#!/bin/bash
# AWS Cloud Connector S3 + Lambda sealing workflow

set -euo pipefail

aws s3 cp document.pdf s3://your-source-bucket/uploads/document.pdf

cat > seal-event.json <<'EOF'
{
  "httpMethod": "POST",
  "path": "/seal",
  "body": "{\"sourceBucket\":\"your-source-bucket\",\"sourceKey\":\"uploads/document.pdf\",\"destinationBucket\":\"your-destination-bucket\",\"destinationKey\":\"sealed/sealed-document.pdf\",\"apiKey\":\"your-hex-api-key\",\"apiKeyId\":\"your-key-id\",\"tsaTimestamp\":true,\"includeLtv\":true,\"limitChanges\":\"no-changes\"}"
}
EOF

aws lambda invoke \
  --function-name pdf-sealer-gateway \
  --payload fileb://seal-event.json \
  response.json

cat response.json

aws s3 cp s3://your-destination-bucket/sealed/sealed-document.pdf sealed-document.pdf