First commit

Author: alfonsof

awslambdas3copy-rapi/README.md

@@ -0,0 +1,109 @@
+# AWS Lambda Function S3 Copy Python example
+
+This folder contains an AWS Lambda Function example in Python on AWS (Amazon Web Services).
+
+It handles an AWS Lambda function that copies an object when it appears in a S3 bucket to another S3 bucket using the Resource API (high-level) of Boto 3.
+
+## Requirements
+
+* You must have an [Amazon Web Services (AWS)](http://aws.amazon.com/) account.
+
+* The code was written for Python 3 and AWS SDK for Python (Boto 3).
+
+* This example uses Resource API (high-level) of Boto 3.
+
+* The AWS Lambda execution environment include SDK for Python (Boto 3).
+
+## Using the code
+
+* You can select the destination bucket name changing the value of `DESTINATION_BUCKET` variable in the code.
+
+* Access the AWS console.
+
+* Create a S3 bucket for the source and another S3 bucket for the target.
+
+* Create an IAM Policy: ex. `Policy-VM-buckets`
+
+ Content of the IAM policy:
+
+ ```bash
+ {
+ "Version": "2012-10-17",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "s3:GetObject"
+ ],
+ "Resource": [
+ "arn:aws:s3:::sourcevm/*"
+ ]
+ },
+ {
+ "Effect": "Allow",
+ "Action": [
+ "s3:PutObject"
+ ],
+ "Resource": [
+ "arn:aws:s3:::targetvm/*"
+ ]
+ },
+ {
+ "Sid": "Stmt1430872844000",
+ "Effect": "Allow",
+ "Action": [
+ "cloudwatch:*"
+ ],
+ "Resource": [
+ "*"
+ ]
+ },
+ {
+ "Sid": "Stmt1430872852000",
+ "Effect": "Allow",
+ "Action": [
+ "logs:*"
+ ],
+ "Resource": [
+ "*"
+ ]
+ }
+ ]
+ }
+ ```
+
+* Create a role: `Role-VM-buckets`.
+
+ This role uses the policy `Policy-VM-buckets`
+
+* Create an AWS lambda function.
+ * Name: `<LAMBDA_NAME>`
+ * Runtime: `Python 3.6`
+ * Handler: `lambda_function.lambda_handler`
+ * Role: `Role-VM-buckets`
+ * The triggers:
+ * `S3`
+ * Bucket: `<BUCKET_NAME>`
+ * Event type: `ObjectCreated`
+ * Enable trigger: `Yes`
+ * The resources that the function's role has access to:
+ * `Amazon CloudWatch`
+ * `Amazon CloudWatch Logs`
+ * `Amazon S3`
+ * Basic Settings for the lambda function:
+ * Memory (MB): `1024`
+ * Timeout: `10 sec`
+
+* Write the code.
+
+ The content of `lambda_function.py` file.
+
+* Save the Lambda function.
+
+ It deploys the Lambda function.
+
+* Test the function:
+
+ Copy a file in the source S3 bucket.
+
+ The object from the source S3 bucket should be copied to the target S3 bucket.

awslambdas3copy-rapi/lambda_function.py

@@ -0,0 +1,43 @@
+# lamdda_function.py
+# It handles an AWS Lambda function that copies an object when it appears
+# in a S3 bucket to another S3 bucket.
+# It uses Resource API (high-level) of Boto3.
+
+import boto3
+import botocore
+
+# Instantiate the service resource object
+s3resource = boto3.resource('s3')
+
+def lambda_handler(event, context):
+ DESTINATION_BUCKET = 'targetvm' # Destination bucket name
+
+ source_bucket_name = event['Records'][0]['s3']['bucket']['name']
+ source_key = event['Records'][0]['s3']['object']['key']
+ destination_bucket_name = DESTINATION_BUCKET
+ destination_key = source_key
+ print('From - bucket: ' + source_bucket_name)
+ print('From - object: ' + source_key)
+ print('To - bucket: ' + destination_bucket_name)
+ print('To - object: ' + destination_key)
+
+ # Copy the object
+ try:
+ print('Copying object ...')
+ # Instantiate the destination bucket
+ dest_bucket = s3resource.Bucket(destination_bucket_name)
+ copy_source = {
+ 'Bucket': source_bucket_name,
+ 'Key': source_key
+ }
+ dest_bucket.copy(copy_source, destination_key)
+ print('Copied')
+ except botocore.exceptions.ClientError as e:
+ if e.response['Error']['Code'] == "AccessDenied":
+ print("Error: Access denied!!")
+ elif e.response['Error']['Code'] == "InvalidBucketName":
+ print("Error: Invalid bucket name!!")
+ elif e.response['Error']['Code'] == "NoSuchBucket":
+ print("Error: No such bucket!!")
+ else:
+ raise