infrastructure/main.tf at master · MichelangeloDiGennaro/infrastructure · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
provider "aws" {
    region     = "eu-west-1"
    access_key = ""
    secret_key = ""
}

data "aws_iam_policy_document" "assume_role" {
  statement {
    effect = "Allow"

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }

    actions = ["sts:AssumeRole"]
  }
}

resource "aws_iam_role" "bil" {
  name               = "bil"
  assume_role_policy = data.aws_iam_policy_document.assume_role.json
}

resource "aws_dynamodb_table" "tasks_dynamodb_table" {
  name           = "Tasks"
  billing_mode   = "PROVISIONED"
  read_capacity  = 1
  write_capacity = 1
  hash_key       = "task_id"

  attribute {
    name = "task_id"
    type = "S"
  }
}

resource "aws_iam_role_policy" "dynamodb_access_for_lambda" {
  name = "lambda-dynamodb-access"
  role = aws_iam_role.bil.name

  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Effect = "Allow"
        Action = [
          "dynamodb:PutItem"
        ]
        Resource = aws_dynamodb_table.tasks_dynamodb_table.arn
      }
    ]
  })
}


# Crea la funzione Lambda con il nome univoco
resource "aws_lambda_function" "task-service" {
  function_name = "task-service"
  filename     = "task-service.zip"
  runtime      = "provided.al2023"
  handler      = "bootstrap"
  role         = aws_iam_role.bil.arn
}