Como integrar validação de CPF em AWS Lambda com Node.js e API Gateway

// handler.js
const { SecretsManagerClient, GetSecretValueCommand } = require("@aws-sdk/client-secrets-manager");

const secretsClient = new SecretsManagerClient({ region: "sa-east-1" });
let cachedApiKey = null;

async function getApiKey() {
    if (cachedApiKey) return cachedApiKey;

    const command = new GetSecretValueCommand({
    SecretId: "cpfhub/api-key",
    });

    const response = await secretsClient.send(command);
    cachedApiKey = response.SecretString;
    return cachedApiKey;
}

async function consultarCPF(cpfNumero, apiKey) {
    const controller = new AbortController();
    const timeoutId = setTimeout(() => controller.abort(), 10000);

    try {
    const response = await fetch(
    `https://api.cpfhub.io/cpf/${cpfNumero}`,
    {
    method: "GET",
    headers: {
    "x-api-key": apiKey,
    "Accept": "application/json",
    },
    signal: controller.signal,
    }
    );

    clearTimeout(timeoutId);

    if (!response.ok) {
    throw new Error(`API retornou status ${response.status}`);
    }

    return await response.json();
    } catch (error) {
    clearTimeout(timeoutId);

    if (error.name === "AbortError") {
    throw new Error("Timeout na consulta de CPF");
    }
    throw error;
    }
}

function criarResposta(statusCode, body) {
    return {
    statusCode,
    headers: {
    "Content-Type": "application/json",
    "Access-Control-Allow-Origin": "*",
    "Access-Control-Allow-Methods": "GET,OPTIONS",
    },
    body: JSON.stringify(body),
    };
}

exports.handler = async (event) => {
    // Tratar preflight CORS
    if (event.httpMethod === "OPTIONS") {
    return criarResposta(200, {});
    }

    const cpf = event.pathParameters?.cpf;

    if (!cpf) {
    return criarResposta(400, { erro: "CPF e obrigatorio" });
    }

    const cpfLimpo = cpf.replace(/\D/g, "");

    if (cpfLimpo.length !== 11) {
    return criarResposta(400, { erro: "CPF deve conter 11 digitos" });
    }

    // Rejeitar CPFs com todos os digitos iguais
    if (/^(\d)\1+$/.test(cpfLimpo)) {
    return criarResposta(400, { erro: "CPF invalido" });
    }

    try {
    const apiKey = await getApiKey();
    const resultado = await consultarCPF(cpfLimpo, apiKey);

    if (!resultado.success || !resultado.data) {
    return criarResposta(404, { erro: "CPF nao encontrado" });
    }

    return criarResposta(200, {
    valido: true,
    dados: {
    nome: resultado.data.name,
    cpf: resultado.data.cpf,
    genero: resultado.data.gender,
    dataNascimento: resultado.data.birthDate,
    },
    });
    } catch (error) {
    console.error("Erro na consulta:", error.message);
    return criarResposta(500, {
    erro: "Falha na consulta de CPF",
    detalhe: error.message,
    });
    }
};

AWSTemplateFormatVersion: "2010-09-09"
Transform: AWS::Serverless-2016-10-31
Description: API de validacao de CPF com CPFHub.io

Globals:
    Function:
    Timeout: 15
    Runtime: nodejs20.x
    MemorySize: 256
    Environment:
    Variables:
    NODE_ENV: production

Resources:
    ValidarCPFFunction:
    Type: AWS::Serverless::Function
    Properties:
    Handler: handler.handler
    CodeUri: ./src
    Description: Consulta e valida CPF via API CPFHub.io
    Policies:
    - Statement:
    - Effect: Allow
    Action: secretsmanager:GetSecretValue
    Resource: !Sub "arn:aws:secretsmanager:${AWS::Region}:${AWS::AccountId}:secret:cpfhub/api-key-*"
    Events:
    ValidarCPF:
    Type: Api
    Properties:
    Path: /cpf/{cpf}
    Method: GET
    ValidarCPFOptions:
    Type: Api
    Properties:
    Path: /cpf/{cpf}
    Method: OPTIONS

Outputs:
    ApiUrl:
    Description: URL da API de validacao de CPF
    Value: !Sub "https://${ServerlessRestApi}.execute-api.${AWS::Region}.amazonaws.com/Prod/cpf/"

sam build && sam deploy --guided

# Adicionar ao template.yaml
ApiUsagePlan:
    Type: AWS::ApiGateway::UsagePlan
    Properties:
    UsagePlanName: cpf-validation-plan
    Throttle:
    BurstLimit: 10
    RateLimit: 5
    Quota:
    Limit: 1000
    Period: MONTH

# Model de validacao no API Gateway
{
    "$schema": "http://json-schema.org/draft-04/schema#",
    "type": "object",
    "properties": {
    "cpf": {
    "type": "string",
    "pattern": "^\\d{11}$"
    }
    },
    "required": ["cpf"]
}

// Adicionar metricas customizadas no handler
const { CloudWatchClient, PutMetricDataCommand } = require("@aws-sdk/client-cloudwatch");

const cwClient = new CloudWatchClient({ region: "sa-east-1" });

async function registrarMetrica(nome, valor, unidade = "Count") {
    await cwClient.send(new PutMetricDataCommand({
    Namespace: "CPFValidation",
    MetricData: [{
    MetricName: nome,
    Value: valor,
    Unit: unidade,
    Timestamp: new Date(),
    }],
    }));
}

// No handler, apos a consulta:
await registrarMetrica("ConsultasSucesso", 1);
// Ou em caso de falha:
await registrarMetrica("ConsultasFalha", 1);

# Criar evento de teste
echo '{"httpMethod":"GET","pathParameters":{"cpf":"12345678901"}}' > event.json

# Executar localmente
sam local invoke ValidarCPFFunction -e event.json

# Subir API local
sam local start-api --port 3000

curl http://localhost:3000/cpf/12345678901