add log group and logfilter event

Author: Guslington

lambda.cfndsl.rb

@@ -71,10 +71,16 @@
       Tags tags
     end
 
+    Logs_LogGroup("#{function_name}LogGroup") do
+      LogGroupName FnSub("/aws/lambda/${function_name}")
+      RetentionInDays lambda_config['log_retention'] if lambda_config.has_key? 'log_retention'
+    end
+
     lambda_config['events'].each do |name,event|
 
       case event['type']
       when 'schedule'
+
         Events_Rule("#{function_name}Schedule#{name}") do
           ScheduleExpression event['expression']
           State event['disable'] ? 'DISABLED' : 'ENABLED'
@@ -86,14 +92,15 @@
           Targets([target])
         end
 
-        Lambda_Permission("#{function_name}Permissions") do
+        Lambda_Permission("#{function_name}#{name}Permissions") do
           FunctionName Ref(function_name)
           Action 'lambda:InvokeFunction'
           Principal 'events.amazonaws.com'
           SourceArn FnGetAtt("#{function_name}Schedule#{name}", 'Arn')
         end
 
       when 'sns'
+
         SNS_Topic("#{function_name}Sns#{name}") do
           Subscription([
             {
@@ -103,12 +110,29 @@
           ])
         end
 
-        Lambda_Permission("#{function_name}Permissions") do
+        Lambda_Permission("#{function_name}#{name}Permissions") do
           FunctionName Ref(function_name)
           Action 'lambda:InvokeFunction'
           Principal 'sns.amazonaws.com'
           SourceArn Ref("#{function_name}Sns#{name}")
         end
+
+      when 'filter'
+
+        Logs_SubscriptionFilter("#{function_name}SubscriptionFilter#{name}") do
+          DestinationArn FnGetAtt(function_name, 'Arn')
+          FilterPattern event['pattern']
+          LogGroupName Ref(event['log_group'])
+        end
+
+        Lambda_Permission("#{function_name}#{name}Permissions") do
+          FunctionName Ref(function_name)
+          Action 'lambda:InvokeFunction'
+          Principal FnSub('logs.${AWS::Region}.amazonaws.com')
+          SourceAccount Ref('AWS::AccountId')
+          SourceArn FnSub("arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/#{event['log_group']}:*")
+        end
+
       end
 
     end if lambda_config.has_key?('events')

lambda.config.yaml

@@ -25,10 +25,15 @@ maximum_availability_zones: 5
 #           Resource:
 #             - '*'
 #       enable_eni: true
+#       log_retention: 7
 #       events:
 #         cron:
 #           type: schedule
 #           expression: cron(0 12 * * ? *)
 #           payload: "{ 'a': 1, 'b': 2 }"
 #         trigger:
 #           type: sns
+#         filter:
+#           type: filter
+#           pattern: '[date, deployment_id, bytes]'
+#           log_group: myloggroup