Merge pull request #5 from kayac/feature/migrate-events-api

Events APIを使うように移行し、Lambda化した

.github/workflows/test.yml

@@ -5,18 +5,18 @@ jobs:
     strategy:
       matrix:
         go:
-          - 1.16
+          - 1.23
     name: Build
     runs-on: ubuntu-latest
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v1
+        uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go }}
         id: go
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Build & Test
         run: |

.gitignore

@@ -26,3 +26,5 @@ _testmain.go
 *~
 pkg/*
 dist/*
+.envrc
+terraform/.terraform/

README.md

@@ -4,13 +4,30 @@ notico is Slack event notification bot.
 
 ## Usage
 
-1. Create a bot account.
+1. Create a Slack Apps account.
 2. Invite the account to a channel.
-3. Run `notico` with `SLACK_TOKEN` (owned by bot account) and channel (default `#admins`).
-
+3. Get the token and signing secret from the Slack Apps.
+4. Set secret SLACK_TOKEN and SLACK_SINGNING_SECRET(default `/notico/prod`) on AWS Secret Manager.
+5. Set environment variables.
+e.g.
+```
+export DOMAIN="..."
+export NOTICE_CHANNEL_ID="CXXXXXXXX"
+export LAMBROLL_TFSTATE="s3://..."
+export TF_BACKEND_BUCKET="..."
+export TF_BACKEND_KEY="..."
+export TF_BACKEND_REGION="..."
 ```
-$ export SLACK_TOKEN=xxxxxx
-$ notico [-channel "#foo"]
+6. Setup [aqua](jttps://aquaproj.github.io/) and `aqua i`
+7. Setup infrastructures by terraform.
+```sh
+$ task terraform:init
+$ task terraform:plan
+$ task terraform:apply
+```
+8. Deploy the lambda function.
+```sh
+$ task lambda:deploy
 ```
 
 ## Supported Events
@@ -20,23 +37,11 @@ $ notico [-channel "#foo"]
 - channel_rename
 - channel_archive
 - channel_unarchive
-- channel_left
 - team_join
-- bot_added
 - subteam_created
 
-## Options
-
-```
-Usage of notico
-  -channel string
-    	Channel to post notification message (default "#admins")
-  -version
-    	Show versrion
-```
-
 ## LICENSE
 
 The MIT License (MIT)
 
-Copyright (c) 2016 KAYAC Inc.
+Copyright (c) 2016-2024 KAYAC Inc.

Taskfile.yml

@@ -0,0 +1,13 @@
+version: '3'
+tasks:
+  devserver:
+    desc: Run the development server
+    cmds:
+      - go run ./cmd/eventslambda --local-address '127.0.0.1:8081'
+includes:
+  terraform:
+    taskfile: ./terraform/Taskfile.yaml
+    dir: ./terraform/
+  lambda:
+    taskfile: ./lambda/Taskfile.yaml
+    dir: ./lambda

aqua.yaml

@@ -0,0 +1,16 @@
+---
+# aqua - Declarative CLI Version Manager
+# https://aquaproj.github.io/
+# checksum:
+#   enabled: true
+#   require_checksum: true
+#   supported_envs:
+#   - all
+registries:
+- type: standard
+  ref: v4.277.0 # renovate: depName=aquaproj/aqua-registry
+packages:
+- name: fujiwara/lambroll@v1.1.3
+- name: go-task/task@v3.40.1
+- name: golang/go@go1.23.4
+- name: hashicorp/terraform@v1.10.2

cmd/eventslambda/main.go

@@ -0,0 +1,41 @@
+package main
+
+import (
+	"context"
+	"log/slog"
+	"net/http"
+	"os"
+
+	"github.com/alecthomas/kong"
+	"github.com/fujiwara/ridge"
+	"github.com/kayac/notico"
+	awsenvsecrets "github.com/mackee/envsecrets/dist/aws"
+	sloghttp "github.com/samber/slog-http"
+)
+
+type CLI struct {
+	SlackToken      string `help:"Slack API token" name:"slack-token" env:"SLACK_TOKEN" required:""`
+	NoticeChannelID string `help:"Slack channel ID to post notification message" name:"notice-channel-id" env:"NOTICE_CHANNEL_ID" required:""`
+	Domain          string `help:"Slack domain" name:"domain" env:"DOMAIN" required:""`
+	SigningSecret   string `help:"Slack signing secret" name:"signing-secret" env:"SLACK_SIGNING_SECRET" required:""`
+	LocalAddress    string `help:"Local address to listen" name:"local-address" default:":8080"`
+}
+
+func main() {
+	ctx := context.Background()
+	if err := awsenvsecrets.Load(ctx); err != nil {
+		slog.ErrorContext(ctx, "failed to load secrets", slog.Any("error", err))
+		os.Exit(1)
+	}
+
+	var cli CLI
+	kong.Parse(&cli)
+
+	n := notico.New(cli.SlackToken, cli.SigningSecret, cli.Domain, cli.NoticeChannelID)
+	mux := http.NewServeMux()
+	mux.HandleFunc("POST /events", n.Handler)
+	handler := sloghttp.Recovery(mux)
+	handler = sloghttp.New(slog.Default())(handler)
+
+	ridge.Run(cli.LocalAddress, "/", handler)
+}

go.mod

@@ -1,8 +1,40 @@
 module github.com/kayac/notico
 
-go 1.12
+go 1.23.2
+
+toolchain go1.23.4
 
 require (
+	github.com/alecthomas/kong v1.6.0
+	github.com/fujiwara/ridge v0.12.1
 	github.com/hashicorp/logutils v1.0.0
-	github.com/slack-go/slack v0.9.0
+	github.com/mackee/envsecrets v0.2.0
+	github.com/samber/slog-http v1.4.4
+	github.com/slack-go/slack v0.15.0
+)
+
+require (
+	github.com/aws/aws-lambda-go v1.47.0 // indirect
+	github.com/aws/aws-sdk-go-v2 v1.32.3 // indirect
+	github.com/aws/aws-sdk-go-v2/config v1.28.1 // indirect
+	github.com/aws/aws-sdk-go-v2/credentials v1.17.42 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.18 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.0 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.34.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssm v1.55.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.24.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.32.3 // indirect
+	github.com/aws/smithy-go v1.22.0 // indirect
+	github.com/google/uuid v1.6.0 // indirect
+	github.com/gorilla/websocket v1.4.2 // indirect
+	github.com/jmespath/go-jmespath v0.4.0 // indirect
+	github.com/pires/go-proxyproto v0.7.0 // indirect
+	github.com/pkg/errors v0.8.0 // indirect
+	go.opentelemetry.io/otel v1.29.0 // indirect
+	go.opentelemetry.io/otel/trace v1.29.0 // indirect
 )

go.sum

@@ -1,16 +1,89 @@
+github.com/alecthomas/assert/v2 v2.11.0 h1:2Q9r3ki8+JYXvGsDyBXwH3LcJ+WK5D0gc5E8vS6K3D0=
+github.com/alecthomas/assert/v2 v2.11.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k=
+github.com/alecthomas/kong v1.6.0 h1:mwOzbdMR7uv2vul9J0FU3GYxE7ls/iX1ieMg5WIM6gE=
+github.com/alecthomas/kong v1.6.0/go.mod h1:p2vqieVMeTAnaC83txKtXe8FLke2X07aruPWXyMPQrU=
+github.com/alecthomas/repr v0.4.0 h1:GhI2A8MACjfegCPVq9f1FLvIBS+DrQ2KQBFZP1iFzXc=
+github.com/alecthomas/repr v0.4.0/go.mod h1:Fr0507jx4eOXV7AlPV6AVZLYrLIuIeSOWtW57eE/O/4=
+github.com/aws/aws-lambda-go v1.47.0 h1:0H8s0vumYx/YKs4sE7YM0ktwL2eWse+kfopsRI1sXVI=
+github.com/aws/aws-lambda-go v1.47.0/go.mod h1:dpMpZgvWx5vuQJfBt0zqBha60q7Dd7RfgJv23DymV8A=
+github.com/aws/aws-sdk-go-v2 v1.32.3 h1:T0dRlFBKcdaUPGNtkBSwHZxrtis8CQU17UpNBZYd0wk=
+github.com/aws/aws-sdk-go-v2 v1.32.3/go.mod h1:2SK5n0a2karNTv5tbP1SjsX0uhttou00v/HpXKM1ZUo=
+github.com/aws/aws-sdk-go-v2/config v1.28.1 h1:oxIvOUXy8x0U3fR//0eq+RdCKimWI900+SV+10xsCBw=
+github.com/aws/aws-sdk-go-v2/config v1.28.1/go.mod h1:bRQcttQJiARbd5JZxw6wG0yIK3eLeSCPdg6uqmmlIiI=
+github.com/aws/aws-sdk-go-v2/credentials v1.17.42 h1:sBP0RPjBU4neGpIYyx8mkU2QqLPl5u9cmdTWVzIpHkM=
+github.com/aws/aws-sdk-go-v2/credentials v1.17.42/go.mod h1:FwZBfU530dJ26rv9saAbxa9Ej3eF/AK0OAY86k13n4M=
+github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.18 h1:68jFVtt3NulEzojFesM/WVarlFpCaXLKaBxDpzkQ9OQ=
+github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.18/go.mod h1:Fjnn5jQVIo6VyedMc0/EhPpfNlPl7dHV916O6B+49aE=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22 h1:Jw50LwEkVjuVzE1NzkhNKkBf9cRN7MtE1F/b2cOKTUM=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22/go.mod h1:Y/SmAyPcOTmpeVaWSzSKiILfXTVJwrGmYZhcRbhWuEY=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22 h1:981MHwBaRZM7+9QSR6XamDzF/o7ouUGxFzr+nVSIhrs=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22/go.mod h1:1RA1+aBEfn+CAB/Mh0MB6LsdCYCnjZm7tKXtnk499ZQ=
+github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 h1:VaRN3TlFdd6KxX1x3ILT5ynH6HvKgqdiXoTxAF4HQcQ=
+github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1/go.mod h1:FbtygfRFze9usAadmnGJNc8KsP346kEe+y2/oyhGAGc=
+github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.0 h1:TToQNkvGguu209puTojY/ozlqy2d/SFNcoLIqTFi42g=
+github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.0/go.mod h1:0jp+ltwkf+SwG2fm/PKo8t4y8pJSgOCO4D8Lz3k0aHQ=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.3 h1:qcxX0JYlgWH3hpPUnd6U0ikcl6LLA9sLkXE2w1fpMvY=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.3/go.mod h1:cLSNEmI45soc+Ef8K/L+8sEA3A3pYFEYf5B5UI+6bH4=
+github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.34.3 h1:CyA6J82ePPoh1Nj8ErOR2e/JRlzfFzWpGwGMFzFjwZg=
+github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.34.3/go.mod h1:EliITPlGcBz0FRiVl7lRLtzI1cnDybFcfLYMZedOInE=
+github.com/aws/aws-sdk-go-v2/service/ssm v1.55.3 h1:nbFGlCxyyFe2cgg8WNQQtzDRVczO4+1dL4hd3TDU6MM=
+github.com/aws/aws-sdk-go-v2/service/ssm v1.55.3/go.mod h1:nzUlOBAMlQx9zKwtI10FOzJa2phU6bmFbXhD6LLbr/A=
+github.com/aws/aws-sdk-go-v2/service/sso v1.24.3 h1:UTpsIf0loCIWEbrqdLb+0RxnTXfWh2vhw4nQmFi4nPc=
+github.com/aws/aws-sdk-go-v2/service/sso v1.24.3/go.mod h1:FZ9j3PFHHAR+w0BSEjK955w5YD2UwB/l/H0yAK3MJvI=
+github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.3 h1:2YCmIXv3tmiItw0LlYf6v7gEHebLY45kBEnPezbUKyU=
+github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.3/go.mod h1:u19stRyNPxGhj6dRm+Cdgu6N75qnbW7+QN0q0dsAk58=
+github.com/aws/aws-sdk-go-v2/service/sts v1.32.3 h1:wVnQ6tigGsRqSWDEEyH6lSAJ9OyFUsSnbaUWChuSGzs=
+github.com/aws/aws-sdk-go-v2/service/sts v1.32.3/go.mod h1:VZa9yTFyj4o10YGsmDO4gbQJUvvhY72fhumT8W4LqsE=
+github.com/aws/smithy-go v1.22.0 h1:uunKnWlcoL3zO7q+gG2Pk53joueEOsnNB28QdMsmiMM=
+github.com/aws/smithy-go v1.22.0/go.mod h1:irrKGvNn1InZwb2d7fkIRNucdfwR8R+Ts3wxYa/cJHg=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/fujiwara/ridge v0.12.1 h1:MHoWAVyNovj5WB931J3dsYAtcymhvSRo7AplU3YvBcQ=
+github.com/fujiwara/ridge v0.12.1/go.mod h1:FUIBF8ZHZ2BpGp14b4oMbAiESQIldmtlJ1WAwt8TUbI=
 github.com/go-test/deep v1.0.4 h1:u2CU3YKy9I2pmu9pX0eq50wCgjfGIt539SqR7FbHiho=
 github.com/go-test/deep v1.0.4/go.mod h1:wGDj63lr65AM2AQyKZd/NYHGb0R+1RLqB8NKt3aSFNA=
+github.com/google/go-cmp v0.5.7/go.mod h1:n+brtR0CgQNWTVd5ZUFpTBC8YFBDLK/h/bpaJ8/DtOE=
+github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
+github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gorilla/websocket v1.4.2 h1:+/TMaTYc4QFitKJxsQ7Yye35DkWvkdLcvGKqM+x0Ufc=
 github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
 github.com/hashicorp/logutils v1.0.0 h1:dLEQVugN8vlakKOUE3ihGLTZJRB4j+M2cdTm/ORI65Y=
 github.com/hashicorp/logutils v1.0.0/go.mod h1:QIAnNjmIWmVIIkWDTG1z5v++HQmx9WQRO+LraFDTW64=
+github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
+github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSow5/V2vxeg=
+github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
+github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
+github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8=
+github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U=
+github.com/mackee/envsecrets v0.2.0 h1:4T+QriohobDuchumPhHsITBzAMSGSjCBb0iK3+m1CiU=
+github.com/mackee/envsecrets v0.2.0/go.mod h1:d4kqCwz8HurlrvKT5WruAenHRnfL8r+URYC0i9p9MA0=
+github.com/pires/go-proxyproto v0.7.0 h1:IukmRewDQFWC7kfnb66CSomk2q/seBuilHBYFwyq0Hs=
+github.com/pires/go-proxyproto v0.7.0/go.mod h1:Vz/1JPY/OACxWGQNIRY2BeyDmpoaWmEP40O9LbuiFR4=
 github.com/pkg/errors v0.8.0 h1:WdK/asTD0HN+q6hsWO3/vpuAkAr+tw6aNJNDFFf0+qw=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/samber/slog-http v1.4.4 h1:NuENLy39Lk6b7wfj9cG9R5C/JLZR4t6pb9cwlyroybI=
+github.com/samber/slog-http v1.4.4/go.mod h1:PAcQQrYFo5KM7Qbk50gNNwKEAMGCyfsw6GN5dI0iv9g=
 github.com/slack-go/slack v0.9.0 h1:C4VCefOTthLSHlq2g+Stww33TdW+P+ewk7VDYXCHT/o=
 github.com/slack-go/slack v0.9.0/go.mod h1:wWL//kk0ho+FcQXcBTmEafUI5dz4qz5f4mMk8oIkioQ=
-github.com/stretchr/testify v1.2.2 h1:bSDNvY7ZPG5RlJ8otE/7V6gMiyenm9RtJ7IUVIAoJ1w=
+github.com/slack-go/slack v0.15.0 h1:LE2lj2y9vqqiOf+qIIy0GvEoxgF1N5yLGZffmEZykt0=
+github.com/slack-go/slack v0.15.0/go.mod h1:hlGi5oXA+Gt+yWTPP0plCdRKmjsDxecdHxYQdlMQKOw=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
+github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals=
+github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
+github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+go.opentelemetry.io/otel v1.29.0 h1:PdomN/Al4q/lN6iBJEN3AwPvUiHPMlt93c8bqTG5Llw=
+go.opentelemetry.io/otel v1.29.0/go.mod h1:N/WtXPs1CNCUEx+Agz5uouwCba+i+bJGFicT8SR4NP8=
+go.opentelemetry.io/otel/trace v1.29.0 h1:J/8ZNK4XgR7a21DZUAsbF8pZ5Jcw1VhACmnYt39JTi4=
+go.opentelemetry.io/otel/trace v1.29.0/go.mod h1:eHl3w0sp3paPkYstJOmAimxhiFXPg+MMTlEh3nsQgWQ=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v2 v2.2.8 h1:obN1ZagJSUGI0Ek/LBmuj4SNLPfIny3KsKFopxRdj10=
+gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

lambda/.lambdaignore

@@ -0,0 +1,9 @@
+.lambdaignore
+function.json
+function.jsonnet
+function_url.json
+function_url.jsonnet
+function.zip
+.git/*
+.terraform/*
+terraform.tfstate

lambda/Taskfile.yaml

@@ -0,0 +1,23 @@
+version: '3'
+tasks:
+  build:
+    desc: Build the application
+    env:
+      GOOS: linux
+      GOARCH: arm64
+    cmds:
+      - go build -o bootstrap ../cmd/eventslambda
+  deploy:
+    desc: Deploy the application
+    deps: [build]
+    cmds:
+      - lambroll deploy
+      - defer: rm -f bootstrap
+  logs:
+    desc: Show logs
+    cmds:
+      - lambroll logs --follow
+  lambroll:
+    desc: Run lambroll command
+    cmds:
+      - lambroll {{ .CLI_ARGS }}

lambda/function.jsonnet

@@ -0,0 +1,41 @@
+local tfstate = std.native('tfstate');
+local must_env = std.native('must_env');
+
+{
+  Architectures: [
+    'arm64',
+  ],
+  EphemeralStorage: {
+    Size: 512,
+  },
+  FunctionName: tfstate('aws_lambda_function.lambda.function_name'),
+  Handler: 'bootstrap',
+  LoggingConfig: {
+    LogFormat: 'Text',
+    LogGroup: tfstate('aws_cloudwatch_log_group.lambda.name'),
+  },
+  MemorySize: 128,
+  Role: tfstate('aws_iam_role.lambda.arn'),
+  Runtime: 'provided.al2023',
+  SnapStart: {
+    ApplyOn: 'None',
+  },
+  Tags: {
+    ManagedBy: 'Terraform',
+    Repo: 'kayac/notico',
+    Service: 'notico',
+  },
+  Timeout: 3,
+  TracingConfig: {
+    Mode: 'PassThrough',
+  },
+  Environment: {
+    Variables: {
+      TZ: "Asia/Tokyo",
+      SLACK_TOKEN: "secretfrom:aws_secretsmanager:/notico/prod.SLACK_TOKEN",
+      SLACK_SIGNING_SECRET: "secretfrom:aws_secretsmanager:/notico/prod.SLACK_SIGNING_SECRET",
+      DOMAIN: must_env('DOMAIN'),
+      NOTICE_CHANNEL_ID: must_env('NOTICE_CHANNEL_ID'),
+    },
+  },
+}