terraform 0.14 compat

Author: amancevice

main.tf

@@ -9,7 +9,7 @@ terraform {
 
     archive = {
       source  = "hashicorp/archive"
-      version = "~> 1.2"
+      version = "~> 2.0"
     }
   }
 }
@@ -71,78 +71,73 @@ locals {
 
 # HTTP API
 
-resource aws_apigatewayv2_integration proxy {
+resource "aws_apigatewayv2_integration" "proxy" {
   api_id               = local.http_api.id
   connection_type      = "INTERNET"
   description          = local.http_api.integration_description
   integration_method   = "POST"
   integration_type     = "AWS_PROXY"
   integration_uri      = aws_lambda_function.api.invoke_arn
-  passthrough_behavior = "WHEN_NO_MATCH"
   timeout_milliseconds = 3000
-
-  lifecycle {
-    ignore_changes = [passthrough_behavior]
-  }
 }
 
-resource aws_apigatewayv2_route post_callbacks {
+resource "aws_apigatewayv2_route" "post_callbacks" {
   api_id             = local.http_api.id
   route_key          = "POST ${local.http_api.route_prefix}callbacks"
   authorization_type = "NONE"
   target             = "integrations/${aws_apigatewayv2_integration.proxy.id}"
 }
 
-resource aws_apigatewayv2_route post_events {
+resource "aws_apigatewayv2_route" "post_events" {
   api_id             = local.http_api.id
   route_key          = "POST ${local.http_api.route_prefix}events"
   authorization_type = "NONE"
   target             = "integrations/${aws_apigatewayv2_integration.proxy.id}"
 }
 
-resource aws_apigatewayv2_route get_health {
+resource "aws_apigatewayv2_route" "get_health" {
   api_id             = local.http_api.id
   route_key          = "GET ${local.http_api.route_prefix}health"
   authorization_type = "NONE"
   target             = "integrations/${aws_apigatewayv2_integration.proxy.id}"
 }
 
-resource aws_apigatewayv2_route get_install {
+resource "aws_apigatewayv2_route" "get_install" {
   api_id             = local.http_api.id
   route_key          = "GET ${local.http_api.route_prefix}install"
   authorization_type = "NONE"
   target             = "integrations/${aws_apigatewayv2_integration.proxy.id}"
 }
 
-resource aws_apigatewayv2_route head_install {
+resource "aws_apigatewayv2_route" "head_install" {
   api_id             = local.http_api.id
   route_key          = "HEAD ${local.http_api.route_prefix}install"
   authorization_type = "NONE"
   target             = "integrations/${aws_apigatewayv2_integration.proxy.id}"
 }
 
-resource aws_apigatewayv2_route head_health {
+resource "aws_apigatewayv2_route" "head_health" {
   api_id             = local.http_api.id
   route_key          = "HEAD ${local.http_api.route_prefix}health"
   authorization_type = "NONE"
   target             = "integrations/${aws_apigatewayv2_integration.proxy.id}"
 }
 
-resource aws_apigatewayv2_route get_oauth {
+resource "aws_apigatewayv2_route" "get_oauth" {
   api_id             = local.http_api.id
   route_key          = "GET ${local.http_api.route_prefix}oauth"
   authorization_type = "NONE"
   target             = "integrations/${aws_apigatewayv2_integration.proxy.id}"
 }
 
-resource aws_apigatewayv2_route get_oauth_v2 {
+resource "aws_apigatewayv2_route" "get_oauth_v2" {
   api_id             = local.http_api.id
   route_key          = "GET ${local.http_api.route_prefix}oauth/v2"
   authorization_type = "NONE"
   target             = "integrations/${aws_apigatewayv2_integration.proxy.id}"
 }
 
-resource aws_apigatewayv2_route post_slash_cmd {
+resource "aws_apigatewayv2_route" "post_slash_cmd" {
   api_id             = local.http_api.id
   route_key          = "POST ${local.http_api.route_prefix}slash/{proxy+}"
   authorization_type = "NONE"
@@ -151,15 +146,15 @@ resource aws_apigatewayv2_route post_slash_cmd {
 
 # LOG GROUPS
 
-resource aws_cloudwatch_log_group logs {
+resource "aws_cloudwatch_log_group" "logs" {
   name              = "/aws/lambda/${aws_lambda_function.api.function_name}"
   retention_in_days = local.log_group.retention_in_days
   tags              = local.log_group.tags
 }
 
 # LAMBDA FUNCTIONS
 
-resource aws_lambda_function api {
+resource "aws_lambda_function" "api" {
   description      = local.lambda.description
   filename         = local.lambda.filename
   function_name    = local.lambda.function_name
@@ -185,17 +180,17 @@ resource aws_lambda_function api {
 
 # SNS TOPIC
 
-resource aws_sns_topic topic {
+resource "aws_sns_topic" "topic" {
   name = local.topic.name
 }
 
 # IAM
 
-data aws_secretsmanager_secret secret {
+data "aws_secretsmanager_secret" "secret" {
   name = local.secret.name
 }
 
-data aws_iam_policy_document assume_role {
+data "aws_iam_policy_document" "assume_role" {
   statement {
     actions = ["sts:AssumeRole"]
 
@@ -206,7 +201,7 @@ data aws_iam_policy_document assume_role {
   }
 }
 
-data aws_iam_policy_document api {
+data "aws_iam_policy_document" "api" {
   statement {
     sid       = "DecryptKmsKey"
     actions   = ["kms:Decrypt"]
@@ -238,21 +233,21 @@ data aws_iam_policy_document api {
   }
 }
 
-resource aws_iam_role role {
+resource "aws_iam_role" "role" {
   assume_role_policy = data.aws_iam_policy_document.assume_role.json
   description        = local.role.description
   name               = local.role.name
   path               = local.role.path
   tags               = local.role.tags
 }
 
-resource aws_iam_role_policy api {
+resource "aws_iam_role_policy" "api" {
   name   = "api"
   role   = aws_iam_role.role.id
   policy = data.aws_iam_policy_document.api.json
 }
 
-resource aws_lambda_permission invoke_api {
+resource "aws_lambda_permission" "invoke_api" {
   count         = length(local.lambda.permissions)
   action        = "lambda:InvokeFunction"
   function_name = aws_lambda_function.api.arn

outputs.tf

@@ -1,19 +1,19 @@
-output lambda {
+output "lambda" {
   description = "API Gateway REST API proxy Lambda"
   value       = aws_lambda_function.api
 }
 
-output role {
+output "role" {
   description = "Lambda function role"
   value       = aws_iam_role.role
 }
 
-output secret {
+output "secret" {
   description = "SecretsManager secret"
   value       = data.aws_secretsmanager_secret.secret
 }
 
-output topic {
+output "topic" {
   description = "Slackbot SNS topic"
   value       = aws_sns_topic.topic
 }

variables.tf

@@ -1,118 +1,118 @@
-variable base_path {
+variable "base_path" {
   description = "Slack API base path"
   default     = "/"
 }
 
-variable debug {
+variable "debug" {
   description = "Node debug logger config"
   default     = "slackend:*"
 }
 
-variable http_api_execution_arn {
+variable "http_api_execution_arn" {
   description = "API Gateway v2 HTTP API execution ARN"
 }
 
-variable http_api_id {
+variable "http_api_id" {
   description = "API Gateway v2 HTTP API ID"
 }
 
-variable http_api_integration_description {
+variable "http_api_integration_description" {
   description = "API Gateway v2 HTTP API integration description"
   default     = "Slack request Lambda integration"
 }
 
-variable http_api_route_prefix {
+variable "http_api_route_prefix" {
   description = "API Gateway v2 HTTP API route prefix"
   default     = "/"
 }
 
-variable lambda_description {
+variable "lambda_description" {
   description = "Lambda function description"
   default     = "Slack request handler"
 }
 
-variable lambda_function_name {
+variable "lambda_function_name" {
   description = "Lambda function name"
 }
 
-variable lambda_handler {
+variable "lambda_handler" {
   description = "Lambda handler signature"
   default     = "index.handler"
 }
 
-variable lambda_kms_key_arn {
+variable "lambda_kms_key_arn" {
   description = "Lambda function KMS key ARN"
   default     = null
 }
 
-variable lambda_publish {
+variable "lambda_publish" {
   description = "Lambda publish flag"
   default     = false
   type        = bool
 }
 
-variable lambda_memory_size {
+variable "lambda_memory_size" {
   description = "Lambda function memory size"
   default     = 1024
 }
 
-variable lambda_permissions {
+variable "lambda_permissions" {
   description = "Lambda permissions for API Gateway v2 HTTP API"
   type        = list(string)
   default     = []
 }
 
-variable lambda_runtime {
+variable "lambda_runtime" {
   description = "Lambda function runtime"
   default     = "nodejs12.x"
 }
 
-variable lambda_tags {
+variable "lambda_tags" {
   description = "Lambda function resource tags"
   type        = map(string)
   default     = {}
 }
 
-variable lambda_timeout {
+variable "lambda_timeout" {
   description = "Lambda function timeout in seconds"
   default     = 3
 }
 
-variable log_group_retention_in_days {
+variable "log_group_retention_in_days" {
   description = "CloudWatch log group retention in days"
   default     = null
 }
 
-variable log_group_tags {
+variable "log_group_tags" {
   description = "CloudWatch log group resource tags"
   type        = map(string)
   default     = {}
 }
 
-variable role_description {
+variable "role_description" {
   description = "Lambda role description"
   default     = "Slackbot resource access"
 }
 
-variable role_name {
+variable "role_name" {
   description = "Lambda role name"
 }
 
-variable role_path {
+variable "role_path" {
   description = "Lambda role path"
   default     = null
 }
 
-variable role_tags {
+variable "role_tags" {
   description = "Lambda role resource tags"
   type        = map(string)
   default     = {}
 }
 
-variable secret_name {
+variable "secret_name" {
   description = "SecretsManager secret name"
 }
 
-variable topic_name {
+variable "topic_name" {
   description = "SNS topic name"
 }