DynamoDB backup Common

dynamodb-backup-common.cf.yaml

---
AWSTemplateFormatVersion: '2010-09-09'
Description: 'Common resources for DynamoDB backups'
Resources:
  DynamoDBBackupsBucket:
    Type: "AWS::S3::Bucket"
    Properties:
      BucketName:
        Fn::Join:
        - "-"
        - - dynamodb
          - backups
          - Ref: AWS::AccountId
          - Ref: AWS::Region

  DataPipelinesBackupRole:
    Type: "AWS::IAM::Role"
    Properties:
      RoleName: DataPipelinesBackupRole
      ManagedPolicyArns:
      - arn:aws:iam::aws:policy/service-role/AWSDataPipelineRole
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement: 
          - Effect: "Allow"
            Principal: 
              Service: 
              - "elasticmapreduce.amazonaws.com"
              - "datapipeline.amazonaws.com"
            Action: 
            - "sts:AssumeRole"

  EC2BackupRole:
    Type: "AWS::IAM::Role"
    Properties:
      RoleName: EC2BackupRole
      ManagedPolicyArns:
      - arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforDataPipelineRole
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement: 
          - Effect: "Allow"
            Principal: 
              Service: 
              - "ec2.amazonaws.com"
              - "elasticmapreduce.amazonaws.com"
              - "datapipeline.amazonaws.com"
            Action: 
            - "sts:AssumeRole"
  
  EC2BackupRoleInstanceProfile:
    Type: "AWS::IAM::InstanceProfile"
    Properties:
      Roles:
      - Ref: EC2BackupRole
  
  BackupSuccessTopic:
    Type: "AWS::SNS::Topic"
    Properties:
      TopicName:
        Fn::Join:
        - "-"
        - - Ref: TableName
          - "backup"
          - "success"

  BackupFailureTopic:
    Type: "AWS::SNS::Topic"
    Properties:
      TopicName:
        Fn::Join:
        - "-"
        - - Ref: TableName
          - "backup"
          - "failure"
  # # Lambda
  # ConversionInvoker:

  # # Glue
  # BackupToParquetConversionJob:
  # ParquetCrawer:

Outputs:
  DynamoDBBackupsBucket:
    Description: "S3 bucket for DynamoDB Backups"
    Value:
      Ref: DynamoDBBackupsBucket
    Export:
      Name: "dynamodb-backup-s3-bucket"
  DataPipelinesBackupRole:
    Description: "IAM Role for Data Pipelines"
    Value:
      Ref: DataPipelinesBackupRole
    Export:
      Name: "dynamodb-backup-data-pipelines-role"
  EC2BackupRoleInstanceProfile:
    Description: "IAM Instance Profile for the EC2 Backup Role"
    Value:
      Ref: EC2BackupRoleInstanceProfile
    Export:
      Name: "dynamodb-backup-ec2-instance-profile"