VhdZdZdZddlZddlZddlZddlZddlmZ ddl m Z ddl m Z ddl m Z dd lmZdd lmZdd lmZdd lmZdd lmZddlmZddZdZdZdZdZdZdZ dZ!dZ"dZ#dZ$e%dk(re$yy#e $rY[wxYw)a --- module: lambda version_added: 5.0.0 short_description: Manage AWS Lambda functions description: - Allows for the management of Lambda functions. - This module was originally added to C(community.aws) in release 1.0.0. options: name: description: - The name you want to assign to the function you are uploading. Cannot be changed. required: true type: str state: description: - Create or delete Lambda function. default: present choices: [ 'present', 'absent' ] type: str runtime: description: - The runtime environment for the Lambda function you are uploading. - Required when creating a function. Uses parameters as described in boto3 docs. - Required when O(state=present). - For supported list of runtimes, see U(https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html). type: str role: description: - The Amazon Resource Name (ARN) of the IAM role that Lambda assumes when it executes your function to access any other Amazon Web Services (AWS) resources. You may use the bare ARN if the role belongs to the same AWS account. - Required when O(state=present). type: str handler: description: - The function within your code that Lambda calls to begin execution. type: str zip_file: description: - A .zip file containing your deployment package - If O(state=present) then either O(zip_file) or O(s3_bucket) must be present. aliases: [ 'src' ] type: str s3_bucket: description: - Amazon S3 bucket name where the .zip file containing your deployment package is stored. - If O(state=present) then either O(zip_file) or O(s3_bucket) must be present. - O(s3_bucket) and O(s3_key) are required together. type: str s3_key: description: - The Amazon S3 object (the deployment package) key name you want to upload. - O(s3_bucket) and O(s3_key) are required together. type: str s3_object_version: description: - The Amazon S3 object (the deployment package) version you want to upload. type: str description: description: - A short, user-defined function description. Lambda does not use this value. Assign a meaningful description as you see fit. type: str default: '' timeout: description: - The function maximum execution time in seconds after which Lambda should terminate the function. default: 3 type: int memory_size: description: - The amount of memory, in MB, your Lambda function is given. default: 128 type: int vpc_subnet_ids: description: - List of subnet IDs to run Lambda function in. - Use this option if you need to access resources in your VPC. Leave empty if you don't want to run the function in a VPC. - If set, O(vpc_security_group_ids) must also be set. type: list elements: str vpc_security_group_ids: description: - List of VPC security group IDs to associate with the Lambda function. - Required when O(vpc_subnet_ids) is used. type: list elements: str environment_variables: description: - A dictionary of environment variables the Lambda function is given. type: dict dead_letter_arn: description: - The parent object that contains the target Amazon Resource Name (ARN) of an Amazon SQS queue or Amazon SNS topic. type: str tracing_mode: description: - Set mode to 'Active' to sample and trace incoming requests with AWS X-Ray. Turned off (set to 'PassThrough') by default. choices: ['Active', 'PassThrough'] type: str kms_key_arn: description: - The KMS key ARN used to encrypt the function's environment variables. type: str version_added: 3.3.0 version_added_collection: community.aws architecture: description: - The instruction set architecture that the function supports. - Requires one of O(s3_bucket) or O(zip_file). type: str choices: ['x86_64', 'arm64'] aliases: ['architectures'] version_added: 5.0.0 layers: description: - A list of function layers to add to the function's execution environment. - Specify each layer by its ARN, including the version. suboptions: layer_version_arn: description: - The ARN of the layer version. - Mutually exclusive with O(layers.layer_name). type: str layer_name: description: - The name or Amazon Resource Name (ARN) of the layer. - Mutually exclusive with O(layers.layer_version_arn). type: str aliases: ['layer_arn'] version: description: - The version number. - Required when O(layers.layer_name) is provided, ignored if not. type: int aliases: ['layer_version'] type: list elements: dict version_added: 5.5.0 image_uri: description: - The Amazon ECR URI of the image to use. - Required (alternative to runtime zip_file and s3_bucket) when creating a function. - Required when O(state=present). type: str version_added: 7.3.0 author: - 'Steyn Huizinga (@steynovich)' extends_documentation_fragment: - amazon.aws.common.modules - amazon.aws.region.modules - amazon.aws.tags - amazon.aws.boto3 aR # Create Lambda functions - name: looped creation amazon.aws.lambda: name: '{{ item.name }}' state: present zip_file: '{{ item.zip_file }}' runtime: 'python2.7' role: 'arn:aws:iam::123456789012:role/lambda_basic_execution' handler: 'hello_python.my_handler' vpc_subnet_ids: - subnet-123abcde - subnet-edcba321 vpc_security_group_ids: - sg-123abcde - sg-edcba321 environment_variables: '{{ item.env_vars }}' tags: key1: 'value1' loop: - name: HelloWorld zip_file: hello-code.zip env_vars: key1: "first" key2: "second" - name: ByeBye zip_file: bye-code.zip env_vars: key1: "1" key2: "2" # To remove previously added tags pass an empty dict - name: remove tags amazon.aws.lambda: name: 'Lambda function' state: present zip_file: 'code.zip' runtime: 'python2.7' role: 'arn:aws:iam::123456789012:role/lambda_basic_execution' handler: 'hello_python.my_handler' tags: {} # Basic Lambda function deletion - name: Delete Lambda functions HelloWorld and ByeBye amazon.aws.lambda: name: '{{ item }}' state: absent loop: - HelloWorld - ByeBye # Create Lambda functions with function layers - name: looped creation amazon.aws.lambda: name: 'HelloWorld' state: present zip_file: 'hello-code.zip' runtime: 'python2.7' role: 'arn:aws:iam::123456789012:role/lambda_basic_execution' handler: 'hello_python.my_handler' layers: - layer_version_arn: 'arn:aws:lambda:us-east-1:123456789012:layer:python27-env:7' a code: description: The lambda function's code returned by get_function in boto3. returned: success type: dict contains: location: description: - The presigned URL you can use to download the function's .zip file that you previously uploaded. - The URL is valid for up to 10 minutes. returned: success type: str sample: 'https://prod-04-2014-tasks.s3.us-east-1.amazonaws.com/snapshots/sample' repository_type: description: The repository from which you can download the function. returned: success type: str sample: 'S3' configuration: description: The Lambda function's configuration metadata returned by get_function in boto3. returned: success type: dict contains: architectures: description: The architectures supported by the function. type: list elements: str sample: ['arm64'] code_sha256: description: The SHA256 hash of the function's deployment package. returned: success type: str sample: 'zOAGfF5JLFuzZoSNirUtOrQp+S341IOA3BcoXXoaIaU=' code_size: description: The size of the function's deployment package in bytes. returned: success type: int sample: 123 dead_letter_config: description: The function's dead letter queue. returned: when the function has a dead letter queue configured type: dict sample: { 'target_arn': arn:aws:lambda:us-east-1:123456789012:function:myFunction:1 } contains: target_arn: description: The ARN of an SQS queue or SNS topic. returned: when the function has a dead letter queue configured type: str sample: arn:aws:lambda:us-east-1:123456789012:function:myFunction:1 description: description: The function's description. returned: success type: str sample: 'My function' environment: description: The function's environment variables. returned: when environment variables exist type: dict contains: variables: description: Environment variable key-value pairs. returned: when environment variables exist type: dict sample: {'key': 'value'} error: description: Error message for environment variables that could not be applied. returned: when there is an error applying environment variables type: dict contains: error_code: description: The error code. returned: when there is an error applying environment variables type: str message: description: The error message. returned: when there is an error applying environment variables type: str function_arn: description: The function's Amazon Resource Name (ARN). returned: on success type: str sample: 'arn:aws:lambda:us-east-1:123456789012:function:myFunction:1' function_name: description: The function's name. returned: on success type: str sample: 'myFunction' handler: description: The function Lambda calls to begin executing your function. returned: on success type: str sample: 'index.handler' last_modified: description: The date and time that the function was last updated, in ISO-8601 format (YYYY-MM-DDThh:mm:ssTZD). returned: on success type: str sample: '2017-08-01T00:00:00.000+0000' memory_size: description: The memory allocated to the function. returned: on success type: int sample: 128 revision_id: description: The latest updated revision of the function or alias. returned: on success type: str sample: 'a2x9886d-d48a-4a0c-ab64-82abc005x80c' role: description: The function's execution role. returned: on success type: str sample: 'arn:aws:iam::123456789012:role/lambda_basic_execution' runtime: description: The funtime environment for the Lambda function. returned: on success type: str sample: 'nodejs6.10' tracing_config: description: The function's AWS X-Ray tracing configuration. returned: on success type: dict sample: { 'mode': 'Active' } contains: mode: description: The tracing mode. returned: on success type: str sample: 'Active' timeout: description: The amount of time that Lambda allows a function to run before terminating it. returned: on success type: int sample: 3 version: description: The version of the Lambda function. returned: on success type: str sample: '1' vpc_config: description: The function's networking configuration. returned: on success type: dict sample: { 'security_group_ids': [], 'subnet_ids': [], 'vpc_id': '123' } layers: description: The function's layers. returned: on success version_added: 5.5.0 type: complex contains: arn: description: The Amazon Resource Name (ARN) of the function layer. returned: always type: str sample: active code_size: description: The size of the layer archive in bytes. returned: always type: str signing_profile_version_arn: description: The Amazon Resource Name (ARN) for a signing profile version. returned: always type: str signing_job_arn: description: The Amazon Resource Name (ARN) of a signing job. returned: always type: str N)Counter) BotoCoreError) ClientError) WaiterError)camel_dict_to_snake_dict)is_boto3_error_code)get_aws_account_info)AnsibleAWSModule)AWSRetry)compare_aws_tagsc~ ||j||dS|j|dS#td$rYywxYw)NT) FunctionName Qualifier aws_retryrrResourceNotFoundException) get_functionr) connection function_name qualifiers e/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/amazon/aws/plugins/modules/lambda.pyget_current_functionrsU  ** QZfj*k k&&MT&RR : ;s++<<c |j|dd}|D]}|d|k(s |dcS|jd|d|y#td $r|jd |d YywxYw) NT) LayerNamer LayerVersionsVersionLayerVersionArnzUnable to find version z from Lambda layer msgrz Lambda layer z not found)list_layer_versions fail_jsonr)moduler layer_nameversion_numberlayer_versionsvs rget_layer_version_arnr'sE#77*X\7]^mn ,A|~-*++ , 6~6FFYZdYefg : ;E}ZL CDEs#AAA$A.-A.ctj}t|d5}|j|j ddd|j }t j|}|jd}|S#1swYAxYw)Nrbzutf-8) hashlibsha256openupdatereaddigestbase64 b64encodedecode)filenamehasherf code_hashcode_b64 hex_digests r sha256sumr9sr ^^ F h   affh  I *H)J   s BB c|yd}|dd} |j|djdi}t || \} } | s| sy|j ry | r|j|| d d}| r|j|| d d}|S#ttf$r}|j |dYd}~}d}~wwxYw#ttf$r!}|j |d |Yd}~|Sd}~wwxYw) NF Configuration FunctionArnT)ResourcerTagszUnable to list tagsr) purge_tags)r=TagKeysr)r=r>rzUnable to tag resource ) list_tagsgetrr fail_json_awsr check_modeuntag_resource tag_resource) clientr"tagsfunctionr?changedarn current_tagse tags_to_addtags_to_removes rset_tagrPs2 |G ? #M 2C;'''EII&RTU #3<R\"]K + E   ! !& "  G        G N? ; ';Q$9::;8 ; 'EQ&=cU$CDD NEs/#B0B7B4B//B47C'C""C'c8 |jd}|jd}|j||j|y#t$r}|j|dYd}~yd}~wtt f$r}|j|dYd}~yd}~wwxYw)Nfunction_activefunction_updated)rz2Timeout while waiting on lambda to finish updatingrz1Failed while waiting on lambda to finish updating) get_waiterwaitrrCrr)rGr"nameclient_active_waiterclient_updated_waiterrMs rwait_for_lambdarYsY%001BC & 1 12D E!!t!4"""5 ZQ$XYY  'YQ$WXXYs$AA BA**B<BBcJ|jdi}t|}||d<|S)Nr>rH)rBr)responserHresults rformat_responser]s* << #D %h /FF6N Mc|siS|s$t|}|jdd}||k(riSt|d5}|j}dddd|iS#1swYdiSxYw)N CodeSha256r)ZipFile)r9rBr,r.)zip_filecurrent_configignore_checksumlocal_checksumremote_checksumr5 zip_contents r _zip_argsrisu   "8,(,,\2> _ ,I h ffh  { ## { ##s AA cJ|siS|siS||d}|r|jd|i|S)N)S3BucketS3KeyS3ObjectVersion)r-) s3_buckets3_keys3_object_versioncodes r_s3_argsrrs7   !F 3D &(9:; Kr^c|siSd|i}|S)NImageUri) image_urirqs r _image_argsrws   "D Kr^c ~|jjd}|jjd}|jjd}|jjd}|jjd}|jjd}i}|r;|jdd|gk7r%|jd|jd|gi |jt ||t ||jt||||jt||siS|s5|jddr#|jd|jddi|S#t $r8} |jt| tj Yd} ~ d} ~ wwxYw) Nrnrorprc architecturerv Architecturesz Arch Change)r exception) paramsrBwarnr-riboolIOErrorr!str traceback format_excrrrw) r"rdrnrorprc architecturesrv code_kwargsrMs r _code_argsr's !!+.I ]]  x (F ))*=>}}  ,HMM%%n5M !!+.IK++OTB}oU M"Om_=>G9X~tK?PQRx 63DEF{9-.  ^//FO^-?-?QU-VWX  GSVy/C/C/EFFGs#%E;; F<.F77F<cjtduidtddtdddgdtd td td td td gdtdtddtdtddtdddtdddtdd d!tdd d"td#$d%td&tdd'd(td)d*g+d,td-d.gdd/g0d1td#d2g3d4td5dd6tdd#ttd$tdd7g3tdd8g39d:d;ggddgd,d.gd>dgg}t|d|||?}|jjd}|jjdj }|jjd }|jjd }|jjd } |jjd} |jjd} |jjd} |jjd} |jjd!}|jjd"}|jjd%}|jjd(}|jjd1}|jjd4}|jjd&}|jjd}g}|j }d} |j d@tjA}|dk(rtjdD|r|}nt|\}}dE|dF|dG|}|jjd6rp|jjd6D]R}|jd<}|,t||jd:|jd;}|j!|Tt#|} |dk(r| r}| dH}!d}"dI|i}#r|!dJ|k7r|#j%dJ|i| r|!dK| k7r|#j%dK| i| r|!dL| k7r|#j%dL| i| r|!dM| k7r|#j%dM| i| r|!dN| k7r|#j%dN| i||!dOdPk7r|#j%dOdPi|r|!dQ|k7r|#j%dQ|i|:|!jdRijdSi|k7r|#j%dRdS|ii|L|!jdTr!|!dTdU|k7r0|#j%dTdU|iin|dk7r|#j%dTdU|ii|r:|!jdVijdWd*|k7r|#j%dVdW|ii|r|#j%dX|i| rcdY|!vr>|!dYdZ}$|!dYd[}%t'| t'|$k7}&t'|t'|%k7}'dY|!vs&s'rG| |d\}(|#j%dY|(in.dY|!vr*|!dYjd]r|#j%dYggd\i|rC|!jd^g})t)|t)d_|)Dk7r|#j%d^|it+|#d`kDr-|s t-||| |s|j.dudadi|#}*|*db}"d}|t1|||| |rd}t3||!}+|+rA|+j%|ddd|s t-||| |s|j4dudadi|+}*|*db}"d}t#|||"f}*|*s|j7dgCt9|*}*|+j;dhd|j<du||+|#di|*n|dk(r|d| | dj}#t3|i},|,s|j7dkCdl|,vr"|#j%dl|,j;dli|#j%dm|,i| |#j%dL| i||#j%dOdPi||#j%dQ|i| |#j%dK| i|r|#j%dRdS|ii|r|#j%dTdU|ii|r|#j%dVdW|ii|r|#j%dX|i| r|#j%dY| |d\i|r|#j%d^|i|r|#j%dn|i|r|j=dod}" |j>dudadi|#}*|*db}"d}t#|||"f}*|*s|j7dqCt9|*}*|j<dudr|i|*|dk(r-| r+ |s|jA|dsd}|j=|oy|dk(r|j=|oyy#ttf$r}|j|dBCYd}~d}~wwxYw#ttf$r}|j|dcCYd}~&d}~wwxYw#ttf$r}|j|deCYd}~d}~wwxYw#ttf$r}|j|dpCYd}~Dd}~wwxYw#ttf$r}|j|dtCYd}~d}~wwxYw)vNrVT)requiredstatepresentabsent)defaultchoicesrvruntimerolehandlerrcsrc)aliasesrnroF)no_logrp descriptionra)rtimeoutint)typer memory_sizevpc_subnet_idslistr)relementsvpc_security_group_idsenvironment_variablesdict)rdead_letter_arn kms_key_arn)rr tracing_modeActive PassThrough)rryx86_64arm64r)rrrrH resource_tags)rrr?r~layers layer_arn layer_version)layer_version_arnr#versionr#rr)rroptionsrequired_togetherrequired_one_ofmutually_exclusive)rcrnrv) argument_specsupports_check_moderr required_iflambda)retry_decoratorzTrying to connect to AWSrz^arn:aws(-([a-z\-]+))?:iamzarn:z:iam::z:role/r;rRoleHandler DescriptionTimeout MemorySize PackageTypeImageRuntime Environment VariablesDeadLetterConfig TargetArn TracingConfigMode KMSKeyArn VpcConfig SubnetIdsSecurityGroupIds)rrVpcIdLayersc3&K|] }|d yw)ArnNru).0r5s r zmain..s*L1U8*Lsrrz%Trying to update lambda configuration)rPublishzTrying to upload new code)rz1Unable to get function information after updatingrb)rJr func_kwargs)rrrrrz,Either S3 object or path to zipfile requiredrzCoder>)rJzTrying to create functionz1Unable to get function information after creatingrJrz Trying to delete Lambda functionru)!rr r|rBlowerrDrGr jittered_backoffrrrCrematchr r'appendrr-sortedrlenrYupdate_function_configurationrPrupdate_function_coder!r]pop exit_jsoncreate_functiondelete_function)-rrrrr"rVrrrrrrrrrrrrrHr?rrvrrDrJrGrMrole_arn account_id partitionlayerrcurrent_functionrdcurrent_versionrcurrent_vpc_subnet_idscurrent_vpc_security_group_idssubnet_net_id_changedvpc_security_group_ids_changednew_vpc_configcurrent_layersr[rrqs- rmainrFs # 4 #9y(.CD#&# # V #  #ug&#&#5!#&#$#%+#eS1#%8# $%@# #/!#"##$eE2%#&8]";<'#(8W"5EOK\])#*v'8 9+#,VT2-#."&E"2U[MB%/1BC !-i891<@A!-/B CiQdEef  /#ML X [! () j! i i h k" )*  ; 34 I )fX& )i5t< #I4P "H$O K# -+ F ==  V $D MM  g & , , .Emm *G ==  V $Dmm *G--##M2Kmm *G--##M2K]]&&'78N#]]../GH"MM--.EFmm''(9:O==$$^4L ==  V $D""<0J--##M2K !!+.I F""JG@x9R9R9TU  8814 8H%9$@ !J i[zl&GH ==  X &**84 1$)II.A$B!$,(= ,(?9AU)% /0  1,FD9 .)/:&t,  v.(:   1 2 ~i0G;    73 4 >-8KG    {; < ~i0G;    73 4 >,7;F    k: ;  ^M%Bg%M    w7 8 ~i0G;    73 4 ! -   }b 1 5 5k2 FJ_ _    =R/ST U  &!!"45!"45kBoU&&(:[/&I_B`(`%178N1OSY2T2..04IMk/=Si!j""K#@An, 1L1P1PQX1Y""KrWY1Z#[\ +//"=Nv'*L^*L"MM""Hf#56 { a 5 U!CvCCbdbVabH&.y&9O  vvt-=zJ 8    F G5 I!:v::YTY[YH&.y&9O (P   !T  U"8,  4(gk{g^fg )  %  &"%   !O  P d "   /1JK LFD>*  "    {; <     w7 8      73 4      73 4    =R/ST U     2[/4RS T    &,1GH I     [9 :     >_u-vw x    &1 2    ~ .    T  * E-v--LL LH&y1OG(P   !T  U"8,55H5 - L&&DD&IG ) ( ) y  '@Q$>??@J";/ U$$Q,S$TT U*";/ I$$Q,G$HH IZ{+ E  (C D D E{+ L  (J K K Lsx7%ii5<j%kli2i--i25j"jj"%k4k  kl$k==ll2l--l2__main__)N)& DOCUMENTATIONEXAMPLESRETURNr0r*rr collectionsrbotocore.exceptionsrrr ImportError0ansible.module_utils.common.dict_transformationsrrsX t> @j X  1//V\XXPXE (V Y $ >|*~  zF]  sBB  B