[Enhancement]: Support Lambda Public Policy Configuration

[ryancormack]

Description

When applying a Resource Policy to a Lambda Function for a Function URL to be publicly accessible you must also configure the Function to enable and allow Public Access Policy on it.

It's currently not possible to apply this via Terraform, so when adding a Resource Policy to a function, the apply fails as the Function is blocked from being made publicly available.

Example policy:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": "*",
            "Action": "lambda:InvokeFunctionUrl",
            "Resource": "arn:aws:lambda:us-east-1:123456789012:function:my-function",
            "Condition": {
                "StringEquals": {
                    "lambda:FunctionUrlAuthType": "NONE"
                }
            }
        }
    ]
}

Affected Resource(s) and/or Data Source(s)

• aws_lambda_function
• aws_lamda_function_url

Potential Terraform Configuration

resource "aws_lambda_function" "test_lambda" {
  filename      = "lambda_function_payload.zip"
  function_name = "lambda_function_name"
  // REST

  // This block would be optional
  public_access_configuration {
    block_public_policy      = true //true is default
    restrict_public_resource = false //true is default
  }
}

References

Function URL Auth docs Public Access Docs Public Access API Spec

Would you like to implement a fix?

Yes

[github-actions[bot]]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.