amazon-web-services - Ansible：将 Cloudwatch 日志事件触发器添加到 Lambda 函数

Question

我正在尝试将Cloudwatch 日志触发器添加到python3.6通过ansible. 我可以通过 ansible 部署 lambda 函数，但在尝试部署配置了日志组的触发器时遇到问题。

下面是我的 ansible 触发器和 lambda 策略代码。

Lambda 触发器：

- name: Cloud Watch Log event mapping
  lambda_event:
    state: present
    event_source: stream
    lambda_function_arn: arn:aws:lambda:us-east-2:<account_id>:function:CWloggerLambda
    alias: CWTEST
    region: us-east-2
    source_params:
      source_arn: arn:aws:logs:us-east-2:<account_id>:log-group:<log_group_name>
      enabled: True

Lambda 政策：

- name: Allowing CloudWatch Event(s) to trigger Lambda function(s)
  lambda_policy:
    lambda_function_arn: arn:aws:lambda:us-east-2:<account_id>:function:CWloggerLambda
    statement_id: "CWloggerLambda_lambda-cloudwatch-trigger"
    action: "lambda:InvokeFunction"
    principal: "events.amazonaws.com"
    source_arn: arn:aws:logs:us-east-2:<account_id>:log-group:<log_group_name>
    region: us-east-2
    state: present

已添加该策略，但触发器在 ARN 上给出错误仅Kinesis，DynamoDB并且SQS是允许的。通过 ansible 获取 Cloudwatch Logs 触发器的任何可能方法？

标签： amazon-web-servicesaws-lambdaansibleamazon-cloudwatchlogs