Secure serverless configuration export
- The challenge
- Settings stored in AWS needed to be exported safely as part of automated deployments.
- What was built
- A custom AWS Lambda function, deployed with CloudFormation, that reads values from Parameter Store, writes them to S3, logs to CloudWatch and uses only the minimum permissions it needs.
- The result
- Reliable, repeatable deployments – including clean removal, so deployments never hang.
- AWS Lambda
- CloudFormation
- Parameter Store
- Amazon S3
- CloudWatch
- IAM