Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 6 additions & 8 deletions data.tf
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,6 @@ data "aws_iam_openid_connect_provider" "github" {

data "aws_caller_identity" "current" {}

data "aws_region" "current" {}

data "aws_iam_policy_document" "update_lambda" {
#checkov:skip=CKV_AWS_356: Read only
statement {
Expand All @@ -32,7 +30,7 @@ data "aws_iam_policy_document" "update_lambda" {
"lambda:PutProvisionedConcurrencyConfig",
"lambda:DeleteProvisionedConcurrencyConfig",
]
resources = ["arn:aws:lambda:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:function:${var.function_prefix}*"]
resources = ["arn:aws:lambda:${var.region}:${data.aws_caller_identity.current.account_id}:function:${var.function_prefix}*"]
}

dynamic "statement" {
Expand All @@ -43,7 +41,7 @@ data "aws_iam_policy_document" "update_lambda" {
"apigateway:POST",
"apigateway:PUT",
]
resources = ["arn:aws:apigateway:${data.aws_region.current.region}::/restapis/${var.apigw_id}/*"]
resources = ["arn:aws:apigateway:${var.region}::/restapis/${var.apigw_id}/*"]
}
}

Expand All @@ -54,7 +52,7 @@ data "aws_iam_policy_document" "update_lambda" {
actions = [
"lambda:AddPermission",
]
resources = ["arn:aws:lambda:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:function:${var.function_prefix}*"]
resources = ["arn:aws:lambda:${var.region}:${data.aws_caller_identity.current.account_id}:function:${var.function_prefix}*"]
}
}

Expand All @@ -65,7 +63,7 @@ data "aws_iam_policy_document" "update_lambda" {
actions = [
"lambda:UpdateEventSourceMapping",
]
resources = ["arn:aws:lambda:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:event-source-mapping:*"]
resources = ["arn:aws:lambda:${var.region}:${data.aws_caller_identity.current.account_id}:event-source-mapping:*"]
}
}
}
Expand Down Expand Up @@ -175,7 +173,7 @@ data "aws_iam_policy_document" "sign_code" {
]

resources = [
"arn:aws:signer:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:/signing-jobs/*",
"arn:aws:signer:${var.region}:${data.aws_caller_identity.current.account_id}:/signing-jobs/*",
]
}

Expand All @@ -188,7 +186,7 @@ data "aws_iam_policy_document" "sign_code" {
]

resources = [
"arn:aws:signer:${data.aws_region.current.region}:${data.aws_caller_identity.current.account_id}:/signing-profiles/${var.signing_profile_name}",
"arn:aws:signer:${var.region}:${data.aws_caller_identity.current.account_id}:/signing-profiles/${var.signing_profile_name}",
]
}
}
1 change: 1 addition & 0 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@ module "lambda" {
function_name = var.function_name
description = var.description
lambda_role = var.lambda_role
region = var.region

create_package = false

Expand Down
6 changes: 6 additions & 0 deletions variables.tf
Original file line number Diff line number Diff line change
@@ -1,3 +1,9 @@
variable "region" {
description = "The AWS region to create resources in."
type = string
default = "ap-southeast-1"
}

variable "create_github_actions_oidc_provider" {
description = "Controls Whether to create openid connect provider."
type = bool
Expand Down
Loading