Added Feature lambda hooks (#272)

* first commit for lambda hooks

* Lambda hook intro

* Lambda hook intro and deploy function instructions

* Deploy Lambda function code overview update

* deploy instructions updated for lambda function

* adding hook lambda

* added content for lambda hook

* fixed sequencing  for the topics

* test lambda hook content

* merged code and readme updates

* Rearranged Test section and added console navigation and CLI for deployments.

* added yaml templates for hooks

* moved into lambda_hook folder

* updated

* Review  of changes and added placeholders  for content simplification

* task segregation   and content clarification

* moved cleanup instructions

* updated Cleanup instructions

* Updated on all todos and remove preview tool

* Updated weights for reordering Custom Hooks after Lambda Hooks

* Added Cleanup instructions

* Update based on PM's comments

* updated based on peer review feedback

* updated with better instructions

* [Draft] Lambda hooks feedback (#271)

* Add Japanese placeholder

* Update intro and some misspell

* Fix misspell

* Add comma

* Fix misspell

* Fix misspell

* Fix misspell

* Bump version: 3.5.0 → 3.5.1

---------

Co-authored-by: dessumi <dessumi@amazon.com>
Co-authored-by: JJ Lei <jjlei@amazon.com>
Co-authored-by: Franco Rezabek <43790446+rezabekf@users.noreply.github.com>

Author: 4 people

.bumpversion.cfg

@@ -1,4 +1,4 @@
 [bumpversion]
-current_version = 3.5.0
+current_version = 3.5.1
 commit = True
 tag = False

code/workspace/hooks/lambda_hook/compliant-ddb.yaml

@@ -0,0 +1,22 @@
+AWSTemplateFormatVersion: '2010-09-09'
+Resources:
+  CompliantDynamoDB:
+    Type: 'AWS::DynamoDB::Table'
+    Properties:
+      TableName: CompliantTable
+      AttributeDefinitions:
+        - AttributeName: "Id"
+          AttributeType: "S"
+      KeySchema:
+        - AttributeName: "Id"
+          KeyType: "HASH"
+      BillingMode: "PAY_PER_REQUEST"
+      PointInTimeRecoverySpecification:
+        PointInTimeRecoveryEnabled: true
+      GlobalSecondaryIndexes:
+        - IndexName: "GSI1"
+          KeySchema:
+            - AttributeName: "Id"
+              KeyType: "HASH"
+          Projection:
+            ProjectionType: "ALL"

code/workspace/hooks/lambda_hook/hook-role.yaml

@@ -0,0 +1,34 @@
+AWSTemplateFormatVersion: '2010-09-09'
+Description: 'IAM roles for DynamoDB Configuration Hook'
+
+Resources:
+  HookExecutionRole:
+    Type: 'AWS::IAM::Role'
+    Properties:
+      AssumeRolePolicyDocument:
+        Version: '2012-10-17'
+        Statement:
+          - Effect: Allow
+            Principal:
+              Service: hooks.cloudformation.amazonaws.com
+            Action: 'sts:AssumeRole'
+      ManagedPolicyArns:
+        - 'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
+      Policies:
+        - PolicyName: DynamoDBHookPolicy
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - 'dynamodb:DescribeTable'
+                  - 'dynamodb:ListTables'
+                Resource: '*'
+        - PolicyName: InvokeHookFunction
+          PolicyDocument:
+            Version: '2012-10-17'
+            Statement:
+              - Effect: Allow
+                Action:
+                  - 'lambda:InvokeFunction'
+                Resource: 'arn:aws:lambda:us-east-1:832978051484:function:DynamoDBConfigValidationHook'

code/workspace/hooks/lambda_hook/noncompliant-ddb.yaml

@@ -0,0 +1,19 @@
+AWSTemplateFormatVersion: '2010-09-09'
+Resources:
+  NonCompliantDynamoDB:
+    Type: 'AWS::DynamoDB::Table'
+    Properties:
+      TableName: NonCompliantTable
+      AttributeDefinitions:
+        - AttributeName: "Id"
+          AttributeType: "S"
+      KeySchema:
+        - AttributeName: "Id"
+          KeyType: "HASH"
+      ProvisionedThroughput:
+        ReadCapacityUnits: 25  # Exceeds allowed limit
+        WriteCapacityUnits: 10
+      GlobalSecondaryIndexes: []  # No GSI defined
+      PointInTimeRecoverySpecification:
+        PointInTimeRecoveryEnabled: false  # Must be enabled
+      BillingMode: "PROVISIONED"  # Must be PAY_PER_REQUEST

content/advanced/hooks/example-in-python/challenge/index.ja.md

@@ -1,6 +1,6 @@
 ---
 title: "Challenge"
-weight: 490
+weight: 690
 ---
 
 Japanese translation is not available yet. Please use the English version.

content/advanced/hooks/example-in-python/challenge/index.md

@@ -1,6 +1,6 @@
 ---
 title: "Challenge"
-weight: 490
+weight: 690
 ---
 
 Previously on this lab, you've written unit tests to validate the core logic of your hook. One of the requirements you were given was to allow for a mechanism to ignore S3 buckets whose names are specified by the hook administrator in the hook's configuration. You've used contract tests and end-to-end tests to validate aspects for this use case: in this challenge, you are tasked to write unit test code for this use case.

content/advanced/hooks/example-in-python/cleanup/index.ja.md

@@ -1,6 +1,6 @@
 ---
 title: "Cleanup"
-weight: 495
+weight: 695
 ---
 
 Japanese translation is not available yet. Please use the English version.

content/advanced/hooks/example-in-python/cleanup/index.md

@@ -1,6 +1,6 @@
 ---
 title: "Cleanup"
-weight: 495
+weight: 695
 ---
 
 You'll start with deregistering your hook:

content/advanced/hooks/example-in-python/conclusion/index.ja.md

@@ -1,6 +1,6 @@
 ---
 title: "Conclusion"
-weight: 499
+weight: 699
 ---
 
 Japanese translation is not available yet. Please use the English version.

content/advanced/hooks/example-in-python/conclusion/index.md

@@ -1,6 +1,6 @@
 ---
 title: "Conclusion"
-weight: 499
+weight: 699
 ---
 
 Congratulations! You have built and tested a sample hook in Python! You've learned key concepts, expectations and objectives for you to keep in mind when writing your proactive validation controls with Hooks.