module "upc_provisioner" {
  source = "git@github.com:theorchard/terraform-lambda.git//?ref=3.1.4"

  environment                 = var.environment
  lambda_name                 = "upc-provisioner"
  application_family          = var.application_family
  lambda_description          = "Adds unused UPCs to the upc_repository SQS"
  lambda_function_memory_size = var.lambda_memory_size
  datadog_advanced_enabled    = true
  iam_policy_file_enabled     = true
  iam_policy_file_location    = var.iam_policy_file_location
  lambda_function_timeout     = var.lambda_default_timeout
  vpc_id                      = var.vpc_id
  vpc_security_group_name     = data.aws_security_group.vpc_security_group.name
  vpc_subnet_ids              = var.vpc_subnet_ids
  cloudwatch_event_enabled    = true
  cloudwatch_event_schedule   = "cron(0/15 * * * ? *)" # every 15 minutes
  use_container_image         = true

  lambda_function_reserved_concurrent_executions = var.lambda_concurrent_executions

  lambda_function_environment_variables = {
    Environment               = var.environment
    LOGGER_DSN                = var.logger_dsn
    AR_DB_PORT                = var.ar_db_port
    AR_DB_HOST                = var.ar_db_host
    AR_DB_DATABASE            = var.ar_db_database
    UPCS_AR_SELECT_LIMIT      = var.upcs_ar_select_limit
    UPCS_AR_SELECT_LIMIT_CRON = var.upcs_ar_select_limit_cron
    UPCS_AR_SELECT_OFFSET     = var.upcs_ar_select_offset
    LOGGER_LEVEL              = var.logger_level
    DD_LAMBDA_HANDLER         = var.lambda_handler
  }
}

resource "aws_lambda_permission" "with_sns" {
  statement_id  = "AllowExecutionFromSNS"
  action        = "lambda:InvokeFunction"
  function_name = "${var.environment}-${var.lambda_upc_provisioner_name}"
  principal     = "sns.amazonaws.com"
  source_arn    = var.sns_topic_arn
}

data "aws_security_group" "vpc_security_group" {
  id = var.vpc_security_group_id
}