automated-meeting-scribe-and-summarizer/scribe.yaml at main · aws-samples/automated-meeting-scribe-and-summarizer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
AWSTemplateFormatVersion: "2010-09-09"
Description: Automated Meeting Scribe and Summarizer Template

Parameters:
    Email:
        Description: This address is used to send meeting transcripts, summaries, action
            items, etc.
        Type: String
        AllowedPattern: ^[a-zA-Z0-9._-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,6}$

Resources:
    BuildRole:
        Type: AWS::IAM::Role
        Properties:
            AssumeRolePolicyDocument:
                Version: "2012-10-17"
                Statement:
                    - Effect: Allow
                      Principal:
                          Service:
                              - codebuild.amazonaws.com
                      Action:
                          - sts:AssumeRole
            Policies:
                - PolicyName: LogsPolicy
                  PolicyDocument:
                      Version: "2012-10-17"
                      Statement:
                          - Effect: Allow
                            Action:
                                - logs:CreateLogGroup
                                - logs:CreateLogStream
                                - logs:PutLogEvents
                            Resource:
                                - !Sub arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/codebuild/BuildProject-*
                - PolicyName: BootstrapPolicy
                  PolicyDocument:
                      Version: "2012-10-17"
                      Statement:
                          - Effect: Allow
                            Action:
                                - cloudformation:*
                                - ecr:*
                                - ssm:*
                                - s3:*
                                - iam:*
                            Resource: "*"

    BuildProject:
        Type: AWS::CodeBuild::Project
        Properties:
            Source:
                Type: GITHUB
                Location: https://github.com/aws-samples/automated-meeting-scribe-and-summarizer.git
                BuildSpec: |
                    version: 0.2
                    phases:
                      install:
                        runtime-versions:
                          nodejs: 20
                        commands:
                          - npm install -g aws-cdk
                      pre_build:
                        commands:
                          - npm install
                      build:
                        commands:
                          - cdk bootstrap
                      post_build:
                        commands:
                          - cdk deploy --all --require-approval never
            # SourceVersion: dev
            Environment:
                Type: ARM_CONTAINER
                Image: aws/codebuild/amazonlinux-aarch64-standard:3.0
                ComputeType: BUILD_GENERAL1_SMALL
                EnvironmentVariables:
                    - Name: STACK_NAME
                      Value: !Ref "AWS::StackName"
                      Type: PLAINTEXT
                    - Name: EMAIL
                      Value: !Ref Email
                      Type: PLAINTEXT
            ServiceRole: !GetAtt BuildRole.Arn
            Artifacts:
                Type: NO_ARTIFACTS

    BuildCustomResourceRole:
        Type: AWS::IAM::Role
        Properties:
            AssumeRolePolicyDocument:
                Version: "2012-10-17"
                Statement:
                    - Effect: Allow
                      Principal:
                          Service:
                              - lambda.amazonaws.com
                      Action:
                          - sts:AssumeRole
            ManagedPolicyArns:
                - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
            Policies:
                - PolicyName: BuildPolicy
                  PolicyDocument:
                      Version: "2012-10-17"
                      Statement:
                          - Effect: Allow
                            Action:
                                - codebuild:StartBuild
                                - codebuild:BatchGetBuilds
                                - codebuild:DeleteProject
                            Resource:
                                - !GetAtt BuildProject.Arn

    BuildCustomResourceFunction:
        Type: AWS::Lambda::Function
        Properties:
            Handler: index.handler
            Role: !GetAtt BuildCustomResourceRole.Arn
            Timeout: 900
            Runtime: python3.12
            Code:
                ZipFile: |
                    import boto3
                    from time import sleep
                    import cfnresponse
                    def handler(event, context):
                      build_id = ""
                      request_type = event['RequestType']
                      print(request_type)
                      if request_type in ['Create', 'Update']:
                        client = boto3.client("codebuild")
                        build_id = client.start_build(
                          projectName=event['ResourceProperties']['PROJECT']
                        )['build']['id']
                        # status = 'STARTING'
                        # while status != 'SUCCEEDED':
                        #   if status in ['FAILED', 'FAULT', 'TIMED_OUT', 'STOPPED']:
                        #     cfnresponse.send(event, context, cfnresponse.FAILED, {})
                        #     return
                        #   sleep(15)
                        #   status = client.batch_get_builds(ids=[build_id])['builds'][0]['buildStatus']
                        #   print(status)
                        client.delete_project(name=event['ResourceProperties']['PROJECT'])
                      cfnresponse.send(event, context, cfnresponse.SUCCESS, {'buildId': build_id})

    BuildCustomResource:
        Type: AWS::CloudFormation::CustomResource
        Properties:
            ServiceToken: !GetAtt BuildCustomResourceFunction.Arn
            PROJECT: !Ref BuildProject

Outputs:
    BuildId:
        Value: !GetAtt BuildCustomResource.buildId