added ability to pass in security groups for lambda

Author: bknutson123

main.tf

@@ -216,8 +216,9 @@ resource aws_lambda_function "lambda" {
   runtime = var.runtime
   timeout = var.timeout
   vpc_config {
-    security_group_ids = [
-      aws_security_group.vpc_sec.id]
+    security_group_ids = concat([
+      aws_security_group.vpc_sec.id,
+    ], var.lambda-security-group-ids)
     subnet_ids = module.acs.private_subnet_ids
   }
   environment {

variables.tf

@@ -87,3 +87,8 @@ variable "root-resource-authorization" {
 variable "swagger-path" {
   type = string
 }
+
+variable "lambda-security-group-ids" {
+  type = list(string)
+  default = []
+}