func-s3-firmware-uploaded
Overview
Manages the Lambda function that processes firmware ZIPs uploaded to the private S3 bucket. Triggered by S3 ObjectCreated events on the incoming/*.zip prefix. Validates the manifest, computes SHA256, writes DynamoDB metadata, and moves the ZIP to processed/ or errors/.
CloudFormation Stack
firefly-func-s3-firmware-uploaded
CloudWatch Logs
| Setting | Value |
|---|---|
| Log group | /aws/lambda/firefly-func-s3-firmware-uploaded |
| Retention | 30 days |
Dependencies
Deploy Dependencies
| Workflow | Reason |
|---|---|
| shared-layer | Lambda layer ARN must be resolvable at SAM build/deploy time |
Delete Dependencies
| Workflow | Reason |
|---|---|
| s3-firmware | S3 event notification and resource-based policy must be removed before the function can be deleted |
Required By
Required By Deploy
| Workflow | Reason |
|---|---|
| s3-firmware | Needs the Lambda ARN to configure S3 event notifications |
Required By Delete
| Workflow | Reason |
|---|---|
| shared-layer | Layer cannot be deleted while functions still reference it |
Deploy Workflow
Description
Builds and deploys the function using SAM. The function receives the firmware bucket name (to move ZIPs between prefixes) and the DynamoDB firmware table name (to write metadata).
Steps
- Configure AWS credentials.
- SAM build
lambdas/func-s3-firmware-uploaded/template.yaml. - SAM deploy with parameters:
FirmwareBucketName(from secrets)
Sequence Diagram
Delete Workflow
Description
Runs sam delete to remove the CloudFormation stack and the Lambda function. The s3-firmware stack must be deleted first so the S3 event notification and resource-based policy are gone before this function is removed.
Steps
- Configure AWS credentials.
- SAM delete
firefly-func-s3-firmware-uploaded.
Sequence Diagram
Failure Scenarios
| Scenario | Behavior |
|---|---|
| Shared layer not yet deployed | SAM build or deploy fails if the layer ARN cannot be resolved. Deploy shared-layer first. |
| S3 bucket still sending events | If s3-firmware is not deleted first, the resource-based policy attached to this function may prevent deletion. Run delete-s3-firmware before this workflow. |