feat: Add support for EventBridge Schedule mode

Author: andrewhibbert

examples/schedule/main.tf

@@ -122,7 +122,7 @@ module "cloud_custodian_lambda" {
   execution_options = {
     # Not really required but if you run custodian run you need to specify -s/--output-dir you'd then have execution-options
     # as part of the config.json with the output_dir that was specified
-    "output_dir" = "s3://${local.prefix}periodic-${local.account_id}/output?region=${local.region}"
+    "output_dir" = "s3://${local.prefix}schedule-${local.account_id}/output?region=${local.region}"
   }
 
   policies = templatefile("${path.module}/templates/policy.yaml.tpl", {

main.tf

@@ -204,12 +204,8 @@ resource "aws_scheduler_schedule" "schedule" {
   end_date   = local.schedule_end_date
 
   target {
-    arn      = aws_lambda_function.custodian[each.key].arn
+    arn      = aws_lambda_function.custodian[each.key].qualified_arn
     role_arn = local.schedule_scheduler_role
-
-    retry_policy {
-      maximum_retry_attempts = 0
-    }
   }
 
   lifecycle {

ops/package_lambda_policy.py

@@ -63,11 +63,6 @@ def add_handler_and_config_to_archive(archive, policy_list, exec_options):
     Returns:
         PythonPackageArchive: Archive with handler and config added
     """
-    try:
-        archive.add_contents("custodian_policy.py", PolicyHandlerTemplate)
-    except AssertionError as e:
-        raise RuntimeError(f"Failed to add handler template: {e}")
-
     try:
         config_data = {
             "execution-options": exec_options,
@@ -77,6 +72,11 @@ def add_handler_and_config_to_archive(archive, policy_list, exec_options):
     except AssertionError as e:
         raise RuntimeError(f"Failed to add config.json: {e}")
 
+    try:
+        archive.add_contents("custodian_policy.py", PolicyHandlerTemplate)
+    except AssertionError as e:
+        raise RuntimeError(f"Failed to add handler template: {e}")
+
     return archive