feat(aws): stream CloudWatch metrics to Maple through Firehose

apps/api/src/routes/v2/integrations-aws.http.test.ts

@@ -160,6 +160,9 @@ describe("v2 aws integration over HTTP", () => {
 			verified_at: null,
 			last_checked_at: null,
 			last_check_error: null,
+			metric_stream: null,
+			metrics_last_received_at: null,
+			metrics_last_error: null,
 			created_at: expect.stringMatching(/^\d{4}-\d{2}-\d{2}T.*Z$/),
 		})
 		const id: string = created.body.id
@@ -218,6 +221,16 @@ describe("v2 aws integration over HTTP", () => {
 			modules: ["cost"],
 		})
 		expect(planned.status).toBe(400)
+		const elsewhere = await harness.request("POST", CONNECTIONS, admin.secret, {
+			account_id: "123456789012",
+			metric_stream: { regions: ["mars-north-1a"], namespaces: ["AWS/ECS"] },
+		})
+		expect(elsewhere.status).toBe(400)
+		const nothing = await harness.request("POST", CONNECTIONS, admin.secret, {
+			account_id: "123456789012",
+			metric_stream: { regions: ["us-east-1"], namespaces: [] },
+		})
+		expect(nothing.status).toBe(400)
 		await harness.dispose()
 	})
 

apps/api/src/routes/v2/integrations-aws.http.ts

@@ -32,12 +32,16 @@ const toV2Connection = (connection: AwsConnection): V2AwsConnection => ({
 	verified_at: isoTimestampOrNull(connection.verifiedAt),
 	last_checked_at: isoTimestampOrNull(connection.lastCheckedAt),
 	last_check_error: connection.lastCheckError,
+	metric_stream: connection.metricStream,
+	metrics_last_received_at: isoTimestampOrNull(connection.metricsLastReceivedAt),
+	metrics_last_error: connection.metricsLastError,
 	created_at: isoTimestamp(connection.createdAt),
 })
 
 const auditMetadata = (connection: AwsConnection) => ({
 	account_id: connection.accountId,
 	modules: connection.modules,
+	metric_stream: connection.metricStream,
 })
 
 export const HttpV2AwsIntegrationsLive = HttpApiBuilder.group(MapleApiV2, "awsIntegration", (handlers) =>
@@ -64,6 +68,7 @@ export const HttpV2AwsIntegrationsLive = HttpApiBuilder.group(MapleApiV2, "awsIn
 					const connection = yield* aws.create(tenant.orgId, tenant.userId, {
 						accountId: payload.account_id,
 						modules: payload.modules ?? [],
+						metricStream: payload.metric_stream ?? null,
 					})
 					yield* recordHttpAudit("aws_connection.created", {
 						resourceId: connection.id,
@@ -78,6 +83,7 @@ export const HttpV2AwsIntegrationsLive = HttpApiBuilder.group(MapleApiV2, "awsIn
 					yield* requireAdmin(tenant.roles, adminOnly)
 					const connection = yield* aws.update(tenant.orgId, params.id, {
 						modules: payload.modules,
+						metricStream: payload.metric_stream,
 					})
 					yield* recordHttpAudit("aws_connection.updated", {
 						resourceId: connection.id,
@@ -99,6 +105,8 @@ export const HttpV2AwsIntegrationsLive = HttpApiBuilder.group(MapleApiV2, "awsIn
 						cleanup_script: setup.cleanupScript,
 						cloudformation_template: setup.cloudformationTemplate,
 						terraform: setup.terraform,
+						metrics_stack_name: setup.metricsStackName,
+						metrics_cloudformation_template: setup.metricsCloudformationTemplate,
 					}
 				}),
 			)