CCM-8418: Add SNS topic

Author: chris-elliott-nhsd

infrastructure/terraform/modules/backend-api/module_lambda_copy_scanned_object_to_internal.tf

@@ -33,6 +33,8 @@ module "lambda_copy_scanned_object_to_internal" {
   log_destination_arn          = var.log_destination_arn
   log_subscription_role_arn    = var.log_subscription_role_arn
   enable_dlq_and_notifications = true
+  sns_destination              = aws_sns_topic.main.arn
+  sns_destination_kms_key      = var.kms_key_arn
 }
 
 data "aws_iam_policy_document" "copy_scanned_object_to_internal" {

infrastructure/terraform/modules/backend-api/module_lambda_delete_failed_scanned_object.tf

@@ -33,6 +33,8 @@ module "lambda_delete_failed_scanned_object" {
   log_destination_arn          = var.log_destination_arn
   log_subscription_role_arn    = var.log_subscription_role_arn
   enable_dlq_and_notifications = true
+  sns_destination              = aws_sns_topic.main.arn
+  sns_destination_kms_key      = var.kms_key_arn
 }
 
 data "aws_iam_policy_document" "delete_failed_scanned_object" {

infrastructure/terraform/modules/backend-api/module_lambda_process_proof.tf

@@ -33,6 +33,8 @@ module "lambda_process_proof" {
   log_destination_arn          = var.log_destination_arn
   log_subscription_role_arn    = var.log_subscription_role_arn
   enable_dlq_and_notifications = true
+  sns_destination              = aws_sns_topic.main.arn
+  sns_destination_kms_key      = var.kms_key_arn
 }
 
 data "aws_iam_policy_document" "process_proof" {

infrastructure/terraform/modules/backend-api/module_lambda_set_letter_file_virus_scan_status_for_upload.tf

@@ -33,6 +33,8 @@ module "lambda_set_file_virus_scan_status_for_upload" {
   log_destination_arn          = var.log_destination_arn
   log_subscription_role_arn    = var.log_subscription_role_arn
   enable_dlq_and_notifications = true
+  sns_destination              = aws_sns_topic.main.arn
+  sns_destination_kms_key      = var.kms_key_arn
 }
 
 data "aws_iam_policy_document" "set_file_virus_scan_status_for_upload" {

infrastructure/terraform/modules/backend-api/sns_topic.tf

@@ -0,0 +1,7 @@
+
+# this is not used for anything, the lambda shared module requires an SNS topic
+resource "aws_sns_topic" "main" {
+  name = "${local.csi}-sns"
+
+  kms_master_key_id = var.kms_key_arn
+}