Merge pull request #39 from byu-oit/desync_mitigation_mode

Set `desync_mitigation_mode` to `strictest` in ALB

Author: rwinscot

README.md

@@ -27,7 +27,7 @@ Also Note: CodePipeline and CodeDeploy cannot be used together to deploy a Lambd
 For a Zip file lambda
 ```hcl
 module "lambda_api" {
-  source       = "github.com/byu-oit/terraform-aws-lambda-api?ref=v2.2.0"
+  source       = "github.com/byu-oit/terraform-aws-lambda-api?ref=v3.0.0"
   app_name     = "my-lambda-codedeploy-dev"
   zip_filename = "./src/lambda.zip"
   zip_handler  = "index.handler"
@@ -50,7 +50,7 @@ module "lambda_api" {
 For a docker image lambda:
 ```hcl
 module "lambda_api" {
-  source                        = "github.com/byu-oit/terraform-aws-lambda-api?ref=v2.2.0"
+  source                        = "github.com/byu-oit/terraform-aws-lambda-api?ref=v3.0.0"
   app_name                      = "my-docker-lambda"
   image_uri                     = "my-image-from-my-ecr:latest"
   hosted_zone                   = module.acs.route53_zone
@@ -86,7 +86,7 @@ module "lambda_api" {
 
 ## Requirements
 * Terraform version 0.13.2 or greater
-* AWS provider version 3.0 or greater
+* AWS provider version 3.67 or greater
 
 ## Inputs
 | Name                          | Type                                  | Description                                                                                                                                                                                                                                         | Default                                                                                |

changelog.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## v3.0.0
+2/6/2023 - Set `desync_mitigation_mode` to `strictest` in ALB
+- Require AWS provider >=3.67 to support `desync_mitigation_mode`
+
 ## v2.2.0
 11/18/2022 - support ARM 64 architecture
 - allow pass through of architecture to support arm64. Default is x86_64.

examples/ci-0_13/ci.tf

@@ -3,7 +3,7 @@ terraform {
 }
 
 provider "aws" {
-  version = "~> 3.0"
+  version = "~> 3.67"
   region  = "us-west-2"
 }
 

examples/ci-0_14/ci.tf

@@ -3,7 +3,7 @@ terraform {
 }
 
 provider "aws" {
-  version = "~> 3.0"
+  version = "~> 3.67"
   region  = "us-west-2"
 }
 

examples/ci-1/ci.tf

@@ -3,7 +3,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 3.73.0"
+      version = "~> 3.67"
     }
   }
 }

examples/docker-lambda/docker.tf

@@ -1,5 +1,5 @@
 provider "aws" {
-  version = "~> 3.0"
+  version = "~> 3.67"
   region  = "us-west-2"
 }
 
@@ -9,7 +9,7 @@ module "acs" {
 
 module "lambda_api" {
   #  source                        = "../../"
-  source                        = "github.com/byu-oit/terraform-aws-lambda-api?ref=v2.2.0"
+  source                        = "github.com/byu-oit/terraform-aws-lambda-api?ref=v3.0.0"
   app_name                      = "my-docker-lambda"
   image_uri                     = "my-image-from-my-ecr:latest"
   hosted_zone                   = module.acs.route53_zone

examples/no-codedeploy/example.tf

@@ -1,5 +1,5 @@
 provider "aws" {
-  version = "~> 3.0"
+  version = "~> 3.67"
   region  = "us-west-2"
 }
 

examples/simple-lambda-in-vpc/example.tf

@@ -1,5 +1,5 @@
 provider "aws" {
-  version = "~> 3.0"
+  version = "~> 3.67"
   region  = "us-west-2"
 }
 
@@ -9,7 +9,7 @@ module "acs" {
 
 module "lambda_api" {
   # source                        = "../../"
-  source       = "github.com/byu-oit/terraform-aws-lambda-api?ref=v2.2.0"
+  source       = "github.com/byu-oit/terraform-aws-lambda-api?ref=v3.0.0"
   app_name     = "my-lambda-dev"
   zip_filename = "./src/lambda.zip"
   zip_handler  = "index.handler"

examples/simple-lambda-with-deploy-test/example.tf

@@ -1,5 +1,5 @@
 provider "aws" {
-  version = "~> 3.0"
+  version = "~> 3.67"
   region  = "us-west-2"
 }
 

main.tf

@@ -1,7 +1,7 @@
 terraform {
   required_version = ">= 0.13.2"
   required_providers {
-    aws = ">= 3.0"
+    aws = ">= 3.67"
   }
 }
 
@@ -29,10 +29,11 @@ locals {
 # ==================== ALB ====================
 
 resource "aws_alb" "alb" {
-  name            = local.alb_name
-  subnets         = var.public_subnet_ids
-  security_groups = [aws_security_group.alb-sg.id]
-  tags            = var.tags
+  name                   = local.alb_name
+  desync_mitigation_mode = "strictest"
+  subnets                = var.public_subnet_ids
+  security_groups        = [aws_security_group.alb-sg.id]
+  tags                   = var.tags
 }
 
 resource "aws_security_group" "alb-sg" {