mirror of
https://github.com/Sea-Haven-Industries/security-review.git
synced 2026-10-02 22:43:28 +00:00
47 lines
1.1 KiB
YAML
47 lines
1.1 KiB
YAML
|
AWSTemplateFormatVersion: '2010-09-09'
|
||
|
|
Transform: AWS::Serverless-2016-10-31
|
||
|
|
Description: Payments service infrastructure.
|
||
|
|
|
||
|
|
Resources:
|
||
|
|
|
||
|
|
PaymentFn:
|
||
|
|
Type: AWS::Serverless::Function
|
||
|
|
Properties:
|
||
|
|
Runtime: python3.12
|
||
|
|
Handler: payment_handler.get_payment
|
||
|
|
Policies:
|
||
|
|
- Statement:
|
||
|
|
- Effect: Allow
|
||
|
|
Action: "*"
|
||
|
|
Resource: "*"
|
||
|
|
|
||
|
|
ReportsBucket:
|
||
|
|
Type: AWS::S3::Bucket
|
||
|
|
Properties:
|
||
|
|
BucketName: seahaven-payments-reports
|
||
|
|
PublicAccessBlockConfiguration:
|
||
|
|
BlockPublicAcls: false
|
||
|
|
BlockPublicPolicy: false
|
||
|
|
IgnorePublicAcls: false
|
||
|
|
RestrictPublicBuckets: false
|
||
|
|
|
||
|
|
AdminSG:
|
||
|
|
Type: AWS::EC2::SecurityGroup
|
||
|
|
Properties:
|
||
|
|
GroupDescription: payments admin
|
||
|
|
SecurityGroupIngress:
|
||
|
|
- IpProtocol: tcp
|
||
|
|
FromPort: 22
|
||
|
|
ToPort: 22
|
||
|
|
CidrIp: 0.0.0.0/0
|
||
|
|
|
||
|
|
WebSG:
|
||
|
|
Type: AWS::EC2::SecurityGroup
|
||
|
|
Properties:
|
||
|
|
GroupDescription: public web tier
|
||
|
|
SecurityGroupIngress:
|
||
|
|
- IpProtocol: tcp
|
||
|
|
FromPort: 443
|
||
|
|
ToPort: 443
|
||
|
|
CidrIp: 0.0.0.0/0
|