# serverless-astra-graalvm

**Repository Path**: mirrors_codecentric/serverless-astra-graalvm

## Basic Information

- **Project Name**: serverless-astra-graalvm
- **Description**: Sample serverless order processing API using DataStax Astra Serverless and AWS Lambda.
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2021-05-15
- **Last Updated**: 2026-07-25

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# Serverless Astra GraalVM

## Build

### Prerequisites

- GraalVM (if you have [SdkMan!](https://sdkman.io/usage), execute `sdk env` or
  set `sdkman_auto_env=true` in `~/.sdkman/etc/config`)
- GraalVM Native Image (`gu install native-image`)

### Package

```bash
./mvnw package
```

Note that for the Lambda deployment to work, you need to build a linux-amd64 native image. At this
point in time, cross compilation doesn't seem to work so if you are on Mac or Windows, you might
need a VM if you're planning to build this locally.

## Deployment

### Prerequisites

- [gotf](https://github.com/craftypath/gotf)
- [Terraform Cloud](https://app.terraform.io) Workspace (optional)
- Packaged artifacts
- [DataStax Astra](https://astra.datastax.com) account + client API tokens
- [AWS](https://portal.aws.amazon.com/) account + IAM user

The Astra admin token should have permissions to create databases and keyspaces. Ideally you want a
separate application token that can only access databases and keyspaces. At the point of writing
this it was not possible to create the application token through Terraform.

The IAM user can use the following AWS managed policies:

- `AWSLambda_FullAccess`
- `CloudWatchFullAccess`
- `AmazonAPIGatewayAdministrator`
- `AmazonSSMFullAccess`

Also add this inline policy to allow the management of Lambda roles and policies:

```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "iam:AttachRolePolicy",
        "iam:CreatePolicy",
        "iam:CreateRole",
        "iam:DeletePolicy",
        "iam:DeleteRole",
        "iam:DetachRolePolicy",
        "iam:ListEntitiesForPolicy",
        "iam:ListInstanceProfilesForRole",
        "iam:ListPolicyVersions",
        "iam:TagRole"
      ],
      "Resource": "*"
    }
  ]
}
```

### Initialization

```bash
gotf -m tf login
echo 'astra_client_token = "AstraCS:ZZZ' > tf/secrets.auto.tfvars
echo 'astra_db_client_id = "XXX"' >> tf/secrets.auto.tfvars
echo 'astra_db_client_secret = "YYY"' >> tf/secrets.auto.tfvars
echo 'astra_db_client_token = "AstraCS:ZZZ"' >> tf/secrets.auto.tfvars
gotf -m tf init
```

### Apply

```bash
gotf -m tf apply
```

### Destroy

```bash
gotf -m tf destroy
```

## Usage

```
aws lambda invoke --function-name serverless-astra-graalvm --log-type Tail --payload "{}" response.json
```