define lambda role and function

Author: tschaffter

app.py

@@ -7,6 +7,7 @@
 from openchallenges.service_stack import LoadBalancedServiceStack
 from openchallenges.load_balancer_stack import LoadBalancerStack
 from openchallenges.service_props import ServiceProps, ContainerVolume
+from openchallenges.data_integration_stack import DataIntegrationStack
 import openchallenges.utils as utils
 
 app = cdk.App()
@@ -328,6 +329,10 @@
     app, f"{stack_name_prefix}-load-balancer", network_stack.vpc
 )
 
+data_integration_stack = DataIntegrationStack(
+    app, f"{stack_name_prefix}-data-integration"
+)
+
 api_docs_props = ServiceProps(
     "openchallenges-api-docs",
     8010,

cdk_docker/data_integration_lambda/Dockerfile

@@ -0,0 +1 @@
+FROM ghcr.io/sage-bionetworks/sandbox-lambda-python:sha-b38dc22

openchallenges/data_integration_lambda.py

@@ -0,0 +1,39 @@
+from aws_cdk import aws_iam as iam
+from aws_cdk import aws_lambda as _lambda
+from constructs import Construct
+
+
+class DataIntegrationLambda(Construct):
+
+    def __init__(self, scope: Construct, id: str) -> None:
+        super().__init__(scope, id)
+
+        self.lambda_role = self._build_lambda_role()
+        self.lambda_function = self._build_lambda_function(self.lambda_role)
+
+    def _build_lambda_role(self) -> iam.Role:
+        return iam.Role(
+            self,
+            "LambdaRole",
+            assumed_by=iam.ServicePrincipal("lambda.amazonaws.com"),
+            managed_policies=[
+                iam.ManagedPolicy.from_aws_managed_policy_name(
+                    managed_policy_name=("service-role/AWSLambdaBasicExecutionRole")
+                )
+            ],
+        )
+
+    # Create the Lambda function using a GHCR image
+    def _build_lambda_function(self, role: iam.Role) -> _lambda.Function:
+        return _lambda.DockerImageFunction(
+            self,
+            "LambdaFunction",
+            code=_lambda.DockerImageCode.from_image_asset(
+                # Directory relative to where you execute cdk deploy contains a
+                # Dockerfile with build instructions.
+                directory="cdk_docker/data_integration_lambda"
+            ),
+            role=role,
+            memory_size=128,
+            architecture=_lambda.Architecture.X86_64,
+        )

openchallenges/data_integration_stack.py

@@ -0,0 +1,12 @@
+import aws_cdk as cdk
+from openchallenges.data_integration_lambda import DataIntegrationLambda
+from constructs import Construct
+
+
+class DataIntegrationStack(cdk.Stack):
+
+    def __init__(self, scope: Construct, id: str, **kwargs) -> None:
+        super().__init__(scope, id, **kwargs)
+
+        # Instantiate the DataIntegrationLambda construct
+        DataIntegrationLambda(self, "openchallenges-data-integration-lambda")