> ## Documentation Index
> Fetch the complete documentation index at: https://www.ravion.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Lambda Function inputs: Image registry lifecycle to terraform settings

> Reference the Lambda Function module's Image registry lifecycle, Misc, Terraform settings inputs.

**Type:** `rvn-lambda` / **Latest version:** `2.1.0`

See [Lambda Function module reference](/docs/module-definitions/catalog/rvn-lambda) for the full module page.

### Image registry lifecycle

**ecr\_scan\_on\_push\_enabled** `boolean`

**Scan images on push.** Ask ECR to run its basic vulnerability scan whenever a new image is pushed. Keep this on for early dependency and OS package findings; disable only if another scanner owns image scanning or duplicate findings are noisy. Enabled by default to satisfy SOC 2 vulnerability-scanning requirements.

* Default: `true`
* Shown when: `{"build_source":["dockerfile","nixpacks"],"lambda_type":"regional","package_type":"Image"}`

**ecr\_force\_deletion\_enabled** `boolean`

**Force delete image repository.** Allow the ECR repository to be deleted even when it contains images. Use with care.

* Default: `false`
* Shown when: `{"build_source":["dockerfile","nixpacks"],"lambda_type":"regional","package_type":"Image"}`

### Misc

**tags** `keyvalue`

**Tags.** A map of tags to assign to all resources. Default tags are `Owner`, `ProjectGivenId`, `EnvironmentGivenId`, `ModuleGivenId`, `ModuleId`

### Terraform settings

**opentofu\_version** `string`

**OpenTofu version override.** Override the environment's default version for this module

**ravion\_state\_backend\_workspace** `string`

**Ravion Terraform workspace name.** Override Terraform state backend workspace name. Defaults to project + environment + module given ids.

* Immutable after creation

**terraform\_plan\_default\_policies\_enabled** `boolean`

**Include default plan policies.** Turn off to plan with only the policies below instead of the default read-only policies. Requires at least one policy below.

* Default: `true`

**terraform\_plan\_iam\_policy\_arns** `string_array`

**Terraform plan IAM policies.** IAM managed policy ARNs for the Terraform plan runner role. Without default policies, allow s3:CreateBucket, s3:PutObject, s3:GetObject, and s3:ListBucket on the ravion-terraform-plans-\<AWS account number> bucket in this account.

* Default: `[]`

**terraform\_apply\_default\_policies\_enabled** `boolean`

**Include default apply policies.** Turn off to apply and destroy with only the policies below instead of AdministratorAccess. Requires at least one policy below.

* Default: `true`

**terraform\_apply\_iam\_policy\_arns** `string_array`

**Terraform apply IAM policies.** IAM managed policy ARNs for the Terraform apply runner role. Without default policies, allow s3:CreateBucket, s3:PutObject, s3:GetObject, and s3:ListBucket on the ravion-terraform-plans-\<AWS account number> bucket in this account.

* Default: `[]`

**advanced\_terraform\_variables** `object`

**Advanced Terraform variables.** Optional raw Terraform variable overrides for advanced module inputs or one-off overrides. Values here override the generated variables above.

* Default: `{}`

**execution\_environment\_id** `string`

**Terraform execution environment.** Override the execution environment for Terraform runners. Must use the same AWS account as selected above.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.