AWS LambdaでChatGPTプラグイン開発を試してみる - AWSデプロイ編

const stage = this.node.tryGetContext('stage') || 'local';

// AWSでは使いません。ローカル固有です。
const preflightOptions = {
  allowMethods: apigateway.Cors.ALL_METHODS,
  allowOrigins: ['https://chat.openai.com'],
  allowHeaders: ['*']
};

const githubSearchFunction = new nodejs.NodejsFunction(this, 'SearchRepos', {
  functionName: this.stackName,
  entry: '../handler.ts',
  handler: 'search',
  timeout: cdk.Duration.seconds(10),
  memorySize: 256,
  runtime: lambda.Runtime.NODEJS_18_X,
  environment: {
    GITHUB_TOKEN: this.node.getContext('github-token') // for testing
  }
});

const api = new apigateway.RestApi(this, 'GithubSearchApi', {
  restApiName: 'GitHub Search API',
  description: 'ChatGPT Plugin for GitHub Search'
});
const resource = api.root.addResource('api').addResource('search', {
  defaultCorsPreflightOptions: stage === "local" ? preflightOptions : undefined
});
resource.addMethod('GET', new apigateway.LambdaIntegration(githubSearchFunction));

const bucket = new s3.Bucket(this, 'StaticBucket', {
  bucketName: `${this.stackName}-static-resource`,
  accessControl: s3.BucketAccessControl.PRIVATE,
  objectOwnership: s3.ObjectOwnership.BUCKET_OWNER_ENFORCED,
  autoDeleteObjects: true,
  removalPolicy: RemovalPolicy.DESTROY,
});
new s3deploy.BucketDeployment(this, 'DeployWebsite', {
  sources: [s3deploy.Source.asset('../static')],
  destinationBucket: bucket
});

const oai = new cloudfront.OriginAccessIdentity(this, 'StaticBucketOriginAccessIdentity');
const apiCachePolicy = new cloudfront.CachePolicy(this, 'ChatGPTGitHubSearchCachePolicy', {
  cachePolicyName: `${this.stackName}-api-policy`,
  queryStringBehavior: cloudfront.CacheQueryStringBehavior.all(),
  headerBehavior: cloudfront.CacheHeaderBehavior.none(),
  cookieBehavior: cloudfront.CacheCookieBehavior.none()
});
const domainName = this.node.getContext('domain');
const certificateArn = this.node.getContext('acm-arn');
const certificate = acm.Certificate.fromCertificateArn(this, 'PluginCert', certificateArn);
const distribution = new cloudfront.Distribution(this, 'ChatGPTDistribution', {
  certificate,
  domainNames: [domainName],
  // デフォルトキャッシュビヘイビア -> 静的リソースバケット(opneapi.yaml, ai-plugin.json...)
  defaultBehavior: {
    cachePolicy: cloudfront.CachePolicy.CACHING_OPTIMIZED,
    allowedMethods: cloudfront.AllowedMethods.ALLOW_GET_HEAD_OPTIONS,
    viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
    origin: new origins.S3Origin(bucket, {
      originAccessIdentity: oai
    })
  },
  additionalBehaviors: {
    // /api配下のアクセスはAPI Gateway(Lambda)にルーティング
    'api/*': {
      origin: new origins.RestApiOrigin(api),
      cachePolicy: apiCachePolicy,
      allowedMethods: cloudfront.AllowedMethods.ALLOW_GET_HEAD_OPTIONS,
      viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS
    }
  }
});
// 静的リソースはCloudFront経由のみアクセス可能
bucket.addToResourcePolicy(new iam.PolicyStatement({
  effect: iam.Effect.ALLOW,
  principals: [new iam.CanonicalUserPrincipal(
    oai.cloudFrontOriginAccessIdentityS3CanonicalUserId)],
  actions: ['s3:GetObject'],
  resources: [bucket.arnForObjects('*')]
}));

// ここではHostedZoneは既存のものを使用
const zone = route53.HostedZone.fromHostedZoneAttributes(this, 'HostedZone', {
  zoneName: domainName.substring(domainName.indexOf('.') + 1),
  hostedZoneId: this.node.getContext('zone-id')
});
new route53.ARecord(this, 'DNSRecord', {
  recordName: domainName,
  zone,
  target: route53.RecordTarget.fromAlias(new targets.CloudFrontTarget(distribution))
});

# 作成した証明書のARN
export ACM_ARN=arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
# Route53ホステッドゾーン(事前に作成済み)
export HOSTED_ZONE_ID=XXXXXXXXXXXXXXXXXXXXX
# ChatGPTプラグインのドメイン
export PLUGIN_DOMAIN=chatgpt.mamezou-tech.com

cdk deploy --context github-token=${GITHUB_TOKEN} \
  --context stage=aws \
  --context acm-arn=${ACM_ARN} \
  --context zone-id=${HOSTED_ZONE_ID} \
  --context domain=${PLUGIN_DOMAIN}

# プラグインAPI
curl "https://${PLUGIN_DOMAIN}/api/search?q=language:javascript"
# プラグインマニフェスト
curl https://${PLUGIN_DOMAIN}/.well-known/ai-plugin.json
# OAS
curl https://${PLUGIN_DOMAIN}/openapi.yaml