lambda with ssl

Author: SinghB

.gitignore

@@ -127,3 +127,4 @@ dmypy.json
 
 # Pyre type checker
 .pyre/
+/.idea/*

README.md

@@ -1,41 +1,48 @@
-# AWS Lambda Integration with PostgreSQL and python
+## AWS Lambda Integration with PostgreSQL 
 
-This repository will help in creating the AWS Lambda Function, which will connect to PostgreSQL Db over SSL.
+This repository will help in creating the AWS Lambda Function in Python, which will connect to PostgreSQL DB over SSL.
 
-# Tech Stack 
+### Tech Stack
+      Python 3.6
+      AWS Lambda 
+      PostgreSQL
+      Psycopg2(Postgres connector)
+      SSL
 
 
-## Assumption
+### Assumption
       DB is already created with some table and access on AWS cloud. 
       
-## Steps Required for Project Setup
+### Steps Required for Project Setup
       1- Install Python3.6 or 3.8
       2- Create a lambda project in python
       3- Add psycopg2 dependency in your project root. (Add Image) (Reference)
       3- Get SSL certificate from AWS (), add this SSL Certificate to your project directory. (Add Image)
       4- Access this certificate in your code and use it in your psycopg2.connect() as sslMode and ssl_ca.(Add Image)
       5- Zip it and upload it in AWS lambda (Note: Zip name and lambda name should be same, and lambda_funcation.py should be on root of zip)
 
-## Steps Required for Project Deployment
+### Steps Required for Project Deployment
     1- Create Lambda furcation (Image) with same name as project zip.
     2- Create Lambda a Role, which should have RDSAccess Permission. 
     3- Lambda should be in same VPC and subnets as PostgreSQL
     4- Lambda should have a Security Group, this security group should have permission in PostgreSQL. So there should be a inbound rule in PostgreSQL Security Group for Lambda Security Group 
 
- ## Step Run 
+ ### Step Run 
 
- ## Steps to upload ZIP file to AWS Lambda
+ ### Steps to upload ZIP file to AWS Lambda
 
 
- References 
+# References
 
- SSL Certificate 
-             
-             https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
-             https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/PostgreSQL.Concepts.General.SSL.html#PostgreSQL.Concepts.General.SSL.Connecting
-             https://gist.github.com/pfigue/3440e2bc986550a6b8ec
-             https://help.compose.com/docs/postgresql-and-python
-             https://github.com/jkehler/awslambda-psycopg2
+   [SSL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html) 
+   
+  [SSL MODE  ](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/PostgreSQL.Concepts.General.SSL.html#PostgreSQL.Concepts.General.SSL.Connecting)
+   
+   [postgresql-and-python]( https://gist.github.com/pfigue/3440e2bc986550a6b8ec)
+   
+  [awslambda-psycopg2]( https://gist.github.com/pfigue/3440e2bc986550a6b8ec) 
+  
+  [SSL Issue]( https://gist.github.com/pfigue/3440e2bc986550a6b8ec)
 
 
 

img/psycopg2.PNG

@@ -0,0 +1,50 @@
+import os
+import sys
+
+import psycopg2
+
+# We need to access them from AWS SSM parameter store
+DB_HOST = 'POSTGRES_HOST'
+DB_USER = 'POSTGRES_USER_NAME'
+DB_PASSWORD = 'POSTGRES_PASSWORD'
+DB_NAME = 'POSTGRES_DB'
+DB_PORT = 5432
+SSL_MODE = 'verify-full'
+SSL_ROOT_CERT = 'cert/xxxx.pem'  # Certificate need to be downloaded from AWS for Lambda Region
+SSL_ROOT_CERT = os.path.join(os.path.dirname(os.path.realpath(__file__)), SSL_ROOT_CERT)
+
+print("SSL File Location : {}".format(SSL_ROOT_CERT))
+
+
+def get_connection():
+    try:
+        print('[INFO] : AWS Lambda is trying to connect db......!')
+        return psycopg2.connect(host=DB_HOST, port=DB_PORT, user=DB_NAME, password=DB_PASSWORD,
+                                sslmode=SSL_MODE,  # Pass SSL Mode
+                                sslrootcert=SSL_ROOT_CERT,  # Pass Root certificate
+                                database=DB_NAME)
+    except BaseException as err:
+        print('[ERROR]::   AWS Lambda could not connect to postgres db...! {}'.format(err))
+        sys.exit()
+
+
+db_conn = get_connection()
+print('[INFO]:: AWS Lambda connected successfully with postgreSQL DB..!')
+
+select_query = "SELECT * FROM FLIGHTS"
+
+
+def lambda_handler(event, context):
+    print('[INFO]:: AWS Lambda Handler invoked...!')
+    cursor = db_conn.cursor()
+
+    print("[INFO]:: Execute Select Query cursor.fetchall")
+    cursor.execute(select_query)
+
+    flight_data = cursor.fetchall()
+
+    print("[INFO] :: Iterate Row of Flight data..")
+    for row in flight_data:
+        print("Id = ", row[0], )
+        print("Airline Name = ", row[1])
+        print("Destination  = ", row[2], "\n")

img/psycopg2_1.PNG

@@ -0,0 +1,3 @@
+This need to be download form given url
+
+https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html