terraform-aws-lambda

This Terraform module creates and uploads an AWS Lambda function and hides the ugly parts from you.

Features

• Only appears in the Terraform plan when there are legitimate changes.
• Creates a standard IAM role and policy for CloudWatch Logs.
  • You can add additional policies if required.
• Zips up a source file or directory.
• Installs dependencies from requirements.txt for Python functions.
  • It only does this when necessary, not every time.

Requirements

• Python 2.7 or higher
• Linux/Unix/Windows

Terraform version compatibility

Usage

module "lambda" {
  source = "github.com/claranet/terraform-aws-lambda"

  function_name = "deployment-deploy-status"
  description   = "Deployment deploy status task"
  handler       = "main.lambda_handler"
  runtime       = "python3.6"
  timeout       = 300

  // Specify a file or directory for the source code.
  source_path = "${path.module}/lambda.py"

  // Add additional trusted entities for assuming roles (trust relationships).
  trusted_entities = ["events.amazonaws.com", "s3.amazonaws.com"]

  // Attach a policy.
  policy = {
    json = data.aws_iam_policy_document.lambda.json
  }

  // Add a dead letter queue.
  dead_letter_config = {
    target_arn = aws_sqs_queue.dlq.arn
  }

  // Add environment variables.
  environment = {
    variables = {
      SLACK_URL = var.slack_url
    }
  }

  // Deploy into a VPC.
  vpc_config = {
    subnet_ids         = [aws_subnet.test.id]
    security_group_ids = [aws_security_group.test.id]
  }
}

Inputs

Inputs for this module are the same as the aws_lambda_function resource with the following additional arguments:

The following arguments from the aws_lambda_function resource are not supported:

• filename (use source_path instead)
• role (one is automatically created)
• s3_bucket
• s3_key
• s3_object_version
• source_code_hash (changes are handled automatically)

Outputs