Add tracing config to keep tfsec happy

skwashd · skwashd · commit eecf073833bb · 2025-01-19T15:42:11.000+11:00
diff --git a/lambda.tf b/lambda.tf
@@ -32,6 +32,11 @@ resource "aws_lambda_function" "lambda" {
     security_group_ids = [aws_security_group.this.id]
   }
 
+  tracing_config {
+    #tfsec:ignore:aws-lambda-enable-tracing Let the caller decide if they want to enable tracing
+    mode = "PassThrough"
+  }
+
   layers = [
     "arn:aws:lambda:${data.aws_region.current.name}:017000801446:layer:AWSLambdaPowertoolsPythonV3-python312-arm64:${var.powertools_version}"
   ]

Original file line number	Diff line number	Diff line change
`@@ -32,6 +32,11 @@ resource "aws_lambda_function" "lambda" {`
`32`	`32`	`security_group_ids = [aws_security_group.this.id]`
`33`	`33`	`}`
`34`	`34`
	`35`	`+ tracing_config {`
	`36`	`+ #tfsec:ignore:aws-lambda-enable-tracing Let the caller decide if they want to enable tracing`
	`37`	`+ mode = "PassThrough"`
	`38`	`+ }`
	`39`	`+`
`35`	`40`	`layers = [`
`36`	`41`	`"arn:aws:lambda:${data.aws_region.current.name}:017000801446:layer:AWSLambdaPowertoolsPythonV3-python312-arm64:${var.powertools_version}"`
`37`	`42`	`]`