This is a (Bug Report / Feature Proposal)

Bug Report

Description

When deploying some functions into a VPC using the AWS provider, my ‘vpc’ block appears to entirely ignored.

Maybe this is all a misconfiguration somewhere, but the docs for vpc usage are pretty sparse.

For bug reports:

• What went wrong? I defined a vpc block for a number of functions (3 of them, specifically) as follows:

      vpc:
            SecurityGroupIds:
                - { "Ref" : "vpcSecurityGroup"}
            SubnetIds:
                - { "Ref": "esSubnet" }

The VPC, subnet, and security group are defined in my serverless.yml as follows:

        AWSLambdaVPCAccessExecutionRole:
            Type: AWS::IAM::ManagedPolicy
            Properties:
                Description: Creating policy for vpc connetion.
                Roles:
                    - {"Ref" : "IamRoleLambdaExecution"}
                PolicyDocument:
                    Version: '2012-10-17'
                    Statement:
                    - Effect: Allow
                      Action:
                        - ec2:CreateNetworkInterface
                        - ec2:DescribeNetworkInterfaces
                        - ec2:DeleteNetworkInterface
                      Resource: "*"
        serviceVPC:
            Type: "AWS::EC2::VPC"
            Properties: 
                CidrBlock: "10.0.0.0/16"
                InstanceTenancy: default
        vpcSecurityGroup:
            Type: "AWS::EC2::SecurityGroup"
            Properties: 
                GroupName: secgrp-${self:service}-${opt:stage, self:provider.stage}
                GroupDescription: "security group for vpc"
                VpcId: { "Ref": "serviceVPC" }
                SecurityGroupIngress:
                    - IpProtocol: tcp
                      FromPort: '0'
                      ToPort: '65535'

        daxSubnet: #for later
            Type: "AWS::EC2::Subnet"
            Properties:
                CidrBlock: "10.0.0.0/24"
                VpcId: { "Ref": "serviceVPC" }
        esSubnet:
            Type: "AWS::EC2::Subnet"
            Properties:
                CidrBlock: "10.0.1.0/24"
                VpcId: { "Ref": "serviceVPC" }

• What did you expect should have happened? I expected the vpc configuration to be put on the functions.

• What was the config you used?

• What stacktrace or error message from your provider did you see? No error message. Instead, the functions are created with VPC configuration information.

• #12345

Additional Data

I am using the serverless-domain-manager plugin and the serverless-split-stacks plugin. No other plugins.

• Serverless Framework Version you’re using: 1.25.0

• Operating System: MacOS High Sierra

• Stack Trace: None given

• Provider Error messages: None given