Deploy AWS Lambda Function with Terraform

These terraform files will help to deploy and execute the Lambda Function within AWS Serverless resource.

AWS Profile

To execute terraform within the environment, AWS credentials need to be set prior to start the deployment.

Visit: AWS IAM on AWS Web-UI and generate credentials for your access.

Once you have the Access_key and Secret_Key

Create a profile into AWS credentials file

~/.aws/credentials

[user-root-test]
output=json
aws_access_key_id = A......6I
aws_secret_access_key = U.........lz
region = ap-southeast-2
aws_session_token =

Installing Terraform

Terraform will be the main tool used to deploy this solution, to install and execute follow the steps below. This recipe was written in terraform version 12, so download the latest version here

• Find your system version here https://releases.hashicorp.com/terraform/0.12.29/
• Download the binary https://releases.hashicorp.com/terraform/0.12.29/terraform_0.12.29_linux_amd64.zip
• Extract the binary directly to your path

e.g #unzip terraform_0.12.29_linux_amd64.zip /usr/local/bin

Deploying S3 bucket and Handler file

The index.js is the Lambda file that will running within AWS.

Located within S3 folder just execute the following command below.

Preparing the file for transfer

zip index.js function.zip

Deploying the Bucket

The file don't need to be changed since is ready to deploy and execute.

Remember to change the Bucket name within variable.tf file

Inicialize terraform

cd s3/
AWS_PROFILE=user-root-test terraform init

Plan the Bucket deployment and send the Object

AWS_PROFILE=user-root-test terraform plan -var-file=ap-southeast-2.tfvars

Apply the terraform deployment and create the Bucket with Object Function included.

AWS_PROFILE=user-root-test terraform apply -var-file=ap-southeast-2.tfvars

Deploy Lambda and API Gateway

Within the main folder the Lambda Function will be created and the api gateway to Provide external conectivity. Use the same method to deploy the Function

Inicialize terraform

AWS_PROFILE=user-root-test terraform init

Deploy Lambda Function and API-GW

Remember to set the same Bucket name within variable.tf file as defined on S3 folder

AWS_PROFILE=user-root-test terraform plan -var-file=ap-southeast-2.tfvars
AWS_PROFILE=user-root-test terraform apply -var-file=ap-southeast-2.tfvars

Output example:

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

aws_iam_role.lambda_exec: Creating...
aws_iam_role.lambda_exec: Creation complete after 2s [id=serverless_example_lambda]
aws_lambda_function.example: Creating...
aws_lambda_function.example: Still creating... [10s elapsed]
aws_lambda_function.example: Still creating... [20s elapsed]
aws_lambda_function.example: Creation complete after 22s [id=ServerlessExample]
aws_api_gateway_rest_api.example: Creating...
aws_api_gateway_rest_api.example: Creation complete after 0s [id=wp1cb8sbhh]
aws_api_gateway_resource.proxy: Creating...
aws_api_gateway_resource.proxy: Creation complete after 0s [id=d7lk5t]
aws_api_gateway_method.proxy: Creating...
aws_api_gateway_method.proxy: Creation complete after 0s [id=agm-wp1cb8sbhh-d7lk5t-ANY]
aws_api_gateway_integration.lambda: Creating...
aws_api_gateway_integration.lambda: Creation complete after 1s [id=agi-wp1cb8sbhh-d7lk5t-ANY]
aws_api_gateway_method.proxy_root: Creating...
aws_api_gateway_method.proxy_root: Creation complete after 0s [id=agm-wp1cb8sbhh-q0emcng3bg-ANY]
aws_api_gateway_integration.lambda_root: Creating...
aws_api_gateway_integration.lambda_root: Creation complete after 0s [id=agi-wp1cb8sbhh-q0emcng3bg-ANY]
aws_api_gateway_deployment.example: Creating...
aws_lambda_permission.apigw: Creating...
aws_lambda_permission.apigw: Creation complete after 0s [id=AllowAPIGatewayInvoke]
aws_api_gateway_deployment.example: Creation complete after 1s [id=g6nciz]

Apply complete! Resources: 10 added, 0 changed, 0 destroyed.

After deploy the Terraform recipe an output will be printed out to help you the get the results through Web URL

e.g https://wp1cb8sbhh.execute-api.ap-southeast-2.amazonaws.com/test

Manual Lambda validation

During the test running the api gateway from URL could returns some HTTP errors like (500), however aws has cli command aws lambda invoke that works to validade handlers function via CLI.

If for some reason the API-GW URL doesn't work it's possible to validate the Function running as show below.

AWS_PROFILE=user-root-test aws lambda invoke --region=ap-southeast-2 --function-name="ServerlessExample" output.txt

cat output.txt
{"statusCode":200,"body":"{\n  \"message\": \"All good! Your function executed successfully.\",\n  \"input\": {}\n}"}%

Destroy the environment

If this function will be used for learn purposes don't forget to destroy the resources because AWS could charge you if keep it running.