Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
serverless-sam
Advanced tools
Serverless framework plugin to export AWS SAM templates for a service
Serverless-sam is a plugin for the Serverless framework that makes it easy to create Serverless Application Model (SAM) templates from an application. The plugin adds the sam
command to the serverless cli.
From your Serverless application directory, use npm
to install the plugin:
$ npm install --save-dev serverless-sam
Once you have installed the plugin, add it to your serverless.yml
file in the plugins
sections.
service: my-serverless-service
plugins:
- serverless-sam
frameworkVersion: ">=1.1.0 <2.0.0"
...
Use the sam export
command to generate a SAM definition from your service. Use the --output
or -o
option to set the name for the SAM template file.
$ serverless sam export --output ./sam-template.yml
Once you have exported the template, you can follow the standard procedure with the AWS CLI to deploy the service. First, the package command reads the generated templates, uploads the packaged functions to an S3 bucket for deployment, and generates an output template with the S3 links to the function packages.
$ aws cloudformation package \
--template-file /path_to_template/template.yaml \
--s3-bucket bucket-name \
--output-template-file packaged-template.yaml
The next step is to deploy the output template from the package
command:
$ aws cloudformation deploy \
--template-file /path_to_template/packaged-template.yaml \
--stack-name my-new-stack \
--capabilities CAPABILITY_IAM
FAQs
Serverless framework plugin to export AWS SAM templates for a service
We found that serverless-sam demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.