diff --git a/org-formation/050-costs/_tasks.yaml b/org-formation/050-costs/_tasks.yaml index 9c38af38..37862c5c 100644 --- a/org-formation/050-costs/_tasks.yaml +++ b/org-formation/050-costs/_tasks.yaml @@ -15,7 +15,7 @@ AnomalyDetectorService: # Deploy a general-use microservice for interacting with MIPS in admincentral MipsMicroservice: Type: update-stacks - Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-mips-api/1.2.2/lambda-mips-api.yaml' + Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-mips-api/1.3.0/lambda-mips-api.yaml' StackName: !Sub '${resourcePrefix}-mips-microservice' DefaultOrganizationBinding: IncludeMasterAccount: false @@ -24,7 +24,7 @@ MipsMicroservice: Parameters: AcmCertificateArn: !CopyValue [!Sub '${primaryRegion}-${resourcePrefix}-sageit-finops-cert-CertificateArn'] DnsNames: "mips-api.finops.sageit.org" - MipsOrganization: 'SAGE_24146' + MipOrganization: 'SAGE_24146' SsmKeyAdminArns: - 'arn:aws:sts::745159704268:assumed-role/AWSReservedSSO_Administrator_30244677b3ea9498/joni.harker@sagebase.org' - !Sub 'arn:aws:iam::${CurrentAccount.AccountId}:root' @@ -72,3 +72,22 @@ CostNotificationMicroservice: # Uncomment the following lines to disable user reports #RestrictRecipients: "True" #ApprovedRecipients: "it@sagebase.org" + +# Deploy a microservice for retrieving balances from lambda-mips-api and uploading them to FloQast via SFTP +# Run daily at 8pm PDT (4am UTC) +FloQastSftpMicroservice: + Type: update-stacks + Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-finops-floqast-sftp/1.0.0/lambda-finops-floqast-sftp.yaml' + StackName: !Sub '${resourcePrefix}-floqast-microservice' + DefaultOrganizationBinding: + IncludeMasterAccount: false + Account: !Ref AdminCentralAccount + Region: !Ref primaryRegion + Parameters: + Schedule: "cron(0 4 * * ? *)" + PeriodCount: "13" + SsmPrefix: "/lambda/floqast-sftp" + KmsKeyAdminArns: + - 'arn:aws:sts::745159704268:assumed-role/AWSReservedSSO_Administrator_30244677b3ea9498/joni.harker@sagebase.org' + - !Sub 'arn:aws:iam::${CurrentAccount.AccountId}:root' + - 'arn:aws:iam::745159704268:role/github-oidc-sage-bionetwo-ProviderRoleorganization-93H11ERK3F4N'