feat: allow reuse of existing lambda_role (#85)

Author: heathsnow

main.tf

@@ -92,7 +92,8 @@ module "lambda" {
     LOG_EVENTS        = var.log_events ? "True" : "False"
   }
 
-  create_role               = true
+  create_role               = var.lambda_role == ""
+  lambda_role               = var.lambda_role
   role_name                 = "${var.iam_role_name_prefix}-${var.lambda_function_name}"
   role_permissions_boundary = var.iam_role_boundary_policy_arn
   role_tags                 = var.iam_role_tags

variables.tf

@@ -10,6 +10,12 @@ variable "create_sns_topic" {
   default     = true
 }
 
+variable "lambda_role" {
+  description = "IAM role attached to the Lambda Function.  If this is set then a role will not be created for you."
+  type        = string
+  default     = ""
+}
+
 variable "lambda_function_name" {
   description = "The name of the Lambda function to create"
   type        = string