Lambda Update with ECR Image Github Action

lambda-update-action.yml

name: lambda function update with ecr image github action

# see: https://docs.github.com/en/actions/using-workflows/reusing-workflows#overview
on: 
  workflow_call:
    inputs: 
      # Non-defaultable inputs, must be passed in from the caller workflow.
      # see: https://docs.github.com/en/actions/using-workflows/reusing-workflows#passing-inputs-and-secrets-to-a-reusable-workflow
      FUNCTION_NAME:
        description: Name of the function to deploy
        required: true
        type: string
      IMAGE_NAME:
        description: Name of the image to build
        required: true
        type: string
      IMAGE_TAG:
        description: Tag of the image to build
        required: true
        type: string
    # see: https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#onworkflow_callsecrets
    secrets:
      AWS_ACCOUNT_ID:
        required: true
        description: Account ID of the AWS service account
      AWS_IAM_USER:
        required: true
        description: IAM username of the AWS service account
      AWS_ACCESS_KEY_ID:
        required: true
        description: Access key ID of the AWS service account
      AWS_SECRET_ACCESS_KEY:
        required: true
        description: Secret access key of the AWS service account
      AWS_DEFAULT_REGION:
        required: true
        description: Default region of the AWS service account

jobs:
  lambda_update:
    name: lambda function update
    runs-on: ubuntu-latest
    env:
      # see:
        # {{ secrets }} context: https://docs.github.com/en/actions/learn-github-actions/contexts#secrets-context
        # {{ github }} context: https://docs.github.com/en/actions/learn-github-actions/contexts#github-context
        # {{ inputs }} context: https://docs.github.com/en/actions/learn-github-actions/contexts#inputs-context
      AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
      AWS_IAM_USER: ${{ secrets.AWS_IAM_USER }}
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
      FUNCTION_NAME: ${{ inputs.FUNCTION_NAME }} 
      IMG_NAME: ${{ inputs.IMAGE_NAME }}
      IMG_TAG: ${{ inputs.IMAGE_TAG }}

    steps:
      - name: job dependencies
        run: |
          curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
          unzip awscliv2.zip
          sudo ./aws/install

      - name: ecr login
        run: |
          aws ecr get-login-password \
            --region $AWS_DEFAULT_REGION |\
            docker login \
              --username AWS \
              --password-stdin $AWS_ACCOUNT_ID.dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com

      - name: update
        run: |
          aws lambda update-function-code \
              --function-name ${FUNCTION_NAME} \
              --image-uri ${AWS_ACCOUNT_ID}.dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com/${IMG_NAME}:${IMG_TAG}