template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Transform: AWS::Serverless-2016-10-31

Metadata:
  AWS::ServerlessRepo::Application:
    Name: amazon-ebs-migration-utility
    Description: Amazon EBS Volume Migration Utility
    Author: Sanjay Dhar
    SpdxLicenseId: MIT-0
    LicenseUrl: LICENSE
    ReadmeUrl: README.md
    Labels: ['gp2', 'gp3', 'EBS']
    HomePageUrl: https://github.com/sanjdhar/amazon-ebs-migration-utility
    SemanticVersion: 1.0.0
    SourceCodeUrl: https://github.com/sanjdhar/amazon-ebs-migration-utility

Parameters:
  TargetEmail:
    Type: String
    Description: Enter a valid email address for notifications (Required)
    ConstraintDescription: You should enter a valid email address for notifications (Required)

Resources: 
  LambdaRole: 
    Type: "AWS::IAM::Role"
    Properties: 
      AssumeRolePolicyDocument: 
        Version: "2012-10-17"
        Statement: 
          - Effect: "Allow"
            Principal: 
              Service: 
                - "lambda.amazonaws.com"
            Action: 
              - "sts:AssumeRole"
      Path: "/"
  RolePolicies: 
    Type: "AWS::IAM::Policy"
    Properties: 
      PolicyName: "ebsconverter-policy"
      PolicyDocument: 
        Version: "2012-10-17"
        Statement: 
          - Effect: Allow
            Action: 
              - logs:CreateLogGroup
              - logs:CreateLogStream
              - logs:PutLogEvents
            Resource: "arn:aws:logs:*:*:*"
          - Effect: Allow
            Action: 
              - sns:Publish
            Resource: !Ref EBSConvSNS
          - Effect: Allow
            Action: 
              - iam:GetRole
              - iam:ListRoles
              - kms:DescribeKey
              - kms:GetKeyPolicy
              - kms:ListGrants
              - kms:ListKeyPolicies
              - kms:ListKeys
              - ec2:DescribeTags
              - ec2:DescribeVolumeAttribute
              - ec2:DescribeVolumeStatus
              - ec2:DescribeVolumes
              - ec2:DescribeVolumesModifications
              - ec2:ModifyVolume
              - ec2:ModifyVolumeAttribute
            Resource: "*"
          - Effect: Allow
            Action:
              - dynamodb:GetItem
              - dynamodb:PutItem
              - dynamodb:UpdateItem
            Resource: !GetAtt EBSVolumeTable.Arn

      Roles: 
        - Ref: "LambdaRole"

  EBSConvSNS:
    Type: AWS::SNS::Topic
    Properties: 
      Subscription: 
        - Endpoint: !Ref TargetEmail
          Protocol: 'email'
      

  EBSVolumeConverter:
    Type: AWS::Lambda::Function
    Properties:
      Code: 
        S3Bucket: amazon-ebs-migration-utility
        S3Key: gp3_upgrade.zip
      Handler: gp3_upgrade.lambda_handler
      Runtime: python3.7
      Timeout: 120
      MemorySize: 128
      Role: !GetAtt LambdaRole.Arn
      Environment:
          Variables:
              DDB_TABLE_NAME: !Ref EBSVolumeTable
              SNS_ARN: !Ref EBSConvSNS

  EBSVolumeTable:
    Type: 'AWS::Serverless::SimpleTable'
    Properties:
        PrimaryKey:
            Name: volume_id
            Type: String