feat: parameterize runtime and default to al2023 (#194)

This commit adopts the most recent available runtime and paramterizes
the field in the process. There are no operational considerations for
migrating from `provided.al2` to `provided.al2023`.

Author: João Taveira Araújo

modules/forwarder/README.md

@@ -106,6 +106,7 @@ module "forwarder" {
 | <a name="input_destination"></a> [destination](#input\_destination) | Destination filedrop | <pre>object({<br>    arn    = optional(string, "")<br>    bucket = optional(string, "")<br>    prefix = optional(string, "")<br>    # exclusively for backward compatible HTTP endpoint<br>    uri = optional(string, "")<br>  })</pre> | n/a | yes |
 | <a name="input_lambda_env_vars"></a> [lambda\_env\_vars](#input\_lambda\_env\_vars) | Environment variables to be passed into lambda. | `map(string)` | `{}` | no |
 | <a name="input_lambda_memory_size"></a> [lambda\_memory\_size](#input\_lambda\_memory\_size) | Memory size for lambda function. | `number` | `null` | no |
+| <a name="input_lambda_runtime"></a> [lambda\_runtime](#input\_lambda\_runtime) | Lambda runtime. | `string` | `"provided.al2023"` | no |
 | <a name="input_lambda_timeout"></a> [lambda\_timeout](#input\_lambda\_timeout) | Timeout in seconds for lambda function. | `number` | `null` | no |
 | <a name="input_max_file_size"></a> [max\_file\_size](#input\_max\_file\_size) | Max file size for objects to process (in bytes), default is 1GB | `number` | `null` | no |
 | <a name="input_name"></a> [name](#input\_name) | Name of role. Since this name must be unique within the<br>account, it will be reused for most of the resources created by this<br>module. | `string` | n/a | yes |

modules/forwarder/lambda.tf

@@ -5,7 +5,7 @@ resource "aws_lambda_function" "this" {
   role          = aws_iam_role.this.arn
   architectures = ["arm64"]
   handler       = "bootstrap"
-  runtime       = "provided.al2"
+  runtime       = var.lambda_runtime
   memory_size   = var.lambda_memory_size != null ? var.lambda_memory_size : local.default_limits.memory_size
   timeout       = var.lambda_timeout != null ? var.lambda_timeout : local.default_limits.timeout
 

modules/forwarder/variables.tf

@@ -160,6 +160,13 @@ variable "lambda_env_vars" {
   default     = {}
 }
 
+variable "lambda_runtime" {
+  description = "Lambda runtime."
+  type        = string
+  default     = "provided.al2023"
+  nullable    = false
+}
+
 variable "retention_in_days" {
   description = "Retention in days of cloudwatch log group"
   type        = number

modules/logwriter/README.md

@@ -102,6 +102,7 @@ module "logwriter" {
 | <a name="input_filter_pattern"></a> [filter\_pattern](#input\_filter\_pattern) | Subscription filter pattern. | `string` | `null` | no |
 | <a name="input_lambda_env_vars"></a> [lambda\_env\_vars](#input\_lambda\_env\_vars) | Environment variables to be passed into lambda. | `map(string)` | `null` | no |
 | <a name="input_lambda_memory_size"></a> [lambda\_memory\_size](#input\_lambda\_memory\_size) | Memory size for lambda function. | `number` | `null` | no |
+| <a name="input_lambda_runtime"></a> [lambda\_runtime](#input\_lambda\_runtime) | Lambda runtime. | `string` | `null` | no |
 | <a name="input_lambda_timeout"></a> [lambda\_timeout](#input\_lambda\_timeout) | Timeout in seconds for lambda function. | `number` | `null` | no |
 | <a name="input_log_group_name_patterns"></a> [log\_group\_name\_patterns](#input\_log\_group\_name\_patterns) | Subscribe to CloudWatch log groups matching any of the provided patterns<br>based on a case-sensitive substring search. To subscribe to all log groups<br>use the wildcard operator *. | `list(string)` | `null` | no |
 | <a name="input_log_group_name_prefixes"></a> [log\_group\_name\_prefixes](#input\_log\_group\_name\_prefixes) | Subscribe to CloudWatch log groups matching any of the provided prefixes.<br>To subscribe to all log groups use the wildcard operator *. | `list(string)` | `null` | no |

modules/logwriter/subscriber.tf

@@ -15,6 +15,7 @@ module "subscriber" {
   lambda_env_vars                 = var.lambda_env_vars
   lambda_memory_size              = var.lambda_memory_size
   lambda_timeout                  = var.lambda_timeout
+  lambda_runtime                  = var.lambda_runtime
   debug_endpoint                  = var.debug_endpoint
   verbosity                       = var.verbosity
   code_uri                        = var.code_uri

modules/logwriter/variables.tf

@@ -137,6 +137,14 @@ variable "lambda_env_vars" {
   default     = null
 }
 
+variable "lambda_runtime" {
+  description = <<-EOF
+    Lambda runtime.
+  EOF
+  type        = string
+  default     = null
+}
+
 variable "debug_endpoint" {
   description = "Endpoint to send debugging telemetry to. Sets the OTEL_EXPORTER_OTLP_ENDPOINT environment variable for the lambda function."
   type        = string

modules/stack/README.md

@@ -170,8 +170,8 @@ You can additionally configure other submodules in this manner:
 | <a name="input_configsubscription"></a> [configsubscription](#input\_configsubscription) | Variables for AWS Config subscription. | <pre>object({<br>    delivery_bucket_name = string<br>    tag_account_alias    = optional(bool)<br>  })</pre> | `null` | no |
 | <a name="input_debug_endpoint"></a> [debug\_endpoint](#input\_debug\_endpoint) | Endpoint to send debugging telemetry to. Sets OTEL\_EXPORTER\_OTLP\_ENDPOINT environment variable for supported lambda functions. | `string` | `null` | no |
 | <a name="input_destination"></a> [destination](#input\_destination) | Destination filedrop | <pre>object({<br>    arn    = optional(string, "")<br>    bucket = optional(string, "")<br>    prefix = optional(string, "")<br>    # exclusively for backward compatible HTTP endpoint<br>    uri = optional(string, "")<br>  })</pre> | n/a | yes |
-| <a name="input_forwarder"></a> [forwarder](#input\_forwarder) | Variables for forwarder module. | <pre>object({<br>    source_bucket_names                      = optional(list(string), [])<br>    source_object_keys                       = optional(list(string))<br>    source_topic_arns                        = optional(list(string), [])<br>    content_type_overrides                   = optional(list(object({ pattern = string, content_type = string })), [])<br>    max_file_size                            = optional(number)<br>    lambda_memory_size                       = optional(number)<br>    lambda_timeout                           = optional(number)<br>    lambda_env_vars                          = optional(map(string))<br>    retention_in_days                        = optional(number)<br>    queue_max_receive_count                  = optional(number)<br>    queue_delay_seconds                      = optional(number)<br>    queue_message_retention_seconds          = optional(number)<br>    queue_batch_size                         = optional(number)<br>    queue_maximum_batching_window_in_seconds = optional(number)<br>    code_uri                                 = optional(string)<br>    sam_release_version                      = optional(string)<br>  })</pre> | `{}` | no |
-| <a name="input_logwriter"></a> [logwriter](#input\_logwriter) | Variables for AWS CloudWatch Logs collection. | <pre>object({<br>    log_group_name_patterns         = optional(list(string))<br>    log_group_name_prefixes         = optional(list(string))<br>    exclude_log_group_name_prefixes = optional(list(string))<br>    buffering_interval              = optional(number)<br>    buffering_size                  = optional(number)<br>    filter_name                     = optional(string)<br>    filter_pattern                  = optional(string)<br>    num_workers                     = optional(number)<br>    discovery_rate                  = optional(string, "24 hours")<br>    lambda_memory_size              = optional(number)<br>    lambda_timeout                  = optional(number)<br>    code_uri                        = optional(string)<br>    sam_release_version             = optional(string)<br>  })</pre> | `null` | no |
+| <a name="input_forwarder"></a> [forwarder](#input\_forwarder) | Variables for forwarder module. | <pre>object({<br>    source_bucket_names                      = optional(list(string), [])<br>    source_object_keys                       = optional(list(string))<br>    source_topic_arns                        = optional(list(string), [])<br>    content_type_overrides                   = optional(list(object({ pattern = string, content_type = string })), [])<br>    max_file_size                            = optional(number)<br>    lambda_memory_size                       = optional(number)<br>    lambda_timeout                           = optional(number)<br>    lambda_env_vars                          = optional(map(string))<br>    lambda_runtime                           = optional(string)<br>    retention_in_days                        = optional(number)<br>    queue_max_receive_count                  = optional(number)<br>    queue_delay_seconds                      = optional(number)<br>    queue_message_retention_seconds          = optional(number)<br>    queue_batch_size                         = optional(number)<br>    queue_maximum_batching_window_in_seconds = optional(number)<br>    code_uri                                 = optional(string)<br>    sam_release_version                      = optional(string)<br>  })</pre> | `{}` | no |
+| <a name="input_logwriter"></a> [logwriter](#input\_logwriter) | Variables for AWS CloudWatch Logs collection. | <pre>object({<br>    log_group_name_patterns         = optional(list(string))<br>    log_group_name_prefixes         = optional(list(string))<br>    exclude_log_group_name_prefixes = optional(list(string))<br>    buffering_interval              = optional(number)<br>    buffering_size                  = optional(number)<br>    filter_name                     = optional(string)<br>    filter_pattern                  = optional(string)<br>    num_workers                     = optional(number)<br>    discovery_rate                  = optional(string, "24 hours")<br>    lambda_memory_size              = optional(number)<br>    lambda_timeout                  = optional(number)<br>    lambda_env_vars                 = optional(map(string))<br>    lambda_runtime                  = optional(string)<br>    code_uri                        = optional(string)<br>    sam_release_version             = optional(string)<br>  })</pre> | `null` | no |
 | <a name="input_metricstream"></a> [metricstream](#input\_metricstream) | Variables for AWS CloudWatch Metrics Stream collection. | <pre>object({<br>    include_filters     = optional(list(object({ namespace = string, metric_names = optional(list(string)) })))<br>    exclude_filters     = optional(list(object({ namespace = string, metric_names = optional(list(string)) })))<br>    buffering_interval  = optional(number)<br>    buffering_size      = optional(number)<br>    sam_release_version = optional(string)<br>  })</pre> | `null` | no |
 | <a name="input_name"></a> [name](#input\_name) | Name of role. Since this name must be unique within the<br>account, it will be reused for most of the resources created by this<br>module. | `string` | n/a | yes |
 | <a name="input_s3_bucket_lifecycle_expiration"></a> [s3\_bucket\_lifecycle\_expiration](#input\_s3\_bucket\_lifecycle\_expiration) | Expiration in days for S3 objects in collection bucket | `number` | `4` | no |

modules/stack/forwarder.tf

@@ -15,6 +15,7 @@ module "forwarder" {
   lambda_memory_size                       = var.forwarder.lambda_memory_size
   lambda_timeout                           = var.forwarder.lambda_timeout
   lambda_env_vars                          = var.forwarder.lambda_env_vars
+  lambda_runtime                           = var.forwarder.lambda_runtime
   retention_in_days                        = var.forwarder.retention_in_days
   queue_max_receive_count                  = var.forwarder.queue_max_receive_count
   queue_delay_seconds                      = var.forwarder.queue_delay_seconds

modules/stack/logwriter.tf

@@ -15,6 +15,8 @@ module "logwriter" {
   discovery_rate          = var.logwriter.discovery_rate
   lambda_memory_size      = var.logwriter.lambda_memory_size
   lambda_timeout          = var.logwriter.lambda_timeout
+  lambda_env_vars         = var.logwriter.lambda_env_vars
+  lambda_runtime          = var.logwriter.lambda_runtime
   debug_endpoint          = var.debug_endpoint
   verbosity               = var.verbosity
   code_uri                = var.logwriter.code_uri

modules/stack/variables.tf

@@ -37,6 +37,7 @@ variable "forwarder" {
     lambda_memory_size                       = optional(number)
     lambda_timeout                           = optional(number)
     lambda_env_vars                          = optional(map(string))
+    lambda_runtime                           = optional(string)
     retention_in_days                        = optional(number)
     queue_max_receive_count                  = optional(number)
     queue_delay_seconds                      = optional(number)
@@ -91,6 +92,8 @@ variable "logwriter" {
     discovery_rate                  = optional(string, "24 hours")
     lambda_memory_size              = optional(number)
     lambda_timeout                  = optional(number)
+    lambda_env_vars                 = optional(map(string))
+    lambda_runtime                  = optional(string)
     code_uri                        = optional(string)
     sam_release_version             = optional(string)
   })