Optional 141

• allowed_triggersmap(any), default {}Map of allowed triggers to create Lambda permissions
• architectureslist(string), default nullInstruction set architecture for your Lambda function. Valid values are ["x86_64"] and ["arm64"].
• artifacts_dirstring, default "builds"Directory name where artifacts should be stored
• assume_role_policy_statementsany, default {}Map of dynamic policy statements for assuming Lambda Function role (trust relationship)
• attach_async_event_policybool, default falseControls whether async event policy should be added to IAM role for Lambda Function
• attach_cloudwatch_logs_policybool, default trueControls whether CloudWatch Logs policy should be added to IAM role for Lambda Function
• attach_create_log_group_permissionbool, default trueControls whether to add the create log group permission to the CloudWatch logs policy
• attach_dead_letter_policybool, default falseControls whether SNS/SQS dead letter notification policy should be added to IAM role for Lambda Function
• attach_network_policybool, default falseControls whether VPC/network policy should be added to IAM role for Lambda Function
• attach_policiesbool, default falseControls whether list of policies should be added to IAM role for Lambda Function
• attach_policybool, default falseControls whether policy should be added to IAM role for Lambda Function
• attach_policy_jsonbool, default falseControls whether policy_json should be added to IAM role for Lambda Function
• attach_policy_jsonsbool, default falseControls whether policy_jsons should be added to IAM role for Lambda Function
• attach_policy_statementsbool, default falseControls whether policy_statements should be added to IAM role for Lambda Function
• attach_tracing_policybool, default falseControls whether X-Ray tracing policy should be added to IAM role for Lambda Function
• authorization_typestring, default "NONE"The type of authentication that the Lambda Function URL uses. Set to 'AWS_IAM' to restrict access to authenticated IAM users only. Set to 'NONE' to bypass IAM authentication and create a public endpoint.
• build_in_dockerbool, default falseWhether to build dependencies in Docker
• cloudwatch_logs_deletion_protection_enabledbool, default nullWhether to enable deletion protection for the log group.
• cloudwatch_logs_kms_key_idstring, default nullThe ARN of the KMS Key to use when encrypting log data.
• cloudwatch_logs_log_group_classstring, default nullSpecified the log class of the log group. Possible values are: STANDARD or INFREQUENT_ACCESS
• cloudwatch_logs_retention_in_daysnumber, default nullSpecifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, and 3653.
• cloudwatch_logs_skip_destroybool, default falseWhether to keep the log group (and any logs it may contain) at destroy time.
• cloudwatch_logs_tagsmap(string), default {}A map of tags to assign to the resource.
• code_signing_config_arnstring, default nullAmazon Resource Name (ARN) for a Code Signing Configuration
• compatible_architectureslist(string), default nullA list of Architectures Lambda layer is compatible with. Currently x86_64 and arm64 can be specified.
• compatible_runtimeslist(string), default []A list of Runtimes this layer is compatible with. Up to 5 runtimes can be specified.
• corsany, default {}CORS settings to be used by the Lambda Function URL
• createbool, default trueControls whether resources should be created
• create_async_event_configbool, default falseControls whether async event configuration for Lambda Function/Alias should be created
• create_current_version_allowed_triggersbool, default trueWhether to allow triggers on current version of Lambda Function (this will revoke permissions from previous version because Terraform manages only current resources)
• create_current_version_async_event_configbool, default trueWhether to allow async event configuration on current version of Lambda Function (this will revoke permissions from previous version because Terraform manages only current resources)
• create_functionbool, default trueControls whether Lambda Function resource should be created
• create_lambda_function_urlbool, default falseControls whether the Lambda Function URL resource should be created
• create_layerbool, default falseControls whether Lambda Layer resource should be created
• create_packagebool, default trueControls whether Lambda package should be created
• create_rolebool, default trueControls whether IAM role for Lambda Function should be created
• create_sam_metadatabool, default falseControls whether the SAM metadata null resource should be created
• create_unqualified_alias_allowed_triggersbool, default trueWhether to allow triggers on unqualified alias pointing to $LATEST version
• create_unqualified_alias_async_event_configbool, default trueWhether to allow async event configuration on unqualified alias pointing to $LATEST version
• create_unqualified_alias_lambda_function_urlbool, default trueWhether to use unqualified alias pointing to $LATEST version in Lambda Function URL
• dead_letter_target_arnstring, default nullThe ARN of an SNS topic or SQS queue to notify when an invocation fails.
• descriptionstring, default ""Description of your Lambda Function (or Layer)
• destination_on_failurestring, default nullAmazon Resource Name (ARN) of the destination resource for failed asynchronous invocations
• destination_on_successstring, default nullAmazon Resource Name (ARN) of the destination resource for successful asynchronous invocations
• docker_additional_optionslist(string), default []Additional options to pass to the docker run command (e.g. to set environment variables, volumes, etc.)
• docker_build_rootstring, default ""Root dir where to build in Docker
• docker_entrypointstring, default nullPath to the Docker entrypoint to use
• docker_filestring, default ""Path to a Dockerfile when building in Docker
• docker_imagestring, default ""Docker image to use for the build
• docker_pip_cacheany, default nullWhether to mount a shared pip cache folder into docker environment or not
• docker_with_ssh_agentbool, default falseWhether to pass SSH_AUTH_SOCK into docker environment or not
• durable_config_execution_timeoutnumber, default nullMaximum execution time in seconds for the durable function. Valid values between 1 and 31622400 (366 days).
• durable_config_retention_periodnumber, default nullNumber of days to retain the function's execution state. Valid values between 1 and 90. Defaults to 14 if durable_config is enabled.
• environment_variablesmap(string), default {}A map that defines environment variables for the Lambda Function.
• ephemeral_storage_sizenumber, default 512Amount of ephemeral storage (/tmp) in MB your Lambda Function can use at runtime. Valid value between 512 MB to 10,240 MB (10 GB).
• event_source_mappingany, default {}Map of event source mapping
• file_system_arnstring, default nullThe Amazon Resource Name (ARN) of the Amazon EFS Access Point that provides access to the file system.
• file_system_local_mount_pathstring, default nullThe path where the function can access the file system, starting with /mnt/.
• function_namestring, default ""A unique name for your Lambda Function
• function_tagsmap(string), default {}A map of tags to assign only to the lambda function
• handlerstring, default ""Lambda Function entrypoint in your code
• hash_extrastring, default ""The string to add into hashing function. Useful when building same source path for different functions.
• ignore_source_code_hashbool, default falseWhether to ignore changes to the function's source code hash. Set to true if you manage infrastructure and code deployments separately.
• image_config_commandlist(string), default []The CMD for the docker image
• image_config_entry_pointlist(string), default []The ENTRYPOINT for the docker image
• image_config_working_directorystring, default nullThe working directory for the docker image
• image_uristring, default nullThe ECR image URI containing the function's deployment package.
• include_default_tagbool, default true[Deprecated] Set to false to not include the default tag in the tags map.
• invoke_modestring, default nullInvoke mode of the Lambda Function URL. Valid values are BUFFERED (default) and RESPONSE_STREAM.
• ipv6_allowed_for_dual_stackbool, default nullAllows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets
• kms_key_arnstring, default nullThe ARN of KMS key to use by your Lambda Function
• lambda_at_edgebool, default falseSet this to true if using Lambda@Edge, to enable publishing, limit the timeout, and allow edgelambda.amazonaws.com to invoke the function
• lambda_at_edge_logs_all_regionsbool, default trueWhether to specify a wildcard in IAM policy used by Lambda@Edge to allow logging in all regions
• lambda_rolestring, default ""IAM role ARN attached to the Lambda Function. Only used when create_role is false; when create_role is true (the default), the module creates and manages the role and this value is ignored. This governs both who / what can invoke your Lambda Function, as well as what resources your Lambda Function has access to. See Lambda Permission Model for more details.
• layer_namestring, default ""Name of Lambda Layer to create
• layer_skip_destroybool, default falseWhether to retain the old version of a previously deployed Lambda Layer.
• layerslist(string), default nullList of Lambda Layer Version ARNs (maximum of 5) to attach to your Lambda Function.
• license_infostring, default ""License info for your Lambda Layer. Eg, MIT or full url of a license.
• local_existing_packagestring, default nullThe absolute path to an existing zip-file to use
• logging_application_log_levelstring, default "INFO"The application log level of the Lambda Function. Valid values are "TRACE", "DEBUG", "INFO", "WARN", "ERROR", or "FATAL".
• logging_log_formatstring, default "Text"The log format of the Lambda Function. Valid values are "JSON" or "Text".
• logging_log_groupstring, default nullThe CloudWatch log group to send logs to.
• logging_system_log_levelstring, default "INFO"The system log level of the Lambda Function. Valid values are "DEBUG", "INFO", or "WARN".
• managed_instances_capacity_provider_arnstring, default nullARN of the Capacity Provider.
• managed_instances_execution_environment_memory_gib_per_vcpunumber, default nullNumber of GiB of memory per vCPU for Lambda Managed Instances execution environments.
• managed_instances_max_concurrency_per_execution_environmentnumber, default nullMaximum concurrent executions per Lambda Managed Instances execution environment.
• maximum_event_age_in_secondsnumber, default nullMaximum age of a request that Lambda sends to a function for processing in seconds. Valid values between 60 and 21600.
• maximum_retry_attemptsnumber, default nullMaximum number of times to retry when the function returns an error. Valid values between 0 and 2. Defaults to 2.
• memory_sizenumber, default 128Amount of memory in MB your Lambda Function can use at runtime. Valid value between 128 MB to 10,240 MB (10 GB), in 64 MB increments.
• number_of_policiesnumber, default 0Number of policies to attach to IAM role for Lambda Function
• number_of_policy_jsonsnumber, default 0Number of policies JSON to attach to IAM role for Lambda Function
• package_typestring, default "Zip"The Lambda deployment package type. Valid options: Zip or Image
• policieslist(string), default []List of policy statements ARN to attach to Lambda Function role
• policystring, default nullAn additional policy document ARN to attach to the Lambda Function role
• policy_jsonstring, default nullAn additional policy document as JSON to attach to the Lambda Function role
• policy_jsonslist(string), default []List of additional policy documents as JSON to attach to Lambda Function role
• policy_namestring, default nullIAM policy name. It override the default value, which is the same as role_name
• policy_statementsany, default {}Map of dynamic policy statements to attach to Lambda Function role
• provisioned_concurrent_executionsnumber, default -1Amount of capacity to allocate. Set to 1 or greater to enable, or set to 0 to disable provisioned concurrency.
• publishbool, default falseWhether to publish creation/change as new Lambda Function Version.
• publish_tostring, default nullThe target to publish the Lambda Function version to. Valid value is LATEST_PUBLISHED.
• putin_khuylobool, default trueDo you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo!
• quiet_archive_local_execbool, default trueWhether to disable archive local execution output
• recreate_missing_packagebool, default trueWhether to recreate missing Lambda package if it is missing locally or not
• recursive_loopstring, default nullLambda function recursion configuration. Valid values are Allow or Terminate.
• regionstring, default nullRegion where the resource(s) will be managed. Defaults to the region set in the provider configuration
• replace_security_groups_on_destroybool, default null(Optional) When true, all security groups defined in vpc_security_group_ids will be replaced with the default security group after the function is destroyed. Set the replacement_security_group_ids variable to use a custom list of security groups for replacement instead.
• replacement_security_group_idslist(string), default null(Optional) List of security group IDs to assign to orphaned Lambda function network interfaces upon destruction. replace_security_groups_on_destroy must be set to true to use this attribute.
• reserved_concurrent_executionsnumber, default -1The amount of reserved concurrent executions for this Lambda Function. A value of 0 disables Lambda Function from being triggered and -1 removes any concurrency limitations. Defaults to Unreserved Concurrency Limits -1.
• role_descriptionstring, default nullDescription of IAM role to use for Lambda Function
• role_force_detach_policiesbool, default trueSpecifies to force detaching any policies the IAM role has before destroying it.
• role_maximum_session_durationnumber, default 3600Maximum session duration, in seconds, for the IAM role
• role_namestring, default nullName of IAM role to use for Lambda Function
• role_pathstring, default nullPath of IAM role to use for Lambda Function
• role_permissions_boundarystring, default nullThe ARN of the policy that is used to set the permissions boundary for the IAM role used by Lambda Function
• role_tagsmap(string), default {}A map of tags to assign to IAM role
• runtimestring, default ""Lambda Function runtime
• s3_aclstring, default "private"The canned ACL to apply. Valid values are private, public-read, public-read-write, aws-exec-read, authenticated-read, bucket-owner-read, and bucket-owner-full-control. Defaults to private.
• s3_bucketstring, default nullS3 bucket to store artifacts
• s3_existing_packagemap(string), default nullThe S3 bucket object with keys bucket, key, version pointing to an existing zip-file to use
• s3_kms_key_idstring, default nullSpecifies a custom KMS key to use for S3 object encryption.
• s3_object_override_default_tagsbool, default falseWhether to override the default_tags from provider? NB: S3 objects support a maximum of 10 tags.
• s3_object_storage_classstring, default "ONEZONE_IA"Specifies the desired Storage Class for the artifact uploaded to S3. Can be either STANDARD, REDUCED_REDUNDANCY, ONEZONE_IA, INTELLIGENT_TIERING, or STANDARD_IA.
• s3_object_tagsmap(string), default {}A map of tags to assign to S3 bucket object.
• s3_object_tags_onlybool, default falseSet to true to not merge tags with s3_object_tags. Useful to avoid breaching S3 Object 10 tag limit.
• s3_prefixstring, default nullDirectory name where artifacts should be stored in the S3 bucket. If unset, the path from artifacts_dir is used
• s3_server_side_encryptionstring, default nullSpecifies server-side encryption of the object in S3. Valid values are "AES256" and "aws:kms".
• skip_destroybool, default nullSet to true if you do not wish the function to be deleted at destroy time, and instead just remove the function from the Terraform state. Useful for Lambda@Edge functions attached to CloudFront distributions.
• snap_startbool, default false(Optional) Snap start settings for low-latency startups
• source_pathany, default nullThe absolute path to a local file or directory containing your Lambda source code
• store_on_s3bool, default falseWhether to store produced artifacts on S3 or locally.
• tagsmap(string), default {}A map of tags to assign to resources.
• tenant_isolation_modebool, default falseEnable tenant isolation mode for the Lambda Function
• timeoutnumber, default 3The amount of time your Lambda Function has to run in seconds.
• timeoutsmap(string), default {}Define maximum timeout for creating, updating, and deleting Lambda Function resources
• tracing_modestring, default nullTracing mode of the Lambda Function. Valid value can be either PassThrough or Active.
• trigger_on_package_timestampbool, default trueWhether to recreate the Lambda package if the timestamp changes
• trusted_entitiesany, default []List of additional trusted entities for assuming Lambda Function role (trust relationship)
• use_existing_cloudwatch_log_groupbool, default falseWhether to use an existing CloudWatch log group or create new
• vpc_security_group_idslist(string), default nullList of security group ids when Lambda Function should run in the VPC.
• vpc_subnet_idslist(string), default nullList of subnet ids when Lambda Function should run in the VPC. Usually private or intra subnets.