aws_lambda/main.tf at master · nkirui/aws_lambda · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.14.0"
    }
    random = {
      source  = "hashicorp/random"
      version = "~> 3.5.1"
    }
    archive = {
      source  = "hashicorp/archive"
      version = "~> 2.4.0"
    }
  }
  backend "s3" {
    bucket         = "devops-tf-id"
    key            = "terraform.tfstate"
    region         = "us-east-1"
    encrypt        = true
    dynamodb_table = "lambda-tf-state"
  }

  required_version = ">= 1.5.6"
}

provider "aws" {
  region = var.aws_region
}

resource "random_pet" "lambda_bucket_name" {
  prefix = "hr-tf"
  length = 4
}

resource "aws_s3_bucket" "lambda_bucket" {
  bucket        = random_pet.lambda_bucket_name.id
  force_destroy = true
}

data "archive_file" "lambda_hr_archive" {
  type        = "zip"
  source_dir  = "${path.module}/src"
  output_path = "${path.module}/src.zip"
  excludes = [
    "env_tf",
    "*terraform/*",
    "**.terraform/",
    "**.terraform.lock.hcl",
    ".terraform/*",
    ".terraform/*",
    "*/.terraform/*",
    ".terraform/",
    ".terraformignore"
  ]

}

resource "aws_s3_object" "lambda_hr_s3" {
  bucket = aws_s3_bucket.lambda_bucket.id
  key    = "src.zip"
  source = data.archive_file.lambda_hr_archive.output_path
  etag   = filemd5(data.archive_file.lambda_hr_archive.output_path)
}

resource "aws_lambda_function" "hr_pipeline_function_test" {

  s3_bucket     = aws_s3_bucket.lambda_bucket.id
  s3_key        = aws_s3_object.lambda_hr_s3.key
  function_name = "prescreen-interview"
  handler       = "lambda_function.handler"
  runtime       = "python3.9"
  timeout       = 60
  memory_size   = 128


  environment {

    variables = {
      DB       = var.lambda_environments.db
      USERNAME = var.lambda_environments.user
      PASSWORD = var.lambda_environments.pass
    }

  }
  source_code_hash = data.archive_file.lambda_hr_archive.output_base64sha256
  role             = var.aws_iam_role

}

resource "aws_cloudwatch_log_group" "hr_pipeline" {
  name              = "/aws/lambda/${aws_lambda_function.hr_pipeline_function_test.function_name}"
  retention_in_days = 30
}