lambda and dynamodb get and post working on aws ca-central-1

.gitignore

@@ -162,4 +162,7 @@ cython_debug/
 .aws-sam
 src.zip
 
-backend.tf
+backend.tf
+terraform-provider*
+.terraform*
+*.zip

README.md

@@ -179,6 +179,23 @@ To run tests, run the following command
 pipenv run test -v
 ```
 
+## deploying
+
+We chose Terraform to deploy this app to AWS
+
+### layers (installed python depenencies)
+Make sure to package your dependancies in a zip file to add it as a layer to
+our lambda -> https://spak.no/blog/article/63f47f130faeadeeeb968ae9
+
+in a nutshell (you need to adapt to your local machine)
+
+```bash
+mkdir python
+cp -r $HOME/.local/share/virtualenvs/pastebin-<SOME ID>/lib python/
+zip -r layer.zip /python
+mv layer.zip git/pastebin/terraform
+```
+
 ## Roadmap
 
 - [x] implement a DynamoDB CRUD client

terraform/backend.tf

@@ -0,0 +1,7 @@
+terraform {
+  backend "s3" {
+    bucket = ""
+    key    = "tfstate-20231222"
+    region = "ca-central-1"
+  }
+}

terraform/main.tf

@@ -18,10 +18,8 @@ terraform {
 }
 
 provider "aws" {
-  profile    = "default"
-  region     = "ca-central-1"
-  access_key = "fill me"
-  secret_key = "fille me too"
+  profile = "default"
+  region  = "ca-central-1"
 }
 
 resource "random_string" "random" {
@@ -70,6 +68,13 @@ resource "aws_s3_bucket_acl" "private_bucket" {
   acl        = "private"
 }
 
+resource "aws_lambda_layer_version" "python-layer" {
+  filename            = "layer.zip"
+  layer_name          = "python-layer"
+  source_code_hash    = filebase64sha256("layer.zip")
+  compatible_runtimes = ["python3.9"]
+}
+
 data "archive_file" "lambda_zip" {
   type = "zip"
 
@@ -103,11 +108,13 @@ resource "aws_lambda_function" "apigw_lambda_ddb" {
 
   environment {
     variables = {
-      DDB_TABLE = var.dynamodb_table
+      DDB_TABLE     = var.dynamodb_table,
+      AWS_SAM_LOCAL = "false",
+      DEVENV        = "false"
     }
   }
+  layers     = [aws_lambda_layer_version.python-layer.arn]
   depends_on = [aws_cloudwatch_log_group.lambda_logs]
-
 }
 
 resource "aws_cloudwatch_log_group" "lambda_logs" {