adam/afi-backup-monitor
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/afi-backup-monitor.git synced 2026-09-30 04:53:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Afi.ai backup monitoring - auto-protect users & weekly health digest via Slack
44 commits 2 branches 0 tags 685 KiB
HCL 62.4%
Python 37.6%
Find a file
Adam Moussa cd7ac2c86d
Some checks are pending
Deploy / deploy (push) Waiting to run
Details
ci: add org PR policy caller (PLAT-62) (#41) 
* ci: add org PR policy caller

Refs: PLAT-62

* fix(ci): name PR policy workflow

Refs: PLAT-62
2026-08-04 15:56:20 +00:00
.github ci: add org PR policy caller (PLAT-62) (#41) 2026-08-04 15:56:20 +00:00
src chore(deps): bump boto3 (#38) 2026-07-28 19:44:14 +00:00
.gitignore Initial commit: Afi backup monitor SAM stack 2026-04-06 13:42:28 -04:00
AGENTS.md ci: add org PR policy caller (PLAT-62) (#41) 2026-08-04 15:56:20 +00:00
README.md docs: document template.yaml and repo structure in README (#32) 2026-07-10 19:51:50 +00:00
template.yaml Attach permissions boundary to all Lambda roles (#17) 2026-06-10 14:15:02 -04:00

README.md

Afi Backup Monitor

CI Python AWS SAM Slack

AWS SAM stack with two Lambda functions that integrate the Afi.ai backup API with Slack.

Functions

afi-auto-protect — Runs weekly. Compares tenant resources against active protections and automatically applies the configured backup policy to any unprotected users. Posts a summary to Slack.

afi-health-digest — Runs weekly. Pulls task statistics (last 7 days), storage quotas, and resource coverage, then posts a formatted digest to Slack.

Architecture

  • Runtime: Python 3.12 (arm64)
  • Shared Layer: Afi API client + Slack webhook helper
  • Secrets: Afi API key and Slack webhook URL stored in AWS Secrets Manager
  • Scheduling: EventBridge cron rules (default: Mondays 10am ET)

Repository Structure

template.yaml               # SAM stack: Lambdas, shared layer, IAM, EventBridge schedules
src/
  auto_protect/app.py       # afi-auto-protect handler
  health_digest/app.py      # afi-health-digest handler
  shared/python/            # shared layer
    afi_client.py           # Afi.ai backup API client
    slack.py                # Slack webhook helper

Deployment parameters (secret ARNs, tenant ID, policy ID, schedules) are defined in template.yaml and supplied at deploy time via samconfig.toml.

Documentation

The canonical map of Sea Haven's AWS infrastructure lives in Confluence. This project's afi-backup-monitor stack is represented there as a Mermaid subgraph.

Setup

  1. Store the Afi API key and Slack webhook URL in Secrets Manager:

    aws secretsmanager create-secret --name afi-api-key --secret-string "appkey-YOUR_KEY"
aws secretsmanager create-secret --name afi-slack-webhook --secret-string "https://hooks.slack.com/services/YOUR/WEBHOOK/URL"

  2. Update samconfig.toml with your Secret ARNs (AfiApiKeySecretArn, SlackWebhookSecretArn), Tenant ID, and Policy ID.

  3. Build and deploy:

    sam build && sam deploy

Manual Testing

aws lambda invoke --function-name afi-auto-protect --payload '{}' /dev/stdout
aws lambda invoke --function-name afi-health-digest --payload '{}' /dev/stdout