将 CloudFormation 移植到 Terraform:S3 存储桶通知配置

Question

在将 cloudformation 模板移植到 terraform 的过程中，在将以下 NotificationConfiguration、LambdaConfiguration 属性映射到它们在 terraform 中的等效属性时遇到问题。

 "CloudTrailS3Bucket" : {
  "DependsOn" : "TriggerLambdaPermission",
  "Type" : "AWS::S3::Bucket",
  "Properties" : {
    "BucketName" : { "Ref" : "CloudTrailBucketName" },
    "NotificationConfiguration" : {
      "LambdaConfigurations" : [
        {
          "Event" : "s3:ObjectCreated:*",
          "Function" : { "Fn::GetAtt" : [ "AutoTagLambdaFunction", "Arn" ] }
        }
      ]
    }
  }
}

到目前为止，我在 terraform 模块中拥有以下内容，但不确定我是否以正确的方式做到这一点：

resource "aws_s3_bucket" "CloudTrailS3Bucket" {
 bucket = "${var.CloudTrailBucketName}"
}

resource "aws_s3_bucket_notification" "bucket_notification" {
 bucket = "${aws_s3_bucket.CloudTrailS3Bucket.id}"
 topic {
  topic_arn     = "${aws_sns_topic.topic.arn}"
  events        = ["s3:ObjectCreated:*"]
 }
}

Answer 1

不，在 cloudformation 模板中，触发器是 lambda 事件 (s3：ObjectCreated(，但在您的代码中，您使用简单通知服务 (SNS(

请仔细阅读本文档中的部分

s3 存储桶通知 - 将通知配置添加到 Lambda 函数

示例代码：

resource "aws_s3_bucket" "bucket" {
  bucket = "your_bucket_name"
}
resource "aws_s3_bucket_notification" "bucket_notification" {
  bucket = "${aws_s3_bucket.bucket.id}"
  lambda_function {
    lambda_function_arn = "${aws_lambda_function.func.arn}"
    events              = ["s3:ObjectCreated:*"]
    filter_prefix       = "AWSLogs/"
    filter_suffix       = ".log"
  }
}