pulumi-aws-kotlin/com.pulumi.aws.lambda.kotlin/LayerVersionPermission

LayerVersionPermission

class LayerVersionPermission : KotlinCustomResource

Provides a Lambda Layer Version Permission resource. It allows you to share you own Lambda Layers to another account by account ID, to all accounts in AWS organization or even to all AWS accounts. For information about Lambda Layer Permissions and how to use them, see 1

NOTE: Setting skip_destroy to true means that the AWS Provider will not destroy any layer version permission, even when running pulumi destroy. Layer version permissions are thus intentional dangling resources that are not managed by Pulumi and may incur extra expense in your AWS account.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.lambda.LayerVersionPermission;
import com.pulumi.aws.lambda.LayerVersionPermissionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var lambdaLayerPermission = new LayerVersionPermission("lambdaLayerPermission", LayerVersionPermissionArgs.builder()
            .action("lambda:GetLayerVersion")
            .layerName("arn:aws:lambda:us-west-2:123456654321:layer:test_layer1")
            .principal("111111111111")
            .statementId("dev-account")
            .versionNumber(1)
            .build());
    }
}

Import

Using pulumi import, import Lambda Layer Permissions using layer_name and version_number, separated by a comma (,). For example:

$ pulumi import aws:lambda/layerVersionPermission:LayerVersionPermission example arn:aws:lambda:us-west-2:123456654321:layer:test_layer1,1

Properties

action

val action: Output<String>

Action, which will be allowed. lambda:GetLayerVersion value is suggested by AWS documantation.

val id: Output<String>

layerName

val layerName: Output<String>

The name or ARN of the Lambda Layer, which you want to grant access to.

organizationId

val organizationId: Output<String>?

An identifier of AWS Organization, which should be able to use your Lambda Layer. principal should be equal to * if organization_id provided.

policy

val policy: Output<String>

Full Lambda Layer Permission policy.

principal

val principal: Output<String>

AWS account ID which should be able to use your Lambda Layer. * can be used here, if you want to share your Lambda Layer widely.

pulumiChildResources

val pulumiChildResources: Set<KotlinResource>

pulumiResourceName

val pulumiResourceName: String

pulumiResourceType

val pulumiResourceType: String

revisionId

val revisionId: Output<String>

A unique identifier for the current revision of the policy.

skipDestroy

val skipDestroy: Output<Boolean>?

Whether to retain the old version of a previously deployed Lambda Layer. Default is false. When this is not set to true, changing any of compatible_architectures, compatible_runtimes, description, filename, layer_name, license_info, s3_bucket, s3_key, s3_object_version, or source_code_hash forces deletion of the existing layer version and creation of a new layer version.

statementId

val statementId: Output<String>

The name of Lambda Layer Permission, for example dev-account - human readable note about what is this permission for.

urn

val urn: Output<String>

versionNumber

val versionNumber: Output<Int>

Version of Lambda Layer, which you want to grant access to. Note: permissions only apply to a single version of a layer.