name: Deploy Lambda functions

on:

push:

branches:

- main

paths:

- .github/workflows/deploy-lambda-functions.yml

- .github/workflows/build-lambda-functions.yml

- pnpm-monorepo/**

workflow_dispatch:

inputs:

environment:

description: "Target environment"

required: true

default: "test"

type: choice

options:

- test

git_ref:

description: "Git ref (SHA, tag, branch, ...) to deploy (if empty, defaults to the latest commit)"

type: string

default: "develop"

required: true

jobs:

build:

uses: ./.github/workflows/build-lambda-functions.yml

with:

git_ref: ${{ github.event.inputs.git_ref || 'develop' }}

deploy:

runs-on: ubuntu-24.04

# Related

# - https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

# - https://docs.github.com/en/rest/authentication/permissions-required-for-github-apps

permissions:

id-token: write # Required for aws-actions/configure-aws-credentials

contents: read # Required for aws-actions/configure-aws-credentials

needs: [build]

environment: lambda-functions-${{ inputs.environment || 'test' }}

strategy:

matrix:

function:

- midnight-automations

- frequent-automations

- scrape-discord-events-function

- notification-router

- email-function

steps:

- name: Configure AWS Credentials

uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1

with:

role-to-assume: ${{ vars.IAM_ROLE_ARN }}

aws-region: eu-central-1

- name: Retrieve ${{ matrix.function }} artifact

uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1

with:

name: ${{ matrix.function }}-dist

- name: Deploy ${{ matrix.function }}

run: aws lambda update-function-code --function-name ${{ matrix.function }} --zip-file fileb://${{ matrix.function }}.zip