FlywayServiceLambda.java

        Function flywayServiceLambda = new Function(
                this,
                "runner",
                FunctionProps.builder()
                        .environment(
                                Map.of(
                                        "S3_BUCKET", migrationFilesBucket.getBucketName(),
                                        "DB_CONNECTION_STRING", String.format("jdbc:mysql://{}/{}", options.databaseInstance.getDbInstanceEndpointAddress(), options.getDatabaseName()),
                                        "DB_SECRET", options.databaseInstance.getSecret().getSecretFullArn()))
                        .runtime(Runtime.JAVA_11)
                        .code(
                                Code.fromAsset(
                                        "../../FlywayLambdaService/",
                                        AssetOptions.builder()
                                                .bundling(builderOptions)
                                                .build()))
                        .timeout(Duration.minutes(15))
                        .memorySize(2048)
                        .handler("com.geekoosh.flyway.FlywayHandler::handleRequest")
                        .vpc(options.vpc)
                        .securityGroups(options.databaseInstance.getConnections().getSecurityGroups())
                        .build());

        // Let Flyway Lambda get DB creds
        options.databaseInstance.getSecret().grantRead(flywayServiceLambda);

        // Let Flyway Lambda access the DB
        options.databaseInstance.getConnections().allowDefaultPortInternally();

        // Let Flyway Lambda access the migration files bucket
        migrationFilesBucket.grantRead(flywayServiceLambda);