gofaas
gofaas copied to clipboard
nzoschke
A boilerplate Go and AWS Lambda app. Demonstrates an expert configuration of 10+ AWS services to support running Go functions-as-a-service (FaaS).
Explicitly license the docs with something like: > This work is copyright Noah Zoschke and licensed under a [Creative Commons Attribution 4.0 Unported License](https://creativecommons.org/licenses/by/4.0/).
Lambda poses a challenge running interactive sessions for things like database migrations, reporting, etc. It could be useful to at least document some techniques if not build a tool.
A reviewer reminded me of [The Most Common OAuth2 Vulnerability](http://homakov.blogspot.com/2012/07/saferweb-most-common-oauth2.html) > How to detect, is certain OAuth implementation vulnerable? > > If site doesn't send 'state' param and redirect_uri param...
It is always nice to be able to audit KMS access. Should this stack create a CloudTrail?
It might be interesting to dive into some more advanced topics and challenges with building serverless apps: * Cold starts * How they're impacted by VPC vs. public lambdas *...
Seems like we can encrypt environment variables effectively for free by adding a `KmsKeyArn` property to functions. See: https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md This would be an easy contribution for a first timer...
The current `make dev` is passable for simple apps, but for more complex apps I the Go http server that mounts the handlers with a HTTP handler middleware of sorts....
What's the best way to seed DB with data from a json file? - Another lambda/worker function? - How to best make sure the function is run one-off & only...
https://github.com/nzoschke/gofaas/pull/12 introduced a side effect where the cert has to be in us-east-1. If the stack was created in us-west-2, etc. you get this error: `Invalid certificate ARN: arn:aws:acm:us-west-2:572007530218:certificate/26e813b5-3a21-43e0-bbfc-ad02afa17cb0. Certificate...