Lambad trigger policy is missing when using transform in congito about ion HOT 8 CLOSED

Can you tell me more about this?

not working for imported lambda from another file

from ion.

Hi @jayair Please find. Am i doing something wrong!

import { config } from 'dotenv'

const _stage = $app.stage
const parsedENV = config({ path: `./lambda/.env.${_stage}` }).parsed

export const lambda = new sst.aws.Function('CognitoHandler', {
  handler: './lambda/index.handler',
  environment: {
    ...parsedENV,
    MAX_ATTEMPTS: 3
  },
  description: 'cognito-handlers',
  runtime: 'nodejs20.x',
  timeout: '10 seconds',
  memory: '1024 MB',
  permissions: [
    {
      actions: ['ses:SendEmail', 'ses:SendRawEmail'],
      resources: ['*']
    },
    {
      actions: ['sns:Publish', 'sns:Subscribe'],
      resources: ['*']
    }
  ],
  logging: {
    retention: '3 year' // for audit purpose
  },
  transform: {
    function: {
      name: `${_stage}-sso-cognito-handler`
    }
  }
})

from ion.

@imdkbj When you pass in function ARNs via transform, you are responsible for creating the function and assigning the required permissions. So you'd have to create the aws.lambda.Permission resources as shown in ur code block above.

Btw, why r the functions created separately? Can't you create them inline?

from ion.

Hey @fwang Thanks for the inputs.

1. Agree with the transform point.
2. I am creating seprate lamda as only one lambda is being assigned to all event. Lambda is being created in same sst deploy session not isolated anyhow.
3. Can you check why last photo why that is giving promise error. That can solver the underlying permission issue.

If required, I can share the all codes here.

from ion.

@imdkbj triggers expects path to the function handler, not ARN of existing functions.

Give this a try:

new sst.aws.CognitoUserPool("MyUserPool", {
  transform: {
    userPool: {
      lambdaConfig: {
        createAuthChallenge: lambda.arn,
        defineAuthChallenge: lambda.arn,
        ...
      }
    }
  }
});

Feel free to reopen this if issue persist.

from ion.

Hi @fwang Thanks.
As you can see in my screenshot, I am using the exactly same. But how we can make use without transformer where a single lambda will be used for multiple triggers as if we use path then multiple lambda will be created.

from ion.

I'm confused, are you saying you don't want to use the transform?

from ion.

Hey, Yes! I can skip transform if we can get the option to pass path/arn to the function handler.

from ion.