Skip to main content
A VPC-bound Lambda function that reads its dependencies from environment variables instead of hardcoded values. One forma reconciles the foundation (a VPC with private subnets, security groups, an IAM execution role, S3 buckets, and an RDS Postgres database), and a second forma patches in the function once its deployment package is in the deployment bucket. The function’s environment variables resolve to the database endpoint and bucket names at apply time. Deploy. First reconcile the foundational infrastructure. Then, once the deployment package is uploaded to the deployment bucket, patch in the function:
Verify. Once the function is applied, it is under management:
Tear down. Remove the function first, then the foundation:
The full forma is in the lambda-env example.