-
Notifications
You must be signed in to change notification settings - Fork 31
/
Copy pathmain.tf
49 lines (42 loc) · 1.71 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
provider "aws" {
region = "${var.region}"
}
locals {
s3bucketarn = "arn:aws:s3:::tf-${var.app_name}-lambda-invoke-${var.region}-bucket"
}
resource "aws_s3_bucket" "lambda_trigger_bucket" {
count = "${var.s3_bucket_source_arn == "" ? 1 : 0}"
bucket = "tf-${var.app_name}-lambda-invoke-${var.region}-bucket"
}
resource "aws_s3_bucket_notification" "bucket_notification" {
count = "${var.s3_bucket_source_arn == "" ? 1 : 0}"
bucket = "${aws_s3_bucket.lambda_trigger_bucket.id}"
lambda_function {
lambda_function_arn = "${var.s3_bucket_source_arn != "" ? local.s3bucketarn : var.s3_bucket_source_arn }"
events = ["s3:ObjectCreated:*"]
filter_prefix = "${var.filterprefix != "" ? var.filterprefix : "" }"
filter_suffix = "${var.filtersuffix != "" ? var.filtersuffix : "" }"
}
}
resource "aws_lambda_function" "lambda_function" {
filename = "${var.lambda_source_package}"
function_name = "tf-${var.owner}-${var.app_name}-${var.region}-lambda"
role = "${aws_iam_role.lambda_role.arn}"
handler = "${var.lambda_handler}"
source_code_hash = "${base64sha256(file(var.lambda_source_package))}"
runtime = "${var.lambda_runtime}"
memory_size = "${var.lambda_memory_size}"
timeout = "${var.lambda_timeout}"
environment {
variables = {
region = "${var.region}"
}
}
}
resource "aws_lambda_permission" "allow_s3_bucket" {
statement_id = "AllowExecutionFromS3Bucket"
action = "lambda:InvokeFunction"
function_name = "${aws_lambda_function.lambda_function.arn}"
principal = "s3.amazonaws.com"
source_arn = "${var.s3_bucket_source_arn != "" ? local.s3bucketarn : var.s3_bucket_source_arn }"
}