在Terraform中创建S3桶通知时出错

Question

在创建bucket通知以触发Lambda函数时遇到问题。错误:

Error putting S3 notification configuration: InvalidArgument: Unable to validate the following destination configurations
status code: 400

我读到过类似的问题可能是由创建资源的顺序或缺少Lambda权限引起的。然而，我尝试在我的代码中包括depends_on，并应用模板几次，然后等待。我用的是限制最少的策略。我还尝试使用来自Terraform文档的确切示例代码，但这给了我一个完全不同的错误。

如果在控制台中创建，则完全相同的设置可以正常工作。

这是我的代码中有问题的部分:

resource "aws_lambda_function" "writeUsersToDB" {
filename      = "writeUsersToDB.zip"
function_name = "writeUsersToDB"
role          = "arn:aws:iam::0000000:role/AWSLambdaFullAccess"
handler       = "main.lambda_handler"
memory_size = 256
timeout = 900
source_code_hash = filebase64sha256("writeUsersToDB.zip")
runtime = "python3.8"
environment {variables = local.parameters}
layers = [ "arn:aws:lambda:eu-west-2:0000000:layer:pandas-pandas-schema-numpy:1" ]
}

resource "aws_s3_bucket_notification" "event" {
bucket = aws_s3_bucket.user_data.id
lambda_function {
lambda_function_arn = aws_lambda_function.writeUsersToDB.arn
events              = ["s3:ObjectCreated:*"]
filter_suffix       = ".csv"
}
depends_on = [aws_lambda_function.writeUsersToDB]
}

resource "aws_s3_bucket" "user_data" {
bucket = "nameofthebucket"
}

Answer 1

您缺少aws_lambda_permission:

resource "aws_lambda_permission" "example" {
statement_id  = "AllowExecutionFromS3Bucket"
action        = "lambda:InvokeFunction"
function_name = aws_lambda_function.writeUsersToDB.function_name
principal     = "s3.amazonaws.com"
source_arn    = aws_s3_bucket.user_data.arn
}