Re:AWS Lambda Terraform Cookbook with working examples
by idunno246 on Thursday December 31, 2020 @03:42AM
(#25590817)
Yea, it’s that smart, but it’s a risk mitigation cause people make mistakes. You don’t really want the thing that casually you run many times a day to have the ability to accidentally delete your database. Security as well, our code deploy pipeline has less privileges than our terraform pipeline
[ Parent
| on HN ]
Re:AWS Lambda Terraform Cookbook with working examples
by felixhuttmann on Thursday December 31, 2020 @03:11PM
(#25596623)
The risk of accidentially deleting the database is real. However, it can be mitigated without introducing another tool by using a second terraform root module (with a corresponding second statefile). So you would have one terraform root module for foundational or stateful things like databases which rarely change and should never be accidentially deleted, and a second terraform root module that holds only the lambda. The former root module is applied only manually, the latter can run automated in a pipeline.