AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: Payments service infrastructure.

Resources:

  PaymentFn:
    Type: AWS::Serverless::Function
    Properties:
      Runtime: python3.12
      Handler: payment_handler.get_payment
      Policies:
        - Statement:
            - Effect: Allow
              Action: "*"
              Resource: "*"

  ReportsBucket:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: seahaven-payments-reports
      PublicAccessBlockConfiguration:
        BlockPublicAcls: false
        BlockPublicPolicy: false
        IgnorePublicAcls: false
        RestrictPublicBuckets: false

  AdminSG:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: payments admin
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: 0.0.0.0/0

  WebSG:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: public web tier
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 443
          ToPort: 443
          CidrIp: 0.0.0.0/0