search

aws / aws-sam-cli

CLI tool to build, test, debug, and deploy Serverless applications using AWS SAM
https://aws.amazon.com/serverless/sam/
Apache License 2.0
6.47k stars 1.16k forks source link

Bug: start-api giving error for CDK lambda function and layer in nested stacks - with layer ARN as parameter-override #4457

Open garydeng01 opened 1 year ago

garydeng01 commented 1 year ago

Description:

I am getting an error when trying to use 'sam local start-api' on a template containing the API Gateway and generated by 'cdk synth'. The API Gateway is in the main stack. The lambda function is in a nested stack. The lambda function has a layer that is also in a nested stack (parallel to the lambda function stack). The ARN for the lambda layer in the AWS account is being passed as a --parameter-override.

However, I am having success running 'sam local invoke' and specifying the nested stack template with the lambda function.

Here is the CDK code for the stacks:

import * as apigw from '@aws-cdk/aws-apigateway';
import * as acm from '@aws-cdk/aws-certificatemanager';
import * as ec2 from '@aws-cdk/aws-ec2';
import * as iam from '@aws-cdk/aws-iam';
import * as lambda from '@aws-cdk/aws-lambda';
import * as rds from '@aws-cdk/aws-rds';
import * as s3 from '@aws-cdk/aws-s3';
import * as assets from '@aws-cdk/aws-s3-assets';
import * as sm from '@aws-cdk/aws-secretsmanager';
import * as sqs from '@aws-cdk/aws-sqs';
import * as ssm from '@aws-cdk/aws-ssm';
import * as cdk from '@aws-cdk/core';
import * as path from 'path';
import { Environment } from '../../common/enum';

import { IEnvironmentConfig } from '../../config/environment-config';

interface LambdaApiGatewayStackProps extends cdk.StackProps {
    envConfig: IEnvironmentConfig,
    windowsLoginUser?: string
}

export class LambdaApiGatewayStack extends cdk.Stack {
    constructor(scope: cdk.Construct, id: string, props: LambdaApiGatewayStackProps) {
        super(scope, id, props);

        const lambdaExecutionRoleImport = iam.Role.fromRoleArn(this, 'LambdaExecRoleImport', cdk.Fn.importValue(props.envConfig.cfnOutputNames.lambdaExecutionRoleArn));
        const lambdaExecutionRole = this.grantPermissionsOnLambdaExecutionRole(lambdaExecutionRoleImport, props);

        // START API GATEWAY
        const restApi = new apigw.RestApi(this, 'RestApi', {
            deploy: false,
            endpointConfiguration: {
                types: [apigw.EndpointType.REGIONAL]
            },
            defaultCorsPreflightOptions: {
                allowOrigins: apigw.Cors.ALL_ORIGINS,
                allowMethods: apigw.Cors.ALL_METHODS
            },
            binaryMediaTypes: ['multipart/form-data']
        });
        var psCertificateArnAPIGateway = null;
        var certificate = null;
        if (props?.envConfig.environment != Environment.Predev && props?.envConfig.environment != Environment.PredevSpike) {
            psCertificateArnAPIGateway = ssm.StringParameter.valueForStringParameter(this, 'ps_certificateArnAPIGateway');
            certificate = acm.Certificate.fromCertificateArn(this, 'APIGatewayCertifiate', (psCertificateArnAPIGateway as string));
            const domainName = new apigw.DomainName(this, 'APIGatewayDomainName',
                {
                    domainName: props.envConfig.domain.name,
                    certificate: certificate,
                    endpointType: apigw.EndpointType.REGIONAL,
                    securityPolicy: apigw.SecurityPolicy.TLS_1_2

                });

            const basePathMapping = domainName.addBasePathMapping(restApi, { basePath: 'prod', stage: restApi.deploymentStage });
            var cfnBasePathMapping = basePathMapping.node.defaultChild as apigw.CfnBasePathMapping;

            cfnBasePathMapping.addPropertyOverride('Stage', 'prod');
        }

        restApi.root.addMethod('ANY');
        // END API GATEWAY

        const lambdaLayerStack = new LambdaLayerStack(this, 'LambdaLayer-LambdaApiGatewayStack', {
            envConfig: props.envConfig,
        });

        // Authorizer - For whatever reason, trying to define this in a nested stack leads to a template with a circular dependency.
        const authorizerFn = new lambda.Function(this, 'TokenAuthorizerFn', {
            runtime: lambda.Runtime.NODEJS_14_X,
            memorySize: props.envConfig.lambda.memorySize,
            handler: 'index.handler',
            code: lambda.Code.fromAsset(path.join(this.node.tryGetContext("backend_path") + "/authorizers/JS/jwt-rsa-aws-custom-authorizer")),
            tracing: props.envConfig.lambda.xRayTracing,
            environment: {
                "JWKS_URI": props.envConfig.azureActiveDirectoryAppRegistration.jwksURI,
                "AUDIENCE": props.envConfig.azureActiveDirectoryAppRegistration.applicationID,
                "TOKEN_ISSUER": props.envConfig.azureActiveDirectoryAppRegistration.tokenIssuer,
            },
            timeout: cdk.Duration.minutes(2),
        });

        const lambdaAuthorizer = new apigw.TokenAuthorizer(this, 'TokenAuthorizer', {
            handler: authorizerFn,
            resultsCacheTtl: cdk.Duration.millis(0),
        });

        const lambdaFunctionStack = new LambdaFunctionStack(this, 'LambdaFunctionStack', {
            restApiId: restApi.restApiId,
            rootResourceId: restApi.restApiRootResourceId,
            lambdaLayer: lambdaLayerStack.lambdaLayer,
            lambdaAuthorizer: lambdaAuthorizer,
            lambdaExecutionRole,
            envConfig: props.envConfig,
            windowsLoginUser: props.windowsLoginUser,
        });
        lambdaFunctionStack.addDependency(lambdaLayerStack);
    }

    private grantPermissionsOnLambdaExecutionRole(lambdaExecutionRole: iam.IRole, props: LambdaApiGatewayStackProps): iam.IRole {
        const lambdaExecutionRoleExport = iam.Role.fromRoleArn(this, 'LambdaExecRole', lambdaExecutionRole.roleArn);   

       // Code omitted - a lambda execution role is created and permissions to various AWS services are added to its policy.
       ...

        return lambdaExecutionRoleExport;
    }

    static setupLambdaIntegration(scope: cdk.Construct, props: LambdaAliasScalingProps): LambdaIntegrationOutput {
        var lambdaIntegration: apigw.LambdaIntegration;
        lambdaIntegration = new apigw.LambdaIntegration(props.lambdaFunction);
        return { lambdaIntegration };
    }
}

interface LambdaIntegrationOutput {
    lambdaIntegration: apigw.LambdaIntegration,
}

interface LayerNestedStackProps extends cdk.NestedStackProps {
    envConfig: IEnvironmentConfig;
}

class LambdaLayerStack extends cdk.NestedStack {
    readonly lambdaLayerAsset: assets.Asset;
    readonly lambdaLayer: lambda.LayerVersion;

    constructor(scope: cdk.Construct, id: string, props: LayerNestedStackProps) {
        super(scope, id, props);

        this.lambdaLayerAsset = new assets.Asset(
            this,
            `lambdalayer`,
            {
                path: path.join(this.node.tryGetContext("lambda_layers_path") + "/layer-pkg/target/layer-pkg-1.0.jar"),
            }
        );

        const codebucket = s3.Bucket.fromBucketName(this, "codebucket", this.lambdaLayerAsset.s3BucketName);

        this.lambdaLayer = new lambda.LayerVersion(this, 'cdk-layer', {
            code: lambda.Code.fromBucket(codebucket, this.lambdaLayerAsset.s3ObjectKey),
            compatibleRuntimes: [lambda.Runtime.JAVA_11],
            description: 'Layer with common code for Lambda Handlers',
        });

    }
}

interface ResourceNestedStackProps extends cdk.NestedStackProps {
    readonly restApiId: string;
    readonly rootResourceId: string;
    readonly lambdaLayer: lambda.LayerVersion;
    readonly lambdaAuthorizer: apigw.RequestAuthorizer;
    readonly lambdaExecutionRole: iam.IRole;
    envConfig: IEnvironmentConfig;
    windowsLoginUser?: string;
}

class LambdaFunctionStack extends cdk.NestedStack {
    public readonly methods: apigw.Method[] = [];
    readonly lambdaLayerAsset: assets.Asset;

    constructor(scope: cdk.Construct, id: string, props: ResourceNestedStackProps) {
        super(scope, id, props);

        const useDebugLogLevel = new ssm.StringParameter(this, props.envConfig.ssmStringParameterNames.lambdaUseDebugLogLevel, {
            stringValue: props.envConfig.ssmStringParameterValues.lambdaUseDebugLogLevel,
            parameterName: props.envConfig.ssmStringParameterNames.lambdaUseDebugLogLevel,
            description: "Boolean to manually toggle lambda debug level logging",
            tier: ssm.ParameterTier.STANDARD,
            type: ssm.ParameterType.STRING
        });

        const api = apigw.RestApi.fromRestApiAttributes(this, 'RestApi', {
            restApiId: props.restApiId,
            rootResourceId: props.rootResourceId,
        });

        const DefaultVpc = ec2.Vpc.fromLookup(this, 'ImportVPC', { tags: { AppID: props.envConfig.networking.tag } })
        const securityGroup = ec2.SecurityGroup.fromSecurityGroupId(
            this,
            'Lambda Security Group',
            props.envConfig.securityGroup.lambda,
        );

        const rdsDriverClass = ssm.StringParameter.fromStringParameterAttributes(this, 'rdsDriverClass', {
            parameterName: props.envConfig.ssmStringParameterNames.rdsLambdaDriverClass,
        }).stringValue;
        const rdsLambdaConnectionString = ssm.StringParameter.fromStringParameterAttributes(this, 'rdsLambdaConnectionString', {
            parameterName: props.envConfig.ssmStringParameterNames.rdsLambdaConnectionString,
        }).stringValue;
        const rdsLambdaUserName = ssm.StringParameter.fromStringParameterAttributes(this, 'rdsLambdaUserName', {
            parameterName: props.envConfig.ssmStringParameterNames.rdsLambdaUserName,
        }).stringValue;
        const rdsPasswordSecretArn = ssm.StringParameter.fromStringParameterAttributes(this, 'rdsPasswordSecretArn', {
            parameterName: props.envConfig.ssmStringParameterNames.rdsLambdaPasswordSecretArn,
        }).stringValue;

        const apiroot = api.root.addResource('api');
        const mockIntegration = new apigw.MockIntegration({
            integrationResponses: [{
                statusCode: '200',
            }],
            passthroughBehavior: apigw.PassthroughBehavior.NEVER,
            requestTemplates: {
                'application/json': '{ "statusCode": 200 }',
            },
        });

        // Admin Function
        const adminHandlerFunction = new lambda.Function(this, "adminHandlerFunction", {
            runtime: lambda.Runtime.JAVA_11,
            code: lambda.Code.fromAsset(this.node.tryGetContext("lambda_functions_path") + "/admin-handler/target/admin-handler-1.0.jar"),
            memorySize: props.envConfig.lambda.memorySize,
            securityGroups: [securityGroup],
            vpc: DefaultVpc,
            handler: "handler.AdminHandler::handleRequest",
            role: props.lambdaExecutionRole,
            layers: [props.lambdaLayer],
            tracing: props.envConfig.lambda.xRayTracing,
            timeout: cdk.Duration.minutes(2),
            environment: {
                dbDriverClassName: rdsDriverClass,
                dbUrl: rdsLambdaConnectionString,
                dbUsername: rdsLambdaUserName,
                dbPasswordSecretArn: rdsPasswordSecretArn,
                useDebugLogLevel: useDebugLogLevel.stringValue,
            }
        });

        const adminHandlerLambdaIntegrationOutput = LambdaApiGatewayStack.setupLambdaIntegration(this, {
            lambdaFunction: adminHandlerFunction,
            aliasId: 'adminHandlerFunctionAlias',
            minCapacity: props.envConfig.lambda.minProvisionedConcurrency, maxCapacity: props.envConfig.lambda.maxProvisionedConcurrency,
        });

        this.addMethod(apiroot, 'getLoginUser', props.lambdaAuthorizer, [
            { httpMethod: 'GET', integration: adminHandlerLambdaIntegrationOutput.lambdaIntegration },
            { httpMethod: 'OPTIONS', integration: mockIntegration },
        ]);

    }

    private addMethod(apiRoot: apigw.Resource, pathPart: string, authorizer: apigw.RequestAuthorizer, httpMethodIntegrations: HttpMethodIntegration[]) {
        const resource = apiRoot.addResource(pathPart);
        var method = null;
        (httpMethodIntegrations ?? []).forEach((httpMethodIntegration) => {
            method = resource.addMethod(httpMethodIntegration.httpMethod, httpMethodIntegration.integration, {
                authorizer,
            });
            this.methods.push(method);
        });
    }

}

export interface LambdaAliasScalingProps {
    lambdaFunction: lambda.Function,
    aliasId: string,
    minCapacity: number,
    maxCapacity: number,
}
export interface HttpMethodIntegration {
    httpMethod: string,
    integration: apigw.Integration,
}

Steps to reproduce:

  1. run 'cdk synth'
  2. build the lambda function and layer JARs
  3. run 'cdk synth && cdk deploy -a cdk.out/assembly-Spike-App/ --all'
  4. run 
    sam local start-api --parameter-overrides  "ParameterKey=referencetoSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource23220441OutputsSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef,ParameterValue=arn:aws:lambda:us-west-2:634226448102:layer:ecabcdklayerCFC40AB1:1450" -t /home/gdeng/app-dev/repo/source/cdk.out/assembly-Spike-App/SpikeAppLambdaApiGatewayStackgdengCEFF345E.template.json -n /home/gdeng/app-dev/repo/source/locals.json --region us-west-2'
  5. send a GET request to http://127.0.0.1:3000/api/getLoginUser

In contrast, 'sam local invoke' on the nested stack with the lambda function will work:

sam local invoke adminHandlerFunction868947F4 --parameter-overrides "ParameterKey=referencetoSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource23220441OutputsSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef,ParameterValue=arn:aws:lambda:us-west-2:634226448102:layer:ecabcdklayerCFC40AB1:1450" -t /home/gdeng/app-dev/e-cabinet-repo/e-cabinet-source/cdk.out/assembly-Spike-App/SpikeAppLambdaApiGatewayStackgdengLambdaFunctionStack1AEFD0A4.nested.template.json -e /home/gdeng/app-dev/e-cabinet-repo/e-cabinet-source/events/adminHandlerEvent.json -n /home/gdeng/app-dev/e-cabinet-repo/e-cabinet-source/locals.json --region us-west-2

Observed result:

sam local start-api --parameter-overrides  "ParameterKey=referencetoSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource23220441OutputsSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef,ParameterValue=arn:aws:lambda:us-west-2:634226448102:layer:ecabcdklayerCFC40AB1:1450" -t /home/gdeng/app-dev/repo/source/cdk.out/assembly-Spike-App/SpikeAppLambdaApiGatewayStackgdengCEFF345E.template.json -n /home/gdeng/app-dev/repo/source/locals.json --region us-west-2 --debug
2022-12-01 15:30:21,557 | Config file location: /home/gdeng/app-dev/repo/source/cdk.out/assembly-Spike-App/samconfig.toml
2022-12-01 15:30:21,557 | Config file '/home/gdeng/app-dev/repo/source/cdk.out/assembly-Spike-App/samconfig.toml' does not exist
2022-12-01 15:30:21,579 | Telemetry endpoint configured to be https://aws-serverless-tools-telemetry.us-west-2.amazonaws.com/metrics
2022-12-01 15:30:21,579 | Using config file: samconfig.toml, config environment: default
2022-12-01 15:30:21,579 | Expand command line arguments to:
2022-12-01 15:30:21,579 | --template_file=/home/gdeng/app-dev/repo/source/cdk.out/assembly-Spike-App/SpikeAppLambdaApiGatewayStackgdengCEFF345E.template.json --parameter_overrides={'referencetoSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource23220441OutputsSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef': 'arn:aws:lambda:us-west-2:634226448102:layer:ecabcdklayerCFC40AB1:1450'} --env_vars=/home/gdeng/app-dev/repo/source/locals.json --host=127.0.0.1 --port=3000 --static_dir=public --layer_cache_basedir=/home/gdeng/.aws-sam/layers-pkg --container_host=localhost --container_host_interface=127.0.0.1 
2022-12-01 15:30:21,651 | local start-api command is called
2022-12-01 15:30:21,651 | Collected default values for parameters: {'rdsPasswordSecretArnParameter': 'ps_lambda_rdsPasswordSecretArn-gdeng-spike', 'openSearchPwdSecretArnParameter': 'ps_os_app_user_secret_complete_arn', 'BootstrapVersion': '/cdk-bootstrap/ecab/version'}
2022-12-01 15:30:21,666 | CDK Path for resource LambdaExecRolePolicyFE83EEC0 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaExecRole', 'Policy', 'Resource']
2022-12-01 15:30:21,666 | CDK Path for resource RestApi0C43BF4B is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'Resource']
2022-12-01 15:30:21,666 | CDK Path for resource RestApiCloudWatchRoleE3ED6605 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'CloudWatchRole', 'Resource']
2022-12-01 15:30:21,666 | CDK Path for resource RestApiAccount7C83CF5A is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'Account']
2022-12-01 15:30:21,666 | CDK Path for resource RestApiOPTIONS6AA64D2D is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'Default', 'OPTIONS', 'Resource']
2022-12-01 15:30:21,666 | CDK Path for resource RestApiANYA7C1DC94 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'Default', 'ANY', 'Resource']
2022-12-01 15:30:21,666 | CDK Path for resource LambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource1DAB6992 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaLayer-LambdaApiGatewayStack.NestedStack', 'LambdaLayer-LambdaApiGatewayStack.NestedStackResource']
2022-12-01 15:30:21,666 | CDK Path for resource pslambdaauthorizerUseDebugLogLevelgdengspike11A4203C is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'ps_lambda_authorizerUseDebugLogLevel-gdeng-spike', 'Resource']
2022-12-01 15:30:21,667 | CDK Path for resource TokenAuthorizerFnServiceRoleC4BD3DE8 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'TokenAuthorizerFn', 'ServiceRole', 'Resource']
2022-12-01 15:30:21,667 | CDK Path for resource TokenAuthorizerFn201D8B13 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'TokenAuthorizerFn', 'Resource']
2022-12-01 15:30:21,667 | CDK Path for resource TokenAuthorizerFnSpikeAppLambdaApiGatewayStackgdengTokenAuthorizer91F1FF33PermissionsAD65A8EF is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'TokenAuthorizerFn', 'SpikeAppLambdaApiGatewayStackgdengTokenAuthorizer91F1FF33:Permissions']
2022-12-01 15:30:21,667 | CDK Path for resource TokenAuthorizer82AECDDC is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'TokenAuthorizer', 'Resource']
2022-12-01 15:30:21,667 | CDK Path for resource LambdaFunctionStackNestedStackLambdaFunctionStackNestedStackResource333996F6 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack.NestedStack', 'LambdaFunctionStack.NestedStackResource']
2022-12-01 15:30:21,667 | CDK Path for resource CDKMetadata is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'CDKMetadata', 'Default']
2022-12-01 15:30:21,669 | Unable to resolve property Resource: OrderedDict([('Fn::ImportValue', 'upsertMessageSqsQueueArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,669 | Unable to resolve property Resource: OrderedDict([('Fn::ImportValue', 'upsertMessageSqsQueueArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,669 | Unable to resolve property Resource: OrderedDict([('Fn::ImportValue', 'bulkUpdateMessageSqsQueueArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,669 | Unable to resolve property Resource: OrderedDict([('Fn::ImportValue', 'bulkUpdateMessageSqsQueueArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,669 | Unable to resolve property Roles: [OrderedDict([('Fn::Select', [1, OrderedDict([('Fn::Split', ['/', OrderedDict([('Fn::Select', [5, OrderedDict([('Fn::Split', [':', OrderedDict([('Fn::ImportValue', 'lambdaExecutionRoleArn-gdeng-spike')])])])])])])])])])]. Leaving as is.
2022-12-01 15:30:21,670 | Unable to resolve property DEBUG: OrderedDict([('Fn::GetAtt', ['pslambdaauthorizerUseDebugLogLevelgdengspike11A4203C', 'Value'])]). Leaving as is.
2022-12-01 15:30:21,670 | Unable to resolve property referencetoSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource23220441OutputsSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef: OrderedDict([('Fn::GetAtt', ['LambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource1DAB6992', 'Outputs.SpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef'])]). Leaving as is.
2022-12-01 15:30:21,672 | 2 stacks found in the template
2022-12-01 15:30:21,672 | No Parameters detected in the template
2022-12-01 15:30:21,683 | CDK Path for resource ecabcdklayerCFC40AB1 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaLayer-LambdaApiGatewayStack', 'cdk-layer', 'Resource']
2022-12-01 15:30:21,683 | CDK Path for resource CDKMetadata is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaLayer-LambdaApiGatewayStack', 'CDKMetadata', 'Default']
2022-12-01 15:30:21,683 | 0 stacks found in the template
2022-12-01 15:30:21,683 | Collected default values for parameters: {'rdsDriverClassParameter': 'ps_lambda_rdsDriverClass-gdeng-spike', 'rdsLambdaConnectionStringParameter': 'ps_lambda_rdsConnectionString-gdeng-spike', 'rdsLambdaUserNameParameter': 'ps_lambda_rdsUserName-gdeng-spike', 'rdsPasswordSecretArnParameter': 'ps_lambda_rdsPasswordSecretArn-gdeng-spike'}
2022-12-01 15:30:21,696 | CDK Path for resource pslambdauseDebugLogLevelgdengspike021B0CC8 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'ps_lambda_useDebugLogLevel-gdeng-spike', 'Resource']
2022-12-01 15:30:21,696 | CDK Path for resource RestApiapiC55947A1 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'Resource']
2022-12-01 15:30:21,696 | CDK Path for resource RestApiapigetLoginUser9EA91BE2 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'Resource']
2022-12-01 15:30:21,696 | CDK Path for resource RestApiapigetLoginUserGETApiPermissionSpikeAppLambdaApiGatewayStackgdengLambdaFunctionStackRestApi8B903277GETapigetLoginUserBDE7464A is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'GET', 'ApiPermission.SpikeAppLambdaApiGatewayStackgdengLambdaFunctionStackRestApi8B903277.GET..api.getLoginUser']
2022-12-01 15:30:21,696 | CDK Path for resource RestApiapigetLoginUserGETApiPermissionTestSpikeAppLambdaApiGatewayStackgdengLambdaFunctionStackRestApi8B903277GETapigetLoginUserFF217F2D is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'GET', 'ApiPermission.Test.SpikeAppLambdaApiGatewayStackgdengLambdaFunctionStackRestApi8B903277.GET..api.getLoginUser']
2022-12-01 15:30:21,696 | CDK Path for resource RestApiapigetLoginUserGET8438924F is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'GET', 'Resource']
2022-12-01 15:30:21,696 | CDK Path for resource RestApiapigetLoginUserOPTIONS2682EFFD is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'OPTIONS', 'Resource']
2022-12-01 15:30:21,696 | CDK Path for resource adminHandlerFunction868947F4 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'adminHandlerFunction', 'Resource']
2022-12-01 15:30:21,696 | CDK Path for resource CDKMetadata is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'CDKMetadata', 'Default']
2022-12-01 15:30:21,697 | Unable to resolve property Role: OrderedDict([('Fn::ImportValue', 'lambdaExecutionRoleArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,697 | Unable to resolve property useDebugLogLevel: OrderedDict([('Fn::GetAtt', ['pslambdauseDebugLogLevelgdengspike021B0CC8', 'Value'])]). Leaving as is.
2022-12-01 15:30:21,697 | 0 stacks found in the template
2022-12-01 15:30:21,697 | Collected default values for parameters: {'rdsPasswordSecretArnParameter': 'ps_lambda_rdsPasswordSecretArn-gdeng-spike', 'openSearchPwdSecretArnParameter': 'ps_os_app_user_secret_complete_arn', 'BootstrapVersion': '/cdk-bootstrap/ecab/version'}
2022-12-01 15:30:21,712 | CDK Path for resource LambdaExecRolePolicyFE83EEC0 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaExecRole', 'Policy', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource RestApi0C43BF4B is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource RestApiCloudWatchRoleE3ED6605 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'CloudWatchRole', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource RestApiAccount7C83CF5A is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'Account']
2022-12-01 15:30:21,712 | CDK Path for resource RestApiOPTIONS6AA64D2D is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'Default', 'OPTIONS', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource RestApiANYA7C1DC94 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'RestApi', 'Default', 'ANY', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource LambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource1DAB6992 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaLayer-LambdaApiGatewayStack.NestedStack', 'LambdaLayer-LambdaApiGatewayStack.NestedStackResource']
2022-12-01 15:30:21,712 | CDK Path for resource pslambdaauthorizerUseDebugLogLevelgdengspike11A4203C is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'ps_lambda_authorizerUseDebugLogLevel-gdeng-spike', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource TokenAuthorizerFnServiceRoleC4BD3DE8 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'TokenAuthorizerFn', 'ServiceRole', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource TokenAuthorizerFn201D8B13 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'TokenAuthorizerFn', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource TokenAuthorizerFnSpikeAppLambdaApiGatewayStackgdengTokenAuthorizer91F1FF33PermissionsAD65A8EF is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'TokenAuthorizerFn', 'SpikeAppLambdaApiGatewayStackgdengTokenAuthorizer91F1FF33:Permissions']
2022-12-01 15:30:21,712 | CDK Path for resource TokenAuthorizer82AECDDC is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'TokenAuthorizer', 'Resource']
2022-12-01 15:30:21,712 | CDK Path for resource LambdaFunctionStackNestedStackLambdaFunctionStackNestedStackResource333996F6 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack.NestedStack', 'LambdaFunctionStack.NestedStackResource']
2022-12-01 15:30:21,712 | CDK Path for resource CDKMetadata is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'CDKMetadata', 'Default']
2022-12-01 15:30:21,714 | Unable to resolve property Resource: OrderedDict([('Fn::ImportValue', 'upsertMessageSqsQueueArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,714 | Unable to resolve property Resource: OrderedDict([('Fn::ImportValue', 'upsertMessageSqsQueueArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,714 | Unable to resolve property Resource: OrderedDict([('Fn::ImportValue', 'bulkUpdateMessageSqsQueueArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,714 | Unable to resolve property Resource: OrderedDict([('Fn::ImportValue', 'bulkUpdateMessageSqsQueueArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,714 | Unable to resolve property Roles: [OrderedDict([('Fn::Select', [1, OrderedDict([('Fn::Split', ['/', OrderedDict([('Fn::Select', [5, OrderedDict([('Fn::Split', [':', OrderedDict([('Fn::ImportValue', 'lambdaExecutionRoleArn-gdeng-spike')])])])])])])])])])]. Leaving as is.
2022-12-01 15:30:21,714 | Unable to resolve property DEBUG: OrderedDict([('Fn::GetAtt', ['pslambdaauthorizerUseDebugLogLevelgdengspike11A4203C', 'Value'])]). Leaving as is.
2022-12-01 15:30:21,715 | Unable to resolve property referencetoSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource23220441OutputsSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef: OrderedDict([('Fn::GetAtt', ['LambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource1DAB6992', 'Outputs.SpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef'])]). Leaving as is.
2022-12-01 15:30:21,715 | 14 resources found in the stack 
2022-12-01 15:30:21,716 | No Parameters detected in the template
2022-12-01 15:30:21,727 | CDK Path for resource ecabcdklayerCFC40AB1 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaLayer-LambdaApiGatewayStack', 'cdk-layer', 'Resource']
2022-12-01 15:30:21,727 | CDK Path for resource CDKMetadata is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaLayer-LambdaApiGatewayStack', 'CDKMetadata', 'Default']
2022-12-01 15:30:21,727 | 2 resources found in the stack LambdaLayer-LambdaApiGatewayStack
2022-12-01 15:30:21,727 | Collected default values for parameters: {'rdsDriverClassParameter': 'ps_lambda_rdsDriverClass-gdeng-spike', 'rdsLambdaConnectionStringParameter': 'ps_lambda_rdsConnectionString-gdeng-spike', 'rdsLambdaUserNameParameter': 'ps_lambda_rdsUserName-gdeng-spike', 'rdsPasswordSecretArnParameter': 'ps_lambda_rdsPasswordSecretArn-gdeng-spike'}
2022-12-01 15:30:21,741 | CDK Path for resource pslambdauseDebugLogLevelgdengspike021B0CC8 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'ps_lambda_useDebugLogLevel-gdeng-spike', 'Resource']
2022-12-01 15:30:21,741 | CDK Path for resource RestApiapiC55947A1 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'Resource']
2022-12-01 15:30:21,741 | CDK Path for resource RestApiapigetLoginUser9EA91BE2 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'Resource']
2022-12-01 15:30:21,741 | CDK Path for resource RestApiapigetLoginUserGETApiPermissionSpikeAppLambdaApiGatewayStackgdengLambdaFunctionStackRestApi8B903277GETapigetLoginUserBDE7464A is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'GET', 'ApiPermission.SpikeAppLambdaApiGatewayStackgdengLambdaFunctionStackRestApi8B903277.GET..api.getLoginUser']
2022-12-01 15:30:21,741 | CDK Path for resource RestApiapigetLoginUserGETApiPermissionTestSpikeAppLambdaApiGatewayStackgdengLambdaFunctionStackRestApi8B903277GETapigetLoginUserFF217F2D is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'GET', 'ApiPermission.Test.SpikeAppLambdaApiGatewayStackgdengLambdaFunctionStackRestApi8B903277.GET..api.getLoginUser']
2022-12-01 15:30:21,741 | CDK Path for resource RestApiapigetLoginUserGET8438924F is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'GET', 'Resource']
2022-12-01 15:30:21,741 | CDK Path for resource RestApiapigetLoginUserOPTIONS2682EFFD is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'RestApi', 'Default', 'api', 'getLoginUser', 'OPTIONS', 'Resource']
2022-12-01 15:30:21,741 | CDK Path for resource adminHandlerFunction868947F4 is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'adminHandlerFunction', 'Resource']
2022-12-01 15:30:21,741 | CDK Path for resource CDKMetadata is ['Spike-App', 'LambdaApiGatewayStack-gdeng', 'LambdaFunctionStack', 'CDKMetadata', 'Default']
2022-12-01 15:30:21,742 | Unable to resolve property Role: OrderedDict([('Fn::ImportValue', 'lambdaExecutionRoleArn-gdeng-spike')]). Leaving as is.
2022-12-01 15:30:21,742 | Unable to resolve property useDebugLogLevel: OrderedDict([('Fn::GetAtt', ['pslambdauseDebugLogLevelgdengspike021B0CC8', 'Value'])]). Leaving as is.
2022-12-01 15:30:21,742 | 9 resources found in the stack LambdaFunctionStack
2022-12-01 15:30:21,742 | Found Lambda function with name='TokenAuthorizerFn201D8B13' and CodeUri='../asset.61af0fc7eb5a561e51f7affeeef6349eb9a2e45ffff0eee044147b3b5fed72f2'
2022-12-01 15:30:21,742 | --base-dir is not presented, adjusting uri ../asset.61af0fc7eb5a561e51f7affeeef6349eb9a2e45ffff0eee044147b3b5fed72f2 relative to /home/gdeng/app-dev/repo/source/cdk.out/assembly-Spike-App/SpikeAppLambdaApiGatewayStackgdengCEFF345E.template.json
2022-12-01 15:30:21,743 | Found Lambda function with name='adminHandlerFunction868947F4' and CodeUri='../asset.65c87806e8a12bbfe0f35a3f09b678752fd0669f4980be80cfcf3420829836d7.jar'
2022-12-01 15:30:21,743 | --base-dir is not presented, adjusting uri ../asset.65c87806e8a12bbfe0f35a3f09b678752fd0669f4980be80cfcf3420829836d7.jar relative to /home/gdeng/app-dev/repo/source/cdk.out/assembly-Spike-App/SpikeAppLambdaApiGatewayStackgdengLambdaFunctionStack1AEFD0A4.nested.template.json
2022-12-01 15:30:21,746 | Skipping resource 'RestApi0C43BF4B'. Swagger document not found in Body and BodyS3Location
2022-12-01 15:30:21,746 | Extracted Function ARN: None
2022-12-01 15:30:21,746 | Extracted Function ARN: None
2022-12-01 15:30:21,747 | Extracted Function ARN: arn:aws:lambda:us-west-2:123456789012:function:adminHandlerFunction868947F4
2022-12-01 15:30:21,747 | Extracted Function ARN: None
2022-12-01 15:30:21,747 | 3 APIs found in the template
2022-12-01 15:30:21,752 | Mounting None at http://127.0.0.1:3000/ [DELETE, GET, HEAD, OPTIONS, OPTIONS, PATCH, POST, PUT]
2022-12-01 15:30:21,752 | Mounting adminHandlerFunction868947F4 at http://127.0.0.1:3000/api/getLoginUser [GET, OPTIONS]
2022-12-01 15:30:21,752 | Mounting None at http://127.0.0.1:3000/api/getLoginUser [OPTIONS]
2022-12-01 15:30:21,752 | You can now browse to the above endpoints to invoke your functions. You do not need to restart/reload SAM CLI while working on your functions, changes will be reflected instantly/automatically. You only need to restart SAM CLI if you update your AWS SAM template
2022-12-01 15:30:21,752 | Localhost server is starting up. Multi-threading = True
2022-12-01 15:30:21  * Running on http://127.0.0.1:3000/ (Press CTRL+C to quit)
2022-12-01 15:30:25,438 | Constructed String representation of Event to invoke Lambda. Event: {"body": null, "headers": {"Accept": "*/*", "Accept-Encoding": "gzip, deflate, br", "Authorization": "Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjJaUXBKM1VwYmpBWVhZR2FYRUpsOGxWMFRPSSJ9.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.nV-_3Z2TpyF1AXUNwK_Z0OPozlbfYTAxm1upOx1-1rBIk-354yIf5NvEPQ-wAq6GIakygO72Uz6zLkAbjRlYlaBgzcIxpZcMW9uScGP0grlOGsgbjXkB1aSLG35pQhQVwLDANnxL0LcNnpUMZ33Y3jRFTzb-fCMoSTvRs2m68mp7bWZARr4oKusxnoeaO-O2H89Kd4q2aarzr72Qyoo0p93cuUL6dEI-XZavDanDXIDThRHdaRKgO8TBP-fE752ZE4lcblE7iJvr0IJVvT2ZB4fTm__5I6Zbr2Z8CRnRtiQhB1vfqvMk4xEmqdk06as75OxeB9Mnw6pr0QCXGMpERA", "Connection": "keep-alive", "Host": "127.0.0.1:3000", "Msgid": "sfa", "Opr": "112", "Postman-Token": "6978b446-7cf7-4b64-8a30-62c3b1214120", "Repoid": "0", "Sysid": "vxcab-ui", "User-Agent": "PostmanRuntime/7.29.2", "X-Forwarded-Port": "3000", "X-Forwarded-Proto": "http"}, "httpMethod": "GET", "isBase64Encoded": false, "multiValueHeaders": {"Accept": ["*/*"], "Accept-Encoding": ["gzip, deflate, br"], "Authorization": ["Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjJaUXBKM1VwYmpBWVhZR2FYRUpsOGxWMFRPSSJ9.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.nV-_3Z2TpyF1AXUNwK_Z0OPozlbfYTAxm1upOx1-1rBIk-354yIf5NvEPQ-wAq6GIakygO72Uz6zLkAbjRlYlaBgzcIxpZcMW9uScGP0grlOGsgbjXkB1aSLG35pQhQVwLDANnxL0LcNnpUMZ33Y3jRFTzb-fCMoSTvRs2m68mp7bWZARr4oKusxnoeaO-O2H89Kd4q2aarzr72Qyoo0p93cuUL6dEI-XZavDanDXIDThRHdaRKgO8TBP-fE752ZE4lcblE7iJvr0IJVvT2ZB4fTm__5I6Zbr2Z8CRnRtiQhB1vfqvMk4xEmqdk06as75OxeB9Mnw6pr0QCXGMpERA"], "Connection": ["keep-alive"], "Host": ["127.0.0.1:3000"], "Msgid": ["sfa"], "Opr": ["112"], "Postman-Token": ["6978b446-7cf7-4b64-8a30-62c3b1214120"], "Repoid": ["0"], "Sysid": ["vxcab-ui"], "User-Agent": ["PostmanRuntime/7.29.2"], "X-Forwarded-Port": ["3000"], "X-Forwarded-Proto": ["http"]}, "multiValueQueryStringParameters": null, "path": "/api/getLoginUser", "pathParameters": null, "queryStringParameters": null, "requestContext": {"accountId": "123456789012", "apiId": "1234567890", "domainName": "127.0.0.1:3000", "extendedRequestId": null, "httpMethod": "GET", "identity": {"accountId": null, "apiKey": null, "caller": null, "cognitoAuthenticationProvider": null, "cognitoAuthenticationType": null, "cognitoIdentityPoolId": null, "sourceIp": "127.0.0.1", "user": null, "userAgent": "Custom User Agent String", "userArn": null}, "path": "/api/getLoginUser", "protocol": "HTTP/1.1", "requestId": "255aa0f0-89be-4db5-bc7c-7e630c85cc45", "requestTime": "01/Dec/2022:23:30:21 +0000", "requestTimeEpoch": 1669937421, "resourceId": "123456", "resourcePath": "/api/getLoginUser", "stage": null}, "resource": "/api/getLoginUser", "stageVariables": null, "version": "1.0"}
2022-12-01 15:30:25,438 | Found one Lambda function with name 'adminHandlerFunction868947F4'
2022-12-01 15:30:25,438 | Invoking handler.AdminHandler::handleRequest (java11)
2022-12-01 15:30:25,438 | Environment variables data found for specific function in standard format
2022-12-01 15:30:25,438 | Loading AWS credentials from session with profile 'None'
2022-12-01 15:30:25,453 | Resolving code path. Cwd=/home/gdeng/app-dev/repo/source/cdk.out/assembly-Spike-App, CodeUri=/home/gdeng/app-dev/repo/source/cdk.out/asset.65c87806e8a12bbfe0f35a3f09b678752fd0669f4980be80cfcf3420829836d7.jar
2022-12-01 15:30:25,453 | Resolved absolute path to code is /home/gdeng/app-dev/repo/source/cdk.out/asset.65c87806e8a12bbfe0f35a3f09b678752fd0669f4980be80cfcf3420829836d7.jar
2022-12-01 15:30:25,454 | Decompressing /home/gdeng/app-dev/repo/source/cdk.out/asset.65c87806e8a12bbfe0f35a3f09b678752fd0669f4980be80cfcf3420829836d7.jar
2022-12-01 15:30:25,458 | File META-INF/ in zipfile does not have permission information
2022-12-01 15:30:25,459 | File META-INF/MANIFEST.MF in zipfile does not have permission information
2022-12-01 15:30:25,459 | File application.yml in zipfile does not have permission information

...

2022-12-01 15:30:25,724 | File org/hamcrest/internal/SelfDescribingValueIterator.class in zipfile does not have permission information
2022-12-01 15:30:25,725 | Cleaning all decompressed code dirs
2022-12-01 15:30:25,755 | Exception on /api/getLoginUser [GET]
Traceback (most recent call last):
  File "samcli/lib/providers/provider.py", line 277, in _compute_layer_name
ValueError: not enough values to unpack (expected 3, got 1)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "flask/app.py", line 2073, in wsgi_app
  File "flask/app.py", line 1518, in full_dispatch_request
  File "flask/app.py", line 1516, in full_dispatch_request
  File "flask/app.py", line 1502, in dispatch_request
  File "samcli/local/apigw/local_apigw_service.py", line 361, in _request_handler
  File "samcli/commands/local/lib/local_lambda.py", line 144, in invoke
  File "samcli/lib/telemetry/metric.py", line 277, in wrapped_func
  File "samcli/local/lambdafn/runtime.py", line 177, in invoke
  File "samcli/local/lambdafn/runtime.py", line 88, in create
  File "samcli/local/docker/lambda_container.py", line 94, in __init__
  File "samcli/local/docker/lambda_container.py", line 236, in _get_image
  File "samcli/local/docker/lambda_image.py", line 137, in build
  File "samcli/local/layers/layer_downloader.py", line 77, in download_all
  File "samcli/local/layers/layer_downloader.py", line 102, in download
  File "samcli/lib/providers/provider.py", line 332, in name
  File "samcli/lib/providers/provider.py", line 279, in _compute_layer_name
samcli.commands.local.cli_common.user_exceptions.InvalidLayerVersionArn: referencetoSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackNestedStackLambdaLayerLambdaApiGatewayStackNestedStackResource23220441OutputsSpikeAppLambdaApiGatewayStackgdengLambdaLayerLambdaApiGatewayStackecabcdklayer84D5FD0CRef is an Invalid Layer Arn.
2022-12-01 15:30:25 127.0.0.1 - - [01/Dec/2022 15:30:25] "GET /api/getLoginUser HTTP/1.1" 502 -

Expected result:

An HTTP response with status 200

Additional environment details (Ex: Windows, Mac, Amazon Linux etc)

  1. OS: Ubuntu 20.04.3 LTS (Windows Subsystem for Linux)
  2. sam --version: 1.65.0
  3. AWS region: us-west-2

Add --debug flag to command you are running

torresxb1 commented 1 year ago

My guess is that your local invoke works because you're running it on the nested stack, and so the parameter override happens in that stack. Since you run the local start-api on the parent stack, it's probably trying to override the parameter on this parent stack and not on the nested stack. If this is the case, not sure if we're able to pass down parameter overrides onto nested stacks. Let me try to look into this further.

garydeng01 commented 1 year ago

Yes. I would agree with your assessment that it seems to do with the parameter override having difficulty with a stack that is nested relative to the stack/template that is passed in to SAM CLI as the -t parameter.

moelasmar commented 1 year ago

Thanks @giterdoneh for raising this issue. This is not an issue, but a feature request, SAM CLI currently does not support processing the resources that are connected to resources defined in other stacks or nested stacks. I will share this issue with our PM to see if we can prioritize this issue or not.

moelasmar commented 1 year ago

To explain why sam local invoke works on the nested stack, but it will not work on the main stack. The issue is the parameter you are overriding is defined only in the nested stack but not in the main stack, so SAM CLI was able to set the value of it when the nested stack was used.