Terraform AWS Lambda¶
Terraform module which creates AWS Lambda resources with comprehensive features including layers, VPC configuration, dead letter queues, provisioned concurrency, event source mappings, and deployment packages.
Implemented Controls¶
The following compliance controls are implemented in this module.
- Log group retention period should be at least 365 days
- Lambda functions concurrent execution limit configured
- Lambda functions CORS configuration should not allow all origins
- Lambda functions should be configured with a dead-letter queue
- Ensure encryption in transit is enabled for Lambda environment variables
- Lambda functions should be in a VPC
- Ensure Lambda function logging config is enabled
- Lambda functions should restrict public URL
- Lambda functions tracing should be enabled
- Lambda functions should use latest runtimes
- Log group encryption at rest should be enabled
Compliance.tf registry endpoints¶
module "lambda" {
source = "acscessentialeight.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "acscism2023.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "awscontroltower.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "awsgenai.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "awswellarchitected.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "cccsmedium.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "cfrpart11.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "cis.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "cisv500.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "cisv600.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "cisv80ig1.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "cisacyberessentials.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "eugmpannex11.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "fedramplow.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "fedrampmoderate.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "ffiec.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "gdpr.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "hipaa.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "iso27001.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "nist800171.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "nist80053.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "nistcsf.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "nydfs23.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "pcidss.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "rbicybersecurity.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "rbiitfnbfc.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
module "lambda" {
source = "soc2.compliance.tf/terraform-aws-modules/lambda/aws"
version = "<version>"
# ... your arguments here
}
See the Technical Usage Guide to get started and read the Features section for more details on how to customize the module for your requirements.