AWS Lambda with Terraform

example.py

import logging
import os


logger = logging.getLogger()

ACTIONS = {
    'plus': lambda x, y: x + y,
    'minus': lambda x, y: x - y,
    'times': lambda x, y: x * y,
    'divided-by': lambda x, y: x / y}

def lambda_handler(event, context):
    logger.setLevel(os.environ.get('LOG_LEVEL', logging.INFO))
    logger.debug('Event: %s', event)

    action = event.get('action')
    func = ACTIONS.get(action)
    x = event.get('x')
    y = event.get('y')
    result = None
    try:
        if func is not None and x is not None and y is not None:
            result = func(x, y)
            logger.info("%s %s %s is %s", x, action, y, result)
        else:
            logger.error("I can't calculate %s %s %s.", x, action, y)
    except ZeroDivisionError:
        logger.warning("I can't divide %s by 0!", x)

    response = {'result': result}
    return response

lambda_policies.tf

data "aws_iam_policy_document" "example_lambda_policy" {
	statement {
		sid    = "examplePolicyId"
		effect = "Allow"
		principals {
			identifiers = ["lambda.amazonaws.com"]
			type        = "Service"
		}
		actions = ["sts:AssumeRole"]
	}
}

resource "aws_iam_role" "example_lambda_iam" {
	name               = "example_lambda_iam"
	assume_role_policy = data.aws_iam_policy_document.example_lambda_policy.json
}

main.tf

provider "archive" {}
data "archive_file" "example_zip_file" {
	type        = "zip"
	source_file = "example.py"
	output_path = "example.zip"
}

resource "aws_lambda_function" "example_lambda_function" {
	function_name    = "example_function"
	filename          = data.archive_file.example_zip_file.output_path
	# source_code_hash = data.archive_file.exmaple_zip_file.output_base64sha256
	role             = aws_iam_role.example_lambda_iam.arn
	handler          = "example.lambda_handler"
	runtime          = "python3.9"
}

output.tf

output "lambda_function" {
	value = aws_lambda_function.example_lambda_function.qualified_arn
}

variables.tf

variable "aws_region" {
	default = "ap-south-1"
}