variables.tf

#Module      : LABEL
#Description : Terraform label module variables
variable "name" {
  type        = string
  default     = ""
  description = "Name  (e.g. `app` or `cluster`)."
}

variable "repository" {
  type        = string
  default     = "https://github.com/clouddrove/terraform-aws-lambda"
  description = "Terraform current module repo"
}

variable "environment" {
  type        = string
  default     = ""
  description = "Environment (e.g. `prod`, `dev`, `staging`)."
}

variable "label_order" {
  type        = list(any)
  default     = ["name", "environment"]
  description = "Label order, e.g. `name`,`application`."
}

variable "attributes" {
  type        = list(any)
  default     = []
  description = "Additional attributes (e.g. `1`)."
}

variable "managedby" {
  type        = string
  default     = "hello@clouddrove.com"
  description = "ManagedBy, eg 'CloudDrove'."
}

# Module      : Lambda function
# Description : Terraform Lambda function module variables.
variable "enable" {
  type        = bool
  default     = true
  description = "Whether to create lambda function."
}

variable "filename" {
  type        = string
  default     = null
  description = "The path to the function's deployment package within the local filesystem. If defined, The s3_-prefixed options cannot be used."
}

variable "s3_bucket" {
  type        = string
  default     = null
  description = "The S3 bucket location containing the function's deployment package. Conflicts with filename. This bucket must reside in the same AWS region where you are creating the Lambda function."
}

variable "s3_key" {
  type        = string
  default     = null
  description = "The S3 key of an object containing the function's deployment package. Conflicts with filename."
}

variable "s3_object_version" {
  type        = string
  default     = null
  description = "The object version containing the function's deployment package. Conflicts with filename. "
}

variable "handler" {
  type        = string
  description = "The function entrypoint in your code."
}

variable "description" {
  type        = string
  default     = ""
  description = "Description of what your Lambda Function does."
}

variable "layers" {
  type        = list(string)
  default     = null
  description = "List of Lambda Layer Version ARNs (maximum of 5) to attach to your Lambda Function."
}

variable "memory_size" {
  type        = number
  default     = 128
  description = "Amount of memory in MB your Lambda Function can use at runtime. Defaults to 128."
}

variable "timeout" {
  type        = number
  default     = 10
  description = "The amount of time in seconds your Lambda Function will run. Defaults to 3."
}

variable "runtime" {
  type        = string
  default     = "python3.7"
  description = "Runtimes."
}

variable "reserved_concurrent_executions" {
  type        = number
  default     = 90
  description = "The amount of reserved concurrent executions for this lambda function. A value of 0 disables lambda from being triggered and -1 removes any concurrency limitations. Defaults to Unreserved Concurrency Limits -1."
}

variable "publish" {
  type        = bool
  default     = false
  description = "Whether to publish creation/change as new Lambda Function Version. Defaults to false."
}

variable "cloudwatch_logs_kms_key_arn" {
  type        = string
  default     = null
  description = "The arn for the KMS encryption key for cloudwatch log group"
}

variable "lambda_kms_key_arn" {
  type        = string
  default     = null
  description = "The ARN for the KMS encryption key."
}

variable "layer_filenames" {
  type        = list(any)
  default     = []
  description = "The path to the function's deployment package within the local filesystem. If defined, The s3_-prefixed options cannot be used."
}

variable "s3_buckets" {
  type        = list(any)
  default     = []
  description = "The S3 bucket location containing the function's deployment package. Conflicts with filename. This bucket must reside in the same AWS region where you are creating the Lambda function."
}

variable "s3_keies" {
  type        = list(any)
  default     = []
  description = "The S3 key of an object containing the function's deployment package. Conflicts with filename."
}

variable "s3_object_versions" {
  type        = list(any)
  default     = []
  description = "The object version containing the function's deployment package. Conflicts with filename."
}

variable "layer_names" {
  type        = list(any)
  default     = []
  description = "A unique name for your Lambda Layer."
}

variable "compatible_runtimes" {
  type        = list(any)
  default     = []
  description = "A list of Runtimes this layer is compatible with. Up to 5 runtimes can be specified."
}

variable "descriptions" {
  type        = list(any)
  default     = []
  description = "Description of what your Lambda Layer does."
}

variable "license_infos" {
  type        = list(any)
  default     = []
  description = "License info for your Lambda Layer. See License Info."
}

variable "statement_ids" {
  type        = list(any)
  default     = []
  description = "A unique statement identifier. By default generated by Terraform. "
}

variable "event_source_tokens" {
  type        = list(any)
  default     = []
  description = "The Event Source Token to validate. Used with Alexa Skills."
}

variable "iam_actions" {
  type        = list(any)
  default     = ["logs:CreateLogStream", "logs:CreateLogGroup", "logs:PutLogEvents"]
  description = "The actions for Iam Role Policy."
}

variable "actions" {
  type        = list(any)
  default     = []
  description = "The AWS Lambda action you want to allow in this statement. (e.g. lambda:InvokeFunction)."
}

variable "principals" {
  type        = list(any)
  default     = []
  description = "The principal who is getting this permission. e.g. s3.amazonaws.com, an AWS account ID, or any valid AWS service principal such as events.amazonaws.com or sns.amazonaws.com."
}

variable "source_arns" {
  type        = list(any)
  default     = []
  description = "When granting Amazon S3 or CloudWatch Events permission to invoke your function, you should specify this field with the Amazon Resource Name (ARN) for the S3 Bucket or CloudWatch Events Rule as its value. This ensures that only events generated from the specified bucket or rule can invoke the function."
}

variable "qualifiers" {
  type        = list(any)
  default     = []
  description = "Query parameter to specify function version or alias name. The permission will then apply to the specific qualified ARN. e.g. arn:aws:lambda:aws-region:acct-id:function:function-name:2"
}

variable "source_accounts" {
  type        = list(any)
  default     = []
  description = "This parameter is used for S3 and SES. The AWS account ID (without a hyphen) of the source owner."
}

variable "subnet_ids" {
  type        = list(any)
  default     = []
  description = "Subnet ids for vpc config."
}

variable "security_group_ids" {
  type        = list(any)
  default     = []
  description = "Security group ids for vpc config."
}

variable "variables" {
  type        = map(any)
  default     = {}
  description = "A map that defines environment variables for the Lambda function."
}

variable "image_config_entry_point" {
  type        = list(string)
  default     = []
  description = "The ENTRYPOINT for the docker image"
}

variable "image_config_command" {
  type        = list(string)
  default     = []
  description = "The CMD for the docker image"
}

variable "image_config_working_directory" {
  type        = string
  default     = null
  description = "The working directory for the docker image"
}

variable "enable_key_rotation" {
  type        = bool
  default     = true
  description = "Specifies whether key rotation is enabled. Defaults to true(security best practice)"
}

variable "kms_key_deletion_window" {
  type        = number
  default     = 10
  description = "KMS Key deletion window in days."
}

variable "enable_kms" {
  type        = bool
  default     = true
  description = "Flag to control creation of kms key for lambda encryption"
}

variable "create_iam_role" {
  type        = bool
  default     = true
  description = "Flag to control creation of iam role and its related resources."
}

variable "source_file" {
  type        = string
  default     = null
  description = "Path of source file that is required to be converted in `.zip` file"
}

variable "enable_source_code_hash" {
  type        = bool
  default     = false
  description = "Whether to ignore changes to the function's source code hash. Set to true if you manage infrastructure and code deployments separately."
}

variable "skip_destroy" {
  type        = bool
  default     = false
  description = "Whether to retain the old version of a previously deployed Lambda Layer."
}

variable "compatible_architectures" {
  type        = list(string)
  default     = null
  description = "List of Architectures lambda layer is compatible with. Currently x86_64 and arm64 can be specified."
}

variable "create_layers" {
  type        = bool
  default     = false
  description = "Flag to control creation of lambda layers."
}

variable "snap_start" {
  type        = bool
  default     = false
  description = "(Optional) Snap start settings for low-latency startups"
}

variable "dead_letter_target_arn" {
  type        = string
  default     = null
  description = "The ARN of an SNS topic or SQS queue to notify when an invocation fails."
}

variable "tracing_mode" {
  type        = string
  default     = null
  description = "Tracing mode of the Lambda Function. Valid value can be either PassThrough or Active."
}

variable "file_system_local_mount_path" {
  type        = string
  default     = null
  description = "The path where the function can access the file system, starting with /mnt/."
}

variable "file_system_arn" {
  type        = string
  default     = null
  description = "The Amazon Resource Name (ARN) of the Amazon EFS Access Point that provides access to the file system."
}

variable "ephemeral_storage_size" {
  type        = number
  default     = 512
  description = "Amount of ephemeral storage (/tmp) in MB your Lambda Function can use at runtime. Valid value between 512 MB to 10,240 MB (10 GB)."
}

variable "code_signing_config_arn" {
  type        = string
  default     = null
  description = "Amazon Resource Name (ARN) for a Code Signing Configuration"
}

variable "architectures" {
  type        = list(string)
  default     = null
  description = "Instruction set architecture for your Lambda function. Valid values are [\"x86_64\"] and [\"arm64\"]."
}

variable "package_type" {
  type        = string
  default     = "Zip"
  description = "The Lambda deployment package type. Valid options: Zip or Image"
}

variable "iam_role_arn" {
  type        = string
  default     = null
  description = "Iam Role arn to be attached to lambda function."
}

variable "image_uri" {
  type        = string
  default     = null
  description = "The ECR image URI containing the function's deployment package."
}

variable "principal_org_id" {
  type        = string
  default     = null
  description = "The identifier for your organization in AWS Organizations. Use this to grant permissions to all the AWS accounts under this organization."
}

variable "cloudwatch_logs_retention_in_days" {
  type        = number
  default     = null
  description = "Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, and 3653."
}

variable "existing_cloudwatch_log_group" {
  type        = bool
  default     = false
  description = "Whether to use an existing CloudWatch log group or create new"
}

variable "existing_cloudwatch_log_group_name" {
  type        = string
  default     = null
  description = "Name of existing cloudwatch log group."
}

variable "attach_cloudwatch_logs_policy" {
  type        = bool
  default     = true
  description = "Controls whether CloudWatch Logs policy should be added to IAM role for Lambda Function"
}

variable "policy_path" {
  type        = string
  default     = null
  description = "Path of policies to that should be added to IAM role for Lambda Function"
}

variable "assume_role_policy" {
  type        = string
  description = "assume role policy document in JSON format"
  default     = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": "sts:AssumeRole",
      "Principal": {
        "Service": "lambda.amazonaws.com"
      },
      "Effect": "Allow",
      "Sid": ""
    }
  ]
}
EOF
}

variable "aws_iam_policy_path" {
  type        = string
  default     = "/"
  description = "IAM policy path default value"
}