Layer folder-paths & CICD publish layer to AWS

- https://aws.amazon.com/blogs/security/use-iam-roles-to-connect-github-actions-to-actions-in-aws/
- https://zaccharles.medium.com/sharing-lambda-layers-and-restricting-your-own-usage-f1413b974f44

Author: Hank Brekke

.github/workflows/cicd.yml

@@ -1,9 +1,11 @@
 name: AWS-Lambda-Layer-OSMTools CI-CD
+
 on:
   push:
     branches: ["*"]
   pull_request:
     branches: ["*"]
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -13,6 +15,41 @@ jobs:
         run: bash ./build-libraries.sh
       - uses: actions/upload-artifact@v4
         with:
-          name: aws-lambda-layer-osmtools.zip
+          name: aws-lambda-layer-osmtools
           path: aws-lambda-layer-osmtools.zip
           if-no-files-found: error
+  deploy:
+    runs-on: ubuntu-latest
+    env:
+      AWS_REGION: us-east-2
+    permissions:
+      id-token: write
+      contents: read
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: aws-lambda-layer-osmtools
+      - name: Authenticate AWS
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          role-to-assume: arn:aws:iam::106542751629:role/GitHubActions-AWSLambdaLayerOSMTools
+          role-session-name: GitHub_to_AWS_via_FederatedOIDC
+          aws-region: ${{ env.AWS_REGION }}
+      - name: Publish Layer
+        run: |
+          aws s3 cp aws-lambda-layer-osmtools.zip s3://aws-lambda-layer-osmtools/aws-lambda-layer-osmtools.zip
+          export LAYER_VERSION=$(aws lambda publish-layer-version \
+            --layer-name aws-lambda-layer-osmtools \
+            --description "OpenStreetMap C++ tools available as an AWS Lambda Layer!" \
+            --compatible-runtimes "nodejs22.x" \
+            --license-info "https://github.com/hnryjms/aws-lambda-layer-osmtools/blob/main/LICENSE.txt" \
+            --compatible-architectures "x86_64" \
+            --content "S3Bucket=aws-lambda-layer-osmtools,S3Key=aws-lambda-layer-osmtools.zip" \
+            --query "Version")
+          aws lambda add-layer-version-permission \
+            --layer-name aws-lambda-layer-osmtools \
+            --version-number $LAYER_VERSION \
+            --statement-id public-layer \
+            --principal "*" \
+            --action "lambda:GetLayerVersion"

AmazonLinuxLibraries.dockerfile

@@ -95,11 +95,14 @@ RUN tar -xf tilemaker.tgz && \
     cmake --build .
 
 RUN cd osrm-backend-${OSRM_VERSION} && \
-    mkdir -p /home/export/node_modules/@project-osrm/osrm/lib && \
-    cp package.json /home/export/node_modules/@project-osrm/osrm/ && \
-    cp package-lock.json /home/export/node_modules/@project-osrm/osrm/ && \
-    cp lib/index.js /home/export/node_modules/@project-osrm/osrm/lib/index.js && \
-    cp -r lib/binding /home/export/node_modules/@project-osrm/osrm/lib && \
+    mkdir -p /home/export/nodejs/node_modules/@project-osrm/osrm/lib && \
+    cp package.json /home/export/nodejs/node_modules/@project-osrm/osrm/ && \
+    cp package-lock.json /home/export/nodejs/node_modules/@project-osrm/osrm/ && \
+    cp lib/index.js /home/export/nodejs/node_modules/@project-osrm/osrm/lib/index.js && \
+    cp -r lib/binding /home/export/nodejs/node_modules/@project-osrm/osrm/lib && \
+    mkdir /home/export/bin && \
+    mv /home/export/nodejs/node_modules/@project-osrm/osrm/lib/binding/* /home/export/bin/ && \
+    mv /home/export/bin/node_osrm.node /home/export/nodejs/node_modules/@project-osrm/osrm/lib/binding/ && \
     mkdir /home/export/lib && \
     cp /usr/lib64/libboost_regex.so.1.75.0 /home/export/lib/ && \
     cp /usr/lib64/libboost_date_time.so.1.75.0 /home/export/lib/ && \
@@ -114,7 +117,6 @@ RUN cd osrm-backend-${OSRM_VERSION} && \
     cp /usr/lib64/libicui18n.so.67 /home/export/lib/ && \
     cp /usr/lib64/libicuuc.so.67 /home/export/lib/ && \
     cd ../osmium-tool-1.18.0 && \
-    mkdir /home/export/bin && \
     cp build/src/osmium /home/export/bin/osmium && \
     cp /usr/lib64/libexpat.so.1 /home/export/lib/ && \
     cd ../tilemaker-${TILEMAKER_VERSION} && \