https://github.com/dod-iac/terraform-aws-lambda-edge-function
AWS Lambda Function for use with Lambda@Edge
https://github.com/dod-iac/terraform-aws-lambda-edge-function
aws lambda terraform
Last synced: about 1 year ago
JSON representation
AWS Lambda Function for use with Lambda@Edge
- Host: GitHub
- URL: https://github.com/dod-iac/terraform-aws-lambda-edge-function
- Owner: dod-iac
- License: mit
- Created: 2020-04-13T22:55:47.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2021-03-12T00:30:29.000Z (over 5 years ago)
- Last Synced: 2025-04-04T23:32:19.087Z (about 1 year ago)
- Topics: aws, lambda, terraform
- Language: HCL
- Homepage: https://registry.terraform.io/modules/dod-iac/lambda-edge-function/aws
- Size: 7.81 KB
- Stars: 6
- Watchers: 4
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
## Usage
Creates an AWS Lambda Function for use with Lambda@Edge, which runs AWS Lambda Functions at CloudFront edge locations.
There are a variety of [restrictions for functions used with Lambda@Edge](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-requirements-limits.html#lambda-requirements-lambda-function-configuration).
```hcl
module "lambda_function" {
source = "dod-iac/lambda-edge-function/aws"
execution_role_name = format(
"app-%s-redirect-lambda-execution-role-%s",
var.application,
var.environment
)
function_name = format(
"app-%s-redirect-%s-%s",
var.application,
var.environment,
data.aws_region.current.name
)
function_description = "Function used to redirect requests."
filename = format("../../lambda/%s-redirect.zip", var.application)
handler = "index.handler"
runtime = "nodejs12.x"
environment_variables = var.environment_variables
tags = {
Application = var.application
Environment = var.environment
Automation = "Terraform"
}
}
```
Use the `execution_role_policy_document` variable to override the IAM policy document for the IAM role.
Since you can only use Lambda function in the US East (us-east-1) data center with Lambda@Edge, you may need to pass an aliased provider to this module. An example is below.
```hcl
module "lambda_function" {
source = "dod-iac/lambda-edge-function/aws"
providers = {
aws = aws.us-east-1
}
}
```
## Terraform Version
Terraform 0.12. Pin module version to ~> 1.0.0 . Submit pull-requests to master branch.
Terraform 0.11 is not supported.
## License
This project constitutes a work of the United States Government and is not subject to domestic copyright protection under 17 USC § 105. However, because the project utilizes code licensed from contributors and other third parties, it therefore is licensed under the MIT License. See LICENSE file for more information.
## Requirements
| Name | Version |
|------|---------|
| terraform | >= 0.13 |
| aws | ~> 3.0 |
## Providers
| Name | Version |
|------|---------|
| aws | ~> 3.0 |
## Modules
No Modules.
## Resources
| Name |
|------|
| [aws_iam_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) |
| [aws_iam_policy_document](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) |
| [aws_iam_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) |
| [aws_iam_role_policy_attachment](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) |
| [aws_lambda_function](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambda_function) |
| [aws_partition](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/partition) |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| execution\_role\_name | n/a | `string` | n/a | yes |
| execution\_role\_policy\_document | The contents of the IAM policy attached to the IAM Execution role used by the Lambda. If not defined, then creates the policy with permissions to log to CloudWatch Logs. | `string` | `""` | no |
| execution\_role\_policy\_name | The name of the IAM policy attached to the IAM Execution role used by the Lambda. If not defined, then uses the value of "execution\_role\_name". | `string` | `""` | no |
| filename | The path to the function's deployment package within the local filesystem. If defined, the s3\_-prefixed options cannot be used. | `string` | n/a | yes |
| function\_description | Description of what your Lambda Function does. | `string` | `""` | no |
| function\_name | A unique name for your Lambda Function. | `string` | n/a | yes |
| handler | The function entrypoint in your code. | `string` | n/a | yes |
| memory\_size | Amount of memory in MB your Lambda Function can use at runtime. Maximum value for Viewer Request or Response events is 128. | `number` | `128` | no |
| runtime | The identifier of the function's runtime. | `string` | n/a | yes |
| tags | A mapping of tags to assign to the Lambda Function. | `map(string)` |
{
"Automation": "Terraform"
} | no |
| timeout | The amount of time your Lambda Function has to run in seconds. Maximum value is 5 seconds. | `number` | `3` | no |
## Outputs
| Name | Description |
|------|-------------|
| lambda\_execution\_role\_arn | The Amazon Resource Name (ARN) identifying the IAM Role used to execute this Lambda. |
| lambda\_function\_arn | The Amazon Resource Name (ARN) identifying your Lambda Function. |
| lambda\_function\_name | A unique name for your Lambda Function. |
| lambda\_function\_qualified\_arn | The Amazon Resource Name (ARN) identifying your Lambda Function Version. |
| lambda\_invoke\_arn | The ARN to be used for invoking Lambda Function from API Gateway - to be used in aws\_api\_gateway\_integration's uri. |