/terraform-aws-mcaf-lambda

Primary LanguageHCLApache License 2.0Apache-2.0

terraform-aws-mcaf-lambda

Requirements

Name Version
terraform >= 0.13.0
aws > 4.8.0

Providers

Name Version
archive n/a
aws > 4.8.0
aws.lambda > 4.8.0

Modules

No modules.

Resources

Name Type
aws_cloudwatch_log_group.default resource
aws_iam_role.default resource
aws_iam_role_policy.default resource
aws_iam_role_policy_attachment.default resource
aws_iam_role_policy_attachment.enable_xray_daemon_write resource
aws_lambda_function.default resource
aws_lambda_function_event_invoke_config.default resource
aws_s3_object.s3_dummy resource
aws_security_group.default resource
aws_security_group_rule.allow_all_egress resource
archive_file.dummy data source
aws_iam_policy_document.default data source
aws_subnet.selected data source

Inputs

Name Description Type Default Required
name The name of the lambda string n/a yes
tags A mapping of tags to assign to the bucket map(string) n/a yes
architecture Instruction set architecture of the Lambda function string "x86_64" no
cloudwatch_logs Whether or not to configure a CloudWatch log group bool true no
create_allow_all_egress_rule Controls whether an egress rule to any ipv4 address will be created when the lambda is configured to run in a VPC bool false no
create_policy Overrule whether the Lambda role policy has to be created bool null no
create_s3_dummy_object Whether or not to create a S3 dummy object bool true no
dead_letter_target_arn The ARN of an SNS topic or SQS queue to notify when an invocation fails string null no
description A description of the lambda string "" no
destination_on_failure ARN of the destination resource for failed asynchronous invocations string null no
destination_on_success ARN of the destination resource for successful asynchronous invocations string null no
environment A map of environment variables to assign to the lambda map(string) null no
ephemeral_storage_size The size of the Lambda function Ephemeral storage number null no
filename The path to the function's deployment package within the local filesystem string null no
handler The function entrypoint in your code string "main.handler" no
kms_key_arn The ARN of the KMS key used to encrypt the cloudwatch log group and environment variables string null no
layers List of Lambda layer ARNs to be used by the Lambda function list(string) [] no
log_retention Number of days to retain log events in the specified log group number 14 no
memory_size The memory size of the lambda number null no
permissions_boundary The permissions boundary to set on the role string null no
policy A valid lambda policy JSON document. Required if you don't specify a role_arn string null no
publish Whether to publish creation/change as new lambda function version bool false no
reserved_concurrency The amount of reserved concurrent executions for this lambda function number null no
retries Maximum number of retries for the Lambda invocation number null no
role_arn An optional lambda execution role string null no
role_prefix Default prefix for the role string null no
runtime The function runtime to use string "python3.9" no
s3_bucket The S3 bucket location containing the function's deployment package string null no
s3_key The S3 key of an object containing the function's deployment package string null no
s3_object_version The object version containing the function's deployment package string null no
source_code_hash Optional source code hash string null no
subnet_ids The subnet ids where this lambda needs to run list(string) null no
timeout The timeout of the lambda number 5 no
tracing_config_mode The lambda's AWS X-Ray tracing configuration string null no

Outputs

Name Description
arn ARN of the Lambda
invoke_arn Invoke ARN of the Lambda
name Function name of the Lambda
qualified_arn Qualified ARN of the Lambda
role_arn ARN of the lambda execution role
security_group_id If the Lambda is deployed into a VPC this will output the security group id
version Latest published version of the Lambda function