[IT-4485] Update lambda-mips-api and deploy lambda-finops-floqast-sftp (#1456)

Update to latest version of lambda-mips-api to pull in the new /balances endpoint, and deploy lambda-finops-floqast-sftp to consume that endpoint on a daily basis and upload the result to FloQast via SFTP.

This version of lambda-mips-api renames the parameter MipsOrganization -> MipOrganization to align with the name of the service.

The new daily service runs at 8pm PDT (4am UTC)

Author: ConsoleCatzirl

org-formation/050-costs/_tasks.yaml

@@ -15,7 +15,7 @@ AnomalyDetectorService:
 # Deploy a general-use microservice for interacting with MIPS in admincentral
 MipsMicroservice:
   Type: update-stacks
-  Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-mips-api/1.2.2/lambda-mips-api.yaml'
+  Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-mips-api/1.3.0/lambda-mips-api.yaml'
   StackName: !Sub '${resourcePrefix}-mips-microservice'
   DefaultOrganizationBinding:
     IncludeMasterAccount: false
@@ -24,7 +24,7 @@ MipsMicroservice:
   Parameters:
     AcmCertificateArn: !CopyValue [!Sub '${primaryRegion}-${resourcePrefix}-sageit-finops-cert-CertificateArn']
     DnsNames: "mips-api.finops.sageit.org"
-    MipsOrganization: 'SAGE_24146'
+    MipOrganization: 'SAGE_24146'
     SsmKeyAdminArns:
       - 'arn:aws:sts::745159704268:assumed-role/AWSReservedSSO_Administrator_30244677b3ea9498/joni.harker@sagebase.org'
       - !Sub 'arn:aws:iam::${CurrentAccount.AccountId}:root'
@@ -72,3 +72,22 @@ CostNotificationMicroservice:
     # Uncomment the following lines to disable user reports
     #RestrictRecipients: "True"
     #ApprovedRecipients: "it@sagebase.org"
+
+# Deploy a microservice for retrieving balances from lambda-mips-api and uploading them to FloQast via SFTP
+# Run daily at 8pm PDT (4am UTC)
+FloQastSftpMicroservice:
+  Type: update-stacks
+  Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-finops-floqast-sftp/1.0.0/lambda-finops-floqast-sftp.yaml'
+  StackName: !Sub '${resourcePrefix}-floqast-microservice'
+  DefaultOrganizationBinding:
+    IncludeMasterAccount: false
+    Account: !Ref AdminCentralAccount
+    Region: !Ref primaryRegion
+  Parameters:
+    Schedule: "cron(0 4 * * ? *)"
+    PeriodCount: "13"
+    SsmPrefix: "/lambda/floqast-sftp"
+    KmsKeyAdminArns:
+      - 'arn:aws:sts::745159704268:assumed-role/AWSReservedSSO_Administrator_30244677b3ea9498/joni.harker@sagebase.org'
+      - !Sub 'arn:aws:iam::${CurrentAccount.AccountId}:root'
+      - 'arn:aws:iam::745159704268:role/github-oidc-sage-bionetwo-ProviderRoleorganization-93H11ERK3F4N'