Lambda function without X-Ray tracing

aws_lambda_x_ray

Severity

low

Vendor

AWS

Resource

Logging

Description

Lambda function without X-Ray tracing. This will allow for identifying bottlenecks, slow-downs and timeouts.

To fix it you must configure tracing_mode=Active. By default is PassThrough.

Learn more about this topic at AWS Lambda X-Ray.

Examples

---
- name: Example playbook
  hosts: localhost
  tasks:
    - name: creation
      amazon.aws.lambda:
        name: '{{ item.name }}'
        state: present
        zip_file: '{{ item.zip_file }}'
        runtime: 'python2.7'
        role: 'arn:aws:iam::123456789012:role/lambda_basic_execution'
        handler: 'hello_python.my_handler'
        vpc_subnet_ids:
        - subnet-123abcde
        - subnet-edcba321
        vpc_security_group_ids:
        - sg-123abcde
        - sg-edcba321
        environment_variables: '{{ item.env_vars }}'
        tags:
          key1: 'value1'
      loop:
        - name: HelloWorld
          zip_file: hello-code.zip
          env_vars:
            key1: "first"
            key2: "second"
        - name: ByeBye
          zip_file: bye-code.zip
          env_vars:
            key1: "1"
            key2: "2"

Mitigation / Fix

---
- name: Example playbook
  hosts: localhost
  tasks:
    - name: creation
      amazon.aws.lambda:
        name: '{{ item.name }}'
        state: present
        zip_file: '{{ item.zip_file }}'
        runtime: 'python2.7'
        role: 'arn:aws:iam::123456789012:role/lambda_basic_execution'
        handler: 'hello_python.my_handler'
        vpc_subnet_ids:
        - subnet-123abcde
        - subnet-edcba321
        vpc_security_group_ids:
        - sg-123abcde
        - sg-edcba321
        environment_variables: '{{ item.env_vars }}'
        tags:
          key1: 'value1'
        tracing_mode: Active
      loop:
        - name: HelloWorld
          zip_file: hello-code.zip
          env_vars:
            key1: "first"
            key2: "second"
        - name: ByeBye
          zip_file: bye-code.zip
          env_vars:
            key1: "1"
            key2: "2"