Skip to content

Conversation

YakDriver
Copy link
Member

@YakDriver YakDriver commented Aug 20, 2025

Rollback Plan

If a change needs to be reverted, we will publish an updated version of the library.

Changes to Security Controls

Are there any changes to security controls (access controls, encryption, logging) in this pull request? If so, explain.

Description

Since these actions may be merged in bulk, extra checklist to help:

  • Rebase on Actions plumbing #43669 after it's updated, deconflicted
  • Changelog
  • PR description
  • Action file
  • Test file with terraform_data trigger
  • Test results in PR
  • website/docs/actions/ file
  • Warning at top of website docs
  • Update warning on top of website docs
  • Service package registration
  • Update code for simplified actions
  • Use region pattern (framework.WithRegionModel)
  • Add 1.14 skips for tests
  • Rerun all tests after final rebase

This PR introduces support for the new aws_lambda_invoke action as part of Terraform's Actions framework. Actions provide a way to add imperative functionality to Terraform's declarative universe, allowing users to trigger specific operations during resource lifecycle events. Actions are particularly useful for scenarios like cache invalidation, service warming, data processing, and other operational tasks that need to occur at specific points in the infrastructure deployment process.

The aws_lambda_invoke action enables users to directly invoke AWS Lambda functions with full control over invocation parameters. This action supports synchronous (RequestResponse), asynchronous (Event), and dry-run (DryRun) invocation types, allowing for flexible integration patterns. Users can specify function versions/aliases, include execution logs, pass client context for mobile applications, and provide JSON payloads up to 6MB for synchronous or 256KB for asynchronous invocations.

Common use cases include post-deployment function warming, cache invalidation workflows, background data processing, CI/CD pipeline integration, and triggering serverless workflows. The action integrates seamlessly with Terraform's action trigger system, enabling Lambda invocations to be tied to resource lifecycle events such as before_create, before_update, or before_destroy, providing powerful automation capabilities for infrastructure operations.

Relations

References

Output from Acceptance Testing

% make t T=TestAccLambdaInvokeAction_ K=lambda     
make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go1.24.6 test ./internal/service/lambda/... -v -count 1 -parallel 20 -run='TestAccLambdaInvokeAction_'  -timeout 360m -vet=off
2025/08/20 11:08:50 Creating Terraform AWS Provider (SDKv2-style)...
2025/08/20 11:08:50 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccLambdaInvokeAction_basic
=== PAUSE TestAccLambdaInvokeAction_basic
=== RUN   TestAccLambdaInvokeAction_withQualifier
=== PAUSE TestAccLambdaInvokeAction_withQualifier
=== RUN   TestAccLambdaInvokeAction_invocationTypes
=== PAUSE TestAccLambdaInvokeAction_invocationTypes
=== RUN   TestAccLambdaInvokeAction_logTypes
=== PAUSE TestAccLambdaInvokeAction_logTypes
=== RUN   TestAccLambdaInvokeAction_clientContext
=== PAUSE TestAccLambdaInvokeAction_clientContext
=== RUN   TestAccLambdaInvokeAction_complexPayload
=== PAUSE TestAccLambdaInvokeAction_complexPayload
=== CONT  TestAccLambdaInvokeAction_basic
=== CONT  TestAccLambdaInvokeAction_logTypes
=== CONT  TestAccLambdaInvokeAction_complexPayload
=== CONT  TestAccLambdaInvokeAction_clientContext
=== CONT  TestAccLambdaInvokeAction_invocationTypes
=== CONT  TestAccLambdaInvokeAction_withQualifier
--- PASS: TestAccLambdaInvokeAction_complexPayload (36.02s)
--- PASS: TestAccLambdaInvokeAction_withQualifier (43.26s)
--- PASS: TestAccLambdaInvokeAction_invocationTypes (46.73s)
--- PASS: TestAccLambdaInvokeAction_clientContext (49.50s)
--- PASS: TestAccLambdaInvokeAction_basic (62.29s)
--- PASS: TestAccLambdaInvokeAction_logTypes (64.15s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/lambda	69.249s

@YakDriver YakDriver requested a review from a team as a code owner August 20, 2025 16:24
Copy link
Contributor

Community Guidelines

This comment is added to every new Pull Request to provide quick reference to how the Terraform AWS Provider is maintained. Please review the information below, and thank you for contributing to the community that keeps the provider thriving! 🚀

Voting for Prioritization

  • Please vote on this Pull Request by adding a 👍 reaction to the original post to help the community and maintainers prioritize it.
  • Please see our prioritization guide for additional information on how the maintainers handle prioritization.
  • Please do not leave +1 or other comments that do not add relevant new information or questions; they generate extra noise for others following the Pull Request and do not help prioritize the request.

Pull Request Authors

  • Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
  • Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.

@github-actions github-actions bot added tests PRs: expanded test coverage. Issues: expanded coverage, enhancements to test infrastructure. service/lambda Issues and PRs that pertain to the lambda service. provider Pertains to the provider itself, rather than any interaction with AWS. client-connections Pertains to the AWS Client and service connections. generators Relates to code generators. prioritized Part of the maintainer teams immediate focus. To be addressed within the current quarter. size/XL Managed by automation to categorize the size of a PR. documentation Introduces or discusses updates to documentation. labels Aug 20, 2025
@YakDriver YakDriver changed the title New action: aws_lambda_invoke New action: aws_lambda_invoke Aug 20, 2025
@YakDriver YakDriver marked this pull request as draft August 20, 2025 16:50
@YakDriver YakDriver force-pushed the f-lambda-invoke-action branch from e33cb03 to dc4c78a Compare September 16, 2025 21:48
@YakDriver
Copy link
Member Author

With action simplified updates and these:

  • terraform (main - 5981cd2bf7)
  • terraform-json v0.27.1
  • terraform-plugin-framework (main - 6af91641ed1e)
  • terraform-plugin-go (main - c3810b1245c0)
  • terraform-plugin-mux (main - c551d8bf1c4f)
% make t T=TestAccLambdaInvokeAction_ K=lambda              
make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Running acceptance tests on branch: 🌿 f-lambda-invoke-action 🌿...
TF_ACC=1 go1.24.6 test ./internal/service/lambda/... -v -count 1 -parallel 20 -run='TestAccLambdaInvokeAction_'  -timeout 360m -vet=off
2025/09/16 18:10:54 Creating Terraform AWS Provider (SDKv2-style)...
2025/09/16 18:10:54 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccLambdaInvokeAction_basic
=== PAUSE TestAccLambdaInvokeAction_basic
=== RUN   TestAccLambdaInvokeAction_withQualifier
=== PAUSE TestAccLambdaInvokeAction_withQualifier
=== RUN   TestAccLambdaInvokeAction_invocationTypes
=== PAUSE TestAccLambdaInvokeAction_invocationTypes
=== RUN   TestAccLambdaInvokeAction_logTypes
=== PAUSE TestAccLambdaInvokeAction_logTypes
=== RUN   TestAccLambdaInvokeAction_clientContext
=== PAUSE TestAccLambdaInvokeAction_clientContext
=== RUN   TestAccLambdaInvokeAction_complexPayload
=== PAUSE TestAccLambdaInvokeAction_complexPayload
=== CONT  TestAccLambdaInvokeAction_basic
=== CONT  TestAccLambdaInvokeAction_logTypes
=== CONT  TestAccLambdaInvokeAction_complexPayload
=== CONT  TestAccLambdaInvokeAction_invocationTypes
=== CONT  TestAccLambdaInvokeAction_withQualifier
=== CONT  TestAccLambdaInvokeAction_clientContext
--- PASS: TestAccLambdaInvokeAction_complexPayload (30.45s)
--- PASS: TestAccLambdaInvokeAction_logTypes (45.28s)
--- PASS: TestAccLambdaInvokeAction_basic (49.63s)
--- PASS: TestAccLambdaInvokeAction_withQualifier (56.97s)
--- PASS: TestAccLambdaInvokeAction_invocationTypes (60.34s)
--- PASS: TestAccLambdaInvokeAction_clientContext (63.24s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/lambda	68.750s

@github-actions github-actions bot added linter Pertains to changes to or issues with the various linters. repository Repository modifications; GitHub Actions, developer docs, issue templates, codeowners, changelog. labels Sep 17, 2025
@YakDriver YakDriver requested a review from jar-b September 17, 2025 03:18
@YakDriver
Copy link
Member Author

Test after latest rebase:

% make t T=TestAccLambdaInvokeAction_ K=lambda     
make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Running acceptance tests on branch: 🌿 f-lambda-invoke-action 🌿...
TF_ACC=1 go1.24.6 test ./internal/service/lambda/... -v -count 1 -parallel 20 -run='TestAccLambdaInvokeAction_'  -timeout 360m -vet=off
2025/09/17 09:58:40 Creating Terraform AWS Provider (SDKv2-style)...
2025/09/17 09:58:40 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccLambdaInvokeAction_basic
=== PAUSE TestAccLambdaInvokeAction_basic
=== RUN   TestAccLambdaInvokeAction_withQualifier
=== PAUSE TestAccLambdaInvokeAction_withQualifier
=== RUN   TestAccLambdaInvokeAction_invocationTypes
=== PAUSE TestAccLambdaInvokeAction_invocationTypes
=== RUN   TestAccLambdaInvokeAction_logTypes
=== PAUSE TestAccLambdaInvokeAction_logTypes
=== RUN   TestAccLambdaInvokeAction_clientContext
=== PAUSE TestAccLambdaInvokeAction_clientContext
=== RUN   TestAccLambdaInvokeAction_complexPayload
=== PAUSE TestAccLambdaInvokeAction_complexPayload
=== CONT  TestAccLambdaInvokeAction_basic
=== CONT  TestAccLambdaInvokeAction_logTypes
=== CONT  TestAccLambdaInvokeAction_complexPayload
=== CONT  TestAccLambdaInvokeAction_invocationTypes
=== CONT  TestAccLambdaInvokeAction_withQualifier
=== CONT  TestAccLambdaInvokeAction_clientContext
--- PASS: TestAccLambdaInvokeAction_withQualifier (29.12s)
--- PASS: TestAccLambdaInvokeAction_clientContext (34.58s)
--- PASS: TestAccLambdaInvokeAction_logTypes (49.21s)
--- PASS: TestAccLambdaInvokeAction_basic (53.73s)
--- PASS: TestAccLambdaInvokeAction_complexPayload (60.50s)
--- PASS: TestAccLambdaInvokeAction_invocationTypes (63.35s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/lambda	68.836s

@YakDriver YakDriver force-pushed the f-lambda-invoke-action branch from 79b5d5c to 56f5e7f Compare September 17, 2025 15:37
@YakDriver
Copy link
Member Author

After rebase:

% make t T=TestAccLambdaInvokeAction_ K=lambda     
make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Running acceptance tests on branch: 🌿 f-lambda-invoke-action 🌿...
TF_ACC=1 go1.24.6 test ./internal/service/lambda/... -v -count 1 -parallel 20 -run='TestAccLambdaInvokeAction_'  -timeout 360m -vet=off
2025/09/17 11:37:20 Creating Terraform AWS Provider (SDKv2-style)...
2025/09/17 11:37:20 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccLambdaInvokeAction_basic
=== PAUSE TestAccLambdaInvokeAction_basic
=== RUN   TestAccLambdaInvokeAction_withQualifier
=== PAUSE TestAccLambdaInvokeAction_withQualifier
=== RUN   TestAccLambdaInvokeAction_invocationTypes
=== PAUSE TestAccLambdaInvokeAction_invocationTypes
=== RUN   TestAccLambdaInvokeAction_logTypes
=== PAUSE TestAccLambdaInvokeAction_logTypes
=== RUN   TestAccLambdaInvokeAction_clientContext
=== PAUSE TestAccLambdaInvokeAction_clientContext
=== RUN   TestAccLambdaInvokeAction_complexPayload
=== PAUSE TestAccLambdaInvokeAction_complexPayload
=== CONT  TestAccLambdaInvokeAction_basic
=== CONT  TestAccLambdaInvokeAction_logTypes
=== CONT  TestAccLambdaInvokeAction_withQualifier
=== CONT  TestAccLambdaInvokeAction_complexPayload
=== CONT  TestAccLambdaInvokeAction_clientContext
=== CONT  TestAccLambdaInvokeAction_invocationTypes
--- PASS: TestAccLambdaInvokeAction_complexPayload (28.22s)
--- PASS: TestAccLambdaInvokeAction_clientContext (34.43s)
--- PASS: TestAccLambdaInvokeAction_basic (40.82s)
--- PASS: TestAccLambdaInvokeAction_withQualifier (48.49s)
--- PASS: TestAccLambdaInvokeAction_logTypes (62.31s)
--- PASS: TestAccLambdaInvokeAction_invocationTypes (76.88s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/lambda	82.564s

@YakDriver YakDriver marked this pull request as ready for review September 17, 2025 15:39
jar-b
jar-b previously approved these changes Sep 17, 2025
Copy link
Member

@jar-b jar-b left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🎉

After building core from main:

% TF_ACC_TERRAFORM_PATH=/Users/jaredbaker/go/bin/terraform make t K=lambda T=TestAccLambdaInvokeAction_
make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Running acceptance tests on branch: 🌿 f-lambda-invoke-action 🌿...
TF_ACC=1 go1.24.6 test ./internal/service/lambda/... -v -count 1 -parallel 20 -run='TestAccLambdaInvokeAction_'  -timeout 360m -vet=off
2025/09/17 12:43:04 Creating Terraform AWS Provider (SDKv2-style)...
2025/09/17 12:43:04 Initializing Terraform AWS Provider (SDKv2-style)...

--- PASS: TestAccLambdaInvokeAction_withQualifier (29.14s)
--- PASS: TestAccLambdaInvokeAction_complexPayload (34.87s)
--- PASS: TestAccLambdaInvokeAction_basic (41.21s)
--- PASS: TestAccLambdaInvokeAction_clientContext (60.56s)
--- PASS: TestAccLambdaInvokeAction_logTypes (62.41s)
--- PASS: TestAccLambdaInvokeAction_invocationTypes (64.32s)
PASS
ok      github.com/hashicorp/terraform-provider-aws/internal/service/lambda     70.942s


For information about AWS Lambda functions, see the [AWS Lambda Developer Guide](https://docs.aws.amazon.com/lambda/latest/dg/). For specific information about invoking Lambda functions, see the [Invoke](https://docs.aws.amazon.com/lambda/latest/api/API_Invoke.html) page in the AWS Lambda API Reference.

~> **Note:** `aws_lambda_invoke` is in beta. Its interface and behavior may change as the feature evolves, and breaking changes are possible. It is offered as a technical preview without compatibility guarantees until Terraform 1.14 is generally available.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perhaps move this one to the top, or above the title heading for better visibility?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Moved below the title. markdown-lint doesn't like above the title.

@YakDriver YakDriver merged commit 885afe5 into main Sep 17, 2025
73 checks passed
@YakDriver YakDriver deleted the f-lambda-invoke-action branch September 17, 2025 19:10
Copy link
Contributor

Warning

This Issue has been closed, meaning that any additional comments are much easier for the maintainers to miss. Please assume that the maintainers will not see them.

Ongoing conversations amongst community members are welcome, however, the issue will be locked after 30 days. Moving conversations to another venue, such as the AWS Provider forum, is recommended. If you have additional concerns, please open a new issue, referencing this one where needed.

@github-actions github-actions bot added this to the v6.14.0 milestone Sep 17, 2025
terraform-aws-provider bot pushed a commit that referenced this pull request Sep 17, 2025
@github-actions github-actions bot removed the prioritized Part of the maintainer teams immediate focus. To be addressed within the current quarter. label Sep 18, 2025
Copy link
Contributor

This functionality has been released in v6.14.0 of the Terraform AWS Provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!

RonRicardo added a commit to hashicorp/web-unified-docs that referenced this pull request Sep 19, 2025
This updates `aws_lambda_invoke` code examples to more closely mirror
hashicorp/terraform-provider-aws#43972
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
client-connections Pertains to the AWS Client and service connections. documentation Introduces or discusses updates to documentation. generators Relates to code generators. linter Pertains to changes to or issues with the various linters. provider Pertains to the provider itself, rather than any interaction with AWS. repository Repository modifications; GitHub Actions, developer docs, issue templates, codeowners, changelog. service/lambda Issues and PRs that pertain to the lambda service. size/XL Managed by automation to categorize the size of a PR. tests PRs: expanded test coverage. Issues: expanded coverage, enhancements to test infrastructure.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants