AWS Lambda 기초 — 서버리스 함수 작성과 배포

# lambda_function.py
import json

def lambda_handler(event, context):
    """Lambda 핸들러 — 모든 함수의 진입점"""
    print(f"Event: {json.dumps(event)}")

    name = event.get('name', 'World')

    return {
        'statusCode': 200,
        'headers': {'Content-Type': 'application/json'},
        'body': json.dumps({'message': f'Hello, {name}!'})
    }

# IAM 역할 생성 (Lambda 실행 권한)
aws iam create-role   --role-name lambda-basic-role   --assume-role-policy-document '{
    "Version": "2012-10-17",
    "Statement": [{
      "Effect": "Allow",
      "Principal": {"Service": "lambda.amazonaws.com"},
      "Action": "sts:AssumeRole"
    }]
  }'

# 기본 실행 정책 연결
aws iam attach-role-policy   --role-name lambda-basic-role   --policy-arn arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole

# 코드 압축
zip function.zip lambda_function.py

# 함수 생성
aws lambda create-function   --function-name my-function   --runtime python3.12   --role arn:aws:iam::ACCOUNT_ID:role/lambda-basic-role   --handler lambda_function.lambda_handler   --zip-file fileb://function.zip   --timeout 30   --memory-size 256

# 테스트 실행
aws lambda invoke   --function-name my-function   --payload '{"name": "Alice"}'   response.json
cat response.json

# 코드 업데이트
zip function.zip lambda_function.py
aws lambda update-function-code   --function-name my-function   --zip-file fileb://function.zip

aws lambda update-function-configuration   --function-name my-function   --environment 'Variables={DB_HOST=localhost,DB_NAME=mydb,ENV=production}'

# 함수 내에서 사용
import os
db_host = os.environ['DB_HOST']

# HTTP API 생성 (v2, 더 간단하고 저렴)
aws apigatewayv2 create-api   --name my-api   --protocol-type HTTP   --target arn:aws:lambda:ap-northeast-2:ACCOUNT:function:my-function

# Lambda에 API Gateway 권한 부여
aws lambda add-permission   --function-name my-function   --statement-id api-gateway-invoke   --action lambda:InvokeFunction   --principal apigateway.amazonaws.com

# API 엔드포인트 확인
aws apigatewayv2 get-apis --query 'Items[0].ApiEndpoint'

# 규칙 생성 (매일 09:00 UTC)
aws events put-rule   --name daily-job   --schedule-expression "cron(0 9 * * ? *)"   --state ENABLED

# Lambda를 타깃으로 설정
aws events put-targets   --rule daily-job   --targets '[{
    "Id": "lambda-target",
    "Arn": "arn:aws:lambda:ap-northeast-2:ACCOUNT:function:my-function"
  }]'

# Lambda에 EventBridge 권한 부여
aws lambda add-permission   --function-name my-function   --statement-id eventbridge-invoke   --action lambda:InvokeFunction   --principal events.amazonaws.com   --source-arn arn:aws:events:ap-northeast-2:ACCOUNT:rule/daily-job

# S3 버킷 알림 설정
aws s3api put-bucket-notification-configuration   --bucket my-bucket   --notification-configuration '{
    "LambdaFunctionConfigurations": [{
      "LambdaFunctionArn": "arn:aws:lambda:ap-northeast-2:ACCOUNT:function:my-function",
      "Events": ["s3:ObjectCreated:*"],
      "Filter": {
        "Key": {"FilterRules": [{"Name": "suffix", "Value": ".jpg"}]}
      }
    }]
  }'

# 최근 로그 조회
aws logs tail /aws/lambda/my-function --follow

# 특정 기간
aws logs filter-log-events   --log-group-name /aws/lambda/my-function   --start-time $(date -d '1 hour ago' +%s000)