VPC Config

[charliekeeegan]

I cannot add the normal vpc_config parameter to the module. Is there a way to achieve this or is it the case that this module doesn't support placing the lambda into a VPC? Could we add support for this?

[jansiwy]

It should be possible to add support for vpc_config of the aws_lambda_function resource using a dynamic block. However to keep the usage of this module convenient, it should be carefully considered which VPC-related resources should be created within this module and which ones need to be passed in.

My first thoughts are:

• Security group should be created within the module (and then exported via an output, so that inbound traffic rules can be added)
• Also the IAM role policy for the ec2:CreateNetworkInterface, ec2:DescribeNetworkInterfaces, ec2:DeleteNetworkInterface should be defined within this module, as well as attached to the Lambda function's IAM role.
• Thus, the only input parameter would be subnet_ids; however as objects to keep it aligned with the other variables of this module: list(object({ id = string })).

[jansiwy]

Closing this issue as there was no futher feedback since about a month.