feat(connectivity_check): implement pre-built Lambda package approach

Switch to pre-built Lambda package to avoid npm authentication issues during
terraform apply. This allows the module to work across all consuming repos
without requiring npm credentials.

Changes:
- Renamed handler.ts to index.ts (standard convention)
- Updated main.tf to use pre-built lambda.zip instead of building from source
- Created build-lambda.sh script to build Lambda package with dependencies
- Added GitHub Actions workflow to auto-rebuild lambda.zip on code changes
- Updated .gitignore to allow committing lambda.zip
- Added README with usage and build instructions

The lambda.zip will be built by GitHub Actions when Lambda code changes,
bundling @janus.team/janus-core and other dependencies.

PLATEXP-11106

Author: sai-praveen-os

.github/workflows/build-lambda.yml

@@ -0,0 +1,35 @@
+name: Build Connectivity Check Lambda
+
+on:
+  push:
+    paths:
+      - 'modules/connectivity_check/lambda/**'
+      - 'modules/connectivity_check/scripts/build-lambda.sh'
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+      
+      - name: Configure npm authentication
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
+      
+      - name: Build Lambda package
+        run: |
+          chmod +x modules/connectivity_check/scripts/build-lambda.sh
+          modules/connectivity_check/scripts/build-lambda.sh
+      
+      - name: Commit lambda.zip if changed
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add modules/connectivity_check/lambda.zip
+          git diff --staged --quiet || git commit -m "chore(connectivity_check): rebuild lambda.zip [skip ci]"
+          git push

.gitignore

@@ -8,3 +8,6 @@ modules/lambda-layer-deps/examples/*/builds
 modules/lambda-layer-deps/examples/*/node_modules
 modules/lambda-layer-deps/examples/*/package.log
 .DS_Store
+
+# Allow pre-built Lambda packages
+!modules/connectivity_check/lambda.zip

modules/connectivity_check/README.md

@@ -0,0 +1,73 @@
+# Connectivity Check Module
+
+Terraform module for deploying a Lambda function that tests TCP and HTTPS connectivity to specified endpoints and publishes metrics to Datadog.
+
+## Lambda Package
+
+The Lambda function uses a pre-built package (`lambda.zip`) that includes the `@janus.team/janus-core` dependency. This approach ensures the module works across all consuming repositories without requiring npm authentication during terraform apply.
+
+### Rebuilding the Lambda Package
+
+If you modify the Lambda code or dependencies:
+
+```bash
+cd modules/connectivity_check
+./scripts/build-lambda.sh
+```
+
+The GitHub Actions workflow will automatically rebuild the package when changes are pushed to the `lambda/` directory.
+
+## Usage
+
+```hcl
+module "connectivity_check" {
+  source = "git@github.com:RSS-Engineering/terraform//modules/connectivity_check?ref=<commit-sha>"
+  
+  function_name      = "connectivity-check-primary"
+  subnet_ids         = ["subnet-xxx", "subnet-yyy"]
+  security_group_ids = ["sg-xxx"]
+  
+  enable_monitoring   = true
+  monitoring_schedule = "rate(1 minute)"
+  monitoring_targets = [
+    {
+      host     = "example.com"
+      port     = 443
+      protocol = "https"
+      critical = true
+    }
+  ]
+  
+  datadog_api_key   = var.datadog_api_key
+  janus_environment = var.environment
+}
+```
+
+## Requirements
+
+- Terraform >= 1.0
+- AWS Provider >= 5.0
+
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|----------|
+| function_name | Name of the Lambda function | string | - | yes |
+| subnet_ids | List of subnet IDs for Lambda | list(string) | - | yes |
+| security_group_ids | List of security group IDs | list(string) | - | yes |
+| enable_monitoring | Enable scheduled monitoring | bool | false | no |
+| monitoring_schedule | EventBridge schedule expression | string | "rate(1 minute)" | no |
+| monitoring_targets | List of endpoints to monitor | list(object) | [] | no |
+| datadog_api_key | Datadog API key | string | "" | no |
+| janus_environment | Environment name | string | "unknown" | no |
+| timeout | Lambda timeout in seconds | number | 10 | no |
+| memory_size | Lambda memory in MB | number | 128 | no |
+| log_retention_days | CloudWatch log retention | number | 30 | no |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| lambda_function_arn | ARN of the Lambda function |
+| lambda_function_name | Name of the Lambda function |
+| lambda_role_arn | ARN of the Lambda IAM role |

…les/connectivity_check/lambda/handler.ts …dules/connectivity_check/lambda/index.tsmodules/connectivity_check/lambda/handler.ts renamed to modules/connectivity_check/lambda/index.ts modules/connectivity_check/lambda/handler.ts renamed to modules/connectivity_check/lambda/index.ts

@@ -17,6 +17,10 @@ module "lambda" {
   handler       = "index.handler"
   runtime       = "nodejs22.x"
 
+  # Use pre-built Lambda package
+  create_package         = false
+  local_existing_package = "${path.module}/lambda.zip"
+  
   layers = var.enable_monitoring ? [
     "arn:aws:lambda:${data.aws_region.current.name}:901920570463:layer:aws-otel-nodejs-amd64-ver-1-7-0:2"
   ] : []
@@ -32,13 +36,6 @@ module "lambda" {
     } : {}
   )
 
-  source_path = [
-    {
-      path             = "${path.module}/lambda"
-      npm_requirements = true
-    }
-  ]
-
   timeout     = var.timeout
   memory_size = var.memory_size
 

modules/connectivity_check/main.tf

@@ -0,0 +1,35 @@
+#!/bin/bash
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+MODULE_DIR="$(dirname "$SCRIPT_DIR")"
+LAMBDA_DIR="$MODULE_DIR/lambda"
+BUILD_DIR="$MODULE_DIR/lambda-build"
+OUTPUT_ZIP="$MODULE_DIR/lambda.zip"
+
+echo "Building Lambda package with dependencies..."
+
+# Clean previous build
+rm -rf "$BUILD_DIR"
+rm -f "$OUTPUT_ZIP"
+
+# Create build directory
+mkdir -p "$BUILD_DIR"
+
+# Copy Lambda source files
+cp "$LAMBDA_DIR/index.ts" "$BUILD_DIR/"
+cp "$LAMBDA_DIR/package.json" "$BUILD_DIR/"
+
+# Install production dependencies
+cd "$BUILD_DIR"
+npm install --production --no-package-lock
+
+# Create zip with handler and node_modules
+cd "$BUILD_DIR"
+zip -r "$OUTPUT_ZIP" index.ts node_modules/
+
+echo "Lambda package created: $OUTPUT_ZIP"
+echo "Size: $(du -h "$OUTPUT_ZIP" | cut -f1)"
+
+# Clean up build directory
+rm -rf "$BUILD_DIR"