-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathlambda-assetCreate.tf
More file actions
84 lines (73 loc) · 2.84 KB
/
Copy pathlambda-assetCreate.tf
File metadata and controls
84 lines (73 loc) · 2.84 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
resource "null_resource" "asset_create_dependencies" {
triggers = {
requirements = filebase64sha256("${var.asset_create_lambda_src_dir}/requirements.txt")
}
provisioner "local-exec" {
command = "${var.asset_create_lambda_src_dir}/get_dependencies.sh"
}
}
data "archive_file" "asset_create_lambda_payload" {
type = "zip"
source_dir = var.asset_create_lambda_src_dir
excludes = [
"venv",
"_pycache_"
]
output_path = "${var.asset_create_lambda_payload_dir}/payload.zip"
depends_on = [
null_resource.asset_create_dependencies
]
}
resource "aws_lambda_function" "asset_create" {
filename = data.archive_file.asset_create_lambda_payload.output_path
function_name = "assetCreate"
description = "Creates Assets in S3 and references in DB"
role = aws_iam_role.stackref_main_api.arn
handler = "main.main"
source_code_hash = data.archive_file.asset_create_lambda_payload.output_base64sha256
runtime = "python3.11"
timeout = 60
publish = "true"
architectures = ["arm64"]
tracing_config {
mode = "Active"
}
layers = [aws_lambda_layer_version.python_lambda_layer.arn]
vpc_config {
subnet_ids = [
data.terraform_remote_state.vpc.outputs.private_subnet_a
]
security_group_ids = [aws_security_group.memcached_private.id]
ipv6_allowed_for_dual_stack = true
}
# lifecycle {
# ignore_changes = [
# source_code_hash
# ]
# }
environment {
variables = {
SENTRY_ENVIRONMENT = var.environment
SENTRY_RELEASE = var.sr_api_version
SR_API_VERSION = var.sr_api_version
SR_DB_NAME = var.sr_db_name
SR_DB_SECRET_ARN = data.terraform_remote_state.rds.outputs.rds_sr_api_secret_arn
SR_MEMCACHED_CFG_EP = aws_elasticache_cluster.stackref_main.configuration_endpoint
SR_LOGGING_LEVEL = var.sr_logging_level
SR_AUTH0_DOMAIN = var.sr_auth0_domain
SR_AUTH0_CLIENT_IDS = jsonencode(data.terraform_remote_state.auth0.outputs.client_ids)
SR_AUTH0_BE_AUDIENCE = var.sr_auth0_be_audience
SR_TATOR_SQS_URL = data.terraform_remote_state.tator.outputs.sqs_queue_url
SR_KICKOFF_FN_ARN = var.sr_kickoff_fn_arn
SR_KICKOFF_SCHEDULER_ROLE_ARN = var.sr_kickoff_scheduler_role_arn
OPENAI_API_KEY = data.aws_ssm_parameter.openai_api_key.value
}
}
}
resource "aws_lambda_permission" "asset_create" {
statement_id = "AllowAPIGatewayInvoke-assetCreate"
action = "lambda:InvokeFunction"
function_name = aws_lambda_function.asset_create.arn
principal = "apigateway.amazonaws.com"
source_arn = "${aws_apigatewayv2_api.stackref_main.execution_arn}/*/*/assetCreate"
}