This module simplifies the deployment of AWS Lambda Functions using Terraform, as well as simplifying the adoption of the Principle of Least Privilege. When using this module, there is no need to attach AWS Managed Policies for basic functionality (CloudWatch logging, XRay tracing, VPC access). The Principle of Least Privilege is achieved by letting this module create a separate role for each Lambda Function. This role is granted the bare minimum set of permissions to match the configuration provided to this module. For example, xray permissions are automatically granted if (and only if) xray_tracing_enabled = true. Similar (dynamic) permissions are provided for other inputs (see iam.tf for all dynamic permissions). Additional existing_policy_arns and inline_policies can be provided to grant the Lambda Function more permissions required by the application code (think of an S3 bucked or DynamoDB table used by your application code).
module "this" {
source = "git@github.com:skyleague/aws-lambda.git?ref=v1.0.0
function_name = "hello-world"
local_artifact = {
type = "dir"
path = "${path.module}/.build/hello-world"
s3_bucket = "my-artifact-bucket"
s3_prefix = null
}
}For a complete reference of all variables, have a look at the descriptions in variables.tf.
The module outputs the lambda, log_group and role as objects, providing the flexibility to extend the Lambda Function with additional functionality, and without limiting the set of exposed outputs.
This is the initial release of the module, with a very minimal set of standardized functionality. Most other functionality can already be achieved by utilizing the outputs, even the ones mentioned for standardization below. We plan on standardizing more integrations, so feel free to leave suggestions! Candidates include:
- Event triggers with automatic Least Privilige permissions added to the Lambda role
- ... Your suggestions!
SkyLeague provides Enterprise Support on this open-source library package at clients across industries. Please get in touch via https://skyleague.io.
If you are not under Enterprise Support, feel free to raise an issue and we'll take a look at it on a best-effort basis!
This library is licensed under the MIT License (see LICENSE.md for details).
If you using this SDK without Enterprise Support, please note this (partial) MIT license clause:
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND
Copyright (c) 2022, SkyLeague Technologies B.V.. 'SkyLeague' and the astronaut logo are trademarks of SkyLeague Technologies, registered at Chamber of Commerce in The Netherlands under number 86650564.
All product names, logos, brands, trademarks and registered trademarks are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.