From 3c5a4b7cfeaac6f98644728705e822776aad4376 Mon Sep 17 00:00:00 2001
From: Joni Harker <joni.harker@sagebase.org>
Date: Tue, 19 Aug 2025 09:29:57 -0700
Subject: [PATCH 1/2] [IT-4485] Update lambda-mips-api for new '/balances' API
 endpoint

---
 org-formation/050-costs/_tasks.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/org-formation/050-costs/_tasks.yaml b/org-formation/050-costs/_tasks.yaml
index 9c38af38..abaa27d2 100644
--- a/org-formation/050-costs/_tasks.yaml
+++ b/org-formation/050-costs/_tasks.yaml
@@ -15,7 +15,7 @@ AnomalyDetectorService:
 # Deploy a general-use microservice for interacting with MIPS in admincentral
 MipsMicroservice:
   Type: update-stacks
-  Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-mips-api/1.2.2/lambda-mips-api.yaml'
+  Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-mips-api/1.3.0/lambda-mips-api.yaml'
   StackName: !Sub '${resourcePrefix}-mips-microservice'
   DefaultOrganizationBinding:
     IncludeMasterAccount: false
@@ -24,7 +24,7 @@ MipsMicroservice:
   Parameters:
     AcmCertificateArn: !CopyValue [!Sub '${primaryRegion}-${resourcePrefix}-sageit-finops-cert-CertificateArn']
     DnsNames: "mips-api.finops.sageit.org"
-    MipsOrganization: 'SAGE_24146'
+    MipOrganization: 'SAGE_24146'
     SsmKeyAdminArns:
       - 'arn:aws:sts::745159704268:assumed-role/AWSReservedSSO_Administrator_30244677b3ea9498/joni.harker@sagebase.org'
       - !Sub 'arn:aws:iam::${CurrentAccount.AccountId}:root'

From 4e90d51a88a97b9d984dca5993841e8e06c8e2a4 Mon Sep 17 00:00:00 2001
From: Joni Harker <joni.harker@sagebase.org>
Date: Fri, 22 Aug 2025 11:04:13 -0700
Subject: [PATCH 2/2] [IT-4485] Deploy FloQast SFTP microservice

Deploy a microservice to get trial balance data from lambda-mips-api
and upload it to FloQast via SFTP on a daily basis.
---
 org-formation/050-costs/_tasks.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/org-formation/050-costs/_tasks.yaml b/org-formation/050-costs/_tasks.yaml
index abaa27d2..37862c5c 100644
--- a/org-formation/050-costs/_tasks.yaml
+++ b/org-formation/050-costs/_tasks.yaml
@@ -72,3 +72,22 @@ CostNotificationMicroservice:
     # Uncomment the following lines to disable user reports
     #RestrictRecipients: "True"
     #ApprovedRecipients: "it@sagebase.org"
+
+# Deploy a microservice for retrieving balances from lambda-mips-api and uploading them to FloQast via SFTP
+# Run daily at 8pm PDT (4am UTC)
+FloQastSftpMicroservice:
+  Type: update-stacks
+  Template: !Sub 'https://${AdminCentralCfnBucket}.s3.amazonaws.com/lambda-finops-floqast-sftp/1.0.0/lambda-finops-floqast-sftp.yaml'
+  StackName: !Sub '${resourcePrefix}-floqast-microservice'
+  DefaultOrganizationBinding:
+    IncludeMasterAccount: false
+    Account: !Ref AdminCentralAccount
+    Region: !Ref primaryRegion
+  Parameters:
+    Schedule: "cron(0 4 * * ? *)"
+    PeriodCount: "13"
+    SsmPrefix: "/lambda/floqast-sftp"
+    KmsKeyAdminArns:
+      - 'arn:aws:sts::745159704268:assumed-role/AWSReservedSSO_Administrator_30244677b3ea9498/joni.harker@sagebase.org'
+      - !Sub 'arn:aws:iam::${CurrentAccount.AccountId}:root'
+      - 'arn:aws:iam::745159704268:role/github-oidc-sage-bionetwo-ProviderRoleorganization-93H11ERK3F4N'