data "aws_dynamodb_table" "pp_identity_table" {
  name = "${var.environment}_pp_identity"
}

data "aws_iam_policy_document" "pp_identity_table_ddb_streams_policy_document" {

  statement {
    effect = "Allow"
    actions = [
      "dynamodb:DescribeStream",
      "dynamodb:GetRecords",
      "dynamodb:GetShardIterator",
      "dynamodb:ListStreams"
    ]
    resources = [
      "${data.aws_dynamodb_table.pp_identity_table.stream_arn}/*"
    ]
  }
}

resource "aws_iam_policy" "pp_identity_table_ddbs_lambda_policy" {
  name   = "${var.environment}-pp-identity-table-ddbs-lambda"
  policy = data.aws_iam_policy_document.pp_identity_table_ddb_streams_policy_document.json
}

module "lambda_pp_identity_table_ddb_streams_handler" {
  source = "git@github.com:theorchard/terraform-lambda.git?ref=3.1.6"

  environment                                    = var.environment
  application_family                             = var.application_family
  use_container_image                            = true
  lambda_name                                    = "${var.environment}-pp-identity-ddbs-lambda"
  lambda_function_timeout                        = var.lambda_default_timeout
  vpc_enabled                                    = true
  vpc_subnet_ids                                 = var.vpc_subnet_ids
  vpc_id                                         = var.vpc_id
  lambda_function_memory_size                    = var.lambda_memory_size
  event_source_mapping_enabled                   = true
  event_source_mapping_batch_size                = 20
  event_source_mapping_parallelization_factor    = 1
  event_source_mapping_resource_type             = "dynamodb"
  event_source_mapping_stream_name               = "2024-09-19T06:16:45.160"
  event_source_mapping_table_name                = data.aws_dynamodb_table.pp_identity_table.name
  event_source_mapping_starting_position         = "LATEST"
  lambda_function_reserved_concurrent_executions = 1
  datadog_advanced_enabled                       = false
  datadog_enabled                                = false

  iam_managed_policy_attachments = [
    aws_iam_policy.pp_identity_table_ddbs_lambda_policy.arn
  ]

}