aws_lambda resource
Use the aws_lambda
resource to test a specific AWS Lambda function.
Syntax
describe aws_lambda('LAMBDA_FUNCTION') do
it { should exist}
its ('handler') { should eq 'main.on_event'}
its ('version') { should eq '$LATEST' }
its ('runtime') { should eq 'python3.7' }
end
Parameters
This resource expects the name of the AWS Lambda function.
Properties
This resource can test all properties defined by the Aws::lambda::Types::GetFunctionResponse class.
Examples
Test that all lambda functions with a particular tag is correctly deployed:
describe aws_lambda('LAMBDA_FUNCTION') do
it { should exist}
its ('handler') { should eq 'main.on_event'}
its ('version') { should eq '$LATEST' }
its ('runtime') { should eq 'python3.7' }
end
Matchers
This InSpec audit resource uses the standard matchers. For a full list of available matchers, visit the InSpec matchers page.
AWS Permissions
Your AWS principal will need the Lambda:Client:GetFunctionResponse
action with Effect
set to Allow
.
You can find detailed documentation at AWS Lambda