AWS Tagging Lambda

When you operate complex applications in AWS, you will sooner or later create some additional resources like volumes or load balancers. You might need to attach some tags to these resources. This repository contains installation of AWS Lambda function which will go through all your resources, identify them based on a configured tag which should contain ta specific value. For every resource it find it will make sure that the desired tags are attached.

AWS Tagging Lambda

## Prerequisites and dependencies

The Lambda deployment is written using Terraform
Generating of the lambda function from the template and packing it into ZIP archive expects bash and zip being available.
This deployment might not work on Windows machine. Tested only on Linux and macOS

Tagging Kubernetes clusters

This Lambda fucntion was originally developed for tagging Kubernetes cluster and their resources. But it should work with other applications as well.

Using as standalone Terraform configuration

The configuration is done through Terraform variables. Example tfvars file is part of this repo and is named example.tfvars. Change the variables to match your environment / requirements before running terraform apply ....

Option	Explanation	Example
`aws_region`	AWS region which should be used	`eu-east-1`
`lambda_name`	Will be used to name the tagging lambda, its roles etc.	`my-k8s`
`env_vars`	Map for the environment vars to pass to lambda. Currently just `SEARCHTAG` (`key=value`)	`kubernetes.io/cluster/aws-k8s=owned`
`tags`	Tags which should be applied to all resources	`{ Hello = "World" }`

Deploying tagging lambda

To deploy the tagging lambda,

Export AWS credentials into environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY
Apply Terraform configuration with tagging lambda:

terraform init
terraform apply --var-file example.tfvars

Deleting tagging lambda

To delete tagging lambda,

Export AWS credentials into environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY
Destroy Terraform configuration:

terraform destroy --var-file example.tfvars

Using as a Terraform module

Although it can be run on its own, the main value is that it can be included into another Terraform configuration.

module "tagging-lambda" {
  source = "scholzj/tagging-lambda/aws"

  aws_region        = "us-east-1"
  name              = "my-application"
  search_tag_key    = "kubernetes.io/cluster/aws-k8s"
  search_tag_value  = "owned"

  # Tags
  tags = {
    Hello = "World"
  }
  
  # Lambda env vars
  env_vars = {
    SEARCHTAG = "AccountAlias=spicysomtam2"
  }
}

An example of how to include this can be found in the examples dir.

Tagged resources

EC2 instances
Network interfaces
EBS Volumes
Security Groups
Internet Gateways
DHCP Option sets
Subnets
Route tables
VPCs
Network ACLs
Autoscaling Groups
Elastic Loadbalancers