Thanks

[jasonheffnerpsu]

This isn't an issue but wanted to thank you for providing this. I look forward to converting our existing code to using this workflow when I get the next chance. In order to accomplish this currently we resorted to this type of workflow.

jobs:
  deploy:
    runs-on: ubuntu-latest

    permissions:
      contents: read   # Default read
      id-token: write   # Required for OIDC token creation

    steps:
    - name: Checkout repository
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4

    - name: Check Python version
      run: python --version

    - name: Assume AWS Role and Configure AWS CLI
      uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a #v4
      with:
        role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
        aws-region: ${{ vars.AWS_REGION }}

    - name: Package and deploy Lambda functions
      env:
        ENVIRONMENT: ${{ github.event.inputs.environment || (startsWith(github.ref, 'refs/tags/prod-') && 'production') || 'development' }}
        S3_BUCKET: ${{ vars.DEPLOY_BUCKET }}
        LAMBDA_ROLE: ${{ secrets.AWS_LAMBDA_ROLE }}
        LAMBDA_TIMEOUT: 15
        LAMBDA_MEMORY_SIZE: 128
        LAMBDA_RUNTIME: python3.10
        LAMBDA_HANDLER: lambda_function.lambda_handler
      run: |
        set -e  # Exit immediately if a command exits with a non-zero status
        set -x  # Print commands and their arguments as they are executed
        
        # Clean up deployment location
        echo "Cleaning up S3 environment directory s3://${{ env.S3_BUCKET }}/my-lambda/${{ env.ENVIRONMENT }}/"
        aws s3 rm s3://${{ env.S3_BUCKET }}/my-lambda/${{ env.ENVIRONMENT }}/ --recursive
        
        function_name=my-lambda-${{ env.ENVIRONMENT }}
        zip_file=${function_name}.zip
        temp_dir=$(mktemp -d)
        
        # Copy only necessary files and directories
        cp lambda/lambda_function.py $temp_dir/
        cp -r lambda/tests $temp_dir/tests
        cp -r lambda/utils $temp_dir/utils

        # Install dependencies
        if [ -f "lambda/requirements.txt" ]; then
          pip install -r lambda/requirements.txt -t $temp_dir
        fi

        cd $temp_dir && zip -rq ../$zip_file . && cd ..
        aws s3 cp --no-progress $zip_file s3://${S3_BUCKET}/my-lambda/${{ env.ENVIRONMENT }}/${zip_file}
        
        cd $GITHUB_WORKSPACE
        rm -rf $temp_dir

        s3_key=my-lambda/${{ env.ENVIRONMENT }}/${zip_file}
        
        check_lambda_update_status() {
          while true; do
            state=$(aws lambda get-function-configuration --function-name $function_name --query 'State' --output text)
            last_update_status=$(aws lambda get-function-configuration --function-name $function_name --query 'LastUpdateStatus' --output text)
            if [ "$state" == "Active" ] && [ "$last_update_status" == "Successful" ]; then
              echo "Lambda function is active and last update was successful. Proceeding with update."
              break
            else
              echo "Lambda function is in $state state and last update status is $last_update_status. Waiting for it to become active and successful."
              sleep 10
            fi
          done
        }

        if ! aws lambda update-function-code --function-name $function_name --s3-bucket $S3_BUCKET --s3-key $s3_key; then
          echo "Creating new Lambda function $function_name"
          aws lambda create-function --function-name $function_name --runtime ${{ env.LAMBDA_RUNTIME }} --role ${{ env.LAMBDA_ROLE }} --handler ${{ env.LAMBDA_HANDLER }} --code S3Bucket=${{ env.S3_BUCKET }},S3Key=$s3_key --timeout ${{ env.LAMBDA_TIMEOUT }} --memory-size ${{ env.LAMBDA_MEMORY_SIZE }} --environment Variables="{ENVIRONMENT=${{ env.ENVIRONMENT }}}"
        else
          echo "Updated existing Lambda function $function_name"
          check_lambda_update_status
          aws lambda update-function-configuration --function-name $function_name --timeout ${{ env.LAMBDA_TIMEOUT }} --memory-size ${{ env.LAMBDA_MEMORY_SIZE }}
        fi

[greyshi]

Thanks for providing that example of how you'd do this without this Action. That's exactly the kind of thing we were aiming to abstract out. Looking forward to seeing how you can simplify things

[jasonheffnerpsu]

It was an easy conversion and saves me from deploying from s3.. though took me awhile to get to it. Thanks again!

jobs:
  deploy:
    runs-on: ubuntu-latest

    permissions:
      contents: read
      id-token: write

    env:
      AWS_REGION: ${{ vars.AWS_REGION }}
      ENVIRONMENT: ${{ github.event.inputs.environment || (startsWith(github.ref, 'refs/tags/prod-') && 'production') || 'development' }}

      LAMBDA_ROLE: ${{ secrets.AWS_LAMBDA_ROLE }}
      LAMBDA_RUNTIME: python3.10
      LAMBDA_HANDLER: lambda_function.lambda_handler
      LAMBDA_TIMEOUT: "30"
      LAMBDA_MEMORY_SIZE: "128"
      LAMBDA_ARCH: x86_64

    concurrency:
      group: lambda-${{ github.event.repository.name }}-${{ github.event.inputs.environment || (startsWith(github.ref, 'refs/tags/prod-') && 'production') || 'development' }}
      cancel-in-progress: true

    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.10"
          cache: pip
          cache-dependency-path: lambda/requirements.txt

      - name: Assume AWS Role and Configure AWS CLI
        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
          aws-region: ${{ vars.AWS_REGION }}

      - name: Build Lambda artifact directory
        shell: bash
        run: |
          set -euo pipefail

          rm -rf dist
          mkdir -p dist

          # Copy only necessary files and directories
          cp lambda/lambda_function.py dist/
          cp -r lambda/tests dist/tests
          cp -r lambda/utils dist/utils

          if [ -f "lambda/requirements.txt" ]; then
            python -m pip install --upgrade pip
            pip install -r lambda/requirements.txt -t dist
          fi

      - name: Deploy Lambda
        uses: aws-actions/aws-lambda-deploy@v1.1.0
        with:
          function-name: my-lambda-${{ env.ENVIRONMENT }}
          code-artifacts-dir: dist

          handler: ${{ env.LAMBDA_HANDLER }}
          runtime: ${{ env.LAMBDA_RUNTIME }}
          role: ${{ env.LAMBDA_ROLE }}

          timeout: ${{ env.LAMBDA_TIMEOUT }}
          memory-size: ${{ env.LAMBDA_MEMORY_SIZE }}
          architectures: ${{ env.LAMBDA_ARCH }}

          environment: >-
            {"ENVIRONMENT":"${{ env.ENVIRONMENT }}"}

          publish: "false"