Lambda as ALB target in Cloudformation

[ssoulier]

Hi,

Could you please add the cloudformation and SAM the ability to specify an events for lambda which is an Application Load Balancer ?

Thanks.

[rsram312]

Went through the documentations. Not sure if it is updated either. Can you please add the SAM template ability to specify ALB feature for Lambda

[lorddelicious]

Yes please SAM ALB is needed. Discontinuing use of API Gateway due to high cost, transitioning to ALB.

[ssoulier]

Any update on this feature request ?

[kauphylover]

Another request to the AWS team to prioritize this!

[dbettin]

Another request. Thanks!

[brettstack]

Absolutely. At a minimum we could add a new Event for ALB which create the permission for you and you could specify your existing ALB. However, it's probably more likely that you want SAM to create the ALB target group for you, or maybe even the entire ALB (similar to how we create the API).

Would love to get some more feedback from everyone on this, including some SAM syntax.

[rsram312]

@brettstack Ideally, what I was hoping is if SAM can create the entire ALB and register Lambda as target. Probably following might be capabilities required:

1. Creating an ALB
2. Creating a target group with target type as Lambda with options to enable health check
3. Adding listeners to the ALB
4. Adding listener rules to the ALB
5. Adding permissions to the Lambda to access the ALB
6. Register the targets with the target group

I am not exactly sure which of the above features are already available in SAM. So, please correct me if anything above is redundant.

Currently, I was using a workaround by creating a Lambda function which does all these operations and was invoking that lambda wherever required. However, the feature being available in SAM would be really handy in directly leveraging it within the SAM template.

[brettstack]

@rsram312 that's very useful. Do you have an existing minimal template that includes all of those required resources?

[rsram312]

@brettstack The sample template I was using as workaround leverages boto3 to create those resources. If it might be of any use, I could probably send it over.

[deleugpn]

For me the preference is in specifying an existing ALB and getting the target group and permissions created by SAM.