fix: API Lambda function permissions (#84)

Update the API's Lambda function permissions to include `lambda:InvokeFunction`.

This is a recent change from AWS requiring public function URLs to include both the
`lambda:InvokeFunctionUrl` and `lambda:InvokeFunction` actions.

Author: patheard

terragrunt/aws/api/lambda.tf

@@ -20,3 +20,18 @@ resource "aws_lambda_function_url" "api" {
   function_name      = module.api.function_name
   authorization_type = "NONE"
 }
+
+resource "aws_lambda_permission" "api_invoke_function_url" {
+  statement_id           = "AllowInvokeFunctionUrl"
+  action                 = "lambda:InvokeFunctionUrl"
+  function_name          = module.api.function_name
+  function_url_auth_type = "NONE"
+  principal              = "*"
+}
+
+resource "aws_lambda_permission" "api_invoke_function" {
+  statement_id  = "AllowInvokeFunction"
+  action        = "lambda:InvokeFunction"
+  function_name = module.api.function_name
+  principal     = "*"
+}