lambdassm

func FunctionParameterLink ¶

func FunctionParameterLink(
	iamServiceFactory pluginutils.ServiceFactory[*aws.Config, iamservice.Service],
	ec2ServiceFactory pluginutils.ServiceFactory[*aws.Config, ec2service.Service],
) func(FunctionToParameterLinkDeps) provider.Link

FunctionParameterLink returns a link implementation for a link from a Lambda function to an SSM parameter. The Lambda function is granted access to the parameter and, optionally, an environment variable referencing the parameter name. When the function is VPC-isolated, an SSM interface VPC endpoint is activated on the linked flex VPC.

func FunctionParameterPathLink ¶ added in v0.3.0

func FunctionParameterPathLink(
	iamServiceFactory pluginutils.ServiceFactory[*aws.Config, iamservice.Service],
	ec2ServiceFactory pluginutils.ServiceFactory[*aws.Config, ec2service.Service],
) func(FunctionToParameterLinkDeps) provider.Link

FunctionParameterPathLink returns a link implementation for a link from a Lambda function to an SSM parameter path (a synthetic resource representing a parameter hierarchy). The Lambda function is granted access to every parameter beneath the path prefix with a single statement and, optionally, an environment variable holding the prefix. When the function is VPC-isolated, an SSM interface VPC endpoint is activated on the linked flex VPC.

Unlike the per-parameter aws/lambda/function::aws/ssm/parameter link, one link covers an entire configuration namespace: the grant and environment variable live and die with the namespace, not with any individual parameter beneath it.

func FunctionParameterTreeLink ¶ added in v0.4.0

func FunctionParameterTreeLink(
	iamServiceFactory pluginutils.ServiceFactory[*aws.Config, iamservice.Service],
	ec2ServiceFactory pluginutils.ServiceFactory[*aws.Config, ec2service.Service],
) func(FunctionToParameterLinkDeps) provider.Link

FunctionParameterTreeLink returns a link implementation for a link from a Lambda function to an SSM parameter tree (a prefix-scoped store of parameters managed as one resource). The Lambda function is granted access to every parameter beneath the tree's path prefix with a single statement and, optionally, an environment variable holding the prefix. When the function is VPC-isolated, an SSM interface VPC endpoint is activated on the linked flex VPC.

The grant and environment variable are identical in shape to the aws/lambda/function::aws/ssm/parameterPath link's where the runtime contract is a path prefix enumerated via ssm:GetParametersByPath either way, the difference is only that the tree also manages the parameters beneath the prefix.