Amazon Q Developerでトラブルシューティングしてみる

AWSTemplateFormatVersion: '2010-09-09'
Resources:
  ### SNS Ropic
  SNSTopic:
    Type: AWS::SNS::Topic
    Properties:
      TopicName: s3-event-notification
  SNSSubscription:
    Type: AWS::SNS::Subscription
    Properties:
      Protocol: email
      Endpoint: XXXXXXXXX@XXXXXXXXX.co.jp
      TopicArn: !Ref SNSTopic
  ### Lambda Role
  LambdaExecutionRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: s3-event-notification-role
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service: lambda.amazonaws.com
            Action: sts:AssumeRole
      Policies:
        - PolicyName: lambda-logging-and-sns
          PolicyDocument:
            Version: '2012-10-17'
            Statement:
              - Effect: Allow
                Action:
                  - logs:CreateLogGroup
                  - logs:CreateLogStream
                  - logs:PutLogEvents
                Resource: '*'
  ### Lambda
  S3TriggerFunction:
    Type: AWS::Lambda::Function
    Properties:
      FunctionName: s3-event-trigger-function
      Handler: index.lambda_handler
      Role: !GetAtt LambdaExecutionRole.Arn
      Runtime: python3.12
      Timeout: 10
      Code:
        ZipFile: !Sub |
          import json
          import boto3
          import logging
          # Configure logging
          logger = logging.getLogger()
          logger.setLevel(logging.INFO)
          def lambda_handler(event, context):
              logger.info("Lambda function started")
              logger.info(f"Event: {json.dumps(event)}")
              try:
                  # Get the S3 bucket and key from the event
                  bucket = event['Records'][0]['s3']['bucket']['name']
                  key = event['Records'][0]['s3']['object']['key']
                  logger.info(f"Processing S3 object: {bucket}/{key}")
                  # Create SNS client
                  sns = boto3.client('sns')
                  # Prepare message
                  message = f"New object uploaded to S3 bucket: {bucket}/{key}"
                  subject = "S3 Object Upload Notification"
                  logger.info("Attempting to publish to SNS")
                  # Publish to SNS topic
                  response = sns.publish(
                      TopicArn='arn:aws:sns:ap-northeast-1:XXXXXXXXX:s3-event-notification',
                      Message=message,
                      Subject=subject
                  )
                  logger.info(f"SNS publish response: {response}")
                  return {
                      'statusCode': 200,
                      'body': json.dumps('Notification sent successfully!')
                  }
              except Exception as e:
                  logger.error(f"Error: {str(e)}")
                  raise e
  ### S3 Bucket
  S3Bucket:
    Type: AWS::S3::Bucket
    DependsOn: LambdaInvokePermission
    Properties:
      BucketName: XXXXXXXXX
      BucketEncryption:
        ServerSideEncryptionConfiguration:
          - ServerSideEncryptionByDefault:
              SSEAlgorithm: AES256
      NotificationConfiguration:
        LambdaConfigurations:
          - Event: s3:ObjectCreated:Put
            Function: !GetAtt S3TriggerFunction.Arn
  ### LambdaPermission
  LambdaInvokePermission:
    Type: AWS::Lambda::Permission
    Properties:
      FunctionName: !Ref S3TriggerFunction
      Action: lambda:InvokeFunction
      Principal: s3.amazonaws.com