feat(lambda): sls executor support for apigw private endpoint resource policy

Author: wyvern8

.envExample

@@ -50,6 +50,12 @@ GTM_SLS_EXECUTOR_APIGW_DOMAIN_SUFFIX=lambda.mysuffix.com
 GTM_SLS_EXECUTOR_DEPLOYMENT_S3_BUCKET_PREFIX=
 GTM_SLS_EXECUTOR_HTTP_PROXY=
 GTM_SLS_EXECUTOR_NO_PROXY=
+GTM_SLS_EXECUTOR_VPC_ID=
+GTM_SLS_EXECUTOR_VPC_SECURITY_GROUP_ID=
+GTM_SLS_EXECUTOR_VPC_SUBNET_A=
+GTM_SLS_EXECUTOR_VPC_SUBNET_B=
+GTM_SLS_EXECUTOR_VPC_SUBNET_C=
+GTM_SLS_EXECUTOR_AWS_KMS_KEY_ID=
 
 GTM_CRYPT_GITHUB_TOKEN=<redacted>
 GTM_CRYPT_GITHUB_WEBHOOK_SECRET=<redacted>

README.md

@@ -109,6 +109,12 @@ Create an asynchronous CI agnostic mechanism for running custom test stage gates
 |GTM_SLS_EXECUTOR_APIGW_DOMAIN_SUFFIX|reverse proxy domain name that will have apiId added as subdomain.  eg. lambda.mysuffix.com will result in [apiId].lambda.mysuffix.com|
 |GTM_SLS_EXECUTOR_HTTP_PROXY|proxy passed to serverless executor|
 |GTM_SLS_EXECUTOR_NO_PROXY|no_proxy passed to serverless executor|
+|GTM_SLS_EXECUTOR_VPC_ID|vpc id for private apigw endpoints|
+|GTM_SLS_EXECUTOR_VPC_SECURITY_GROUP_ID|vpc security group id|
+|GTM_SLS_EXECUTOR_VPC_SUBNET_A| vpc az subnet |
+|GTM_SLS_EXECUTOR_VPC_SUBNET_B| vpc az subnet |
+|GTM_SLS_EXECUTOR_VPC_SUBNET_C| vpc az subnet |
+|GTM_SLS_EXECUTOR_AWS_KMS_KEY_ID| kms key id for sls env var encryption |
 
 > important: values of env vars prefixed with `GTM_CRYPT_*` must be created via `npm run sls-encrypt [name] [value]`
 

src/executors/ExecutorDockerServerless.js

@@ -103,6 +103,7 @@ export class ExecutorDockerServerless extends ExecutorDocker {
                 SLS_DEPLOYMENT_S3_BUCKET_PREFIX: process.env.GTM_SLS_EXECUTOR_DEPLOYMENT_S3_BUCKET_PREFIX,
                 SLS_HTTP_PROXY: process.env.GTM_SLS_EXECUTOR_HTTP_PROXY,
                 SLS_NO_PROXY: process.env.GTM_SLS_EXECUTOR_NO_PROXY,
+                SLS_VPC_ID: process.env.GTM_SLS_EXECUTOR_VPC_ID,
                 SLS_VPC_SECURITY_GROUP_ID: process.env.GTM_SLS_EXECUTOR_VPC_SECURITY_GROUP_ID,
                 SLS_VPC_SUBNET_A: process.env.GTM_SLS_EXECUTOR_VPC_SUBNET_A,
                 SLS_VPC_SUBNET_B: process.env.GTM_SLS_EXECUTOR_VPC_SUBNET_B,