chore: Updates Project CFN resource handler to accept Lambda Proxy ARN as input & use as Http transport in Atlas SDK client #1300
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,51 @@ | ||
| from flask import Flask, request, Response | ||
| import requests | ||
| import logging | ||
|
|
||
| app = Flask(__name__) | ||
|
|
||
| logging.basicConfig(level=logging.DEBUG) | ||
| logger = logging.getLogger(__name__) | ||
|
|
||
| # NOTE: additional configuration would be required to also support Realm | ||
| TARGET_SERVER = "https://cloud-dev.mongodb.com" | ||
| logger.debug(f"EC2 Proxy configured with TARGET_SERVER: {TARGET_SERVER}") | ||
|
|
||
| @app.route('/', defaults={'path': ''}, methods=["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS", "HEAD"]) | ||
| @app.route('/<path:path>', methods=["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS", "HEAD"]) | ||
| def proxy(path): | ||
| logger.debug(f"Received request for path: {path}") | ||
| # Build the target URL | ||
| target_url = f"{TARGET_SERVER}/{path}" | ||
| logger.debug(f"Target URL: {target_url}") | ||
|
|
||
| # Copy the incoming headers | ||
| headers = {key: value for key, value in request.headers if key.lower() != 'host'} | ||
| logger.debug(f"Request headers: {headers}") | ||
|
|
||
| # Forward the request to Atlas | ||
| try: | ||
| resp = requests.request( | ||
| method=request.method, | ||
| url=target_url, | ||
| headers=headers, | ||
| data=request.get_data(), | ||
| cookies=request.cookies, | ||
| allow_redirects=False | ||
| ) | ||
| # logger.debug(f"Received response from target server - Status: {resp.status_code}, Headers: {resp.headers}") | ||
| except Exception as e: | ||
| logger.exception("Error forwarding the request to the target server:") | ||
| return Response("Error forwarding request", status=500) | ||
|
|
||
| excluded_headers = ['content-encoding', 'content-length', 'transfer-encoding', 'connection'] | ||
| response_headers = [(name, value) for (name, value) in resp.raw.headers.items() | ||
| if name.lower() not in excluded_headers] | ||
|
|
||
| response = Response(resp.content, resp.status_code, response_headers) | ||
| logger.debug(f"Returning proxied response with status: {resp.status_code}") | ||
| return response | ||
|
|
||
| if __name__ == '__main__': | ||
| logger.debug("Starting EC2 Proxy Flask app on 0.0.0.0:80") | ||
| app.run(host='0.0.0.0', port=80) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,73 @@ | ||
| import json | ||
| import logging | ||
| import requests # this requires adding request layer to lambda function | ||
| from urllib.parse import urlparse, urlunparse | ||
|
|
||
| logging.basicConfig(level=logging.DEBUG) | ||
| logger = logging.getLogger() | ||
|
|
||
| EC2_PROXY_ENDPOINT = "http://XX.X.X.XX" # Replace with private IP of EC2 proxy running Python/Flask | ||
| if not EC2_PROXY_ENDPOINT: | ||
| logger.error("EC2_PROXY_ENDPOINT is not set") | ||
| raise ValueError("EC2_PROXY_ENDPOINT is not set") | ||
| logger.debug(f"EC2_PROXY_ENDPOINT: {EC2_PROXY_ENDPOINT}") | ||
|
|
||
| def lambda_handler(event, context): | ||
| """ | ||
| Expected event example: | ||
| { | ||
| "method": "GET", | ||
| "url": "https://cloud-dev.mongodb.com/api/atlas/v2/groups", | ||
| "headers": {"Header-Key": "value", ...}, | ||
| "body": "request body as string" | ||
| } | ||
|
|
||
| This Lambda function should be deployed in a private subnet. It's corresponding SG | ||
| only allows traffic to EC2 proxy running Python/Flask | ||
| """ | ||
| logger.debug(f"Received event: {json.dumps(event)}") # TODO: remove | ||
| try: | ||
| method = event.get("method") | ||
| url = event.get("url") | ||
| headers = event.get("headers", {}) | ||
| body = event.get("body", None) | ||
|
|
||
| if method is None or url is None: | ||
| msg = "Missing 'method' or 'url' in the event payload" | ||
| logger.error(msg) | ||
| raise ValueError(msg) | ||
|
|
||
| logger.debug(f"Forwarding request - Method: {method}, URL: {url}, Headers: {headers}, Body: {body}") | ||
|
|
||
| parsed_url = urlparse(url) | ||
| if parsed_url.scheme and parsed_url.netloc: | ||
| # Extract the path and query string because incoming URL will be in format: | ||
| # https://www.cloud.mongodb.com/api/atlas/v2/groups?param=value | ||
| path = parsed_url.path or "" | ||
| query = f"?{parsed_url.query}" if parsed_url.query else "" | ||
| new_url = path + query | ||
| logger.debug(f"Extracted relative URL: {new_url} from absolute URL: {url}") | ||
| else: | ||
| new_url = url | ||
| logger.debug(f"URL is relative: {new_url}") | ||
|
|
||
| # Construct URL for the EC2 proxy | ||
| full_url = EC2_PROXY_ENDPOINT.rstrip("/") + new_url | ||
| logger.debug(f"Constructed full URL for proxy: {full_url}") | ||
|
|
||
| # Forward request to the EC2 proxy | ||
| response = requests.request(method, full_url, headers=headers, data=body) | ||
| logger.debug(f"Response from EC2 proxy - Status: {response.status_code}, Headers: {dict(response.headers)}, Body: {response.text}") | ||
|
|
||
| return { | ||
| "statusCode": response.status_code, | ||
| "headers": dict(response.headers), | ||
| "body": response.text | ||
| } | ||
| except Exception as e: | ||
| logger.exception("Error processing the request:") | ||
| return { | ||
| "statusCode": 500, | ||
| "headers": {}, | ||
| "body": json.dumps({"error": str(e)}) | ||
| } | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is how customer should define the lambda function in their own AWS Account. right?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yes