Enabling SG passthrough for SingletonFunction

cdklabs · Sep 30, 2023 · c04e456 · c04e456
1 parent bbef707
commit c04e456
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/API.md b/API.md
diff --git a/src/index.ts b/src/index.ts
@@ -64,6 +64,17 @@ export interface ECRDeploymentProps {
    */
   readonly vpcSubnets?: ec2.SubnetSelection;
 
+  /**
+   * The list of security groups to associate with the Lambda's network interfaces.
+   *
+   * Only used if 'vpc' is supplied.
+   *
+   * @default - If the function is placed within a VPC and a security group is
+   * not specified, either by this or securityGroup prop, a dedicated security
+   * group will be created for this function.
+   */
+  readonly securityGroups?: ec2.SecurityGroup[];
+
   /**
    * The environment variable to set
    */
@@ -138,6 +149,7 @@ export class ECRDeployment extends Construct {
       memorySize: memoryLimit,
       vpc: props.vpc,
       vpcSubnets: props.vpcSubnets,
+      securityGroups: props.securityGroups,
     });
 
     const handlerRole = this.handler.role;