├── .gitignore ├── LICENSE ├── README.md ├── build.sh ├── create-lambda.sh ├── create-role.sh ├── dev.cljs.edn ├── iam ├── lambda-policy.json └── lambda-role.json ├── index.js ├── package.json ├── project.clj ├── repl ├── figwheel_repl.clj └── node_repl.clj ├── src └── lambda │ ├── aws.cljs │ ├── aws_async.cljs │ ├── config.cljs │ ├── core.cljs │ ├── util.cljs │ └── util │ ├── async.cljs │ └── async │ └── macros.clj ├── test.sh ├── test └── lambda │ ├── config_test.cljs │ ├── core_test.cljs │ └── test_runner.cljs └── update-lambda.sh /.gitignore: -------------------------------------------------------------------------------- 1 | /target 2 | /classes 3 | /checkouts 4 | pom.xml 5 | pom.xml.asc 6 | *.jar 7 | *.class 8 | /.lein-* 9 | /.nrepl-port 10 | .hgignore 11 | .hg/ 12 | node_modules 13 | .idea 14 | *.iml 15 | out 16 | .DS_store 17 | app/ 18 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS ECLIPSE PUBLIC 2 | LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION OF THE PROGRAM 3 | CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT. 4 | 5 | 1. DEFINITIONS 6 | 7 | "Contribution" means: 8 | 9 | a) in the case of the initial Contributor, the initial code and 10 | documentation distributed under this Agreement, and 11 | 12 | b) in the case of each subsequent Contributor: 13 | 14 | i) changes to the Program, and 15 | 16 | ii) additions to the Program; 17 | 18 | where such changes and/or additions to the Program originate from and are 19 | distributed by that particular Contributor. A Contribution 'originates' from 20 | a Contributor if it was added to the Program by such Contributor itself or 21 | anyone acting on such Contributor's behalf. Contributions do not include 22 | additions to the Program which: (i) are separate modules of software 23 | distributed in conjunction with the Program under their own license 24 | agreement, and (ii) are not derivative works of the Program. 25 | 26 | "Contributor" means any person or entity that distributes the Program. 27 | 28 | "Licensed Patents" mean patent claims licensable by a Contributor which are 29 | necessarily infringed by the use or sale of its Contribution alone or when 30 | combined with the Program. 31 | 32 | "Program" means the Contributions distributed in accordance with this 33 | Agreement. 34 | 35 | "Recipient" means anyone who receives the Program under this Agreement, 36 | including all Contributors. 37 | 38 | 2. GRANT OF RIGHTS 39 | 40 | a) Subject to the terms of this Agreement, each Contributor hereby grants 41 | Recipient a non-exclusive, worldwide, royalty-free copyright license to 42 | reproduce, prepare derivative works of, publicly display, publicly perform, 43 | distribute and sublicense the Contribution of such Contributor, if any, and 44 | such derivative works, in source code and object code form. 45 | 46 | b) Subject to the terms of this Agreement, each Contributor hereby grants 47 | Recipient a non-exclusive, worldwide, royalty-free patent license under 48 | Licensed Patents to make, use, sell, offer to sell, import and otherwise 49 | transfer the Contribution of such Contributor, if any, in source code and 50 | object code form. This patent license shall apply to the combination of the 51 | Contribution and the Program if, at the time the Contribution is added by the 52 | Contributor, such addition of the Contribution causes such combination to be 53 | covered by the Licensed Patents. The patent license shall not apply to any 54 | other combinations which include the Contribution. No hardware per se is 55 | licensed hereunder. 56 | 57 | c) Recipient understands that although each Contributor grants the licenses 58 | to its Contributions set forth herein, no assurances are provided by any 59 | Contributor that the Program does not infringe the patent or other 60 | intellectual property rights of any other entity. Each Contributor disclaims 61 | any liability to Recipient for claims brought by any other entity based on 62 | infringement of intellectual property rights or otherwise. As a condition to 63 | exercising the rights and licenses granted hereunder, each Recipient hereby 64 | assumes sole responsibility to secure any other intellectual property rights 65 | needed, if any. For example, if a third party patent license is required to 66 | allow Recipient to distribute the Program, it is Recipient's responsibility 67 | to acquire that license before distributing the Program. 68 | 69 | d) Each Contributor represents that to its knowledge it has sufficient 70 | copyright rights in its Contribution, if any, to grant the copyright license 71 | set forth in this Agreement. 72 | 73 | 3. REQUIREMENTS 74 | 75 | A Contributor may choose to distribute the Program in object code form under 76 | its own license agreement, provided that: 77 | 78 | a) it complies with the terms and conditions of this Agreement; and 79 | 80 | b) its license agreement: 81 | 82 | i) effectively disclaims on behalf of all Contributors all warranties and 83 | conditions, express and implied, including warranties or conditions of title 84 | and non-infringement, and implied warranties or conditions of merchantability 85 | and fitness for a particular purpose; 86 | 87 | ii) effectively excludes on behalf of all Contributors all liability for 88 | damages, including direct, indirect, special, incidental and consequential 89 | damages, such as lost profits; 90 | 91 | iii) states that any provisions which differ from this Agreement are offered 92 | by that Contributor alone and not by any other party; and 93 | 94 | iv) states that source code for the Program is available from such 95 | Contributor, and informs licensees how to obtain it in a reasonable manner on 96 | or through a medium customarily used for software exchange. 97 | 98 | When the Program is made available in source code form: 99 | 100 | a) it must be made available under this Agreement; and 101 | 102 | b) a copy of this Agreement must be included with each copy of the Program. 103 | 104 | Contributors may not remove or alter any copyright notices contained within 105 | the Program. 106 | 107 | Each Contributor must identify itself as the originator of its Contribution, 108 | if any, in a manner that reasonably allows subsequent Recipients to identify 109 | the originator of the Contribution. 110 | 111 | 4. COMMERCIAL DISTRIBUTION 112 | 113 | Commercial distributors of software may accept certain responsibilities with 114 | respect to end users, business partners and the like. While this license is 115 | intended to facilitate the commercial use of the Program, the Contributor who 116 | includes the Program in a commercial product offering should do so in a 117 | manner which does not create potential liability for other Contributors. 118 | Therefore, if a Contributor includes the Program in a commercial product 119 | offering, such Contributor ("Commercial Contributor") hereby agrees to defend 120 | and indemnify every other Contributor ("Indemnified Contributor") against any 121 | losses, damages and costs (collectively "Losses") arising from claims, 122 | lawsuits and other legal actions brought by a third party against the 123 | Indemnified Contributor to the extent caused by the acts or omissions of such 124 | Commercial Contributor in connection with its distribution of the Program in 125 | a commercial product offering. The obligations in this section do not apply 126 | to any claims or Losses relating to any actual or alleged intellectual 127 | property infringement. In order to qualify, an Indemnified Contributor must: 128 | a) promptly notify the Commercial Contributor in writing of such claim, and 129 | b) allow the Commercial Contributor tocontrol, and cooperate with the 130 | Commercial Contributor in, the defense and any related settlement 131 | negotiations. The Indemnified Contributor may participate in any such claim 132 | at its own expense. 133 | 134 | For example, a Contributor might include the Program in a commercial product 135 | offering, Product X. That Contributor is then a Commercial Contributor. If 136 | that Commercial Contributor then makes performance claims, or offers 137 | warranties related to Product X, those performance claims and warranties are 138 | such Commercial Contributor's responsibility alone. Under this section, the 139 | Commercial Contributor would have to defend claims against the other 140 | Contributors related to those performance claims and warranties, and if a 141 | court requires any other Contributor to pay any damages as a result, the 142 | Commercial Contributor must pay those damages. 143 | 144 | 5. NO WARRANTY 145 | 146 | EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE PROGRAM IS PROVIDED ON 147 | AN "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER 148 | EXPRESS OR IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR 149 | CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A 150 | PARTICULAR PURPOSE. Each Recipient is solely responsible for determining the 151 | appropriateness of using and distributing the Program and assumes all risks 152 | associated with its exercise of rights under this Agreement , including but 153 | not limited to the risks and costs of program errors, compliance with 154 | applicable laws, damage to or loss of data, programs or equipment, and 155 | unavailability or interruption of operations. 156 | 157 | 6. DISCLAIMER OF LIABILITY 158 | 159 | EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER RECIPIENT NOR ANY 160 | CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, 161 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION 162 | LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 163 | CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 164 | ARISING IN ANY WAY OUT OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE 165 | EXERCISE OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY 166 | OF SUCH DAMAGES. 167 | 168 | 7. GENERAL 169 | 170 | If any provision of this Agreement is invalid or unenforceable under 171 | applicable law, it shall not affect the validity or enforceability of the 172 | remainder of the terms of this Agreement, and without further action by the 173 | parties hereto, such provision shall be reformed to the minimum extent 174 | necessary to make such provision valid and enforceable. 175 | 176 | If Recipient institutes patent litigation against any entity (including a 177 | cross-claim or counterclaim in a lawsuit) alleging that the Program itself 178 | (excluding combinations of the Program with other software or hardware) 179 | infringes such Recipient's patent(s), then such Recipient's rights granted 180 | under Section 2(b) shall terminate as of the date such litigation is filed. 181 | 182 | All Recipient's rights under this Agreement shall terminate if it fails to 183 | comply with any of the material terms or conditions of this Agreement and 184 | does not cure such failure in a reasonable period of time after becoming 185 | aware of such noncompliance. If all Recipient's rights under this Agreement 186 | terminate, Recipient agrees to cease use and distribution of the Program as 187 | soon as reasonably practicable. However, Recipient's obligations under this 188 | Agreement and any licenses granted by Recipient relating to the Program shall 189 | continue and survive. 190 | 191 | Everyone is permitted to copy and distribute copies of this Agreement, but in 192 | order to avoid inconsistency the Agreement is copyrighted and may only be 193 | modified in the following manner. The Agreement Steward reserves the right to 194 | publish new versions (including revisions) of this Agreement from time to 195 | time. No one other than the Agreement Steward has the right to modify this 196 | Agreement. The Eclipse Foundation is the initial Agreement Steward. The 197 | Eclipse Foundation may assign the responsibility to serve as the Agreement 198 | Steward to a suitable separate entity. Each new version of the Agreement will 199 | be given a distinguishing version number. The Program (including 200 | Contributions) may always be distributed subject to the version of the 201 | Agreement under which it was received. In addition, after a new version of 202 | the Agreement is published, Contributor may elect to distribute the Program 203 | (including its Contributions) under the new version. Except as expressly 204 | stated in Sections 2(a) and 2(b) above, Recipient receives no rights or 205 | licenses to the intellectual property of any Contributor under this 206 | Agreement, whether expressly, by implication, estoppel or otherwise. All 207 | rights in the Program not expressly granted under this Agreement are 208 | reserved. 209 | 210 | This Agreement is governed by the laws of the State of New York and the 211 | intellectual property laws of the United States of America. No party to this 212 | Agreement will bring a legal action under this Agreement more than one year 213 | after the cause of action arose. Each party waives its rights to a jury trial 214 | in any resulting litigation. 215 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # aws-clojurescript-lambda 2 | 3 | An example project of clojurescript on aws lambda (nodejs) that demonstrates common requirements. 4 | 5 | Specifically: 6 | 7 | - How to build a package for running on aws lambda (using lein-cljsbuild & npm). 8 | - How to setup a nodejs repl in Cursive for interactive repl development. 9 | - How to use the raw AWS Javascript (aws-sdk) APIs. 10 | - How to use core.async to handle the responses from the AWS sdk (including exception handling). 11 | - How to use cljs.test for writing tests (and ensure your build fails if a test fails). 12 | - How to access AWS Environment Properties (including KMS encrypted ones). 13 | - How to write and use clojurescript macros. 14 | 15 | ## Motivation 16 | 17 | There's a lot of information to absorb about clojurescript / node / lambda / tooling etc. 18 | 19 | I created this project to demonstrate the above features in a single working codebase. 20 | 21 | ## Usage 22 | 23 | You need [lein](https://leiningen.org/), [npm](https://www.npmjs.com/) and the [aws cli](https://aws.amazon.com/cli/) installed. 24 | 25 | ``` 26 | git clone 27 | 28 | cd aws-clojurescript-lambda 29 | 30 | ./build.sh 31 | ``` 32 | 33 | Produces... 34 | 35 | ``` 36 | target/lambda.zip 37 | ``` 38 | 39 | Create a Role for the lambda to run as (uses your default aws cli credentials). 40 | 41 | ``` 42 | ./create-role 43 | ``` 44 | 45 | Upload your lambda code (uses your default aws cli credentials). 46 | 47 | ``` 48 | ./create-lambda.sh 49 | ``` 50 | 51 | Done !!! 52 | 53 | ## Build and Package for AWS lambda. 54 | 55 | A simple build script ```./build.sh``` is provided to generate the deployable lambda zip. 56 | 57 | The built zip contains 3 things. 58 | 59 | 1. The compiled ClojureScript code in /app (built via lein-cljsbuild). 60 | 2. Any required node_modules in /node_modules (resolved via npm). 61 | 3. The entrypoint for your lambda defined in /app/index.js. 62 | 63 | The aws-sdk is defined as a devDependency in package.json, this means it is not included 64 | in our final zip and decreases package size as AWS Lambda supplies the sdk automatically. 65 | 66 | 67 | ## REPL - A node repl in Cursive. 68 | 69 | First, resolve npm dependencies via 70 | 71 | ```npm install``` 72 | 73 | In Cursive choose "Use clojure.main in normal JVM process". 74 | 75 | Two Choices: 76 | 77 | (a) Using the core cljs tooling. 78 | 79 | Parameters: "repl/node_repl.clj". 80 | 81 | (b) Using figwheel-main. 82 | 83 | Parameters: "repl/figwheel_repl.clj". 84 | 85 | 86 | ## Core Async 87 | 88 | Given that the latest core async and clojurescript is being used, then it is possible to 89 | use the simpler method of requiring and referring to the core.async functions and methods. 90 | 91 | ie. ```(:require [clojure.core.async :as async :refer [>! --plaintext "secret" --output text --query CiphertextBlob 117 | ``` 118 | 119 | ## Macros 120 | 121 | To define a clojurescript macro it needs to be defined in a clojure (.clj) source file. 122 | 123 | See ```src/lambda/util/async/macros.clj``` for an example of defining one and src/lambda/config.cljs for using it. 124 | 125 | 126 | ## TODO 127 | 128 | - Maybe use raw clj cljs tooling instead of lein / lein-cljsbuild? 129 | - Provide some example usage of spec. 130 | 131 | ## Learnings 132 | 133 | #### For AWS Lambda on nodejs you must define the entry point via an module exported function. 134 | 135 | This is not something you get from the cljs build tools so we include a small piece of js to provide this. 136 | For this template we use index.js to provide the export that links to our cljs function. 137 | 138 | #### Optimization none - you don't need it when you are targeting node. 139 | 140 | You can run into some traps when performing any optimization. As we are targetting node there is 141 | really no advantage to this. So keep your compiler options as :optimizations :none. 142 | 143 | #### To access the AWS js SDK use simple js interop via require (js/require). 144 | 145 | If you've been reading along with the advancements about requiring node modules you might be tempted 146 | to do something fancy here. Don't. The simple js/require is your friend. See lambda.aws namespace. 147 | If you are targetting the browser then this advice might change - but given we are targeting node 148 | then this is not necessary. 149 | 150 | #### Don't set \*main-cli-fn\* 151 | 152 | This interferes with the execution of your lambda as your main function is automatically call. 153 | We export our functions directly for use (see index.js). 154 | 155 | 156 | ## License 157 | 158 | Copyright © 2018 Boyd Sharrock. 159 | 160 | Distributed under the Eclipse Public License. 161 | -------------------------------------------------------------------------------- /build.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -x 4 | set -e 5 | 6 | 7 | lein clean 8 | lein cljsbuild once lambda-build 9 | 10 | # Create a target/package directory for us to prepare out package... 11 | mkdir target/package 12 | 13 | # Copy in our built javascript... 14 | mv app target/package 15 | 16 | # Copy in our index file to provide the lambda entry point... 17 | cp index.js target/package/app 18 | 19 | # Add in the required node modules... 20 | cp package.json target/package 21 | cd target/package 22 | npm install --only=production 23 | rm package.json 24 | 25 | # Now that we have the package, zip it up. 26 | zip -r ../lambda.zip * 27 | -------------------------------------------------------------------------------- /create-lambda.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | if [ $# -ne 3 ] 4 | then 5 | echo "Must supply 1. AWS Account Id. 2. Name to call your lambda. 3. Name of an existing IAM role for the lambda." 6 | echo 7 | echo "ie ./create-lambda.sh " 8 | exit -1 9 | fi 10 | 11 | set -x 12 | 13 | aws lambda create-function --function-name "$2" --runtime "nodejs6.10" --role "arn:aws:iam::$1:role/$3" --handler "app/index.main" --zip-file fileb://target/lambda.zip 14 | 15 | 16 | 17 | 18 | -------------------------------------------------------------------------------- /create-role.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | if [ $# -ne 2 ] 4 | then 5 | echo "Must supply: 1. AWS account id. 2. The name to call of the lambda role (and policy)." 6 | echo 7 | echo "ie ./create-role.sh " 8 | exit -1 9 | fi 10 | 11 | set -x 12 | set -e 13 | 14 | aws iam create-role --role-name "$2" --assume-role-policy-document fileb://iam/lambda-role.json 15 | 16 | aws iam create-policy --policy-name "$2" --policy-document fileb://iam/lambda-policy.json 17 | 18 | aws iam attach-role-policy --role-name "$2" --policy-arn "arn:aws:iam::$1:policy/$2" 19 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /dev.cljs.edn: -------------------------------------------------------------------------------- 1 | {:main lambda.core 2 | :target :nodejs} 3 | -------------------------------------------------------------------------------- /iam/lambda-policy.json: -------------------------------------------------------------------------------- 1 | { 2 | "Version": "2012-10-17", 3 | "Statement": [ 4 | { 5 | "Effect": "Allow", 6 | "Action": [ 7 | "logs:CreateLogGroup", 8 | "logs:CreateLogStream", 9 | "logs:PutLogEvents" 10 | ], 11 | "Resource": "arn:aws:logs:*:*:*" 12 | } 13 | ] 14 | } -------------------------------------------------------------------------------- /iam/lambda-role.json: -------------------------------------------------------------------------------- 1 | { 2 | "Version": "2012-10-17", 3 | "Statement": [ 4 | { 5 | "Action": "sts:AssumeRole", 6 | "Principal": { 7 | "Service": "lambda.amazonaws.com" 8 | }, 9 | "Effect": "Allow", 10 | "Sid": "" 11 | } 12 | ] 13 | } 14 | -------------------------------------------------------------------------------- /index.js: -------------------------------------------------------------------------------- 1 | require("./main.js"); 2 | 3 | goog.require("lambda.core"); 4 | 5 | exports.main = lambda.core.main; 6 | // Add more exports here if you have more than one entry point... -------------------------------------------------------------------------------- /package.json: -------------------------------------------------------------------------------- 1 | { 2 | "description" : "N/A", 3 | "repository" : "N/A", 4 | "license" : "SEE LICENSE IN LICENSE", 5 | "dependencies" : { 6 | "source-map-support" : "0.5.3" 7 | }, 8 | "devDependencies" : { 9 | "aws-sdk" : "2.188.0" 10 | } 11 | } 12 | -------------------------------------------------------------------------------- /project.clj: -------------------------------------------------------------------------------- 1 | (defproject aws-clojurescript-lambda "0.0.1" 2 | :description "An example AWS Lambda in ClojureScript." 3 | :dependencies [[org.clojure/clojure "1.9.0"] 4 | [org.clojure/clojurescript "1.10.238"] 5 | [org.clojure/core.async "0.4.474"] 6 | [com.bhauman/figwheel-main "0.1.2-SNAPSHOT"] 7 | ] 8 | :plugins [[lein-cljsbuild "1.1.7"]] 9 | :source-paths ["src"] 10 | :cljsbuild 11 | {:test-commands {"unit-test" ["node" "target/test-runner.js"]} 12 | :builds [{:id "lambda-build" 13 | :source-paths ["src"] 14 | :compiler {:output-to "app/main.js" 15 | :output-dir "app" 16 | :main "lambda.core" 17 | :source-map true 18 | :target :nodejs 19 | :language-in :ecmascript5 20 | :optimizations :none}} 21 | {:id "unit-test" 22 | :source-paths ["src" "test"] 23 | :compiler {:output-to "target/test-runner.js" 24 | :main "lambda.test-runner" 25 | :source-map true 26 | :target :nodejs 27 | :language-in :ecmascript5 28 | :optimizations :none}}]}) 29 | -------------------------------------------------------------------------------- /repl/figwheel_repl.clj: -------------------------------------------------------------------------------- 1 | (require 'figwheel.main) 2 | 3 | (figwheel.main/start "dev") -------------------------------------------------------------------------------- /repl/node_repl.clj: -------------------------------------------------------------------------------- 1 | (require 'cljs.repl) 2 | (require 'cljs.build.api) 3 | (require 'cljs.repl.node) 4 | 5 | (cljs.build.api/build "src" 6 | {:main 'lambda.core 7 | :output-to "out/main.js" 8 | :verbose true}) 9 | 10 | (cljs.repl/repl (cljs.repl.node/repl-env) 11 | :watch "src" 12 | :output-dir "out") 13 | -------------------------------------------------------------------------------- /src/lambda/aws.cljs: -------------------------------------------------------------------------------- 1 | (ns lambda.aws 2 | (:require [cljs.pprint :as pprint])) 3 | 4 | (defonce AWS (js/require "aws-sdk")) 5 | 6 | ;; Cloud Formation... 7 | 8 | (defn new-cfm-client [region] 9 | (AWS.CloudFormation. #js {:region region})) 10 | 11 | (defn list-stacks [s3-client result-handler next-token] 12 | (println "list-stacks" next-token) 13 | (.listStacks s3-client 14 | (if next-token #js{"NextToken" next-token} #js {}) 15 | result-handler)) 16 | 17 | (defn list-all-stacks [s3-client ]) 18 | 19 | (comment 20 | 21 | (def my-cfm-client (new-cfm-client "ap-southeast-2")) 22 | 23 | (list-stacks my-cfm-client pretty-print-result-handler) 24 | 25 | ) 26 | 27 | ;; S3... 28 | 29 | (defn new-s3-client [] 30 | (new AWS.S3)) 31 | 32 | (defn list-buckets [s3-client result-handler] 33 | (.listBuckets s3-client 34 | #js {} 35 | result-handler)) 36 | 37 | (defn pretty-print-result-handler [error result] 38 | (if error 39 | (println "ERROR !!!" error) 40 | (println (pprint/pprint (js->clj result))))) 41 | 42 | (comment 43 | 44 | (def my-s3-client (new-s3-client)) 45 | 46 | (list-buckets my-s3-client pretty-print-result-handler) 47 | 48 | ) 49 | 50 | ;; KMS... 51 | 52 | (defn new-kms-client [region] 53 | (AWS.KMS. #js {:region region})) 54 | 55 | (defn decrypt [kms-client cipher-text result-handler] 56 | (.decrypt kms-client 57 | #js {"CiphertextBlob" cipher-text} 58 | result-handler)) 59 | 60 | (comment 61 | 62 | (def kms-client (new-kms-client "ap-southeast-2")) 63 | 64 | (decrypt kms-client "encryptedtextstring" pretty-print-result-handler) 65 | 66 | ) -------------------------------------------------------------------------------- /src/lambda/aws_async.cljs: -------------------------------------------------------------------------------- 1 | (ns lambda.aws-async 2 | (:require [cljs.core.async :as async :refer [>! ! channel 13 | "Handle the standard AWS sdk callback and place a single result (or error) onto the supplied channel. 14 | - Optionally supply a transform to apply to the result. 15 | - For an error ensure it is an instance of js/Error and wrap it if required." 16 | ([result-channel error result] 17 | (aws-result->channel result-channel identity error result)) 18 | ([result-channel transform error result] 19 | (if error 20 | (if (instance? js/Error error) 21 | (async/put! result-channel error) 22 | (async/put! result-channel (js/Error. error))) 23 | (async/put! result-channel [error (transform result)])))) 24 | 25 | 26 | ;; S3 ----------------------------- 27 | 28 | (defn list-buckets 29 | ([s3-client] 30 | (list-buckets s3-client identity)) 31 | ([s3-client transform] 32 | (let [result-channel (async/chan)] 33 | (aws/list-buckets s3-client 34 | (partial aws-result->channel result-channel transform)) 35 | result-channel))) 36 | 37 | (defn result->bucket-names [result] 38 | (map #(gob/get % "Name") (gob/get result "Buckets"))) 39 | 40 | (defn list-bucket-names [s3-client] 41 | (list-buckets s3-client result->bucket-names)) 42 | 43 | 44 | (comment 45 | 46 | (def my-s3-client (aws/new-s3-client)) 47 | 48 | (go 49 | (try 50 | (prn (channel result-channel #(.toString (gob/get % "Plaintext")))) 63 | result-channel)) -------------------------------------------------------------------------------- /src/lambda/config.cljs: -------------------------------------------------------------------------------- 1 | (ns lambda.config 2 | (:require [clojure.core.async :as async :refer [! ! 27 | {:example (must-get-environment-variable "EXAMPLE") 28 | :secret-key (! 4 | "Create and return a channel. 5 | body is placed in a go block, when executed the final value of the body is put! on the channel. 6 | If anything is thrown put that on the channel." 7 | [& body] 8 | (let [result-channel (gensym 'result-chan)] 9 | `(let [~result-channel (cljs.core.async/chan)] 10 | (cljs.core.async/go 11 | (try 12 | (if-let [result (do ~@body)] 13 | (cljs.core.async/>! ~result-channel result) 14 | (throw (js/Error. "No Value returned in go>! block"))) 15 | (catch js/Error ~'eErr 16 | (println ~'eErr) 17 | (cljs.core.async/>! ~result-channel ~'eErr)) 18 | (catch :default ~'eObj 19 | (println ~'eObj) 20 | (cljs.core.async/>! ~result-channel (js/Error. ~'eObj))))) 21 | ~result-channel))) 22 | 23 | (defmacro !]])) 7 | 8 | (defn mock-get-environment-variable [variable] 9 | (get {"EXAMPLE" "example-value" 10 | "SECRET_KEY" "secr3t-value-base-64"} 11 | variable)) 12 | 13 | (defn mock-decrypt [kms-client encrypted-string] 14 | (go>! "secr3t-value")) 15 | 16 | 17 | ;; We are using async tests so with-redefs won't work. 18 | ;; 19 | ;; In ClojureScript set! is an explicit rebinding of the var, so for functions 20 | ;; this will be permanently changed so keep in mind if you are running more tests. 21 | 22 | 23 | (set! config/get-environment-variable mock-get-environment-variable) 24 | (set! aws-async/decrypt mock-decrypt) 25 | 26 | (deftest config-test 27 | 28 | (testing "Expected config is decrypted and resolved." 29 | 30 | (async done 31 | (go 32 | (let [resolved-config (