Merge pull request #18 from SPHTech-Platform/add/tracing-policy

add support for tracing policy

Author: hong-yi

README.md

@@ -45,8 +45,9 @@
 | <a name="input_attach_policy_json"></a> [attach\_policy\_json](#input\_attach\_policy\_json) | Controls whether policy\_json should be added to IAM role for Lambda Function | `bool` | `false` | no |
 | <a name="input_attach_policy_jsons"></a> [attach\_policy\_jsons](#input\_attach\_policy\_jsons) | Controls whether policy\_jsons should be added to IAM role for Lambda Function | `bool` | `false` | no |
 | <a name="input_attach_policy_statements"></a> [attach\_policy\_statements](#input\_attach\_policy\_statements) | Controls whether policy\_jsons should be added to IAM role for Lambda Function | `bool` | `false` | no |
+| <a name="input_attach_tracing_policy"></a> [attach\_tracing\_policy](#input\_attach\_tracing\_policy) | whether to attach tracing policy to lambda role | `bool` | `false` | no |
 | <a name="input_authorization_type"></a> [authorization\_type](#input\_authorization\_type) | The type of authentication that the Lambda Function URL uses. Set to 'AWS\_IAM' to restrict access to authenticated IAM users only. Set to 'NONE' to bypass IAM authentication and create a public endpoint. | `string` | `"NONE"` | no |
-| <a name="input_cf_distribution_id"></a> [cf\_distribution\_id](#input\_cf\_distribution\_id) | distribution id to allow oidc role to update edge functions that are attached | `string` | `""` | no |
+| <a name="input_cf_distribution_id"></a> [cf\_distribution\_id](#input\_cf\_distribution\_id) | distribution id to allow oidc role to update edge functions that are attached | `string` | `null` | no |
 | <a name="input_cloudwatch_logs_retention_in_days"></a> [cloudwatch\_logs\_retention\_in\_days](#input\_cloudwatch\_logs\_retention\_in\_days) | Number of days the cloudwatch logs will be retained. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, and 3653. | `number` | `7` | no |
 | <a name="input_code_signing_config_arn"></a> [code\_signing\_config\_arn](#input\_code\_signing\_config\_arn) | Amazon Resource Name (ARN) for a Code Signing Configuration | `string` | `null` | no |
 | <a name="input_cors"></a> [cors](#input\_cors) | CORS settings to be used by the Lambda Function URL | `any` | `{}` | no |

main.tf

@@ -33,6 +33,7 @@ module "lambda" {
   timeout                        = var.timeout
   dead_letter_target_arn         = var.dead_letter_target_arn
   tracing_mode                   = var.tracing_mode
+  attach_tracing_policy          = var.attach_tracing_policy
   vpc_subnet_ids                 = var.vpc_subnet_ids
   vpc_security_group_ids         = var.vpc_security_group_ids
   package_type                   = var.package_type

variables.tf

@@ -159,6 +159,12 @@ variable "tracing_mode" {
   default     = null
 }
 
+variable "attach_tracing_policy" {
+  description = "whether to attach tracing policy to lambda role"
+  type        = bool
+  default     = false
+}
+
 variable "environment_variables" {
   description = "A map that defines environment variables for the Lambda Function."
   type        = map(string)