1- # Transfer Key Manager Lambda for SSH Key Expiry Management
21module "transfer-key-manager-lambda" {
32 source = " ./modules/lambda"
43 name = " TransferKeyManagerLambda"
54 handler = " handlers.transfer_key_manager_handler.lambda_handler"
6- lambda_timeout = 300 # 5 minutes - needed for iterating through all Transfer Family servers/users
5+ lambda_timeout = 300
76
87 iam_role_policy_documents = [
98 data . aws_iam_policy_document . transfer_key_manager_policy . json ,
@@ -27,14 +26,11 @@ module "transfer-key-manager-lambda" {
2726 is_invoked_from_gateway = false
2827}
2928
30- # SSM Parameter for PRM Mailbox Email
3129data "aws_ssm_parameter" "prm_mailbox_email" {
3230 name = " /prs/${ var . environment } /user-input/prm-mailbox-email"
3331}
3432
35- # IAM Policy for Transfer Key Manager Lambda
3633data "aws_iam_policy_document" "transfer_key_manager_policy" {
37- # AWS Transfer Family permissions
3834 statement {
3935 sid = " TransferFamilyAccess"
4036 effect = " Allow"
@@ -47,7 +43,6 @@ data "aws_iam_policy_document" "transfer_key_manager_policy" {
4743 resources = [" *" ]
4844 }
4945
50- # SES permissions for sending notifications
5146 statement {
5247 sid = " SESAccess"
5348 effect = " Allow"
@@ -63,7 +58,6 @@ data "aws_iam_policy_document" "transfer_key_manager_policy" {
6358 }
6459 }
6560
66- # CloudWatch metrics permissions
6761 statement {
6862 sid = " CloudWatchMetrics"
6963 effect = " Allow"
@@ -79,7 +73,6 @@ data "aws_iam_policy_document" "transfer_key_manager_policy" {
7973 }
8074}
8175
82- # CloudWatch Alarms for Transfer Key Manager Lambda
8376module "transfer-key-manager-alarm" {
8477 source = " ./modules/lambda_alarms"
8578 lambda_function_name = module. transfer-key-manager-lambda . function_name
@@ -91,7 +84,6 @@ module "transfer-key-manager-alarm" {
9184 depends_on = [module . transfer-key-manager-lambda , module . transfer-key-manager-alarm-topic ]
9285}
9386
94- # SNS Topic for Transfer Key Manager Alarms
9587module "transfer-key-manager-alarm-topic" {
9688 source = " ./modules/sns"
9789 sns_encryption_key_id = module. sns_encryption_key . id
0 commit comments