Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resource agent - AWS Lambda support #1877

Open
Jordy-devops opened this issue Jul 5, 2023 · 2 comments
Open

Resource agent - AWS Lambda support #1877

Jordy-devops opened this issue Jul 5, 2023 · 2 comments

Comments

@Jordy-devops
Copy link

Jordy-devops commented Jul 5, 2023

Hello,

Is it possible or can it be made possible that the resource agent can also trigger a Lambda function within AWS?
At the company i work for, we use different account levels and my team's account does not have the privilege of making any direct changes on VPC/Route table level.
The VPC/Route table change needs to be done via a Lambda function in our case.

Thanks in advance.

Jordy.

@oalbrigt
Copy link
Contributor

We dont have any plans to introduce Lambda support, but if you got any examples of how to do it with awscli/API that might help us getting it added eventually.

@karelgotz
Copy link

Hi Oyvind,
We have shared VPC within AWS. We own the sub-account while we do not own the top-tier account where the routing table should be modified in case of failover/switchover.
The owner of top-tier account does not want to grant access to change routing table directly because it would give us privilege to change also records that are not related to our account - the top-tier owner wants to be in control.
That is why we are looking for a way how to modify routing table and at the same time give the top-tier owner confidence that we are changing only our records.
Basically we would be calling API endpoint with certain parameters triggering Lambda function instead of changing routing table directly. That way the top-tier account owner can implement some conditioning on Lambda function level that insures that we are changing only records that belong to us.
I hope this makes sense.
Kind regards,
Karel

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants