> ## Documentation Index
> Fetch the complete documentation index at: https://www.ravion.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Lambda Function inputs: Builder config to terraform settings

> Reference the Lambda Function module's Builder config, Image registry lifecycle, Misc, Terraform settings inputs.

**Type:** `rvn-lambda` / **Latest version:** `2.4.0`

See [Lambda Function module reference](https://www.ravion.com/docs/module-definitions/catalog/rvn-lambda) for the full module page.

### Builder config

**build\_capacity\_type** `string` *required*

**Builder capacity type.** Sandbox starts fastest. EC2 spot costs less but may wait for capacity or be interrupted.

* Default: `sandbox`
* Allowed values: `sandbox` (Sandbox), `ec2` (EC2), `ec2-spot` (EC2 spot)
* Shown when: `{"build_source":["dockerfile","railpack","nixpacks"]}`

**build\_instance\_type** `string` *required*

**Builder instance type.** EC2 instance type for builds. Start with the default value, then increase or decrease it based on the resource usage report at the end of builds.

* Default: `c7a.4xlarge`
* Shown when: `{"build_capacity_type":["ec2","ec2-spot"],"build_source":["dockerfile","railpack","nixpacks"]}`

**build\_auto\_sizing\_enabled** `boolean`

**Automatic build sizing.** Ravion sizes CPU, memory, and disk from previous builds. Turn off to set fixed sizes.

* Default: `true`
* Shown when: `{"build_capacity_type":"sandbox","build_source":["dockerfile","railpack","nixpacks"]}`

**build\_cpu** `number` *required*

**Builder vCPUs.**

* Default: `14`
* Shown when: `{"build_auto_sizing_enabled":false,"build_capacity_type":"sandbox","build_source":["dockerfile","railpack","nixpacks"]}`

**build\_memory** `number` *required*

**Builder memory (GiB).**

* Default: `28`
* Shown when: `{"build_auto_sizing_enabled":false,"build_capacity_type":"sandbox","build_source":["dockerfile","railpack","nixpacks"]}`

**build\_disk** `number`

**Builder disk (GiB).** Space the build reserves on the pool host for what it writes. Larger values let fewer builds share a host.

* Default: `30`
* Shown when: `{"build_auto_sizing_enabled":false,"build_capacity_type":"sandbox","build_source":["dockerfile","railpack","nixpacks"]}`

**build\_interruptible\_enabled** `boolean`

**Interruptible build.** Lets the build run on spot hosts and start over if AWS reclaims the host. Turn off if your build commands change anything outside the build, such as running database migrations.

* Default: `true`
* Shown when: `{"build_capacity_type":"sandbox","build_source":["dockerfile","railpack","nixpacks"]}`

**build\_execution\_environment\_id** `string`

**Builder execution environment.** Optional execution environment ID or given ID for builds. Defaults to the module Terraform execution environment.

* Shown when: `{"build_source":["dockerfile","railpack","nixpacks"]}`

**build\_ami\_id** `string`

**Builder AMI.** Optional AMI ID for build runners. Leave empty to use the default runner image.

* Shown when: `{"build_capacity_type":["ec2","ec2-spot"],"build_source":["dockerfile","railpack","nixpacks"]}`

**build\_default\_policies\_enabled** `boolean`

**Include default build policies.** The step's built-in policies (ECR/S3 access, CloudWatch agent) stay attached alongside your Builder IAM policies. Turn off to run the build with only the policies listed below.

* Default: `true`
* Shown when: `{"build_source":["dockerfile","railpack","nixpacks"]}`

**build\_iam\_policy\_arns** `string_array`

**Builder IAM policies.** IAM managed policy ARNs for the EC2 build runner role, applied for the duration of each build.

* Default: `[]`
* Shown when: `{"build_source":["dockerfile","railpack","nixpacks"]}`

### Image registry lifecycle

**ecr\_scan\_on\_push\_enabled** `boolean`

**Scan images on push.** Ask ECR to run its basic vulnerability scan whenever a new image is pushed. Keep this on for early dependency and OS package findings; disable only if another scanner owns image scanning or duplicate findings are noisy. Enabled by default to satisfy SOC 2 vulnerability-scanning requirements.

* Default: `true`
* Shown when: `{"build_source":["dockerfile","nixpacks"],"lambda_type":"regional","package_type":"Image"}`

**ecr\_force\_deletion\_enabled** `boolean`

**Force delete image repository.** Allow the ECR repository to be deleted even when it contains images. Use with care.

* Default: `false`
* Shown when: `{"build_source":["dockerfile","nixpacks"],"lambda_type":"regional","package_type":"Image"}`

### Misc

**tags** `keyvalue`

**Tags.** A map of tags to assign to all resources. Default tags are `Owner`, `ProjectGivenId`, `EnvironmentGivenId`, `ModuleGivenId`, `ModuleId`

### Terraform settings

**opentofu\_version** `string`

**OpenTofu version override.** Override the environment's default version for this module

**ravion\_state\_backend\_workspace** `string`

**Ravion Terraform workspace name.** Override Terraform state backend workspace name. Defaults to project + environment + module given ids.

* Immutable after creation

**terraform\_plan\_default\_policies\_enabled** `boolean`

**Include default plan policies.** Turn off to plan with only the policies below instead of the default read-only policies. Requires at least one policy below.

* Default: `true`

**terraform\_plan\_iam\_policy\_arns** `string_array`

**Terraform plan IAM policies.** IAM managed policy ARNs for the Terraform plan runner role. Without default policies, allow s3:CreateBucket, s3:PutObject, s3:GetObject, and s3:ListBucket on the ravion-terraform-plans-\<AWS account number> bucket in this account.

* Default: `[]`

**terraform\_apply\_default\_policies\_enabled** `boolean`

**Include default apply policies.** Turn off to apply and destroy with only the policies below instead of AdministratorAccess. Requires at least one policy below.

* Default: `true`

**terraform\_apply\_iam\_policy\_arns** `string_array`

**Terraform apply IAM policies.** IAM managed policy ARNs for the Terraform apply runner role. Without default policies, allow s3:CreateBucket, s3:PutObject, s3:GetObject, and s3:ListBucket on the ravion-terraform-plans-\<AWS account number> bucket in this account.

* Default: `[]`

**advanced\_terraform\_variables** `object`

**Advanced Terraform variables.** Optional raw Terraform variable overrides for advanced module inputs or one-off overrides. Values here override the generated variables above.

* Default: `{}`

**execution\_environment\_id** `string`

**Terraform execution environment.** Override the execution environment for Terraform runners. Must use the same AWS account as selected above.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.