New Lamdba creation functionality

[amckeown-blc]

Hi,
Is there new functionality being worked on so that once you've tested your policy locally it can be magically turned into a Lambda function?

e.g

local currently

custodian run -s output --dry-run untagged-resources.yml

New functionality

custodian lambda build -s output untagged-resources.yml
custodian lambda deploy -s output untagged-resources.yml

So instead of manually making a zip file yourself with all the dependencies (c7n and boto3), config.json, lambda-handler.py it can do it one two commands, (providing your connected ok to the AWS account).

[s4zed]

Check out AWS Modes - adding a mode to your policy and running custodian run will create respective resources like lambda + eventbridge trigger
e.g.

policies:
- name: test
  resource: s3
  mode:
    type: cloudtrail
    events:
    ...

[amckeown-blc]

Hi ,

Its fine, got it working now and it creates the Lambda in the AWS account without a manual packaging up of everything, for example:
~/.venvs/custodian-lambda/bin/custodian run -s /tmp/custodian-output untagged-nat.yml

This produces a Lamdba fine now, thanks.

policies:

• name: untagged-nat
  resource: nat-gateway
  filters:
  • type: value
    key: Tags
    value: empty
    mode:
    type: periodic
    schedule: "rate(12 hours)"
    role: arn:aws:iam::*:role/CloudCustodianRole
    timeout: 900
    execution-options:
    output_dir: s3://custodian-output-bucket-blc/
    output_format: jsonlines