Merge branch 'main' of https://github.com/aws-samples/serverless-patterns

Author: julianwood

apigw-lambda-dynamodb-terraform/.gitignore

@@ -0,0 +1 @@
+src.zip

apigw-lambda-dynamodb-terraform/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.0.0"
+      version = "~> 5.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -56,9 +56,13 @@ resource "aws_s3_bucket" "lambda_bucket" {
   force_destroy = true
 }
 
-resource "aws_s3_bucket_acl" "private_bucket" {
+resource "aws_s3_bucket_public_access_block" "private_bucket" {
   bucket = aws_s3_bucket.lambda_bucket.id
-  acl    = "private"
+
+  block_public_acls       = true
+  block_public_policy     = true
+  ignore_public_acls      = true
+  restrict_public_buckets = true
 }
 
 data "archive_file" "lambda_zip" {
@@ -85,7 +89,7 @@ resource "aws_lambda_function" "apigw_lambda_ddb" {
   s3_bucket = aws_s3_bucket.lambda_bucket.id
   s3_key    = aws_s3_object.this.key
 
-  runtime = "python3.8"
+  runtime = "python3.13"
   handler = "app.lambda_handler"
 
   source_code_hash = data.archive_file.lambda_zip.output_base64sha256
@@ -222,4 +226,4 @@ resource "aws_lambda_permission" "api_gw" {
   principal     = "apigateway.amazonaws.com"
 
   source_arn = "${aws_apigatewayv2_api.http_lambda.execution_arn}/*/*"
-}
+}

dynamodb-streams-lambda-terraform/.gitignore

@@ -0,0 +1 @@
+lambda.zip

dynamodb-streams-lambda-terraform/README.md

@@ -61,7 +61,7 @@ After deployment, add an item to the DynamoDB table. Go to the CloudWatch Logs f
     ```bash
     terraform show
     ```
-    ```
+
 ----
 Copyright 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
 

dynamodb-streams-lambda-terraform/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 3.27"
+      version = "~> 5.0"
     }
   }
 
@@ -40,7 +40,7 @@ resource "aws_lambda_function" "lambda_dynamodb_stream_handler" {
   source_code_hash = data.archive_file.lambda_zip_file.output_base64sha256
   handler          = "index.handler"
   role             = aws_iam_role.iam_for_lambda.arn
-  runtime          = "nodejs16.x"
+  runtime          = "nodejs22.x"
 }
 
 data "archive_file" "lambda_zip_file" {

dynamodb-streams-lambda-terraform/src/app.js renamed to dynamodb-streams-lambda-terraform/src/index.js

@@ -0,0 +1 @@
+lambda.zip

eventbridge-sns-lambda-terraform/.gitignore

@@ -6,7 +6,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 3.27"
+      version = "~> 5.0"
     }
   }
 
@@ -103,15 +103,11 @@ resource "aws_lambda_function" "lambda_function" {
   source_code_hash = data.archive_file.lambda_zip_file.output_base64sha256
   handler          = "app.handler"
   role             = aws_iam_role.lambda_iam_role.arn
-  runtime          = "nodejs16.x"
+  runtime          = "nodejs22.x"
 }
 
-
 resource "aws_iam_role" "lambda_iam_role" {
-  name_prefix         = "LambdaSNSRole-"
-  managed_policy_arns = [
-    data.aws_iam_policy.lambda_basic_execution_role_policy.arn
-  ]
+  name_prefix = "LambdaSNSRole-"
 
   assume_role_policy = <<EOF
 {
@@ -130,6 +126,11 @@ resource "aws_iam_role" "lambda_iam_role" {
 EOF
 }
 
+resource "aws_iam_role_policy_attachment" "lambda_basic_execution" {
+  role       = aws_iam_role.lambda_iam_role.name
+  policy_arn = data.aws_iam_policy.lambda_basic_execution_role_policy.arn
+}
+
 resource "aws_lambda_permission" "with_sns" {
   statement_id  = "AllowExecutionFromSNS"
   action        = "lambda:InvokeFunction"
@@ -138,10 +139,6 @@ resource "aws_lambda_permission" "with_sns" {
   source_arn    = aws_sns_topic.MySNSTopic.arn
 }
 
-
-
-
-
 //---------------------------------------------------------
 // Output
 //---------------------------------------------------------
@@ -160,4 +157,4 @@ output "SNS-Topic-ARN" {
 output "Lambda-function" {
   value       = aws_lambda_function.lambda_function.arn
   description = "TopicSubscriberFunction function name"
-}
+}

eventbridge-sns-lambda-terraform/main.tf

@@ -2,11 +2,7 @@
  *  SPDX-License-Identifier: MIT-0
  */
 
-const AWS = require('aws-sdk')
-AWS.config.region = process.env.AWS_REGION 
-const sns = new AWS.SNS({apiVersion: '2012-11-05'})
-
 // The Lambda handler
 exports.handler = async (event) => {
   console.log("Hello World !")
-}
+}

eventbridge-sns-lambda-terraform/src/app.js

@@ -0,0 +1 @@
+lambda.zip