Create lambda with proper config, image, gateway, permissions

.dockerignore

@@ -0,0 +1,10 @@
+.git
+__pycache__
+*.pyc
+infra/
+data/
+notebooks/
+mlruns/
+outputs/
+.jupyter
+.github

Dockerfile

@@ -1,11 +1,8 @@
-FROM continuumio/miniconda3
+FROM public.ecr.aws/lambda/python:3.11
 
-COPY environment.yml /tmp/environment.yml
-RUN conda env create -f /tmp/environment.yml
+COPY requirements-lambda.txt .
+RUN pip install --prefer-binary -r requirements-lambda.txt
 
-SHELL ["conda", "run", "-n", "climate_analysis", "/bin/bash", "-c"]
-
-COPY . /app
-WORKDIR /app
-
-CMD ["fastapi", "run", "src/api.py", "--port", "80"]
+COPY src /var/task/src
+ENV PYTHONPATH="/var/task/src"
+CMD ["api.handler"]

infra/main.tf

@@ -95,6 +95,34 @@ module "aws_lambda_function" {
 
   image_uri    = module.docker_image.image_uri
   package_type = "Image"
+
+  create_role = false
+  lambda_role = aws_iam_role.app_role.arn
+
+  policies = [
+    aws_iam_role_policy_attachment.ecs_read.policy_arn,
+    aws_iam_role_policy_attachment.lambda_basic.policy_arn
+  ]
+}
+
+data "archive_file" "docker_context" {
+  type        = "zip"
+  source_dir  = "../src/"
+  output_path = "${path.module}/context.zip"
+}
+
+locals {
+  docker_tag = substr(data.archive_file.docker_context.output_base64sha256, 0, 12)
+}
+
+resource "null_resource" "cleanup_zip" {
+  triggers = {
+    docker_tag = local.docker_tag
+  }
+
+  provisioner "local-exec" {
+    command = "rm -f ${path.module}/context.zip"
+  }
 }
 
 module "docker_image" {
@@ -104,20 +132,27 @@ module "docker_image" {
   ecr_repo        = "climate-analysis"
 
   use_image_tag = true
-  image_tag     = "1.0"
+  image_tag     = local.docker_tag
 
   source_path = "../"
-}
 
-# resource "aws_api_gateway_integration" "app_api_gateway" {
-#   rest_api_id = ""
-#   resource_id = aws_lambda_function.example.id
-#   http_method = aws_api_gateway_method.example.http_method
-#
-#   integration_http_method = "POST"
-#   type                    = "AWS_PROXY"
-#   uri                     = aws_lambda_function.app_lambda.invoke_arn
-# }
+  ecr_repo_lifecycle_policy = jsonencode({
+    "rules" : [
+      {
+        "rulePriority" : 1,
+        "description" : "Keep only the last 1 image",
+        "selection" : {
+          "tagStatus" : "any",
+          "countType" : "imageCountMoreThan",
+          "countNumber" : 1
+        },
+        "action" : {
+          "type" : "expire"
+        }
+      }
+    ]
+  })
+}
 
 resource "aws_iam_role" "app_role" {
   name = "climate_app_role"
@@ -132,7 +167,7 @@ resource "aws_iam_role" "app_role" {
   })
 }
 
-resource "aws_iam_role_policy_attachment" "lambda_ecr_pull" {
+resource "aws_iam_role_policy_attachment" "ecs_read" {
   role       = aws_iam_role.app_role.name
   policy_arn = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
 }
@@ -151,6 +186,39 @@ resource "aws_iam_role_policy_attachment" "app_role_policy_attach" {
 
 # Create api gateway
 
+resource "aws_apigatewayv2_api" "api" {
+  name          = "climate-analysis-api"
+  protocol_type = "HTTP"
+}
+
+resource "aws_apigatewayv2_integration" "lambda_integration" {
+  api_id                 = aws_apigatewayv2_api.api.id
+  integration_type       = "AWS_PROXY"
+  integration_uri        = module.aws_lambda_function.lambda_function_arn
+  payload_format_version = "2.0"
+}
+
+resource "aws_apigatewayv2_route" "root_route" {
+  api_id    = aws_apigatewayv2_api.api.id
+  route_key = "ANY /{proxy+}"
+  target    = "integrations/${aws_apigatewayv2_integration.lambda_integration.id}"
+}
+
+resource "aws_apigatewayv2_stage" "default_stage" {
+  api_id      = aws_apigatewayv2_api.api.id
+  name        = "$default"
+  auto_deploy = true
+}
+
+resource "aws_lambda_permission" "apigw_invoke" {
+  statement_id  = "AllowAPIGatewayInvoke"
+  action        = "lambda:InvokeFunction"
+  function_name = module.aws_lambda_function.lambda_function_name
+  principal     = "apigateway.amazonaws.com"
+  source_arn    = "${aws_apigatewayv2_api.api.execution_arn}/*/*"
+}
+
+###---------------------------------------------
 
 
 

infra/terraform.tf

@@ -15,6 +15,10 @@ terraform {
       source  = "kreuzwerker/docker"
       version = "3.6.1"
     }
+    archive = {
+      source  = "hashicorp/archive"
+      version = "2.7.1"
+    }
   }
 
   required_version = ">= 1.2"

requirements-lambda.txt

@@ -0,0 +1,82 @@
+affine==2.4.0
+aiobotocore==2.25.2
+aiohappyeyeballs==2.6.1
+aiohttp==3.13.2
+aioitertools==0.12.0
+aiosignal==1.4.0
+anyio==4.11.0
+argon2-cffi==25.1.0
+attrs==25.4.0
+bcrypt==5.0.0
+Brotli==1.2.0
+cached-property==1.5.2
+cffi==2.0.0
+charset-normalizer==3.4.4
+click==8.3.1
+click-plugins==1.1.1.2
+decorator==5.2.1
+defusedxml==0.7.1
+executing==2.2.1
+fastapi==0.122.0
+fastapi-cli==0.0.16
+fastapi-cloud-cli==0.5.2
+fastar==0.8.0
+fasteners==0.20
+fastjsonschema==2.21.2
+fqdn==1.5.1
+frozenlist==1.7.0
+fsspec==2025.10.0
+h11==0.16.0
+httpcore==1.0.9
+httptools==0.7.1
+httpx==0.28.1
+idna==3.11
+importlib_metadata==8.7.0
+importlib_resources==6.5.2
+iso8601==2.1.0
+isoduration==20.11.0
+jmespath==1.0.1
+json5==0.12.1
+jsonpatch==1.33
+jsonpointer==3.0.0
+jsonschema==4.25.1
+jsonschema-specifications==2025.9.1
+keystoneauth1==5.12.0
+kombu==5.6.1
+lazy_loader==0.4
+locket==1.0.0
+mangum==0.19.0
+multidict==6.6.3
+multimethod==2.0.2
+overrides==7.7.0
+packaging==25.0
+prometheus_client==0.23.1
+pydantic==2.12.5
+pydantic_core==2.41.5
+pydantic-settings==2.12.0
+pyjwt==2.10.1
+python-dotenv==1.2.1
+rfc3339_validator==0.1.4
+rfc3986==2.0.0
+rfc3986-validator==0.1.1
+rfc3987-syntax==1.1.0
+sniffio==1.3.1
+sortedcontainers==2.4.0
+starlette==0.50.0
+tenacity==9.1.2
+typing_extensions==4.15.0
+typing-inspection==0.4.2
+typing_utils==0.1.0
+tzdata==2025.2
+urllib3==2.5.0
+uvicorn==0.38.0
+vine==5.1.0
+watchfiles==1.1.1
+webcolors==25.10.0
+webencodings==0.5.1
+Werkzeug==3.1.3
+wrapt==1.17.3
+yappi==1.7.3
+zict==3.0.0
+zipp==3.23.0
+zstandard==0.25.0