serverless install --url https://github.com/softprops/serverless-aws-rust

npx create-react-app  . --templete typescript

bucket = ****
key    = "****dev.tfstate"
region = "ap-northeast-1"
profile = ****

project     = ****
environment = "dev"
domain      = ""

terraform init -reconfigure -backend-config="backend/dev.tfbackend"

# ------------------------
# - Variables
# ------------------------

variable "project" {
  type = string
}
variable "environment" {
  type = string
}
variable "domain" {
  type = string
}

# ------------------------
# - Terraform configuratoions
# ------------------------
terraform {
  required_version = ">1.0"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~>3.0"
    }
  }
}

# ------------------------
# - Provider 
# ------------------------

provider "aws" {
  profile = ****
  region  = "ap-northeast-1"
} 

# -------------------
# S3 static bucket
# -------------------
resource "aws_s3_bucket" "s3_test_bucket" {
  bucket = "test-bucket-${var.project}-${var.environment}"
}

terraform apply --auto-approve -var-file vars/dev.tfvars 

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/aws from the dependency lock file
- Using previously-installed hashicorp/aws v3.76.1

╷
│ Warning: Missing backend configuration
│
│ -backend-config was used without a "backend" block in the configuration.
│
│ If you intended to override the default local backend configuration,
│ no action is required, but you may add an explicit backend block to your
│ configuration to clear this warning:
│
│ terraform {
│   backend "local" {}
│ }
│
│ However, if you intended to override a defined backend, please verify that
│ the backend configuration is present and valid.
│
╵

# ------------------------
# - Terraform configuratoions
# ------------------------
terraform {
  required_version = ">1.0"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~>3.0"
    }
  }
+  backend "s3" {
+    bucket = ****
+    key    = "****dev.tfstate"
+    region = "ap-northeast-1"
+    profile = ****
+  }
}

# ------------------------
# - Terraform configuratoions
# ------------------------
terraform {
  required_version = ">1.0"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~>3.0"
    }
  }
+  backend "s3" {
+  }
}

version: 0.2

env:
  variables:
    TERRAFORM_VERSION: "1.7.5"

phases:
  install:
    commands:
      - curl -sL https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip > terraform.zip
      - unzip terraform.zip
      - mv terraform /usr/local/bin/
  pre_build:
    commands:
      - terraform init -backend-config="backend/${ENVIRONMENT}.tfbackend"
      - terraform validate
      - terraform plan -var-file vars/${ENVIRONMENT}.tfvars
  build:
    commands:
      - terraform apply --auto-approve -var-file vars/${ENVIRONMENT}.tfvars

bucket = ****
key    = "****dev.tfstate"
region = "ap-northeast-1"
- profile = ****

{
  "name": "****-infra-prd",
  "description": "cross account build project",
  "source": {
    "type": "CODECOMMIT",
    "location": "https://git-codecommit.ap-northeast-1.amazonaws.com/v1/repos/****infra",
    "gitCloneDepth": 1,
    "gitSubmodulesConfig": {
      "fetchSubmodules": false
    },
    "buildspec": "",
    "insecureSsl": false
  },
  "sourceVersion": "refs/heads/master",
  "serviceRole": "arn:aws:iam::*****:role/******",
  "artifacts": {
    "type": "NO_ARTIFACTS"
  },
  "environment": {
    "type": "LINUX_CONTAINER",
    "image": "aws/codebuild/amazonlinux2-x86_64-standard:5.0",
    "computeType": "BUILD_GENERAL1_SMALL",
    "environmentVariables": [
      {
        "name": "ENVIRONMENT",
        "value": "prd",
        "type": "PLAINTEXT"
      }
    ],
    "privilegedMode": false,
    "imagePullCredentialsType": "CODEBUILD"
  }
}

aws codebuild create-project --cli-input-json file://prd-codebuild.json --profile {prd環境用profile}

[package]
name = "****"
version = "0.1.0"
edition = "2021"

# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html

[dependencies]
actix-web = "4.8.0"
lambda-web = { version = "0.2.1", features =["actix4"] }
lambda_runtime = "0.12.0"
tokio = "1.38.0"

use lambda_web::actix_web::{self, get, App, HttpServer, Responder};
use lambda_web::{is_running_on_lambda, run_actix_on_lambda, LambdaError};

#[get("/")]
async fn hello() -> impl Responder {
    format!("Hello")
}

#[actix_web::main]
async fn main() -> Result<(), LambdaError> {
    let factory = move || App::new().service(hello);

    if is_running_on_lambda() {
        // Run on AWS Lambda
        run_actix_on_lambda(factory).await?;
    } else {
        // Local server
        HttpServer::new(factory)
            .bind("127.0.0.2:8080")?
            .run()
            .await?;
    }

    Ok(())
}

resource "aws_iam_role" "backend_lambda_exec_role" {
  name = "${var.project}-${var.environment}-lambda-exec-role"

  assume_role_policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": "sts:AssumeRole",
      "Principal": {
        "Service": "lambda.amazonaws.com"
      },
      "Effect": "Allow",
      "Sid": ""
    }
  ]
}
EOF
}

resource "aws_lambda_function" "lambda_backend" {
  function_name = "lambda-${var.project}-${var.environment}-backend"
  role          = aws_iam_role.backend_lambda_exec_role.arn
  handler       = "bootstrap" // Rustの場合、ハンドラーは通常 "bootstrap" となります

  runtime = "provided" // カスタムランタイムの場合、"provided" を指定します

  environment {
  }
}

# -------------------
# codebuildアーティファクト配置先S3バケットを作成
# -------------------
resource "aws_s3_bucket" "s3_artifact_backend_bucket" {
  bucket = "artifact-backend-bucket-${var.project}-${var.environment}"
}


# codebuildのポリシー
resource "aws_codebuild_project" "backend_codebuild_project" {
  name          = "${var.project}-${var.environment}-backend-project" // プロジェクトの名前
  description   = "${var.environment}-backend CodeBuild project"      // プロジェクトの説明
  build_timeout = "5"                                                 // ビルドがタイムアウトするまでの時間（分）
  service_role  = aws_iam_role.role_for_backend_codebuild.arn         // プロジェクトが使用するIAMロールのARN

  // ビルドのアーティファクト（出力）に関する設定
  artifacts {
-    type = "NO_ARTIFACTS" // アーティファクトを生成しない設定
+    type      = "S3"
+    location  = aws_s3_bucket.s3_artifact_backend_bucket.bucket
+    name      = "backend_binary.zip"
+    packaging = "ZIP"
  }

  // ビルド環境に関する設定
  environment {
    compute_type                = "BUILD_GENERAL1_SMALL"
-    image                       = "aws/codebuild/standard:4.0" // 使用するDockerイメージ
+    image                       = "rust:latest" // RustのDockerイメージ
    type                        = "LINUX_CONTAINER"
    image_pull_credentials_type = "CODEBUILD"
    privileged_mode             = true
  }

  // ソースに関する設定
  source {
    type            = "GITHUB"                                                 // ソースのタイプ
    location        = "https://github.com/******/*****.git" // ソースの場所（GitHubリポジトリのURL）
    git_clone_depth = 1                                                        // クローンするGitの深さ
  }
  source_version = var.branch // ビルド仕様ファイルのパス

+  logs_config {
+    cloudwatch_logs {
+      group_name = "****"
+    }
+  }
}

// CodeBuildプロジェクトが使用するIAMロールを作成するリソース
resource "aws_iam_role" "role_for_backend_codebuild" {
  name = "role-for-${var.project}-${var.environment}-backend-codebuild" // IAMロールの名前

  // IAMロールの信頼ポリシー
  assume_role_policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": "sts:AssumeRole",
      "Principal": {
        "Service": "codebuild.amazonaws.com"
      },
      "Effect": "Allow",
      "Sid": ""
    }
  ]
}
EOF
}

+resource "aws_iam_role_policy" "backend_codebuild_policy" {
+  name = "${var.project}-${var.environment}-backend-codebuild-policy"
+  role = aws_iam_role.role_for_backend_codebuild.id
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "logs:CreateLogGroup",
+        "logs:CreateLogStream",
+        "logs:PutLogEvents"
+      ],
+      "Resource": "arn:aws:logs:*:*:*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": [
+        "s3:PutObject",
+        "s3:GetObject",
+        "s3:ListBucket"
+      ],
+      "Resource": [
+        "${aws_s3_bucket.s3_artifact_backend_bucket.arn}",
+        "${aws_s3_bucket.s3_artifact_backend_bucket.arn}/*"
+      ]
+    }
+  ]
+}
+EOF
+}

+  // キャッシュに関する設定
+  cache {
+    type     = "S3"
+    location = aws_s3_bucket.s3_cache_bucket.bucket
+  }

resource "aws_iam_role" "backend_lambda_exec_role" {
  name = "${var.project}-${var.environment}-lambda-exec-role"
  s3_bucket = aws_s3_bucket.s3_artifact_bucket.bucket
  s3_key    = "backend_binary.zip"
  assume_role_policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": "sts:AssumeRole",
      "Principal": {
        "Service": "lambda.amazonaws.com"
      },
      "Effect": "Allow",
      "Sid": ""
    }
  ]
}
EOF
}

resource "aws_lambda_function" "lambda_backend" {
  function_name = "lambda-${var.project}-${var.environment}-backend"
  role          = aws_iam_role.backend_lambda_exec_role.arn
  handler       = "bootstrap" // Rustの場合、ハンドラーは通常 "bootstrap" となります

  runtime = "provided" // カスタムランタイムの場合、"provided" を指定します
}

-  runtime = "provided" // カスタムランタイムの場合、"provided" を指定します
+ runtime = "provided.al2023"

# ------------------------
# - Terraform configuratoions
# ------------------------
terraform {
  required_version = ">1.0"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
-      version = "~>3.0"
+      version = "~>5.0"
    }
  }
}

terraform init -upgrade

INIT_REPORT Init Duration: 0.23 ms	Phase: init	Status: error	Error Type: Runtime.InvalidEntrypoint
INIT_REPORT Init Duration: 9.04 ms	Phase: invoke	Status: error	Error Type: Runtime.InvalidEntrypoint
START RequestId: dd427788-f018-435e-97a1-c9fb85107c1b Version: $LATEST
RequestId: dd427788-f018-435e-97a1-c9fb85107c1b Error: Couldn't find valid bootstrap(s): [/var/task/bootstrap /opt/bootstrap]
Runtime.InvalidEntrypoint
END RequestId: dd427788-f018-435e-97a1-c9fb85107c1b
REPORT RequestId: dd427788-f018-435e-97a1-c9fb85107c1b	Duration: 10.22 ms	Billed Duration: 11 ms	Memory Size: 128 MB	Max Memory Used: 2 MB	

version: 0.2

phases:
  install:
    runtime-versions:
      rust: latest
  build:
    commands:
+      - rustc -V
      - cargo build --release
+      - mv target/release/d-nexus-backend bootstrap
+      - strip --strip-all bootstrap
+      - size bootstrap
+      - ldd bootstrap

artifacts:
  files:
-    - target/release/*
+    - bootstrap

{
  "version": "2.0",
  "routeKey": "$default",
  "rawPath": "/",
  "rawQueryString": "parameter1=value1&parameter1=value2&parameter2=value",
  "cookies": ["cookie1", "cookie2"],
  "headers": {
    "header1": "value1",
    "header2": "value1,value2"
  },
  "queryStringParameters": {
    "parameter1": "value1,value2",
    "parameter2": "value"
  },
  "requestContext": {
    "accountId": "123456789012",
    "apiId": "<urlid>",
    "authentication": null,
    "authorizer": {
      "iam": {
        "accessKey": "AKIA...",
        "accountId": "111122223333",
        "callerId": "AIDA...",
        "cognitoIdentity": null,
        "principalOrgId": null,
        "userArn": "arn:aws:iam::111122223333:user/example-user",
        "userId": "AIDA..."
      }
    },
    "domainName": "<url-id>.lambda-url.us-west-2.on.aws",
    "domainPrefix": "<url-id>",
    "http": {
      "method": "POST",
      "path": "/",
      "protocol": "HTTP/1.1",
      "sourceIp": "123.123.123.123",
      "userAgent": "agent"
    }
  },
  "body": "{\"query\":\"{ hello }\"}",
  "pathParameters": null,
  "isBase64Encoded": false,
  "stageVariables": null
}

{
  "body": "eyJkYXRhIjp7ImhlbGxvIjoiSGVsbG8sIHdvcmxkISJ9fQ==",
  "cookies": [],
  "headers": {
    "content-type": "application/json"
  },
  "isBase64Encoded": true,
  "statusCode": 200
}

version: 0.2

env:
  variables:
    DEPLOY_TARGET: "backend"

phases:
  install:
    commands:
      - if [ -f "$HOME/.cargo/env" ]; then
        echo load-env;
        . $HOME/.cargo/env;
        echo rustup-update;
        rustup update;
        else
        echo rustup-install;
        curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y;
        echo load-env;
        . $HOME/.cargo/env;
        echo install-cargo-cache;
        cargo install cargo-cache;
        fi
  build:
    commands:
      - rustc -V
      - cargo build --release
      - mv target/release/d-nexus-backend bootstrap
      - strip --strip-all bootstrap
      - size bootstrap
      - ldd bootstrap
      - zip bootstrap.zip bootstrap
  post_build:
    commands:
      - aws lambda update-function-code --function-name $DEPLOY_TARGET --zip-file fileb://bootstrap.zip

artifacts:
  files:
    - bootstrap

cache:
  paths:
    - $HOME/.cargo/env
    - $HOME/.cargo/bin/**/*
    - $HOME/.cargo/registry
    - $HOME/.cargo/git
    - target/release/deps

resource "aws_cognito_user_pool" "user_pool" {
  name = "${var.project}-${var.environment}-pool"
}

resource "aws_cognito_user_pool_client" "user_pool_client" {
  name            = "${var.project}-${var.environment}-client"
  user_pool_id    = aws_cognito_user_pool.user_pool.id
  generate_secret = true
}

resource "aws_api_gateway_rest_api" "rest_api" {
  name        = "${var.project}-${var.environment}-api"
  description = "${var.project}-${var.environment} API Gateway"
}

resource "aws_api_gateway_method" "backend_method" {
  rest_api_id   = aws_api_gateway_rest_api.rest_api.id
  resource_id   = aws_api_gateway_rest_api.rest_api.root_resource_id
  http_method   = "POST"
  authorization = "NONE"
}

resource "aws_api_gateway_integration" "backend_integration" {
  rest_api_id             = aws_api_gateway_rest_api.rest_api.id
  resource_id             = aws_api_gateway_rest_api.rest_api.root_resource_id
  http_method             = aws_api_gateway_method.backend_method.http_method
  type                    = "HTTP"
  integration_http_method = "ANY"
  uri                     = aws_lambda_function.lambda_backend.invoke_arn
}

resource "aws_api_gateway_deployment" "rest_api_deployment" {
  depends_on  = [aws_api_gateway_integration.backend_integration]
  rest_api_id = aws_api_gateway_rest_api.rest_api.id
  stage_name  = var.environment
}

resource "aws_lambda_permission" "apigw_lambda" {
  statement_id  = "AllowAPIGatewayInvoke"
  action        = "lambda:InvokeFunction"
  function_name = aws_lambda_function.lambda_backend.function_name
  principal     = "apigateway.amazonaws.com"

  source_arn = "${aws_api_gateway_rest_api.rest_api.execution_arn}/*/*"
}