apigw-lambdas.yml

# https://github.com/awslabs/serverless-application-model/tree/master/examples/2016-10-31/inline_swagger
AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: Two API Gateway Endpoints behind one custom domain

Parameters:
  DomainName:
    Type: String
  ZoneName:
    Type: String
  Bucket:
    Type: String
  md5:
    Type: String

Resources:
  NodeApi:
    Type: AWS::Serverless::Api
    Properties:
        StageName: prod
        DefinitionBody:
            swagger: 2.0
            info:
                title: !Sub "${AWS::StackName}-node"
            paths:
              "/":
                get:
                  x-amazon-apigateway-integration:
                    httpMethod: POST
                    type: aws_proxy
                    uri:
                      Fn::Sub: arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${NodeFunction.Arn}/invocations
                  responses: {}
            swagger: '2.0'

  NodeFunction:
    Type: AWS::Serverless::Function
    Properties:
      Handler: hello-js.handler
      Runtime: nodejs4.3
      Timeout: 1
      CodeUri:
        Bucket: !Ref Bucket
        Key: !Ref md5 # This is public readable
      Events:
        GetApi:
          Type: Api
          Properties:
            Path: /
            Method: GET
            RestApiId: !Ref NodeApi

  PythonApi:
    Type: AWS::Serverless::Api
    Properties:
        StageName: prod
        DefinitionBody:
            swagger: 2.0
            info:
              title: !Sub "${AWS::StackName}-python"
            paths:
              "/":
                get:
                  x-amazon-apigateway-integration:
                    httpMethod: POST
                    type: aws_proxy
                    uri:
                      Fn::Sub: arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${PythonFunction.Arn}/invocations
                  responses: {}
            swagger: '2.0'

  PythonFunction:
    Type: AWS::Serverless::Function
    Properties:
      Handler: hello.handler
      Runtime: python2.7
      Timeout: 1
      CodeUri:
        Bucket: !Ref Bucket
        Key: !Ref md5 # This is public readable
      Events:
        GetApi:
          Type: Api
          Properties:
            Path: /
            Method: GET
            RestApiId: !Ref PythonApi

  CustomListACMCertRole:
    Type: AWS::IAM::Role
    Properties:
      ManagedPolicyArns:
      - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Sid: 'Lambda'
          Principal:
            Service:
            - lambda.amazonaws.com
          Action:
            - sts:AssumeRole
      Path: "/cfn/"
      Policies:
      - PolicyName: ACMCerts
        PolicyDocument:
          Statement:
          - Effect: Allow
            Action:
            - acm:ListCertificates
            Resource: '*'

  CustomACMLookup:
    Type: Custom::ListACMCert
    Properties:
        ServiceToken: !GetAtt CustomListACMCertFunction.Arn
        CertDomainName: !Ref DomainName

  CustomListACMCertFunction:
    Type: AWS::Lambda::Function
    Properties:
      Description: Custom Cloudformation Resource to return the ARN of ACM
      Runtime: python2.7
      Handler: index.handler
      Role: !GetAtt CustomListACMCertRole.Arn
      Timeout: 120
      Code:
        ZipFile: |
          import logging
          import json
          import boto3
          import cfnresponse

          logging.basicConfig()
          logging.getLogger('boto3').setLevel(logging.CRITICAL)
          logging.getLogger('botocore').setLevel(logging.CRITICAL)
          logger = logging.getLogger("mylogger")
          logger.setLevel(logging.INFO)

          def handler(event, context):
              client = boto3.client('apigateway')
              logger.info(json.dumps(event, indent=2))

              ResponseURL=event['ResponseURL']
              StackId=event['StackId']
              RequestId=event['RequestId']
              ResourceType=event['ResourceType']
              RequestType=event['RequestType']
              LogicalResourceId=event['LogicalResourceId']
              PhysicalResourceId=event.get('PhysicalResourceId')
              responseData = {}
              CertDomainName=event['ResourceProperties']['CertDomainName']

              certs = boto3.client('acm', region_name='us-east-1').list_certificates()
              for i in certs['CertificateSummaryList']:
                  if i['DomainName'] == CertDomainName:
                      responseData['CertificateArn'] = i['CertificateArn']
              # https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-cfnresponsemodule
              cfnresponse.send(event, context, 'SUCCESS',
                  responseData, "CustomACMCertArnId")

  AliasDNSEntry:
    Type: AWS::Route53::RecordSet
    Properties:
      AliasTarget:
        DNSName: !GetAtt CustomDomain.DistributionDomainName
        HostedZoneId: Z2FDTNDATAQYW2 # CloudFront zone id hardcoded by design
      HostedZoneName: !Ref ZoneName
      Name: !Ref DomainName
      Type: A
  AliasDNSEntry6:
    Type: AWS::Route53::RecordSet
    Properties:
      AliasTarget:
        DNSName: !GetAtt CustomDomain.DistributionDomainName
        HostedZoneId: Z2FDTNDATAQYW2 # CloudFront zone id hardcoded by design
      HostedZoneName: !Ref ZoneName
      Name: !Ref DomainName
      Type: AAAA

  CustomDomain:
    Type: 'AWS::ApiGateway::DomainName'
    Properties:
      DomainName: !Ref DomainName
      CertificateArn: !GetAtt CustomACMLookup.CertificateArn

  NodeBasePathMapping:
    Type: "AWS::ApiGateway::BasePathMapping"
    DependsOn:
      - NodeApiprodStage
      - CustomDomain
    Properties:
      BasePath: node
      DomainName: !Ref DomainName
      RestApiId: !Ref NodeApi
      Stage: prod
  PythonBasePathMapping:
    Type: "AWS::ApiGateway::BasePathMapping"
    DependsOn:
      - PythonApiprodStage
      - CustomDomain
    Properties:
      BasePath: python
      DomainName: !Ref DomainName
      RestApiId: !Ref PythonApi
      Stage: prod