我在使用node43部署node-lambda时遇到了一些问题,但手动安装最新的源代码似乎在这方面有所帮助.

但是现在我在运行lambda函数时遇到了麻烦.我明白了

2016-04-12T16:47:12.133Z    3330adb9-00ce-11e6-9c08-d79a6bc84748    Calling phantom:  /var/task/phantomjs [ '/var/task/phantomjs-script.js' ]
2016-04-12T16:47:12.236Z    3330adb9-00ce-11e6-9c08-d79a6bc84748    Error: spawn EACCES
    at exports._errnoException (util.js:870:11)
    at ChildProcess.spawn (internal/child_process.js:298:11)

看起来像lambda无法访问幻像二进制文件.
有什么办法可以让函数获得更多的权限吗？

谢谢

如果您正在调用任何可执行文件或使用二进制文件附带的库,则需要在使用Amazon Linux的EC2计算机上编译它们,并使用Lambda函数中的结果. This is a very basic tutorial.

如果您已经这样做了,还要确保您使用的二进制文件是可执行的(您可以通过调用chmod 777 your_executable来完成此操作).我猜你已经这样做了(在你的情况下,phantomjs也应该照顾这个),但这是EACCES的主要错误来源.

我的羊羔在同一地区,同样的政策,同样的安全组织.另外VPC在两个羊羔都是一样的.唯一不同的是现在是lambda功能

这里是角色权利

1)创建AWSLambdaExecute和AWSLambdaBasicExecutionRole

2)创建一个要调用的lambda函数
Lambda_TEST

exports.handler = function(event,context) {
  console.log('Lambda TEST Received event:',JSON.stringify(event,null,2));
  context.succeed(event);
};

3)这是调用它的另一个函数.

var AWS = require('aws-sdk');
AWS.config.region = 'us-east-1';
var lambda = new AWS.Lambda();

exports.handler = function(event,context) {
 var params = {
   FunctionName: 'Lambda_TEST',// the lambda function we are going to invoke
   InvocationType: 'RequestResponse',LogType: 'Tail',Payload: '{ "name" : "Arpit" }'
 };

  lambda.invoke(params,function(err,data) {
   if (err) {
    context.fail(err);
   } else {
   context.succeed('Lambda_TEST said '+ data.Payload);
  }
 })
};

参考文献：This link

我将通过执行器来表示执行第二个lambda的lambda.

为什么超时？

由于执行者被“锁定”在VPC之后 – 所有互联网通信都被阻止.

这导致任何http(s)呼叫被超时,因为它们请求数据包不会到达目的地.

这就是aws-sdk完成的所有操作导致超时.

简单的解决方案

如果执行程序不必在VPC中,只需将其放在其中即可,如果没有VPC,则lambda也可以正常工作.

当lambda调用VPC中的资源时,需要在VPC中定位lambda.

真正的解决方案

从上述可以看出,位于VPC内部的资源无法访问互联网 – 这是不正确的 – 只需要进行几个配置.

>创建VPC.
>创建2个子网,一个私人和第二个公共(这些术语在前面解释,继续阅读).
>创建Internet网关 – 这是将VPC连接到互联网的虚拟路由器.
>创建NAT网关 – 选择公共子网并为其创建一个新的弹性IP(该IP是您的VPC本地) – 此组件将管道到互联网网关的通信.
>创建2个路由表 – 一个命名为public,第二个是私有的.

>在公共路由表中,转到路由并添加新路由：

Destination: 0.0.0.0/0

Target: the ID of the internet-gateway

>在私有路由表中,转到路由并添加新路由：

Destination: 0.0.0.0/0

Target: the ID of the nat-gateway

>私有子网是其路由表中的子网,没有到互联网网关的路由.
>公共子网是一个子网,它的路由表中有一个到互联网网关的路由

我们在这里

我们创建了这样的东西：

这允许私有子网中的资源调出互联网.
您可以找到更多文档here.

public TestResult run() {
    final LambdaSeleniumService lambdaService = LambdaInvokerFactory.builder()
            .lambdaClient(AWSLambdaClientBuilder.defaultClient())
            .build(LambdaSeleniumService.class);

    return lambdaService.runTest(request);
}

void deploy(AwsKeyPair keyPair,String region,String zipFilename,String functionName,Proxy proxy) {
    long t = System.currentTimeMillis();
    final AWSCredentialsProvider credentials = new AWsstaticCredentialsProvider(
            new BasicAWSCredentials(keyPair.key,keyPair.secret));

    AWSLambda lambda = AWSLambdaClientBuilder.standard().withCredentials(credentials)
            .withClientConfiguration(Util.createConfiguration(proxy)).withRegion(region).build();

    byte[] bytes;
    try {
        bytes = IoUtils.toByteArray(new FileInputStream(zipFilename));
    } catch (IOException e) {
        throw new RuntimeException(e);
    }
    DecimalFormat df = new DecimalFormat("0.000");
    log.info("deploying " + zipFilename + ",length=" + df.format(bytes.length / 1024.0 / 1024.0)
            + "MB,to functionName=" + functionName);
    lambda.updateFunctionCode( //
            new UpdateFunctionCodeRequest() //
                    .withFunctionName(functionName) //
                    .withPublish(true) //
                    .withZipFile(ByteBuffer.wrap(bytes)));
    log.info("deployed in " + (System.currentTimeMillis() - t) + "ms");
}

@Test
public void testLambdaInvokeSubsegmentContainsFunctionName() {
    // Setup test
    AWSLambda lambda = AWSLambdaClientBuilder.standard().withRequestHandlers(new TracingHandler()).withRegion(Regions.US_EAST_1).withCredentials(new AWsstaticCredentialsProvider(new BasicAWSCredentials("fake","fake"))).build();

    AmazonHttpClient amazonHttpClient = new AmazonHttpClient(new ClientConfiguration());
    ConnectionManagerAwareHttpClient apacheHttpClient = Mockito.mock(ConnectionManagerAwareHttpClient.class);
    HttpResponse httpResponse = new BasicHttpResponse(new BasicStatusLine(HttpVersion.HTTP_1_1,200,"OK"));
    Basichttpentity responseBody = new Basichttpentity();
    responseBody.setContent(new ByteArrayInputStream("null".getBytes(StandardCharsets.UTF_8))); // Lambda returns "null" on successful fn. with no return value
    httpResponse.setEntity(responseBody);

    try {
        Mockito.doReturn(httpResponse).when(apacheHttpClient).execute(Mockito.any(HttpUriRequest.class),Mockito.any(HttpContext.class));
    } catch (IOException e) { }

    WhiteBox.setInternalState(amazonHttpClient,"httpClient",apacheHttpClient);
    WhiteBox.setInternalState(lambda,"client",amazonHttpClient);

    // Test logic
    Segment segment = AWSXRay.beginSegment("test");

    InvokeRequest request = new InvokeRequest();
    request.setFunctionName("testFunctionName");
    InvokeResult r = lambda.invoke(request);
    System.out.println(r.getStatusCode());
    System.out.println(r);

    Assert.assertEquals(1,segment.getSubsegments().size());
    Assert.assertEquals("Invoke",segment.getSubsegments().get(0).getAws().get("operation"));
    System.out.println(segment.getSubsegments().get(0).getAws());
    Assert.assertEquals("testFunctionName",segment.getSubsegments().get(0).getAws().get("function_name"));
}

public ConnectorModel(Regions region,String profileName) {

        ProfileCredentialsProvider profileCredentialsProvider = new ProfileCredentialsProvider(profileName);

        awsLambdaClient = AWSLambdaClientBuilder.standard()
                .withRegion(region)
                .withCredentials(profileCredentialsProvider)
                .build();
    }

protected AWSLambda resolveAwsLambdaClient() {
    AWSLambda resolvedClient = awsLambdaClient;
    if (resolvedClient == null && region != null) {
        resolvedClient = AWSLambdaClientBuilder.standard().withRegion(region).build();
    }
    return requiretoBuild(resolvedClient,"an awsLambdaClient or a region is required");
}

/**
 * Executes a lambda function and returns the result of the execution.
 */
@Override
public cfData execute( cfSession _session,cfArgStructData argStruct ) throws cfmRunTimeException {

    AmazonKey amazonKey = getAmazonKey( _session,argStruct );

    // Arguments to extract
    String payload = getNamedStringParam( argStruct,"payload",null );
    String functionName = getNamedStringParam( argStruct,"function",null );
    String qualifier = getNamedStringParam( argStruct,"qualifier",null );

    try {

        // Construct the Lambda Client
        InvokeRequest invokeRequest = new InvokeRequest();
        invokeRequest.setInvocationType( InvocationType.Event );
        invokeRequest.setLogType( LogType.Tail );
        invokeRequest.setFunctionName( functionName );
        invokeRequest.setPayload( payload );
        if ( qualifier != null ) {
            invokeRequest.setQualifier( qualifier );
        }

        // Lambda client must be created with credentials
        BasicAWSCredentials awsCreds = new BasicAWSCredentials( amazonKey.getKey(),amazonKey.getSecret() );
        AWSLambda awsLambda = AWSLambdaClientBuilder.standard()
                .withRegion( amazonKey.getAmazonRegion().toAWSRegion().getName() )
                .withCredentials( new AWsstaticCredentialsProvider( awsCreds ) ).build();

        // Execute
        awsLambda.invoke( invokeRequest );

    } catch ( Exception e ) {
        throwException( _session,"AmazonLambdaAsyncExecute: " + e.getMessage() );
        return cfBooleanData.FALSE;
    }

    return cfBooleanData.TRUE;
}

/**
 * Creates a proxy instance of a supplied interface that contains methods annotated with
 * {@link LambdaFunction}. Provides automatic credential support to authenticate with an IAM
 * access keys using {@link BasicSessionCredentials} auto-configured from Spring Boot
 * configuration properties in {@link AmazonProperties}.
 *
 * @param type
 * @param <T>
 * @return
 */
public <T> T getFunctionInstance(Class<T> type) {
    return LambdaInvokerFactory.builder()
            .lambdaClient(AWSLambdaClientBuilder.standard()
                    .withRegion(Regions.US_EAST_1)
                    .withCredentials(new LambdaCredentialsProvider(amazonProperties))
                    .build())
            .build(type);
}

public AWSLambda getLambdaClient() {
    return AWSLambdaClientBuilder.standard()
            .withRegion(Regions.US_EAST_1)
            .withCredentials(new LambdaCredentialsProvider(amazonProperties))
            .build();
}

/**
 * Executes a lambda function and returns the result of the execution.
 */
@Override
public cfData execute( cfSession _session,null );

    try {

        // Construct the Lambda Client
        InvokeRequest invokeRequest = new InvokeRequest();
        invokeRequest.setInvocationType( InvocationType.RequestResponse );
        invokeRequest.setLogType( LogType.Tail );
        invokeRequest.setFunctionName( functionName );
        invokeRequest.setPayload( payload );
        if ( qualifier != null ) {
            invokeRequest.setQualifier( qualifier );
        }

        // Lambda client must be created with credentials
        BasicAWSCredentials awsCreds = new BasicAWSCredentials( amazonKey.getKey(),amazonKey.getSecret() );
        AWSLambda awsLambda = AWSLambdaClientBuilder.standard()
                .withRegion( amazonKey.getAmazonRegion().toAWSRegion().getName() )
                .withCredentials( new AWsstaticCredentialsProvider( awsCreds ) ).build();

        // Execute and process the results
        InvokeResult result = awsLambda.invoke( invokeRequest );

        // Convert the returned result
        ByteBuffer resultPayload = result.getPayload();
        String resultJson = new String( resultPayload.array(),"UTF-8" );
        Map<String,Object> resultMap = Jackson.fromJsonString( resultJson,Map.class );

        return tagUtils.convertToCfData( resultMap );

    } catch ( Exception e ) {
        throwException( _session,"AmazonLambdaExecute: " + e.getMessage() );
        return cfBooleanData.FALSE;
    }

}