aws_lambda Resource

Use the aws_lambda resource to test a specific AWS Lambda function.

Install

This resource is available in the Chef InSpec AWS resource pack.

For information on configuring your AWS environment for Chef InSpec and creating an InSpec profile that uses the InSpec AWS resource pack, see the Chef InSpec documentation on the AWS cloud platform.

Syntax

describe aws_lambda('LAMBDA_FUNCTION') do
    it { should exist}
    its ('handler') { should eq 'main.on_event'}
    its ('version') { should eq '$LATEST' }
    its ('runtime') { should eq 'python3.7' }
end

Parameters

This resource expects the name of the AWS Lambda function.

Properties

This resource can test all properties defined by the Aws::lambda::Types::GetFunctionResponse class.

Examples

Test that all lambda functions with a particular tag is correctly deployed.

describe aws_lambda('LAMBDA_FUNCTION') do
    it { should exist}
    its ('handler') { should eq 'main.on_event'}
    its ('version') { should eq '$LATEST' }
    its ('runtime') { should eq 'python3.7' }
end

Matchers

This InSpec audit resource uses the standard matchers. For a full list of available matchers, visit the InSpec matchers page.

AWS Permissions

Your Principal will need the Lambda:Client:GetFunctionResponse action with Effect set to Allow.

You can find detailed documentation at AWS Lambda