Terraform AWS Function

This module creates a straightforward Lambda function triggered by an event source.

Supports both deployment types:

• Zip package: Deploy Lambda function from a ZIP file uploaded to S3
• Docker Image: Deploy Lambda function from a container image in ECR

Inputs

Name	Type	Description	Required
function_name	string	Name of lambda function	yes
role_name	string	Lambda function role name	no
policy_name	string	Lambda function policy name	no
iam_policy	string	JSON IAM policy	yes
package_type	string	Lambda deployment package type: Zip or Image (default: Zip)	no
runtime	string	Runtime for lambda function (required when package_type is Zip)	conditional
handler	string	Handler for lambda function (required when package_type is Zip)	conditional
image_uri	string	ECR image URI (required when package_type is Image)	conditional
memory_size	number	Memory size for lambda function (default: 128)	no
timeout	number	Timeout seconds for lambda function (default: 30)	no
environment_variables	map(string)	Environment variables for lambda function	yes
bucket	string	Name of bucket (required when package_type is Zip)	conditional
file_location	string	Local path to source files (required when package_type is Zip)	conditional
zip_location	string	Local path to generated zip (required when package_type is Zip)	conditional
zip_name	string	Name of the zip file (required when package_type is Zip)	conditional
batch_size	number	Event source batch size (default: 1)	no
batch_window	number	Event source batch window (default: 0)	no
max_concurrency	number	Reserved concurrent executions (default: -1)	no
provisioned_concurrency	number	Provisioned concurrency (default: 0)	no
alias	string	Function alias	no
common_tags	map(string)	Common tags for components	yes
event_sources_arn	list(string)	Event source ARN list (default: [])	no
publish	bool	Publish a new version (default: false)	no
vpc_config	object()	VPC Configuration (default: null)	no
function_url	object()	Function URL configuration (default: null)	no
is_edge	bool	Is Lambda@Edge (default: false)	no

vpc_config

Name	Type	Description	Required
subnet_ids	list(string)	Subnets IDs	yes
security_group_ids	list(string)	Security Group IDs	yes

function_url

Name	Type	Description	Required
authorization_type	string	Authorization type	yes
cors	object	CORS configuration	yes

cors

Name	Type	Description	Required
allow_origins	list(string)	Allowed origins	yes
allow_methods	list(string)	Allowed HTTP methods	yes
allow_headers	list(string)	Allowed headers	yes
expose_headers	list(string)	Headers exposed in response	yes

Outputs

Name	Type	Description
function_name	string	Lambda function name
function_url	string	Function URL
invoke_arn	string	Function invoke ARN
lambda_arn	string	Function ARN
lambda_version	string	Function version

Usage Examples

Example 1: Lambda with Zip Package (Default)

module "lambda_zip" {
  source = "git::https://github.com/KaribuLab/terraform-aws-function.git?ref=v0.8.0"

  function_name = "my-lambda-function"
  runtime       = "nodejs20.x"
  handler       = "index.handler"

  bucket        = "my-deployment-bucket"
  file_location = "${path.module}/src"
  zip_location  = "${path.module}/dist"
  zip_name      = "lambda.zip"

  iam_policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Effect = "Allow"
        Action = ["logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents"]
        Resource = "arn:aws:logs:*:*:*"
      }
    ]
  })

  environment_variables = {
    ENV = "production"
  }

  timeout     = 30
  memory_size = 512

  common_tags = {
    Environment = "prod"
    Project     = "my-project"
  }
}

Example 2: Lambda with Docker Image

module "lambda_image" {
  source = "git::https://github.com/KaribuLab/terraform-aws-function.git?ref=v0.8.0"

  function_name = "my-lambda-container"
  package_type  = "Image"
  image_uri     = "123456789012.dkr.ecr.us-west-2.amazonaws.com/my-lambda:latest"

  iam_policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Effect = "Allow"
        Action = ["s3:PutObject"]
        Resource = "arn:aws:s3:::my-bucket/*"
      },
      {
        Effect = "Allow"
        Action = ["batch:SubmitJob"]
        Resource = ["arn:aws:batch:*:*:job-queue/*", "arn:aws:batch:*:*:job-definition/*"]
      }
    ]
  })

  environment_variables = {
    S3_BUCKET_NAME = "my-bucket"
    AWS_REGION     = "us-west-2"
  }

  timeout     = 60
  memory_size = 1024

  common_tags = {
    Environment = "prod"
    Project     = "my-project"
  }
}