aws_lambda Resource
Use the aws_lambda
resource to test a specific AWS Lambda function.
Install
This resource is available in the Chef InSpec AWS resource pack.
For information on configuring your AWS environment for Chef InSpec and creating an InSpec profile that uses the InSpec AWS resource pack, see the Chef InSpec documentation on the AWS cloud platform.
Syntax
describe aws_lambda('LAMBDA_FUNCTION') do
it { should exist}
its ('handler') { should eq 'main.on_event'}
its ('version') { should eq '$LATEST' }
its ('runtime') { should eq 'python3.7' }
end
Parameters
This resource expects the name of the AWS Lambda function.
Properties
This resource can test all properties defined by the Aws::lambda::Types::GetFunctionResponse class.
Examples
Test that all lambda functions with a particular tag is correctly deployed.
describe aws_lambda('LAMBDA_FUNCTION') do
it { should exist}
its ('handler') { should eq 'main.on_event'}
its ('version') { should eq '$LATEST' }
its ('runtime') { should eq 'python3.7' }
end
Matchers
This InSpec audit resource uses the standard matchers. For a full list of available matchers, visit the InSpec matchers page.
AWS Permissions
Your Principal will need the Lambda:Client:GetFunctionResponse
action with Effect
set to Allow
.
You can find detailed documentation at AWS Lambda