AI-DLC v1/v2 の逆解析成果物を構造比較してみた

AWSTemplateFormatVersion: '2010-09-09'
Description: Public Lambda Function URL - Echo headers and source IP (intentionally unprotected)

Resources:
  LambdaRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Sub '${AWS::StackName}-lambda-role'
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service: lambda.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole

  EchoFunction:
    Type: AWS::Lambda::Function
    Properties:
      FunctionName: !Sub '${AWS::StackName}-echo'
      Runtime: python3.13
      Handler: index.handler
      Role: !GetAtt LambdaRole.Arn
      Code:
        ZipFile: |
          import json

          def handler(event, context):
              return {
                  "statusCode": 200,
                  "headers": {"Content-Type": "application/json"},
                  "body": json.dumps({
                      "sourceIp": event["requestContext"]["http"]["sourceIp"],
                      "headers": event["headers"]
                  }, indent=2)
              }

  FunctionUrl:
    Type: AWS::Lambda::Url
    Properties:
      AuthType: NONE
      TargetFunctionArn: !GetAtt EchoFunction.Arn

  FunctionUrlPermission:
    Type: AWS::Lambda::Permission
    Properties:
      Action: lambda:InvokeFunctionUrl
      FunctionName: !GetAtt EchoFunction.Arn
      Principal: '*'
      FunctionUrlAuthType: NONE

Outputs:
  FunctionUrlEndpoint:
    Description: Public Function URL endpoint
    Value: !GetAtt FunctionUrl.FunctionUrl

## 2. EchoFunction (`AWS::Lambda::Function`)

- **Purpose:** Serverless HTTP handler that echoes the caller's source IP and request headers.
- **Responsibilities (from inline code `before.yaml:28–38`):**
  - Returns HTTP 200 with `Content-Type: application/json`.
  - Body is `json.dumps(...)` of { "sourceIp": ..., "headers": ... } with `indent=2`.
- **State/Config:**
  - `FunctionName: !Sub '${AWS::StackName}-echo'`
  - `Runtime: python3.13`
  - `Handler: index.handler`
  - `Role: !GetAtt LambdaRole.Arn`
  - Code is inline (`Code.ZipFile`), single module, no external packages beyond stdlib `json`.
  - No `MemorySize`, `Timeout`, `Environment`, `Architectures`, `Layers`, or VPC config declared
    → AWS defaults apply.

## Dependency Matrix

| From | To | Mechanism | Communication Pattern | Source |
|---|---|---|---|---|
| `EchoFunction` | `LambdaRole` | `Role: !GetAtt LambdaRole.Arn` | Deploy-time CFN reference; runtime assumed-role identity | `before.yaml:25` |
| `FunctionUrl` | `EchoFunction` | `TargetFunctionArn: !GetAtt EchoFunction.Arn` | Deploy-time CFN reference; runtime HTTPS → Lambda invoke | `before.yaml:44` |
| `FunctionUrlPermission` | `EchoFunction` | `FunctionName: !GetAtt EchoFunction.Arn` | Deploy-time CFN reference (resource-based policy) | `before.yaml:50` |
| `FunctionUrlEndpoint` (Output) | `FunctionUrl` | `Value: !GetAtt FunctionUrl.FunctionUrl` | Deploy-time CFN reference | `before.yaml:57` |