Terraform

1import { createApp } from 'vue'
2import App from './App.vue'
3import Web3 from 'web3'   <-- This line
4
5
6createApp(App).mount('#app')
7npm i -D @esbuild-plugins/node-globals-polyfill
8npm i -D @esbuild-plugins/node-modules-polyfill
9

1import { createApp } from 'vue'
2import App from './App.vue'
3import Web3 from 'web3'   <-- This line
4
5
6createApp(App).mount('#app')
7npm i -D @esbuild-plugins/node-globals-polyfill
8npm i -D @esbuild-plugins/node-modules-polyfill
9import { defineConfig } from 'vite'
10import GlobalsPolyfills from '@esbuild-plugins/node-globals-polyfill'
11import NodeModulesPolyfills from '@esbuild-plugins/node-modules-polyfill'
12
13export default defineConfig({
14  ⋮
15  optimizeDeps: {
16    esbuildOptions: {
17      2️⃣
18      plugins: [
19        NodeModulesPolyfills(),
20        GlobalsPolyfills({
21          process: true,
22          buffer: true,
23        }),
24      ],
25      3️⃣
26      define: {
27        global: 'globalThis',
28      },
29    },
30  },
31})
32

1import { createApp } from 'vue'
2import App from './App.vue'
3import Web3 from 'web3'   <-- This line
4
5
6createApp(App).mount('#app')
7npm i -D @esbuild-plugins/node-globals-polyfill
8npm i -D @esbuild-plugins/node-modules-polyfill
9import { defineConfig } from 'vite'
10import GlobalsPolyfills from '@esbuild-plugins/node-globals-polyfill'
11import NodeModulesPolyfills from '@esbuild-plugins/node-modules-polyfill'
12
13export default defineConfig({
14  ⋮
15  optimizeDeps: {
16    esbuildOptions: {
17      2️⃣
18      plugins: [
19        NodeModulesPolyfills(),
20        GlobalsPolyfills({
21          process: true,
22          buffer: true,
23        }),
24      ],
25      3️⃣
26      define: {
27        global: 'globalThis',
28      },
29    },
30  },
31})
32import { defineConfig } from 'vite'
33
34export default defineConfig({
35  ⋮
36  resolve: {
37    alias: {
38      web3: 'web3/dist/web3.min.js',
39    },
40  },
41})
42

1def test_secret():
2
3    secret = "mysecret"
4    region = "MY-REGION" :)
5    
6    session = boto3.session.Session()
7    client = session.client(
8        service_name="secretsmanager",
9        region_name=region
10    )
11    secret_value_response = client.get_secret_value(SecretId=secret)
12
13    try:
14        result =  json.loads(secret_value_response["SecretString"])
15
16    except Exception as e:
17        result = "Error found: {}".format(e)
18    return result
19
20
21def handler(event, context):
22
23    get_secrets = test_secret() # THE CODE FAIL HERE IN CLOUDWATCH
24
25    try:
26        some_string = event["queryStringParameters"]["some_string"]
27
28        response = {}
29
30        response["statusCode"] = 200
31        response["body"] = some_string + " " + get_secrets["name"]
32
33        print("secrets: ", some_string + " " + get_secrets["name"])
34
35    except Exception as e:
36        response = "Error: {}".format(e)
37
38    return response
39resource "aws_security_group" "db" {
40  name   = "db"
41  vpc_id = aws_vpc.default.id
42
43  ingress {
44    from_port   = 443
45    to_port     = 443
46    protocol    = "tcp"
47    cidr_blocks = ["0.0.0.0/0"]
48  }
49
50  ingress {
51    from_port   = 5432
52    to_port     = 5432
53    protocol    = "tcp"
54    cidr_blocks = ["0.0.0.0/0"]
55  }
56
57  egress {
58    from_port   = 0
59    to_port     = 0
60    protocol    = "-1"
61    cidr_blocks = ["0.0.0.0/0"]
62  }
63}
64
65resource "aws_lambda_function" "lambda_test" {
66  function_name       = "lambda-test"
67  ...
68
69  # Attach Lambda to VPC
70  vpc_config {
71    subnet_ids = [aws_subnet.private_subnet.id]
72    security_group_ids = [aws_security_group.db.id]
73  }
74}
75
76resource "aws_iam_policy" "lambda_test" {
77  name        = "lambda-test"
78
79  policy = <<EOF
80{
81    "Version": "2012-10-17",
82    "Statement": [
83        {
84            "Effect": "Allow",
85            "Action": [
86                "logs:CreateLogStream",
87                "logs:CreateLogGroup",
88                "logs:PutLogEvents",
89                "ec2:DescribeSecurityGroups",
90                "ec2:DescribeSubnets",
91                "ec2:DescribeVpcs",
92                "ec2:DescribeNetworkInterfaces",
93                "ec2:CreateNetworkInterface",
94                "ec2:DeleteNetworkInterface",
95                "ec2:AttachNetworkInterface",
96                "ec2:AssignPrivateIpAddresses",
97                "ec2:UnassignPrivateIpAddresses",
98                "autoscaling:CompleteLifecycleAction",
99                "secretsmanager:GetSecretValue"
100            ],
101            "Resource": [
102              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}",
103              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}/*"
104            ]
105        },
106        {
107            "Effect": "Allow",
108            "Action": "secretsmanager:GetSecretValue",
109            "Resource": [
110              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}",
111              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}/*"
112            ]
113        }
114    ]
115}
116EOF
117}
118
119resource "aws_iam_role" "lambda_test_role" {
120  name = "lambda-test-role"
121
122  assume_role_policy = <<EOF
123{
124  "Version": "2012-10-17",
125  "Id": "",
126  "Statement": [
127    {
128      "Action": "sts:AssumeRole",
129      "Principal": {
130        "Service": [
131          "lambda.amazonaws.com",
132          "secretsmanager.amazonaws.com"
133        ]
134      },
135      "Effect": "Allow",
136      "Sid": ""
137    }
138  ]
139}
140EOF
141}
142
143resource "aws_iam_role_policy_attachment" "lambda_test" {
144  policy_arn  = aws_iam_policy.lambda_test.arn
145  role        = aws_iam_role.lambda_test_role.name
146}
147
148resource "aws_iam_role_policy_attachment" "lambda_test_vpc_access" {
149  policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole"
150  role        = aws_iam_role.lambda_test_role.name
151}
152resource "aws_vpc_endpoint" "vpc_endpoint" {
153  vpc_id                      = aws_vpc.default.id
154  service_name                = "com.amazonaws.${var.AWS_REGION}.secretsmanager"
155  vpc_endpoint_type           = "Interface"
156
157  security_group_ids          = [aws_security_group.db.id]
158  private_dns_enabled         = true
159
160  policy                      = <<EOF
161{
162    "Version": "2012-10-17",
163    "Statement": [
164        {
165          "Effect": "Allow",
166          "Action": "*",
167          "Principal": "*",
168          "Resource": "*"
169        }
170    ]
171}
172EOF
173}
174resource "aws_vpc_endpoint" "vpc_endpoint" {
175  vpc_id                      = aws_vpc.default.id
176  service_name                = "com.amazonaws.${var.AWS_REGION}.secretsmanager"
177  vpc_endpoint_type           = "Interface"
178
179  subnet_ids                  = [aws_subnet.private_subnet.id]
180  security_group_ids          = [aws_security_group.db.id]
181  private_dns_enabled         = true
182}
183

1def test_secret():
2
3    secret = "mysecret"
4    region = "MY-REGION" :)
5    
6    session = boto3.session.Session()
7    client = session.client(
8        service_name="secretsmanager",
9        region_name=region
10    )
11    secret_value_response = client.get_secret_value(SecretId=secret)
12
13    try:
14        result =  json.loads(secret_value_response["SecretString"])
15
16    except Exception as e:
17        result = "Error found: {}".format(e)
18    return result
19
20
21def handler(event, context):
22
23    get_secrets = test_secret() # THE CODE FAIL HERE IN CLOUDWATCH
24
25    try:
26        some_string = event["queryStringParameters"]["some_string"]
27
28        response = {}
29
30        response["statusCode"] = 200
31        response["body"] = some_string + " " + get_secrets["name"]
32
33        print("secrets: ", some_string + " " + get_secrets["name"])
34
35    except Exception as e:
36        response = "Error: {}".format(e)
37
38    return response
39resource "aws_security_group" "db" {
40  name   = "db"
41  vpc_id = aws_vpc.default.id
42
43  ingress {
44    from_port   = 443
45    to_port     = 443
46    protocol    = "tcp"
47    cidr_blocks = ["0.0.0.0/0"]
48  }
49
50  ingress {
51    from_port   = 5432
52    to_port     = 5432
53    protocol    = "tcp"
54    cidr_blocks = ["0.0.0.0/0"]
55  }
56
57  egress {
58    from_port   = 0
59    to_port     = 0
60    protocol    = "-1"
61    cidr_blocks = ["0.0.0.0/0"]
62  }
63}
64
65resource "aws_lambda_function" "lambda_test" {
66  function_name       = "lambda-test"
67  ...
68
69  # Attach Lambda to VPC
70  vpc_config {
71    subnet_ids = [aws_subnet.private_subnet.id]
72    security_group_ids = [aws_security_group.db.id]
73  }
74}
75
76resource "aws_iam_policy" "lambda_test" {
77  name        = "lambda-test"
78
79  policy = <<EOF
80{
81    "Version": "2012-10-17",
82    "Statement": [
83        {
84            "Effect": "Allow",
85            "Action": [
86                "logs:CreateLogStream",
87                "logs:CreateLogGroup",
88                "logs:PutLogEvents",
89                "ec2:DescribeSecurityGroups",
90                "ec2:DescribeSubnets",
91                "ec2:DescribeVpcs",
92                "ec2:DescribeNetworkInterfaces",
93                "ec2:CreateNetworkInterface",
94                "ec2:DeleteNetworkInterface",
95                "ec2:AttachNetworkInterface",
96                "ec2:AssignPrivateIpAddresses",
97                "ec2:UnassignPrivateIpAddresses",
98                "autoscaling:CompleteLifecycleAction",
99                "secretsmanager:GetSecretValue"
100            ],
101            "Resource": [
102              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}",
103              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}/*"
104            ]
105        },
106        {
107            "Effect": "Allow",
108            "Action": "secretsmanager:GetSecretValue",
109            "Resource": [
110              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}",
111              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}/*"
112            ]
113        }
114    ]
115}
116EOF
117}
118
119resource "aws_iam_role" "lambda_test_role" {
120  name = "lambda-test-role"
121
122  assume_role_policy = <<EOF
123{
124  "Version": "2012-10-17",
125  "Id": "",
126  "Statement": [
127    {
128      "Action": "sts:AssumeRole",
129      "Principal": {
130        "Service": [
131          "lambda.amazonaws.com",
132          "secretsmanager.amazonaws.com"
133        ]
134      },
135      "Effect": "Allow",
136      "Sid": ""
137    }
138  ]
139}
140EOF
141}
142
143resource "aws_iam_role_policy_attachment" "lambda_test" {
144  policy_arn  = aws_iam_policy.lambda_test.arn
145  role        = aws_iam_role.lambda_test_role.name
146}
147
148resource "aws_iam_role_policy_attachment" "lambda_test_vpc_access" {
149  policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole"
150  role        = aws_iam_role.lambda_test_role.name
151}
152resource "aws_vpc_endpoint" "vpc_endpoint" {
153  vpc_id                      = aws_vpc.default.id
154  service_name                = "com.amazonaws.${var.AWS_REGION}.secretsmanager"
155  vpc_endpoint_type           = "Interface"
156
157  security_group_ids          = [aws_security_group.db.id]
158  private_dns_enabled         = true
159
160  policy                      = <<EOF
161{
162    "Version": "2012-10-17",
163    "Statement": [
164        {
165          "Effect": "Allow",
166          "Action": "*",
167          "Principal": "*",
168          "Resource": "*"
169        }
170    ]
171}
172EOF
173}
174resource "aws_vpc_endpoint" "vpc_endpoint" {
175  vpc_id                      = aws_vpc.default.id
176  service_name                = "com.amazonaws.${var.AWS_REGION}.secretsmanager"
177  vpc_endpoint_type           = "Interface"
178
179  subnet_ids                  = [aws_subnet.private_subnet.id]
180  security_group_ids          = [aws_security_group.db.id]
181  private_dns_enabled         = true
182}
183       {
184            "Effect": "Allow",
185            "Action": "secretsmanager:GetSecretValue",
186            "Resource": [
187              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}",
188              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}/*"
189            ]
190        }
191

1def test_secret():
2
3    secret = "mysecret"
4    region = "MY-REGION" :)
5    
6    session = boto3.session.Session()
7    client = session.client(
8        service_name="secretsmanager",
9        region_name=region
10    )
11    secret_value_response = client.get_secret_value(SecretId=secret)
12
13    try:
14        result =  json.loads(secret_value_response["SecretString"])
15
16    except Exception as e:
17        result = "Error found: {}".format(e)
18    return result
19
20
21def handler(event, context):
22
23    get_secrets = test_secret() # THE CODE FAIL HERE IN CLOUDWATCH
24
25    try:
26        some_string = event["queryStringParameters"]["some_string"]
27
28        response = {}
29
30        response["statusCode"] = 200
31        response["body"] = some_string + " " + get_secrets["name"]
32
33        print("secrets: ", some_string + " " + get_secrets["name"])
34
35    except Exception as e:
36        response = "Error: {}".format(e)
37
38    return response
39resource "aws_security_group" "db" {
40  name   = "db"
41  vpc_id = aws_vpc.default.id
42
43  ingress {
44    from_port   = 443
45    to_port     = 443
46    protocol    = "tcp"
47    cidr_blocks = ["0.0.0.0/0"]
48  }
49
50  ingress {
51    from_port   = 5432
52    to_port     = 5432
53    protocol    = "tcp"
54    cidr_blocks = ["0.0.0.0/0"]
55  }
56
57  egress {
58    from_port   = 0
59    to_port     = 0
60    protocol    = "-1"
61    cidr_blocks = ["0.0.0.0/0"]
62  }
63}
64
65resource "aws_lambda_function" "lambda_test" {
66  function_name       = "lambda-test"
67  ...
68
69  # Attach Lambda to VPC
70  vpc_config {
71    subnet_ids = [aws_subnet.private_subnet.id]
72    security_group_ids = [aws_security_group.db.id]
73  }
74}
75
76resource "aws_iam_policy" "lambda_test" {
77  name        = "lambda-test"
78
79  policy = <<EOF
80{
81    "Version": "2012-10-17",
82    "Statement": [
83        {
84            "Effect": "Allow",
85            "Action": [
86                "logs:CreateLogStream",
87                "logs:CreateLogGroup",
88                "logs:PutLogEvents",
89                "ec2:DescribeSecurityGroups",
90                "ec2:DescribeSubnets",
91                "ec2:DescribeVpcs",
92                "ec2:DescribeNetworkInterfaces",
93                "ec2:CreateNetworkInterface",
94                "ec2:DeleteNetworkInterface",
95                "ec2:AttachNetworkInterface",
96                "ec2:AssignPrivateIpAddresses",
97                "ec2:UnassignPrivateIpAddresses",
98                "autoscaling:CompleteLifecycleAction",
99                "secretsmanager:GetSecretValue"
100            ],
101            "Resource": [
102              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}",
103              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}/*"
104            ]
105        },
106        {
107            "Effect": "Allow",
108            "Action": "secretsmanager:GetSecretValue",
109            "Resource": [
110              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}",
111              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}/*"
112            ]
113        }
114    ]
115}
116EOF
117}
118
119resource "aws_iam_role" "lambda_test_role" {
120  name = "lambda-test-role"
121
122  assume_role_policy = <<EOF
123{
124  "Version": "2012-10-17",
125  "Id": "",
126  "Statement": [
127    {
128      "Action": "sts:AssumeRole",
129      "Principal": {
130        "Service": [
131          "lambda.amazonaws.com",
132          "secretsmanager.amazonaws.com"
133        ]
134      },
135      "Effect": "Allow",
136      "Sid": ""
137    }
138  ]
139}
140EOF
141}
142
143resource "aws_iam_role_policy_attachment" "lambda_test" {
144  policy_arn  = aws_iam_policy.lambda_test.arn
145  role        = aws_iam_role.lambda_test_role.name
146}
147
148resource "aws_iam_role_policy_attachment" "lambda_test_vpc_access" {
149  policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole"
150  role        = aws_iam_role.lambda_test_role.name
151}
152resource "aws_vpc_endpoint" "vpc_endpoint" {
153  vpc_id                      = aws_vpc.default.id
154  service_name                = "com.amazonaws.${var.AWS_REGION}.secretsmanager"
155  vpc_endpoint_type           = "Interface"
156
157  security_group_ids          = [aws_security_group.db.id]
158  private_dns_enabled         = true
159
160  policy                      = <<EOF
161{
162    "Version": "2012-10-17",
163    "Statement": [
164        {
165          "Effect": "Allow",
166          "Action": "*",
167          "Principal": "*",
168          "Resource": "*"
169        }
170    ]
171}
172EOF
173}
174resource "aws_vpc_endpoint" "vpc_endpoint" {
175  vpc_id                      = aws_vpc.default.id
176  service_name                = "com.amazonaws.${var.AWS_REGION}.secretsmanager"
177  vpc_endpoint_type           = "Interface"
178
179  subnet_ids                  = [aws_subnet.private_subnet.id]
180  security_group_ids          = [aws_security_group.db.id]
181  private_dns_enabled         = true
182}
183       {
184            "Effect": "Allow",
185            "Action": "secretsmanager:GetSecretValue",
186            "Resource": [
187              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}",
188              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}/*"
189            ]
190        }
191   {
192        "Effect": "Allow",
193        "Action": "secretsmanager:GetSecretValue",
194        "Resource": "${data.aws_secretsmanager_secret.my_secret.arn}"
195    }
196

1def test_secret():
2
3    secret = "mysecret"
4    region = "MY-REGION" :)
5    
6    session = boto3.session.Session()
7    client = session.client(
8        service_name="secretsmanager",
9        region_name=region
10    )
11    secret_value_response = client.get_secret_value(SecretId=secret)
12
13    try:
14        result =  json.loads(secret_value_response["SecretString"])
15
16    except Exception as e:
17        result = "Error found: {}".format(e)
18    return result
19
20
21def handler(event, context):
22
23    get_secrets = test_secret() # THE CODE FAIL HERE IN CLOUDWATCH
24
25    try:
26        some_string = event["queryStringParameters"]["some_string"]
27
28        response = {}
29
30        response["statusCode"] = 200
31        response["body"] = some_string + " " + get_secrets["name"]
32
33        print("secrets: ", some_string + " " + get_secrets["name"])
34
35    except Exception as e:
36        response = "Error: {}".format(e)
37
38    return response
39resource "aws_security_group" "db" {
40  name   = "db"
41  vpc_id = aws_vpc.default.id
42
43  ingress {
44    from_port   = 443
45    to_port     = 443
46    protocol    = "tcp"
47    cidr_blocks = ["0.0.0.0/0"]
48  }
49
50  ingress {
51    from_port   = 5432
52    to_port     = 5432
53    protocol    = "tcp"
54    cidr_blocks = ["0.0.0.0/0"]
55  }
56
57  egress {
58    from_port   = 0
59    to_port     = 0
60    protocol    = "-1"
61    cidr_blocks = ["0.0.0.0/0"]
62  }
63}
64
65resource "aws_lambda_function" "lambda_test" {
66  function_name       = "lambda-test"
67  ...
68
69  # Attach Lambda to VPC
70  vpc_config {
71    subnet_ids = [aws_subnet.private_subnet.id]
72    security_group_ids = [aws_security_group.db.id]
73  }
74}
75
76resource "aws_iam_policy" "lambda_test" {
77  name        = "lambda-test"
78
79  policy = <<EOF
80{
81    "Version": "2012-10-17",
82    "Statement": [
83        {
84            "Effect": "Allow",
85            "Action": [
86                "logs:CreateLogStream",
87                "logs:CreateLogGroup",
88                "logs:PutLogEvents",
89                "ec2:DescribeSecurityGroups",
90                "ec2:DescribeSubnets",
91                "ec2:DescribeVpcs",
92                "ec2:DescribeNetworkInterfaces",
93                "ec2:CreateNetworkInterface",
94                "ec2:DeleteNetworkInterface",
95                "ec2:AttachNetworkInterface",
96                "ec2:AssignPrivateIpAddresses",
97                "ec2:UnassignPrivateIpAddresses",
98                "autoscaling:CompleteLifecycleAction",
99                "secretsmanager:GetSecretValue"
100            ],
101            "Resource": [
102              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}",
103              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}/*"
104            ]
105        },
106        {
107            "Effect": "Allow",
108            "Action": "secretsmanager:GetSecretValue",
109            "Resource": [
110              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}",
111              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}/*"
112            ]
113        }
114    ]
115}
116EOF
117}
118
119resource "aws_iam_role" "lambda_test_role" {
120  name = "lambda-test-role"
121
122  assume_role_policy = <<EOF
123{
124  "Version": "2012-10-17",
125  "Id": "",
126  "Statement": [
127    {
128      "Action": "sts:AssumeRole",
129      "Principal": {
130        "Service": [
131          "lambda.amazonaws.com",
132          "secretsmanager.amazonaws.com"
133        ]
134      },
135      "Effect": "Allow",
136      "Sid": ""
137    }
138  ]
139}
140EOF
141}
142
143resource "aws_iam_role_policy_attachment" "lambda_test" {
144  policy_arn  = aws_iam_policy.lambda_test.arn
145  role        = aws_iam_role.lambda_test_role.name
146}
147
148resource "aws_iam_role_policy_attachment" "lambda_test_vpc_access" {
149  policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole"
150  role        = aws_iam_role.lambda_test_role.name
151}
152resource "aws_vpc_endpoint" "vpc_endpoint" {
153  vpc_id                      = aws_vpc.default.id
154  service_name                = "com.amazonaws.${var.AWS_REGION}.secretsmanager"
155  vpc_endpoint_type           = "Interface"
156
157  security_group_ids          = [aws_security_group.db.id]
158  private_dns_enabled         = true
159
160  policy                      = <<EOF
161{
162    "Version": "2012-10-17",
163    "Statement": [
164        {
165          "Effect": "Allow",
166          "Action": "*",
167          "Principal": "*",
168          "Resource": "*"
169        }
170    ]
171}
172EOF
173}
174resource "aws_vpc_endpoint" "vpc_endpoint" {
175  vpc_id                      = aws_vpc.default.id
176  service_name                = "com.amazonaws.${var.AWS_REGION}.secretsmanager"
177  vpc_endpoint_type           = "Interface"
178
179  subnet_ids                  = [aws_subnet.private_subnet.id]
180  security_group_ids          = [aws_security_group.db.id]
181  private_dns_enabled         = true
182}
183       {
184            "Effect": "Allow",
185            "Action": "secretsmanager:GetSecretValue",
186            "Resource": [
187              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}",
188              "arn:aws:lambda:::${data.aws_secretsmanager_secret.my_secret.arn}/*"
189            ]
190        }
191   {
192        "Effect": "Allow",
193        "Action": "secretsmanager:GetSecretValue",
194        "Resource": "${data.aws_secretsmanager_secret.my_secret.arn}"
195    }
196            "Effect": "Allow",
197            "Action": [
198                "logs:CreateLogStream",
199                "logs:CreateLogGroup",
200                "logs:PutLogEvents",
201                "ec2:DescribeSecurityGroups",
202                "ec2:DescribeSubnets",
203                "ec2:DescribeVpcs",
204                "ec2:DescribeNetworkInterfaces",
205                "ec2:CreateNetworkInterface",
206                "ec2:DeleteNetworkInterface",
207                "ec2:AttachNetworkInterface",
208                "ec2:AssignPrivateIpAddresses",
209                "ec2:UnassignPrivateIpAddresses",
210                "autoscaling:CompleteLifecycleAction",
211                "secretsmanager:GetSecretValue"
212            ],
213            "Resource": [
214              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}",
215              "arn:aws:lambda:::${aws_lambda_function.lambda_test.arn}/*"
216            ]
217

1- Finding latest version of hashicorp/archive...
2- Finding latest version of hashicorp/aws...
3- Finding latest version of hashicorp/null...
4- Installing hashicorp/null v3.1.0...
5- Installed hashicorp/null v3.1.0 (signed by HashiCorp)
6- Installing hashicorp/archive v2.2.0...
7- Installed hashicorp/archive v2.2.0 (signed by HashiCorp)
8- Installing hashicorp/aws v4.0.0...
9- Installed hashicorp/aws v4.0.0 (signed by HashiCorp)
10Acquiring state lock. This may take a few moments...
11Releasing state lock. This may take a few moments...
12╷
13│ Error: Value for unconfigurable attribute
14│ 
15│   with module.ssm-parameter-store-backup.aws_s3_bucket.this,
16│   on .terraform/modules/ssm-parameter-store-backup/s3_backup.tf line 1, in resource "aws_s3_bucket" "this":
17│    1: resource "aws_s3_bucket" "this" {
18│ 
19│ Can't configure a value for "lifecycle_rule": its value will be decided
20│ automatically based on the result of applying this configuration.
21╵
22╷
23│ Error: Value for unconfigurable attribute
24│ 
25│   with module.ssm-parameter-store-backup.aws_s3_bucket.this,
26│   on .terraform/modules/ssm-parameter-store-backup/s3_backup.tf line 1, in resource "aws_s3_bucket" "this":
27│    1: resource "aws_s3_bucket" "this" {
28│ 
29│ Can't configure a value for "server_side_encryption_configuration": its
30│ value will be decided automatically based on the result of applying this
31│ configuration.
32╵
33╷
34│ Error: Value for unconfigurable attribute
35│ 
36│   with module.ssm-parameter-store-backup.aws_s3_bucket.this,
37│   on .terraform/modules/ssm-parameter-store-backup/s3_backup.tf line 3, in resource "aws_s3_bucket" "this":
38│    3:   acl    = "private"
39│ 
40│ Can't configure a value for "acl": its value will be decided automatically
41│ based on the result of applying this configuration.
42╵
43ERRO[0012] 1 error occurred:
44        * exit status 1
45resource "aws_s3_bucket" "this" {
46  bucket = "${var.project}-${var.environment}-ssm-parameter-store-backups-bucket"
47  acl    = "private"
48
49  server_side_encryption_configuration {
50    rule {
51      apply_server_side_encryption_by_default {
52        kms_master_key_id = data.aws_kms_key.s3.arn
53        sse_algorithm     = "aws:kms"
54      }
55    }
56  }
57
58  lifecycle_rule {
59    id      = "backups"
60    enabled = true
61
62    prefix = "backups/"
63
64    transition {
65      days          = 90
66      storage_class = "GLACIER_IR"
67    }
68
69    transition {
70      days          = 180
71      storage_class = "DEEP_ARCHIVE"
72    }
73
74    expiration {
75      days = 365
76    }
77  }
78
79  tags = {
80    Name        = "${var.project}-${var.environment}-ssm-parameter-store-backups-bucket"
81    Environment = var.environment
82  }
83}
84resource "aws_s3_bucket" "this" {
85  bucket = "${var.project}-${var.environment}-ssm-parameter-store-backups-bucket"
86
87  tags = {
88    Name        = "${var.project}-${var.environment}-ssm-parameter-store-backups-bucket"
89    Environment = var.environment
90  }
91}
92
93resource "aws_s3_bucket_acl" "this" {
94  bucket = aws_s3_bucket.this.id
95  acl    = "private"
96}
97
98resource "aws_s3_bucket_server_side_encryption_configuration" "this" {
99  bucket = aws_s3_bucket.this.id
100
101  rule {
102    apply_server_side_encryption_by_default {
103      kms_master_key_id = data.aws_kms_key.s3.arn
104      sse_algorithm     = "aws:kms"
105    }
106  }
107}
108
109resource "aws_s3_bucket_lifecycle_configuration" "this" {
110  bucket = aws_s3_bucket.this.id
111
112  rule {
113    id     = "backups"
114    status = "Enabled"
115
116    filter {
117      prefix = "backups/"
118    }
119
120    transition {
121      days          = 90
122      storage_class = "GLACIER_IR"
123    }
124
125    transition {
126      days          = 180
127      storage_class = "DEEP_ARCHIVE"
128    }
129
130    expiration {
131      days = 365
132    }
133  }
134}
135

1- Finding latest version of hashicorp/archive...
2- Finding latest version of hashicorp/aws...
3- Finding latest version of hashicorp/null...
4- Installing hashicorp/null v3.1.0...
5- Installed hashicorp/null v3.1.0 (signed by HashiCorp)
6- Installing hashicorp/archive v2.2.0...
7- Installed hashicorp/archive v2.2.0 (signed by HashiCorp)
8- Installing hashicorp/aws v4.0.0...
9- Installed hashicorp/aws v4.0.0 (signed by HashiCorp)
10Acquiring state lock. This may take a few moments...
11Releasing state lock. This may take a few moments...
12╷
13│ Error: Value for unconfigurable attribute
14│ 
15│   with module.ssm-parameter-store-backup.aws_s3_bucket.this,
16│   on .terraform/modules/ssm-parameter-store-backup/s3_backup.tf line 1, in resource "aws_s3_bucket" "this":
17│    1: resource "aws_s3_bucket" "this" {
18│ 
19│ Can't configure a value for "lifecycle_rule": its value will be decided
20│ automatically based on the result of applying this configuration.
21╵
22╷
23│ Error: Value for unconfigurable attribute
24│ 
25│   with module.ssm-parameter-store-backup.aws_s3_bucket.this,
26│   on .terraform/modules/ssm-parameter-store-backup/s3_backup.tf line 1, in resource "aws_s3_bucket" "this":
27│    1: resource "aws_s3_bucket" "this" {
28│ 
29│ Can't configure a value for "server_side_encryption_configuration": its
30│ value will be decided automatically based on the result of applying this
31│ configuration.
32╵
33╷
34│ Error: Value for unconfigurable attribute
35│ 
36│   with module.ssm-parameter-store-backup.aws_s3_bucket.this,
37│   on .terraform/modules/ssm-parameter-store-backup/s3_backup.tf line 3, in resource "aws_s3_bucket" "this":
38│    3:   acl    = "private"
39│ 
40│ Can't configure a value for "acl": its value will be decided automatically
41│ based on the result of applying this configuration.
42╵
43ERRO[0012] 1 error occurred:
44        * exit status 1
45resource "aws_s3_bucket" "this" {
46  bucket = "${var.project}-${var.environment}-ssm-parameter-store-backups-bucket"
47  acl    = "private"
48
49  server_side_encryption_configuration {
50    rule {
51      apply_server_side_encryption_by_default {
52        kms_master_key_id = data.aws_kms_key.s3.arn
53        sse_algorithm     = "aws:kms"
54      }
55    }
56  }
57
58  lifecycle_rule {
59    id      = "backups"
60    enabled = true
61
62    prefix = "backups/"
63
64    transition {
65      days          = 90
66      storage_class = "GLACIER_IR"
67    }
68
69    transition {
70      days          = 180
71      storage_class = "DEEP_ARCHIVE"
72    }
73
74    expiration {
75      days = 365
76    }
77  }
78
79  tags = {
80    Name        = "${var.project}-${var.environment}-ssm-parameter-store-backups-bucket"
81    Environment = var.environment
82  }
83}
84resource "aws_s3_bucket" "this" {
85  bucket = "${var.project}-${var.environment}-ssm-parameter-store-backups-bucket"
86
87  tags = {
88    Name        = "${var.project}-${var.environment}-ssm-parameter-store-backups-bucket"
89    Environment = var.environment
90  }
91}
92
93resource "aws_s3_bucket_acl" "this" {
94  bucket = aws_s3_bucket.this.id
95  acl    = "private"
96}
97
98resource "aws_s3_bucket_server_side_encryption_configuration" "this" {
99  bucket = aws_s3_bucket.this.id
100
101  rule {
102    apply_server_side_encryption_by_default {
103      kms_master_key_id = data.aws_kms_key.s3.arn
104      sse_algorithm     = "aws:kms"
105    }
106  }
107}
108
109resource "aws_s3_bucket_lifecycle_configuration" "this" {
110  bucket = aws_s3_bucket.this.id
111
112  rule {
113    id     = "backups"
114    status = "Enabled"
115
116    filter {
117      prefix = "backups/"
118    }
119
120    transition {
121      days          = 90
122      storage_class = "GLACIER_IR"
123    }
124
125    transition {
126      days          = 180
127      storage_class = "DEEP_ARCHIVE"
128    }
129
130    expiration {
131      days = 365
132    }
133  }
134}
135terraform {
136  required_version = "~> 1.0.11"
137  required_providers {
138    aws  = "~> 3.73.0"
139  }
140}
141

1resource "aws_wafv2_web_acl" "example" {
2  ...
3
4  rule {
5   ...
6
7    action {
8      block {}
9    }
10
11   ...
12}
13resource "aws_wafv2_web_acl" "example" {
14  ...
15
16  rule {
17   ...
18
19    action {
20      count {}
21    }
22
23   ...
24}
25resource "aws_wafv2_web_acl" "example" {
26  ...
27
28  rule {
29   ...
30
31    action = var.action_block
32
33   ...
34  } 
35}
36variable "action_block" {
37  description = "Action of the rule"
38  type         = <whatever type is accepted by aws_wafv2_web_acl->rule->action>
39}
40module "my_waf" {
41  source                   = "../modules/waf"
42  action_block {
43    block {}
44  }
45}
46    dynamic "action" {
47      for_each = var.block  ? [] : [1]
48      content {
49        count {}
50      }
51    }
52
53    dynamic "action" {
54      for_each = var.block ? [1] : []
55      content {
56        block {}
57      }
58    }
59
60  action {
61    dynamic "count" {
62      for_each = var.block ? [] : [1]
63      content {}
64    }
65    dynamic "block" {
66      for_each = var.block ? [1] : []
67      content {}
68    }
69  }
70

1resource "aws_security_group" "sg_oregon" {
2  name        = "tf-sg"
3  description = "Allow web traffics"
4  vpc_id      = aws_vpc.vpc_terraform.id
5
6  ingress = [
7    {
8      description      = "HTTP"
9      from_port        = 80
10      to_port          = 80
11      protocol         = "tcp"
12      cidr_blocks      = ["0.0.0.0/0"]  
13    },
14  {
15      description      = "HTTPS"
16      from_port        = 443
17      to_port          = 443
18      protocol         = "tcp"
19      cidr_blocks      = ["0.0.0.0/0"]  
20  },
21
22    {
23      description      = "SSH"
24      from_port        = 22
25      to_port          = 22
26      protocol         = "tcp"
27      cidr_blocks      = ["0.0.0.0/0"]  
28    }
29  ]
30
31
32  egress = [
33    {
34      description      = "for all outgoing traffics"
35      from_port        = 0
36      to_port          = 0
37      protocol         = "-1"
38      cidr_blocks      = ["0.0.0.0/0"]
39      ipv6_cidr_blocks = ["::/0"]
40      
41    }
42  ]
43
44  tags = {
45    Name = "sg-for-subnet"
46  }
47}
48│ Inappropriate value for attribute "ingress": element 0: attributes "ipv6_cidr_blocks", "prefix_list_ids", "security_groups", and "self" are required.
49
50│ Inappropriate value for attribute "egress": element 0: attributes "prefix_list_ids", "security_groups", and "self" are required.
51resource "aws_security_group" "sg_oregon" {
52  name        = "tf-sg"
53  description = "Allow web traffics"
54  vpc_id      = aws_vpc.vpc_terraform.id
55
56  ingress = [
57    {
58      description      = "HTTP"
59      from_port        = 80
60      to_port          = 80
61      protocol         = "tcp"
62      cidr_blocks      = ["0.0.0.0/0"]  
63      ipv6_cidr_blocks = []
64      prefix_list_ids = []
65      security_groups = []
66      self = false
67    },
68  {
69      description      = "HTTPS"
70      from_port        = 443
71      to_port          = 443
72      protocol         = "tcp"
73      cidr_blocks      = ["0.0.0.0/0"]  
74      ipv6_cidr_blocks = []
75      prefix_list_ids = []
76      security_groups = []
77      self = false      
78  },
79
80    {
81      description      = "SSH"
82      from_port        = 22
83      to_port          = 22
84      protocol         = "tcp"
85      cidr_blocks      = ["0.0.0.0/0"]  
86      ipv6_cidr_blocks = []
87      prefix_list_ids = []
88      security_groups = []
89      self = false      
90    }
91  ]
92
93
94  egress = [
95    {
96      description      = "for all outgoing traffics"
97      from_port        = 0
98      to_port          = 0
99      protocol         = "-1"
100      cidr_blocks      = ["0.0.0.0/0"]
101      ipv6_cidr_blocks = ["::/0"]
102      prefix_list_ids = []
103      security_groups = []
104      self = false
105    }
106  ]
107
108  tags = {
109    Name = "sg-for-subnet"
110  }
111}
112