-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathlambda-getUser.tf
More file actions
102 lines (90 loc) · 3.24 KB
/
Copy pathlambda-getUser.tf
File metadata and controls
102 lines (90 loc) · 3.24 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
data "archive_file" "get_user_lambda_payload" {
type = "zip"
source_dir = var.get_user_lambda_src_dir
excludes = [
"venv",
"_pycache_"
]
output_path = "${var.get_user_lambda_payload_dir}/payload.zip"
}
resource "aws_lambda_function" "get_user" {
filename = data.archive_file.get_user_lambda_payload.output_path
function_name = "getUser"
description = "Processes requests for general user data"
role = aws_iam_role.stackref_main_api.arn
handler = "main.main"
source_code_hash = data.archive_file.get_user_lambda_payload.output_base64sha256
runtime = "python3.11"
timeout = 60
publish = "true"
architectures = ["arm64"]
tracing_config {
mode = "Active"
}
layers = [aws_lambda_layer_version.python_lambda_layer.arn]
vpc_config {
subnet_ids = [
data.terraform_remote_state.vpc.outputs.private_subnet_a
]
security_group_ids = [aws_security_group.memcached_private.id]
ipv6_allowed_for_dual_stack = true
}
# lifecycle {
# ignore_changes = [
# source_code_hash
# ]
# }
environment {
variables = {
SENTRY_DSN = var.sentry_api_dsn
SENTRY_ENVIRONMENT = var.environment
SENTRY_RELEASE = var.sr_api_version
SR_API_VERSION = var.sr_api_version
SR_DB_NAME = var.sr_db_name
SR_DB_SECRET_ARN = data.terraform_remote_state.rds.outputs.rds_sr_api_secret_arn
SR_MEMCACHED_CFG_EP = aws_elasticache_cluster.stackref_main.configuration_endpoint
SR_LOGGING_LEVEL = var.sr_logging_level
SR_AUTH0_DOMAIN = var.sr_auth0_domain
SR_AUTH0_CLIENT_IDS = jsonencode(data.terraform_remote_state.auth0.outputs.client_ids)
SR_AUTH0_BE_AUDIENCE = var.sr_auth0_be_audience
}
}
}
resource "aws_lambda_permission" "get_user" {
statement_id = "AllowAPIGatewayInvoke-getUser"
action = "lambda:InvokeFunction"
function_name = aws_lambda_function.get_user.arn
principal = "apigateway.amazonaws.com"
source_arn = "${aws_apigatewayv2_api.stackref_main.execution_arn}/*/*/getUser"
}
resource "aws_lambda_alias" "get_user" {
name = "getUser_Latest"
description = "getUser $LATEST"
function_name = aws_lambda_function.get_user.arn
function_version = aws_lambda_function.get_user.version
}
resource "null_resource" "get_user_check_weight" {
triggers = {
lambda_alias = aws_lambda_alias.get_user.id
}
provisioner "local-exec" {
# loop until the alias is not weighted
command = <<EOF
while :
do
echo 'Checking for weights on API lambda alias...'
weights=$(aws --region ${var.aws_region} lambda get-alias --function-name ${aws_lambda_function.get_user.function_name} --name 'getUser_Latest' --query 'RoutingConfig' || echo null)
if [ "$weights" == "null" ]; then
break
fi
sleep 5
done
EOF
}
}
resource "aws_lambda_provisioned_concurrency_config" "get_user" {
depends_on = [null_resource.get_user_check_weight]
function_name = aws_lambda_alias.get_user.function_name
provisioned_concurrent_executions = 1
qualifier = aws_lambda_alias.get_user.name
}