(aws-lambda): docker image function fails with insightsVersion property

[jaypea]

when using a DockerImageFunction and trying to enable cloudwatch lambda insights through the insightsVersion property, lambda service fails to create the function with error:

1:08:45 PM | CREATE_FAILED        | AWS::Lambda::Function                     | lambda8B5974B5
Resource handler returned message: "Lambda layers are not supported for functions created with container images. (Service: Lambda, Status Code: 400, Request ID: 0526411c-a65a-485e-8582-fe2f2ec4ff90, Extended Request ID: null)" (RequestToken: 283267a3-b4
80-d004-54bc-f83f3c52fde7, HandlerErrorCode: InvalidRequest)

	new Function (/home/code/node_modules/@aws-cdk/aws-lambda/lib/function.ts:373:35)
	\_ new DockerImageFunction (/home/code/node_modules/@aws-cdk/aws-lambda/lib/image-function.ts:44:5)

Reproduction Steps

const appHandler = new DockerImageFunction(this, 'lambda', {
      code: DockerImageCode.fromImageAsset(path.join(__dirname, '../../')),
      insightsVersion: LambdaInsightsVersion.VERSION_1_0_98_0,
    });

What did you expect to happen?

to skip adding a layer and just manage the execution role instead

What actually happened?

creation failed

Environment

• CDK CLI Version : 1.124.0 (build 65761fe)
• Framework Version:
• Node.js Version: 14
• OS : linux
• Language (Version): typescript

Other

my first idea to fix this would be to overwrite the configureLambdaInsights method in the DockerImageFunction Class and just add the manged policy there and skip the addLayers part.

---

This is 🐛 Bug Report

[jaypea]

if someone needs a workaround, skip the property in the DockerImageFunction and add the policy like this:

    const appHandler = new DockerImageFunction(this, 'lambda', {
      code: DockerImageCode.fromImageAsset(path.join(__dirname, '../../')),      
    });
    appHandler.role?.addManagedPolicy(
      ManagedPolicy.fromAwsManagedPolicyName(
        'CloudWatchLambdaInsightsExecutionRolePolicy'
      )
    );

the docker image needs the lambda-insights-extension in any case

FROM public.ecr.aws/lambda/python:3.9

RUN curl -O https://lambda-insights-extension.s3-ap-northeast-1.amazonaws.com/amazon_linux/lambda-insights-extension.rpm && \
  rpm -U lambda-insights-extension.rpm && \
  rm -f lambda-insights-extension.rpm

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.