Skip to content
This repository has been archived by the owner on Oct 14, 2022. It is now read-only.

Latest commit

 

History

History
200 lines (155 loc) · 11.3 KB

README.md

File metadata and controls

200 lines (155 loc) · 11.3 KB
Raw

AWS API Gateway v2 (HTTP/Websocket) Terraform module

Terraform module which creates API Gateway version 2 with HTTP/Websocket capabilities.

These types of resources supported:

Not supported, yet:

This Terraform module is part of serverless.tf framework, which aims to simplify all operations when working with the serverless in Terraform.

Features

  • Support many of features of HTTP API Gateway, but rather limited support for WebSocket API Gateway
  • Conditional creation for many types of resources
  • Some features are still missing (especially for WebSocket support)

Usage

HTTP API Gateway

module "api_gateway" {
  source = "terraform-aws-modules/apigateway-v2/aws"

  name          = "dev-http"
  description   = "My awesome HTTP API Gateway"
  protocol_type = "HTTP"

  cors_configuration = {
    allow_headers = ["content-type", "x-amz-date", "authorization", "x-api-key", "x-amz-security-token", "x-amz-user-agent"]
    allow_methods = ["*"]
    allow_origins = ["*"]
  }

  # Custom domain
  domain_name                 = "terraform-aws-modules.modules.tf"
  domain_name_certificate_arn = "arn:aws:acm:eu-west-1:052235179155:certificate/2b3a7ed9-05e1-4f9e-952b-27744ba06da6"

  # Access logs
  default_stage_access_log_destination_arn = "arn:aws:logs:eu-west-1:835367859851:log-group:debug-apigateway"
  default_stage_access_log_format          = "$context.identity.sourceIp - - [$context.requestTime] \"$context.httpMethod $context.routeKey $context.protocol\" $context.status $context.responseLength $context.requestId $context.integrationErrorMessage"

  # Routes and integrations
  integrations = {
    "POST /" = {
      lambda_arn             = "arn:aws:lambda:eu-west-1:052235179155:function:my-function"
      payload_format_version = "2.0"
      timeout_milliseconds   = 12000
    }

    "$default" = {
      lambda_arn = "arn:aws:lambda:eu-west-1:052235179155:function:my-default-function"
    }
  }

  tags = {
    Name = "http-apigateway"
  }
}

Conditional creation

Sometimes you need to have a way to create resources conditionally but Terraform does not allow usage of count inside module block, so the solution is to specify create arguments.

module "api_gateway" {
  source = "terraform-aws-modules/apigateway-v2/aws"

  create = false # to disable all resources

  create_api_gateway               = false  # to control creation of API Gateway
  create_api_domain_name           = false  # to control creation of API Gateway Domain Name
  create_default_stage             = false  # to control creation of "$default" stage
  create_default_stage_api_mapping = false  # to control creation of "$default" stage and API mapping
  create_routes_and_integrations   = false  # to control creation of routes and integrations
  create_vpc_link                  = false  # to control creation of VPC link

  # ... omitted
}

Notes:

  • Make sure provider block has the setting of skip_requesting_account_id disabled (false) to produce correct value in the execution_arn.

Examples

  • Complete HTTP - Create API Gateway, authorizer, domain name, stage and other resources in various combinations
  • HTTP with VPC Link - Create API Gateway with VPC link and integration with resources in VPC (eg. ALB)

Requirements

Name Version
terraform >= 0.12.26
aws >= 3.3.0

Providers

Name Version
aws >= 3.3.0

Modules

No Modules.

Resources

Name
aws_apigatewayv2_api
aws_apigatewayv2_api_mapping
aws_apigatewayv2_domain_name
aws_apigatewayv2_integration
aws_apigatewayv2_route
aws_apigatewayv2_stage
aws_apigatewayv2_vpc_link

Inputs

Name Description Type Default Required
api_key_selection_expression An API key selection expression. Valid values: $context.authorizer.usageIdentifierKey, $request.header.x-api-key. string "$request.header.x-api-key" no
api_version A version identifier for the API string null no
body An OpenAPI specification that defines the set of routes and integrations to create as part of the HTTP APIs. Supported only for HTTP APIs. string null no
cors_configuration The cross-origin resource sharing (CORS) configuration. Applicable for HTTP APIs. any {} no
create Controls if API Gateway resources should be created bool true no
create_api_domain_name Whether to create API domain name resource bool true no
create_api_gateway Whether to create API Gateway bool true no
create_default_stage Whether to create default stage bool true no
create_default_stage_api_mapping Whether to create default stage API mapping bool true no
create_routes_and_integrations Whether to create routes and integrations resources bool true no
create_vpc_link Whether to create VPC links bool true no
credentials_arn Part of quick create. Specifies any credentials required for the integration. Applicable for HTTP APIs. string null no
default_stage_access_log_destination_arn Default stage's ARN of the CloudWatch Logs log group to receive access logs. Any trailing :* is trimmed from the ARN. string null no
default_stage_access_log_format Default stage's single line format of the access logs of data, as specified by selected $context variables. string null no
default_stage_tags A mapping of tags to assign to the default stage resource. map(string) {} no
description The description of the API. string null no
domain_name The domain name to use for API gateway string null no
domain_name_certificate_arn The ARN of an AWS-managed certificate that will be used by the endpoint for the domain name string null no
domain_name_tags A mapping of tags to assign to API domain name resource. map(string) {} no
integrations Map of API gateway routes with integrations map(any) {} no
name The name of the API string "" no
protocol_type The API protocol. Valid values: HTTP, WEBSOCKET string "HTTP" no
route_key Part of quick create. Specifies any route key. Applicable for HTTP APIs. string null no
route_selection_expression The route selection expression for the API. string "$request.method $request.path" no
tags A mapping of tags to assign to API gateway resources. map(string) {} no
target Part of quick create. Quick create produces an API with an integration, a default catch-all route, and a default stage which is configured to automatically deploy changes. For HTTP integrations, specify a fully qualified URL. For Lambda integrations, specify a function ARN. The type of the integration will be HTTP_PROXY or AWS_PROXY, respectively. Applicable for HTTP APIs. string null no
vpc_link_tags A map of tags to add to the VPC Link map(string) {} no
vpc_links Map of VPC Links details to create map(any) {} no

Outputs

Name Description
default_apigatewayv2_stage_arn The default stage ARN
default_apigatewayv2_stage_execution_arn The ARN prefix to be used in an aws_lambda_permission's source_arn attribute or in an aws_iam_policy to authorize access to the @connections API.
default_apigatewayv2_stage_id The default stage identifier
default_apigatewayv2_stage_invoke_url The URL to invoke the API pointing to the stage
this_apigatewayv2_api_api_endpoint The URI of the API
this_apigatewayv2_api_arn The ARN of the API
this_apigatewayv2_api_execution_arn The ARN prefix to be used in an aws_lambda_permission's source_arn attribute or in an aws_iam_policy to authorize access to the @connections API.
this_apigatewayv2_api_id The API identifier
this_apigatewayv2_api_mapping_id The API mapping identifier.
this_apigatewayv2_domain_name_api_mapping_selection_expression The API mapping selection expression for the domain name
this_apigatewayv2_domain_name_arn The ARN of the domain name
this_apigatewayv2_domain_name_configuration The domain name configuration
this_apigatewayv2_domain_name_hosted_zone_id The Amazon Route 53 Hosted Zone ID of the endpoint
this_apigatewayv2_domain_name_id The domain name identifier
this_apigatewayv2_domain_name_target_domain_name The target domain name
this_apigatewayv2_vpc_link_arn The map of VPC Link ARNs
this_apigatewayv2_vpc_link_id The map of VPC Link identifiers

Authors

Module managed by Anton Babenko. Check out serverless.tf to learn more about doing serverless with Terraform.

Please reach out to Betajob if you are looking for commercial support for your Terraform, AWS, or serverless project.

License

Apache 2 Licensed. See LICENSE for full details.