635 lines
18 KiB
Go
635 lines
18 KiB
Go
package aws
|
|
|
|
import (
|
|
"archive/zip"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"os"
|
|
"path/filepath"
|
|
"regexp"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/aws/aws-sdk-go/aws"
|
|
"github.com/aws/aws-sdk-go/service/lambda"
|
|
"github.com/hashicorp/terraform/helper/acctest"
|
|
"github.com/hashicorp/terraform/helper/resource"
|
|
"github.com/hashicorp/terraform/terraform"
|
|
)
|
|
|
|
func TestAccAWSLambdaFunction_basic(t *testing.T) {
|
|
var conf lambda.GetFunctionOutput
|
|
|
|
rName := fmt.Sprintf("tf_test_%s", acctest.RandString(5))
|
|
|
|
resource.Test(t, resource.TestCase{
|
|
PreCheck: func() { testAccPreCheck(t) },
|
|
Providers: testAccProviders,
|
|
CheckDestroy: testAccCheckLambdaFunctionDestroy,
|
|
Steps: []resource.TestStep{
|
|
resource.TestStep{
|
|
Config: testAccAWSLambdaConfigBasic(rName),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_test", rName, &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, rName),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, ":"+rName),
|
|
),
|
|
},
|
|
},
|
|
})
|
|
}
|
|
|
|
func TestAccAWSLambdaFunction_VPC(t *testing.T) {
|
|
var conf lambda.GetFunctionOutput
|
|
rName := fmt.Sprintf("tf_test_%s", acctest.RandString(5))
|
|
|
|
resource.Test(t, resource.TestCase{
|
|
PreCheck: func() { testAccPreCheck(t) },
|
|
Providers: testAccProviders,
|
|
CheckDestroy: testAccCheckLambdaFunctionDestroy,
|
|
Steps: []resource.TestStep{
|
|
resource.TestStep{
|
|
Config: testAccAWSLambdaConfigWithVPC(rName),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_test", rName, &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, rName),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, ":"+rName),
|
|
testAccCheckAWSLambdaFunctionVersion(&conf, "$LATEST"),
|
|
resource.TestCheckResourceAttr("aws_lambda_function.lambda_function_test", "vpc_config.#", "1"),
|
|
resource.TestCheckResourceAttr("aws_lambda_function.lambda_function_test", "vpc_config.0.subnet_ids.#", "1"),
|
|
resource.TestCheckResourceAttr("aws_lambda_function.lambda_function_test", "vpc_config.0.security_group_ids.#", "1"),
|
|
resource.TestMatchResourceAttr("aws_lambda_function.lambda_function_test", "vpc_config.0.vpc_id", regexp.MustCompile("^vpc-")),
|
|
),
|
|
},
|
|
},
|
|
})
|
|
}
|
|
|
|
func TestAccAWSLambdaFunction_s3(t *testing.T) {
|
|
var conf lambda.GetFunctionOutput
|
|
rName := fmt.Sprintf("tf_test_%s", acctest.RandString(5))
|
|
|
|
resource.Test(t, resource.TestCase{
|
|
PreCheck: func() { testAccPreCheck(t) },
|
|
Providers: testAccProviders,
|
|
CheckDestroy: testAccCheckLambdaFunctionDestroy,
|
|
Steps: []resource.TestStep{
|
|
resource.TestStep{
|
|
Config: testAccAWSLambdaConfigS3(rName),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_s3test", rName, &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, rName),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, ":"+rName),
|
|
testAccCheckAWSLambdaFunctionVersion(&conf, "$LATEST"),
|
|
),
|
|
},
|
|
},
|
|
})
|
|
}
|
|
|
|
func TestAccAWSLambdaFunction_localUpdate(t *testing.T) {
|
|
var conf lambda.GetFunctionOutput
|
|
|
|
path, zipFile, err := createTempFile("lambda_localUpdate")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer os.Remove(path)
|
|
|
|
resource.Test(t, resource.TestCase{
|
|
PreCheck: func() { testAccPreCheck(t) },
|
|
Providers: testAccProviders,
|
|
CheckDestroy: testAccCheckLambdaFunctionDestroy,
|
|
Steps: []resource.TestStep{
|
|
resource.TestStep{
|
|
PreConfig: func() {
|
|
testAccCreateZipFromFiles(map[string]string{"test-fixtures/lambda_func.js": "lambda.js"}, zipFile)
|
|
},
|
|
Config: genAWSLambdaFunctionConfig_local(path),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_local", "tf_acc_lambda_name_local", &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, "tf_acc_lambda_name_local"),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, "tf_acc_lambda_name_local"),
|
|
testAccCheckAwsLambdaSourceCodeHash(&conf, "8DPiX+G1l2LQ8hjBkwRchQFf1TSCEvPrYGRKlM9UoyY="),
|
|
),
|
|
},
|
|
resource.TestStep{
|
|
PreConfig: func() {
|
|
testAccCreateZipFromFiles(map[string]string{"test-fixtures/lambda_func_modified.js": "lambda.js"}, zipFile)
|
|
},
|
|
Config: genAWSLambdaFunctionConfig_local(path),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_local", "tf_acc_lambda_name_local", &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, "tf_acc_lambda_name_local"),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, "tf_acc_lambda_name_local"),
|
|
testAccCheckAwsLambdaSourceCodeHash(&conf, "0tdaP9H9hsk9c2CycSwOG/sa/x5JyAmSYunA/ce99Pg="),
|
|
),
|
|
},
|
|
},
|
|
})
|
|
}
|
|
|
|
func TestAccAWSLambdaFunction_localUpdate_nameOnly(t *testing.T) {
|
|
var conf lambda.GetFunctionOutput
|
|
|
|
path, zipFile, err := createTempFile("lambda_localUpdate")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer os.Remove(path)
|
|
|
|
updatedPath, updatedZipFile, err := createTempFile("lambda_localUpdate_name_change")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer os.Remove(updatedPath)
|
|
|
|
resource.Test(t, resource.TestCase{
|
|
PreCheck: func() { testAccPreCheck(t) },
|
|
Providers: testAccProviders,
|
|
CheckDestroy: testAccCheckLambdaFunctionDestroy,
|
|
Steps: []resource.TestStep{
|
|
resource.TestStep{
|
|
PreConfig: func() {
|
|
testAccCreateZipFromFiles(map[string]string{"test-fixtures/lambda_func.js": "lambda.js"}, zipFile)
|
|
},
|
|
Config: genAWSLambdaFunctionConfig_local_name_only(path),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_local", "tf_acc_lambda_name_local", &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, "tf_acc_lambda_name_local"),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, "tf_acc_lambda_name_local"),
|
|
testAccCheckAwsLambdaSourceCodeHash(&conf, "8DPiX+G1l2LQ8hjBkwRchQFf1TSCEvPrYGRKlM9UoyY="),
|
|
),
|
|
},
|
|
resource.TestStep{
|
|
PreConfig: func() {
|
|
testAccCreateZipFromFiles(map[string]string{"test-fixtures/lambda_func_modified.js": "lambda.js"}, updatedZipFile)
|
|
},
|
|
Config: genAWSLambdaFunctionConfig_local_name_only(updatedPath),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_local", "tf_acc_lambda_name_local", &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, "tf_acc_lambda_name_local"),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, "tf_acc_lambda_name_local"),
|
|
testAccCheckAwsLambdaSourceCodeHash(&conf, "0tdaP9H9hsk9c2CycSwOG/sa/x5JyAmSYunA/ce99Pg="),
|
|
),
|
|
},
|
|
},
|
|
})
|
|
}
|
|
|
|
func TestAccAWSLambdaFunction_s3Update(t *testing.T) {
|
|
var conf lambda.GetFunctionOutput
|
|
|
|
path, zipFile, err := createTempFile("lambda_s3Update")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer os.Remove(path)
|
|
|
|
bucketName := fmt.Sprintf("tf-acc-lambda-s3-deployments-%d", randomInteger)
|
|
key := "lambda-func.zip"
|
|
|
|
resource.Test(t, resource.TestCase{
|
|
PreCheck: func() { testAccPreCheck(t) },
|
|
Providers: testAccProviders,
|
|
CheckDestroy: testAccCheckLambdaFunctionDestroy,
|
|
Steps: []resource.TestStep{
|
|
resource.TestStep{
|
|
PreConfig: func() {
|
|
// Upload 1st version
|
|
testAccCreateZipFromFiles(map[string]string{"test-fixtures/lambda_func.js": "lambda.js"}, zipFile)
|
|
},
|
|
Config: genAWSLambdaFunctionConfig_s3(bucketName, key, path),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_s3", "tf_acc_lambda_name_s3", &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, "tf_acc_lambda_name_s3"),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, "tf_acc_lambda_name_s3"),
|
|
testAccCheckAwsLambdaSourceCodeHash(&conf, "8DPiX+G1l2LQ8hjBkwRchQFf1TSCEvPrYGRKlM9UoyY="),
|
|
),
|
|
},
|
|
resource.TestStep{
|
|
ExpectNonEmptyPlan: true,
|
|
PreConfig: func() {
|
|
// Upload 2nd version
|
|
testAccCreateZipFromFiles(map[string]string{"test-fixtures/lambda_func_modified.js": "lambda.js"}, zipFile)
|
|
},
|
|
Config: genAWSLambdaFunctionConfig_s3(bucketName, key, path),
|
|
},
|
|
// Extra step because of missing ComputedWhen
|
|
// See https://github.com/hashicorp/terraform/pull/4846 & https://github.com/hashicorp/terraform/pull/5330
|
|
resource.TestStep{
|
|
Config: genAWSLambdaFunctionConfig_s3(bucketName, key, path),
|
|
Check: resource.ComposeTestCheckFunc(
|
|
testAccCheckAwsLambdaFunctionExists("aws_lambda_function.lambda_function_s3", "tf_acc_lambda_name_s3", &conf),
|
|
testAccCheckAwsLambdaFunctionName(&conf, "tf_acc_lambda_name_s3"),
|
|
testAccCheckAwsLambdaFunctionArnHasSuffix(&conf, "tf_acc_lambda_name_s3"),
|
|
testAccCheckAwsLambdaSourceCodeHash(&conf, "0tdaP9H9hsk9c2CycSwOG/sa/x5JyAmSYunA/ce99Pg="),
|
|
),
|
|
},
|
|
},
|
|
})
|
|
}
|
|
|
|
func testAccCheckLambdaFunctionDestroy(s *terraform.State) error {
|
|
conn := testAccProvider.Meta().(*AWSClient).lambdaconn
|
|
|
|
for _, rs := range s.RootModule().Resources {
|
|
if rs.Type != "aws_lambda_function" {
|
|
continue
|
|
}
|
|
|
|
_, err := conn.GetFunction(&lambda.GetFunctionInput{
|
|
FunctionName: aws.String(rs.Primary.ID),
|
|
})
|
|
|
|
if err == nil {
|
|
return fmt.Errorf("Lambda Function still exists")
|
|
}
|
|
|
|
}
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
func testAccCheckAwsLambdaFunctionExists(res, funcName string, function *lambda.GetFunctionOutput) resource.TestCheckFunc {
|
|
// Wait for IAM role
|
|
return func(s *terraform.State) error {
|
|
rs, ok := s.RootModule().Resources[res]
|
|
if !ok {
|
|
return fmt.Errorf("Lambda function not found: %s", res)
|
|
}
|
|
|
|
if rs.Primary.ID == "" {
|
|
return fmt.Errorf("Lambda function ID not set")
|
|
}
|
|
|
|
conn := testAccProvider.Meta().(*AWSClient).lambdaconn
|
|
|
|
params := &lambda.GetFunctionInput{
|
|
FunctionName: aws.String(funcName),
|
|
}
|
|
|
|
getFunction, err := conn.GetFunction(params)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
*function = *getFunction
|
|
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func testAccCheckAwsLambdaFunctionName(function *lambda.GetFunctionOutput, expectedName string) resource.TestCheckFunc {
|
|
return func(s *terraform.State) error {
|
|
c := function.Configuration
|
|
if *c.FunctionName != expectedName {
|
|
return fmt.Errorf("Expected function name %s, got %s", expectedName, *c.FunctionName)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func testAccCheckAWSLambdaFunctionVersion(function *lambda.GetFunctionOutput, expectedVersion string) resource.TestCheckFunc {
|
|
return func(s *terraform.State) error {
|
|
c := function.Configuration
|
|
if *c.Version != expectedVersion {
|
|
return fmt.Errorf("Expected version %s, got %s", expectedVersion, *c.Version)
|
|
}
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func testAccCheckAwsLambdaFunctionArnHasSuffix(function *lambda.GetFunctionOutput, arnSuffix string) resource.TestCheckFunc {
|
|
return func(s *terraform.State) error {
|
|
c := function.Configuration
|
|
if !strings.HasSuffix(*c.FunctionArn, arnSuffix) {
|
|
return fmt.Errorf("Expected function ARN %s to have suffix %s", *c.FunctionArn, arnSuffix)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func testAccCheckAwsLambdaSourceCodeHash(function *lambda.GetFunctionOutput, expectedHash string) resource.TestCheckFunc {
|
|
return func(s *terraform.State) error {
|
|
c := function.Configuration
|
|
if *c.CodeSha256 != expectedHash {
|
|
return fmt.Errorf("Expected code hash %s, got %s", expectedHash, *c.CodeSha256)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func testAccCreateZipFromFiles(files map[string]string, zipFile *os.File) error {
|
|
zipFile.Truncate(0)
|
|
zipFile.Seek(0, 0)
|
|
|
|
w := zip.NewWriter(zipFile)
|
|
|
|
for source, destination := range files {
|
|
f, err := w.Create(destination)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
fileContent, err := ioutil.ReadFile(source)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
_, err = f.Write(fileContent)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
err := w.Close()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return w.Flush()
|
|
}
|
|
|
|
func createTempFile(prefix string) (string, *os.File, error) {
|
|
f, err := ioutil.TempFile(os.TempDir(), prefix)
|
|
if err != nil {
|
|
return "", nil, err
|
|
}
|
|
|
|
pathToFile, err := filepath.Abs(f.Name())
|
|
if err != nil {
|
|
return "", nil, err
|
|
}
|
|
return pathToFile, f, nil
|
|
}
|
|
|
|
const baseAccAWSLambdaConfig = `
|
|
resource "aws_iam_role_policy" "iam_policy_for_lambda" {
|
|
name = "iam_policy_for_lambda"
|
|
role = "${aws_iam_role.iam_for_lambda.id}"
|
|
policy = <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"logs:CreateLogGroup",
|
|
"logs:CreateLogStream",
|
|
"logs:PutLogEvents"
|
|
],
|
|
"Resource": "arn:aws:logs:*:*:*"
|
|
},
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"ec2:CreateNetworkInterface"
|
|
],
|
|
"Resource": [
|
|
"*"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
}
|
|
|
|
resource "aws_iam_role" "iam_for_lambda" {
|
|
name = "iam_for_lambda"
|
|
assume_role_policy = <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": "sts:AssumeRole",
|
|
"Principal": {
|
|
"Service": "lambda.amazonaws.com"
|
|
},
|
|
"Effect": "Allow",
|
|
"Sid": ""
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
}
|
|
|
|
resource "aws_vpc" "vpc_for_lambda" {
|
|
cidr_block = "10.0.0.0/16"
|
|
}
|
|
|
|
resource "aws_subnet" "subnet_for_lambda" {
|
|
vpc_id = "${aws_vpc.vpc_for_lambda.id}"
|
|
cidr_block = "10.0.1.0/24"
|
|
|
|
tags {
|
|
Name = "lambda"
|
|
}
|
|
}
|
|
|
|
resource "aws_security_group" "sg_for_lambda" {
|
|
name = "sg_for_lambda"
|
|
description = "Allow all inbound traffic for lambda test"
|
|
vpc_id = "${aws_vpc.vpc_for_lambda.id}"
|
|
|
|
ingress {
|
|
from_port = 0
|
|
to_port = 0
|
|
protocol = "-1"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
|
|
egress {
|
|
from_port = 0
|
|
to_port = 0
|
|
protocol = "-1"
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
}
|
|
}
|
|
|
|
`
|
|
|
|
func testAccAWSLambdaConfigBasic(rName string) string {
|
|
return fmt.Sprintf(baseAccAWSLambdaConfig+`
|
|
resource "aws_lambda_function" "lambda_function_test" {
|
|
filename = "test-fixtures/lambdatest.zip"
|
|
function_name = "%s"
|
|
role = "${aws_iam_role.iam_for_lambda.arn}"
|
|
handler = "exports.example"
|
|
}
|
|
`, rName)
|
|
}
|
|
|
|
func testAccAWSLambdaConfigWithVPC(rName string) string {
|
|
return fmt.Sprintf(baseAccAWSLambdaConfig+`
|
|
resource "aws_lambda_function" "lambda_function_test" {
|
|
filename = "test-fixtures/lambdatest.zip"
|
|
function_name = "%s"
|
|
role = "${aws_iam_role.iam_for_lambda.arn}"
|
|
handler = "exports.example"
|
|
|
|
vpc_config = {
|
|
subnet_ids = ["${aws_subnet.subnet_for_lambda.id}"]
|
|
security_group_ids = ["${aws_security_group.sg_for_lambda.id}"]
|
|
}
|
|
}`, rName)
|
|
}
|
|
|
|
func testAccAWSLambdaConfigS3(rName string) string {
|
|
return fmt.Sprintf(`
|
|
resource "aws_s3_bucket" "lambda_bucket" {
|
|
bucket = "tf-test-bucket-%d"
|
|
}
|
|
|
|
resource "aws_s3_bucket_object" "lambda_code" {
|
|
bucket = "${aws_s3_bucket.lambda_bucket.id}"
|
|
key = "lambdatest.zip"
|
|
source = "test-fixtures/lambdatest.zip"
|
|
}
|
|
|
|
resource "aws_iam_role" "iam_for_lambda" {
|
|
name = "iam_for_lambda"
|
|
assume_role_policy = <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": "sts:AssumeRole",
|
|
"Principal": {
|
|
"Service": "lambda.amazonaws.com"
|
|
},
|
|
"Effect": "Allow",
|
|
"Sid": ""
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
}
|
|
|
|
resource "aws_lambda_function" "lambda_function_s3test" {
|
|
s3_bucket = "${aws_s3_bucket.lambda_bucket.id}"
|
|
s3_key = "${aws_s3_bucket_object.lambda_code.id}"
|
|
function_name = "%s"
|
|
role = "${aws_iam_role.iam_for_lambda.arn}"
|
|
handler = "exports.example"
|
|
}
|
|
`, acctest.RandInt(), rName)
|
|
}
|
|
|
|
const testAccAWSLambdaFunctionConfig_local_tpl = `
|
|
resource "aws_iam_role" "iam_for_lambda" {
|
|
name = "iam_for_lambda"
|
|
assume_role_policy = <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": "sts:AssumeRole",
|
|
"Principal": {
|
|
"Service": "lambda.amazonaws.com"
|
|
},
|
|
"Effect": "Allow",
|
|
"Sid": ""
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
}
|
|
resource "aws_lambda_function" "lambda_function_local" {
|
|
filename = "%s"
|
|
source_code_hash = "${base64sha256(file("%s"))}"
|
|
function_name = "tf_acc_lambda_name_local"
|
|
role = "${aws_iam_role.iam_for_lambda.arn}"
|
|
handler = "exports.example"
|
|
}
|
|
`
|
|
|
|
func genAWSLambdaFunctionConfig_local(filePath string) string {
|
|
return fmt.Sprintf(testAccAWSLambdaFunctionConfig_local_tpl,
|
|
filePath, filePath)
|
|
}
|
|
|
|
func genAWSLambdaFunctionConfig_local_name_only(filePath string) string {
|
|
return fmt.Sprintf(testAccAWSLambdaFunctionConfig_local_name_only_tpl,
|
|
filePath)
|
|
}
|
|
|
|
const testAccAWSLambdaFunctionConfig_local_name_only_tpl = `
|
|
resource "aws_iam_role" "iam_for_lambda" {
|
|
name = "iam_for_lambda"
|
|
assume_role_policy = <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": "sts:AssumeRole",
|
|
"Principal": {
|
|
"Service": "lambda.amazonaws.com"
|
|
},
|
|
"Effect": "Allow",
|
|
"Sid": ""
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
}
|
|
resource "aws_lambda_function" "lambda_function_local" {
|
|
filename = "%s"
|
|
function_name = "tf_acc_lambda_name_local"
|
|
role = "${aws_iam_role.iam_for_lambda.arn}"
|
|
handler = "exports.example"
|
|
}
|
|
`
|
|
|
|
const testAccAWSLambdaFunctionConfig_s3_tpl = `
|
|
resource "aws_s3_bucket" "artifacts" {
|
|
bucket = "%s"
|
|
acl = "private"
|
|
force_destroy = true
|
|
versioning {
|
|
enabled = true
|
|
}
|
|
}
|
|
resource "aws_s3_bucket_object" "o" {
|
|
bucket = "${aws_s3_bucket.artifacts.bucket}"
|
|
key = "%s"
|
|
source = "%s"
|
|
etag = "${md5(file("%s"))}"
|
|
}
|
|
resource "aws_iam_role" "iam_for_lambda" {
|
|
name = "iam_for_lambda"
|
|
assume_role_policy = <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": "sts:AssumeRole",
|
|
"Principal": {
|
|
"Service": "lambda.amazonaws.com"
|
|
},
|
|
"Effect": "Allow",
|
|
"Sid": ""
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
}
|
|
resource "aws_lambda_function" "lambda_function_s3" {
|
|
s3_bucket = "${aws_s3_bucket_object.o.bucket}"
|
|
s3_key = "${aws_s3_bucket_object.o.key}"
|
|
s3_object_version = "${aws_s3_bucket_object.o.version_id}"
|
|
function_name = "tf_acc_lambda_name_s3"
|
|
role = "${aws_iam_role.iam_for_lambda.arn}"
|
|
handler = "exports.example"
|
|
}
|
|
`
|
|
|
|
func genAWSLambdaFunctionConfig_s3(bucket, key, path string) string {
|
|
return fmt.Sprintf(testAccAWSLambdaFunctionConfig_s3_tpl,
|
|
bucket, key, path, path)
|
|
}
|