Submit STAC using transactions API

dags/veda_data_pipeline/groups/collection_group.py

@@ -44,7 +44,7 @@ def ingest_collection_task(ti=None, collection=None):
         event=collection,
         endpoint="/collections",
         cognito_app_secret=cognito_app_secret,
-        stac_ingestor_api_url=stac_ingestor_api_url
+        ingest_url=stac_ingestor_api_url
     )
 
 

dags/veda_data_pipeline/groups/processing_tasks.py

@@ -1,14 +1,17 @@
-from datetime import timedelta
 import json
 import logging
 from copy import deepcopy
 import smart_open
 from airflow.models.variable import Variable
 from airflow.decorators import task
 from veda_data_pipeline.utils.submit_stac import submission_handler
+from veda_data_pipeline.utils.submit_stac_transactions import submit_transactions_handler
 
 group_kwgs = {"group_id": "Process", "tooltip": "Process"}
 
+airflow_vars = Variable.get("aws_dags_variables")
+airflow_vars_json = json.loads(airflow_vars)
+TRANSACTIONS_ENDPOINT_ENABLED = airflow_vars_json.get("TRANSACTIONS_ENDPOINT_ENABLED", False)
 
 def log_task(text: str):
     logging.info(text)
@@ -30,17 +33,25 @@ def remove_thumbnail_asset(ti):
         payload.pop("assets", True)
     return payload
 
+if TRANSACTIONS_ENDPOINT_ENABLED:
+    # assuming default chunk size (500), this matches the current dynamoDB configuration on the STAC ingestor
+    task_kwargs = {"retries": 3, "retry_delay": 10, "retry_exponential_backoff": True, "max_active_tis_per_dag": 2}
+    submit_kwargs = {}
+    ingest_url = airflow_vars_json.get("STAC_URL")
+    app_secret = airflow_vars_json.get("STAC_API_KEYCLOAK_CLIENT_SECRET")
+    submit_handler = submit_transactions_handler
+else:
+    task_kwargs = {"retries": 2, "retry_delay": 60, "retry_exponential_backoff": True, "max_active_tis_per_dag": 5}
+    submit_kwargs = {"endpoint": "/ingestions"}
+    ingest_url = airflow_vars_json.get("STAC_INGESTOR_API_URL")
+    app_secret = airflow_vars_json.get("COGNITO_APP_SECRET")
+    submit_handler = submission_handler
+
 # with exponential backoff enabled, retry delay is converted to seconds
-@task(retries=2, retry_delay=60, retry_exponential_backoff=True, max_active_tis_per_dag=5)
+@task(**task_kwargs)
 def submit_to_stac_ingestor_task(built_stac: dict):
     """Submit STAC items to the STAC ingestor API."""
-    event = built_stac.copy()
-    success_file = event["payload"]["success_event_key"]
-
-    airflow_vars = Variable.get("aws_dags_variables")
-    airflow_vars_json = json.loads(airflow_vars)
-    cognito_app_secret = airflow_vars_json.get("COGNITO_APP_SECRET")
-    stac_ingestor_api_url = airflow_vars_json.get("STAC_INGESTOR_API_URL")
+    event = built_stac.copy()   
     try:
         success_file = event["payload"]["success_event_key"]
         with smart_open.open(success_file, "r") as _file:
@@ -50,12 +61,13 @@ def submit_to_stac_ingestor_task(built_stac: dict):
         stac_items = [event]
 
     for item in stac_items:
-        submission_handler(
+        submit_handler(
             event=item,
-            endpoint="/ingestions",
-            cognito_app_secret=cognito_app_secret,
-            stac_ingestor_api_url=stac_ingestor_api_url,
+            cognito_app_secret=app_secret,
+            ingest_url=ingest_url,
+            **submit_kwargs,
         )
+
     return event
 
 @task(retries=2, retry_delay=60, retry_exponential_backoff=True, max_active_tis_per_dag=5)

dags/veda_data_pipeline/utils/submit_stac.py

@@ -101,11 +101,8 @@ def submission_handler(
     event: Union[S3LinkInput, StacItemInput, Dict[str, Any]],
     endpoint: str = "/ingestions",
     cognito_app_secret=None,
-    stac_ingestor_api_url=None,
-    context=None,
+    ingest_url=None,
 ) -> None | dict:
-    if context is None:
-        context = {}
 
     stac_item = event
 
@@ -114,12 +111,9 @@ def submission_handler(
         print(json.dumps(stac_item, indent=2))
         return
 
-    cognito_app_secret = cognito_app_secret or os.getenv("COGNITO_APP_SECRET")
-    stac_ingestor_api_url = stac_ingestor_api_url or os.getenv("STAC_INGESTOR_API_URL")
-
     ingestor = IngestionApi.from_veda_auth_secret(
         secret_id=cognito_app_secret,
-        base_url=stac_ingestor_api_url,
+        base_url=ingest_url,
     )
     return ingestor.submit(event=stac_item, endpoint=endpoint)
 

dags/veda_data_pipeline/utils/submit_stac_transactions.py

@@ -0,0 +1,129 @@
+import json
+import logging
+import requests
+from typing import List, TypedDict
+from dataclasses import dataclass
+
+import boto3
+
+logging.basicConfig(level=logging.INFO)
+
+class Creds(TypedDict):
+    access_token: str
+    expires_in: int
+    token_type: str
+    scope: str
+
+class Secret(TypedDict):
+    userinfo_url: str
+    id: str
+    secret: str
+    auth_url: str
+    token_url: str
+
+@dataclass
+class TransactionsApi:
+    base_url: str
+    token: str
+
+    @classmethod
+    def from_veda_auth_secret(cls, *, secret_id: str, base_url: str) -> "TransactionsApi":
+        secret_details = cls._get_auth_service_details(secret_id)
+        credentials = cls._get_app_credentials(**secret_details)
+        return cls(token=credentials["access_token"], base_url=base_url)
+
+    @staticmethod
+    def _get_auth_service_details(secret_id: str) -> Secret:
+        client = boto3.client("secretsmanager")
+        response = client.get_secret_value(SecretId=secret_id)
+        return json.loads(response["SecretString"])
+
+    @staticmethod
+    def _get_app_credentials(
+        userinfo_url: str, id: str, secret: str, auth_url: str, token_url: str, **kwargs
+    ) -> Creds:
+        response = requests.post(
+            token_url,
+            headers={
+                "Content-Type": "application/x-www-form-urlencoded",
+                "Accept": "application/json"
+            },
+            data={
+                "client_id": id,
+                "client_secret": secret,
+                "grant_type": "client_credentials",
+                "scope": "stac:item:create stac:item:update"
+            },
+        )
+        try:
+            response.raise_for_status()
+        except Exception as ex:
+            print(response.text)
+            raise RuntimeError(f"Error, {ex}")
+        return response.json()
+
+
+    def post_items(self, item: dict) -> dict:
+        """
+        Perform a PUT request to update or create a STAC Item in the given collection.
+
+        :param collection_id: The target collection ID.
+        :param items: list of STAC items to be submitted.
+        :return: The JSON response (as a dict) from the STAC API.
+        :raises RuntimeError: If the response is not 200/201.
+        """
+        headers = {
+            "Authorization": f"Bearer {self.token}",
+            "Content-Type": "application/json",
+        }
+        collection_id = item.get("collection")
+        item_id = item.get("id")
+
+        response = requests.put(
+            f"{self.base_url.rstrip('/')}/collections/{collection_id}/items/{item_id}", 
+            headers=headers, 
+            json=item
+        )
+
+        if response.status_code not in (200, 201):
+            logging.error("Failed PUT request: %s %s", response.status_code, response.text)
+            raise RuntimeError(f"PUT request failed: {response.text}")
+
+        return response.json()
+
+
+def submit_transactions_handler(
+        event, 
+        cognito_app_secret=None, # unused, but maintains signature compatibility w/ ingest API
+        ingest_url=None
+    ):
+    """
+    Handler function that can be integrated in the same way as the existing `submission_handler`,
+    but uses the TransactionsApi to perform a PUT request to STAC's Transactions endpoint.
+
+    :param event: A dict containing the data needed for STAC item submission,
+                  including collection_id, item_id, and the STAC item body itself.
+    :param context: (Optional) context object, for AWS Lambda or similar environments.
+    :return: A dict representing the API response.
+    """
+
+
+    api = TransactionsApi.from_veda_auth_secret(
+        secret_id=cognito_app_secret,
+        base_url=ingest_url,
+    )
+    try:
+        response = api.post_items(
+            item=event,
+        )
+        logging.info("STAC Item PUT completed successfully.")
+    except RuntimeError as err:
+        logging.error("Error while performing {PUT}: %s", str(err))
+        raise
+    return {
+        "statusCode": 200,
+        "body": json.dumps({
+            "message": "PUT request completed successfully",
+            "response": response
+        })
+    }

dags/veda_data_pipeline/veda_promotion_pipeline.py

@@ -96,8 +96,6 @@ def transfer_assets_to_production_bucket(ti=None, payload={}):
         return payload
 
 with DAG("veda_promotion_pipeline", params=template_dag_run_conf, **dag_args) as dag:
-    # ECS dependency variable
-
     start = EmptyOperator(task_id="start", dag=dag)
     end = EmptyOperator(task_id="end", dag=dag)
 

sm2a/infrastructure/lambda_dag_trigger.tf

@@ -7,7 +7,7 @@
 
 resource "aws_iam_role" "lambda_dag_trigger_exec_role" {
   provider             = aws.aws_current
-  name                 = var.lambda_dag_trigger_function_name
+  name                 = "${var.prefix}-${var.lambda_dag_trigger_function_name}"
   permissions_boundary = var.permission_boundaries_arn
 
   assume_role_policy = <<EOF

sm2a/infrastructure/main.tf

@@ -103,8 +103,10 @@ module "sma-base" {
     ASSUME_ROLE_READ_ARN  = var.assume_role_read_arn,
     ASSUME_ROLE_WRITE_ARN = var.assume_role_write_arn,
     SM2A_BASE_URL         = module.sma-base.airflow_url,
-    CLOUDFRONT_TO_INVALIDATE = var.cloudfront_to_invalidate
-    CLOUDFRONT_PATH_TO_INVALIDATE = var.cloudfront_path_to_invalidate
+    CLOUDFRONT_TO_INVALIDATE = var.cloudfront_to_invalidate,
+    CLOUDFRONT_PATH_TO_INVALIDATE = var.cloudfront_path_to_invalidate,
+    TRANSACTIONS_ENDPOINT_ENABLED = var.transactions_endpoint_enabled==true ? "True" : null,
+    STAC_API_KEYCLOAK_CLIENT_SECRET=var.stac_api_keycloak_client_secret
   }, var.snapshot_bucket_name != "" ? module.rds_backups[0].rds_backup_environment : {}
   )
 }

sm2a/infrastructure/variables.tf

@@ -148,6 +148,7 @@ variable "gh_user_team_id" {
 
 variable "workflows_client_secret" {
 }
+
 variable "stac_ingestor_api_url" {
 }
 
@@ -243,3 +244,11 @@ variable "cloudfront_path_to_invalidate" {
 variable "lambda_dag_trigger_function_name" {
   default = "trigger-sm2a-dag"
 }
+variable "transactions_endpoint_enabled" {
+  type = bool
+  default = false
+}
+
+variable stac_api_keycloak_client_secret {
+ type = string
+}