[WIP] Update lambda README.md

dbl-works · Nov 27, 2023 · c5100f1 · c5100f1
1 parent 359e6fd
commit c5100f1
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 4 deletions.
diff --git a/lambda/README.md b/lambda/README.md
@@ -18,7 +18,7 @@ module "lambda" {
   handler     = "index.handler"
   timeout     = 10
   memory_size = 1024
-  runtime     = "ruby3.2"
+  runtime     = "nodejs16.x"
 
   # Subnets the lambdas are allowed to use to access resources in the VPC.
   subnet_ids = [
@@ -43,8 +43,29 @@ module "lambda" {
     "arn:aws:secrets:*:abc:123",
   ]
 
+  lambda_policy_json = data.aws_iam_policy_document.s3.json
   environment_variables = {
     foo = "bar"
   }
+  lambda_role_name = "aws-lambda-role"
 }
+
+data "aws_iam_policy_document" "s3" {
+  statement {
+    effect = "Allow"
+    actions = [
+      "s3:PutObject"
+    ]
+    resources = ["*"]
+  }
+
+  statement {
+    effect = "Allow"
+    actions = [
+      "kms:GenerateDataKey"
+    ]
+    resources = ["*"]
+  }
+}
+
 ```
diff --git a/lambda/output.tf b/lambda/output.tf