r )r r{ r| r} ry rz re r r r r r rb r! r r r r ` s r c C sv yBt ||||d�}i }|dk r&||d< |jf | |d�|�� ddiS tk rp } zdtd | �d �S d} ~ X nX dS ) a' Remove a permission from a lambda function. Returns {removed: true} if the permission was removed and returns {removed: False} if the permission was not removed. CLI Example: .. code-block:: bash salt myminion boto_lamba.remove_permission my_function my_id )r r r r Nre )r r{ rr TFzboto3.get_error)rr r )r �remove_permissionr r ) r r{ re r r r r r rb r! r r r r� � s r� c C sz �y t ||||d�}i }|dk r(||d< |jf d| i|��}|jdi �}t|t�r`tjjj|�}|dkrli }i } x�|jdg �D ]�} | jdi �} | jdi �} d | kr�| d j d �d } n | jd �} | jd �| d�} d| kr�| d jd�| d< d| k�r| d jd�| d< | | | jd�< q~W d| iS t k �rt } z8t d |�}|j jdi �jd�dk�r`ddiS d|d�S d}~X nX dS ) z� Get resource permissions for the given lambda function Returns dictionary of permissions, by statement ID CLI Example: .. code-block:: bash salt myminion boto_lamba.get_permissions my_function permissions: {...} )r r r r Nre r ZPolicyZ StatementZ Conditionr} ZAWS�:� ZServicer| )r| r} ZArnLikez AWS:SourceArnry Z StringEqualszAWS:SourceAccountrz ZSid� permissionszboto3.get_errorrO rJ ZResourceNotFoundException)r� r ) r Z get_policyr- r1 r2 r r r3 r4 �splitr r rW )r re r r r r r rb Zpolicyr� Z statementZ conditionZ principalZ permissionr! �errr r r �get_permissions� s@ r� c C s< t | |||d�}g }x"td |j�D ]}||d 7 }q$W |S )z� List all Lambda functions visible in the current scope. CLI Example: .. code-block:: bash salt myminion boto_lambda.list_functions )r r r r zboto3.paged_callr )r r r )r r r r r rT r r r r r � s r c C s� yXt ||||d�}g }x(td |j| d�D ]}|j|d � q*W t|�sRtjd� d|iS tk r� } zdtd |�iS d}~X nX dS ) z� List the versions available for the given function. Returns list of function versions CLI Example: .. code-block:: yaml versions: - {...} - {...} )r r r r zboto3.paged_call)r ZVersionszNo versions foundr zboto3.get_errorN)r r Zlist_versions_by_functionr8 r rX r^ r ) r r r r r r ZversrT r! r r r �list_function_versions� s r� c C s� yZt ||||d�}|j| |||d�} | rFtjd| d � d| d d�S tjd� dd iS W n. tk r� } zd td | �d �S d } ~ X nX d S ) a7 Given a valid config, create an alias to a function. Returns {created: true} if the alias was created and returns {created: False} if the alias was not created. CLI Example: .. code-block:: bash salt myminion boto_lamba.create_alias my_function my_alias $LATEST "An alias" )r r r r )r �Name�FunctionVersionrK z"The newly created alias name is %sr� T)rR r zAlias was not createdrR Fzboto3.get_error)rR r N)r � create_aliasrX rY r^ r r ) r r� r� rK r r r r r �aliasr! r r r r� s r� c C sZ y&t ||||d�}|j| |d� ddiS tk rT } zdtd |�d�S d}~X nX dS ) a& Given a function name and alias name, delete the alias. Returns {deleted: true} if the alias was deleted and returns {deleted: false} if the alias was not deleted. CLI Example: .. code-block:: bash salt myminion boto_lambda.delete_alias myfunction myalias )r r r r )r r� rf TFzboto3.get_error)rf r N)r � delete_aliasr r )r r� r r r r r r! r r r r� H s r� c C sh t ||||d�}d| i}|r$||d< x>td |jf|�D ](} x"| jd�D ]} | d |krH| S qHW q8W dS )zY Given function name and alias name, find and return matching alias information. )r r r r r r� zboto3.paged_callZAliasesr� N)r r Z list_aliasesr- ) r r� r� r r r r r rt �aliasesr� r r r � _find_alias_ s r� c C sR y t | |||||d�}dt|�iS tk rL } zdtd |�iS d}~X nX dS )a, Given a function name and alias name, check to see if the given alias exists. Returns True if the given alias exists and returns False if the given alias does not exist. CLI Example: .. code-block:: bash salt myminion boto_lambda.alias_exists myfunction myalias )r r r r r r zboto3.get_errorN)r� r r r )r r� r r r r r� r! r r r � alias_existsx s r� c sp y>t | |||||d�� � r4d }d� fdd�|D �iS dd iS W n, tk rj } zd td |�iS d }~X nX d S ) z� Given a function name and alias name describe the properties of the alias. Returns a dictionary of interesting properties. CLI Example: .. code-block:: bash salt myminion boto_lambda.describe_alias myalias )r r r r �AliasArnr� r� rK r� c s i | ]}� j |�|�qS r )r- )r. rm )r� r r rn � s z"describe_alias.<locals>.<dictcomp>Nr zboto3.get_error)r� r� r� rK )r� r r )r r� r r r r ro r! r )r� r �describe_alias� s r� c s� yxt ||||d�}i } |r"|| d< |r.|| d< |jf | |d�| ��� � rdd} d� fdd�| D �d �S tjd � d d iS W n. tk r� } zd td | �d�S d} ~ X nX dS )a" Update the named alias to the configuration. Returns {updated: true} if the alias was updated and returns {updated: False} if the alias was not updated. CLI Example: .. code-block:: bash salt myminion boto_lamba.update_alias my_lambda my_alias $LATEST )r r r r r� rK )r r� r� Tc s i | ]}� j |�|�qS r )r- )r. rm )rq r r rn � s z update_alias.<locals>.<dictcomp>)rr r� zAlias was not updatedrr Fzboto3.get_error)rR r N)r� r� rK )r � update_aliasrX r^ r r ) r r� r� rK r r r r r rt ro r! r )rq r r� � s r� �d c C s� y\t ||||d�} | j| ||||d�} | rHtjd| d � d| d d�S tjd� dd iS W n. tk r� } zd td | �d �S d } ~ X nX d S ) a Identifies a stream as an event source for a Lambda function. It can be either an Amazon Kinesis stream or an Amazon DynamoDB stream. AWS Lambda invokes the specified function when records are posted to the stream. Returns {created: true} if the event source mapping was created and returns {created: False} if the event source mapping was not created. CLI Example: .. code-block:: bash salt myminion boto_lamba.create_event_source_mapping arn::::eventsource myfunction LATEST )r r r r )�EventSourceArnr �Enabled� BatchSize�StartingPositionz/The newly created event source mapping ID is %s�UUIDT)rR r, z$Event source mapping was not createdrR Fzboto3.get_error)rR r N)r �create_event_source_mappingrX rY r^ r r ) r� r r� r� r� r r r r r �objr! r r r r� � s r� c C s� t ||||d�}y>g }x4td |j| |d�D ] }|jdd� |d D �� q,W |S tk rz } zdtd | �iS d } ~ X nX d S ) z� Given an event source and function name, return a list of mapping IDs CLI Example: .. code-block:: bash salt myminion boto_lambda.get_event_source_mapping_ids arn:::: myfunction )r r r r zboto3.paged_call)r� r c S s g | ] }|d �qS )r� r )r. �mappingr r r r0 s z0get_event_source_mapping_ids.<locals>.<listcomp>ZEventSourceMappingsr zboto3.get_errorN)r r Zlist_event_source_mappingsr8 r ) r� r r r r r r Zmappings�mapsr! r r r � get_event_source_mapping_ids s r� c C sF | r|s |rt d��| gS | s&| r.t d��t||||||d�S d S )NzSEither UUID must be specified, or EventSourceArn and FunctionName must be provided.)r� r r r r r )r r� )r� r� r r r r r r r r �_get_ids! s r� c C st t | ||d�}y2t||||d�}x|D ]} |j| d� q&W ddiS tk rn } zdtd | �d�S d } ~ X nX d S ) a� Given an event source mapping ID or an event source ARN and FunctionName, delete the event source mapping Returns {deleted: true} if the mapping was deleted and returns {deleted: false} if the mapping was not deleted. CLI Example: .. code-block:: bash salt myminion boto_lambda.delete_event_source_mapping 260c423d-e8b5-4443-8d6a-5e91b9ecd0fa )r� r )r r r r )r� rf TFzboto3.get_error)rf r N)r� r �delete_event_source_mappingr r ) r� r� r r r r r �idsr r, r! r r r r� A s r� c C s4 t | ||||||d�}d|kr"|S dt|jd��iS )aN Given an event source mapping ID or an event source ARN and FunctionName, check whether the mapping exists. Returns True if the given alias exists and returns False if the given alias does not exist. CLI Example: .. code-block:: bash salt myminion boto_lambda.alias_exists myfunction myalias )r� r� r r r r r r r �event_source_mapping)� describe_event_source_mappingr r- )r� r� r r r r r �descr r r �event_source_mapping_existsb s r� c s� t | ||d�}|sddiS |d } yFt||||d�}|j| d�� � r^d} d� fdd�| D �iS ddiS W n, tk r� } zdtd | �iS d} ~ X nX dS )a, Given an event source mapping ID or an event source ARN and FunctionName, obtain the current settings of that mapping. Returns a dictionary of interesting properties. CLI Example: .. code-block:: bash salt myminion boto_lambda.describe_event_source_mapping uuid )r� r r� Nr )r r r r )r� r� r� r� rj rk �LastProcessingResult�State�StateTransitionReasonc s i | ]}� j |�|�qS r )r- )r. rm )r� r r rn � s z1describe_event_source_mapping.<locals>.<dictcomp>r zboto3.get_error)r� r� r� rj rk r� r� r� )r� r Zget_event_source_mappingr r ) r� r� r r r r r r� r ro r! r )r� r r� � s( r� c s� y�t ||||d�}i } |dk r&|| d< |dk r6|| d< |dk rF|| d< |jf d| i| ��� � rzd} d � fdd�| D �d�S tjd� ddiS W n. tk r� } zdtd | �d�S d} ~ X nX dS )a@ Update the event source mapping identified by the UUID. Returns {updated: true} if the alias was updated and returns {updated: False} if the alias was not updated. CLI Example: .. code-block:: bash salt myminion boto_lamba.update_event_source_mapping uuid FunctionName=new_function )r r r r Nr r� r� r� r� rj rk r� r� r� Tc s i | ]}� j |�|�qS r )r- )r. rm )rq r r rn � s z/update_event_source_mapping.<locals>.<dictcomp>)rr r� zMapping was not updatedrr Fzboto3.get_error)rR r )r� r� r� rj rk r� r� r� )r �update_event_source_mappingrX r^ r r ) r� r r� r� r r r r r rt ro r! r )rq r r� � s2 r� )NNNN)NNNN)NNNN)NNNN)NNNNr: r; r< FFr= NNNNNN)NNNNN)NNNN) NNNNNNNNNNFr= N) NNNNFNNNN)NNNNNNN)NNNNN)NNNNN)NNNN)NNNN)r: NNNN)NNNN)NNNNN)NNNN)NNNN)NNNNNN)Tr� NNNN)NNNN)NNNNNNN)NNNNNNN)NNNNNNN)NNNNNNN)NNNNNNN)7�__doc__Zloggingr\ rZ Zsalt.utils.compatr Zsalt.utils.filesZsalt.utils.jsonZsalt.utils.versionsZsalt.exceptionsr Z getLoggerr rX r r Zbotocore.exceptionsr Zbotocorer Zfound_botocore_versionZsetLevelZCRITICALr � ImportErrorr r r r" r& r+ r9 rV rg rp rw rx r r� r� r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r �<module>L s v + g G ' 8 " " & & +
Return