update admin name #32

users-events/app/events/update_admin.py

@@ -0,0 +1,54 @@
+from aws_lambda_powertools import Logger
+from aws_lambda_powertools.utilities.data_classes import (
+    EventBridgeEvent,
+    event_source,
+)
+from aws_lambda_powertools.utilities.typing import LambdaContext
+from layercake.dateutils import now
+from layercake.dynamodb import DynamoDBPersistenceLayer, KeyPair
+
+from boto3clients import dynamodb_client
+from config import USER_TABLE
+
+logger = Logger(__name__)
+dyn = DynamoDBPersistenceLayer(USER_TABLE, dynamodb_client)
+
+
+@event_source(data_class=EventBridgeEvent)
+@logger.inject_lambda_context
+def lambda_handler(event: EventBridgeEvent, context: LambdaContext) -> bool:
+    new_image = event.detail['new_image']
+    user_id = new_image['id']
+    now_ = now()
+    # Post-migration (users): uncommnent the following line
+    # r = dyn.collection.query(KeyPair(pk=user_id, sk='ORG#'))
+    r = dyn.collection.query(KeyPair(pk=user_id, sk='orgs#'))
+
+    for org in r.get('items', []):
+        _, org_id = org['sk'].split('#')
+
+        try:
+            dyn.update_item(
+                key=KeyPair(
+                    pk=org_id,
+                    # Post-migration (users): uncommnent the following line
+                    # sk=f'ADMIN#{user_id}',
+                    sk=f'admins#{user_id}',
+                ),
+                update_expr='SET #name = :name, \
+                                 email = :email, \
+                                 updated_at = :now',
+                expr_attr_names={
+                    '#name': 'name',
+                },
+                expr_attr_values={
+                    ':name': new_image['name'],
+                    ':email': new_image['email'],
+                    ':now': now_,
+                },
+                cond_expr='attribute_exists(sk)',
+            )
+        except Exception:
+            logger.info(f'User "{user_id}" does not have admin privileges')
+
+    return True