Add inline log group support to LambdaFunctions

    Allow a log group to be configured directly on a lambda function
    via the new optional `log` field, avoiding the need to declare a
    separate CloudWatch log group resource. The log group name defaults
    to the conventional /aws/lambda/{function_name} path when not
    explicitly set.

Author: mrduguo

core/tf-aws/src/composites/lambda/LambdaFunctions.tsx

@@ -16,6 +16,7 @@ import { DataArchiveFile, Output, useArchiveFile } from '@dinghy/tf-common'
 import { IamRole } from '../iam/IamRole.tsx'
 import { extendStyle } from '@dinghy/base-components'
 import { LAMBDA_FUNCTION } from '@dinghy/diagrams/entitiesAws18Compute'
+import { LogGroups } from '../cloudwatch/LogGroups.tsx'
 
 export function LambdaFunctions(
   { _components, children, ...props }: NodeProps,
@@ -65,6 +66,9 @@ export function LambdaFunctions(
         )}
         {_lambda.archiveDir && <SourceFile />}
         {_lambda.functionUrl && <FunctionUrl />}
+        {_lambda.log && (
+          <LogGroups logGroups={{ [_lambda.log.name]: _lambda.log }} />
+        )}
       </LambdaFunctionComponent>
     )
 

core/tf-aws/src/composites/lambda/types.ts

@@ -8,6 +8,7 @@ import {
 import { z } from 'zod'
 import { AwsLambdaFunctionInputSchema } from '../../services/lambda/AwsLambdaFunction.tsx'
 import { existsSync } from '@std/fs/exists'
+import { LogGroupSchema } from '../cloudwatch/types.ts'
 
 const LambdaFunctionUrlSchema = z.object({
   authorization_type: z.enum(['NONE', 'AWS_IAM']).default('NONE'),
@@ -42,6 +43,7 @@ const LambdaFunctionSchema = AwsLambdaFunctionInputSchema.extend({
   // discover the URL through other means (resource_for_each, the AWS
   // console) and outputs leak from the stack's root.
   outputRecord: z.boolean().default(false),
+  log: LogGroupSchema.optional(),
 })
 
 const LambdaFunctionsSchema = z.record(
@@ -74,6 +76,9 @@ export function parseLambdaFunctions(
   ) {
     lambda.function_name ??= name
     lambda._title ??= lambda.function_name
+    if (lambda.log) {
+      lambda.log.name ??= `/aws/lambda/${lambda.function_name}`
+    }
     if (!lambda.image_uri && !lambda.s3_bucket && !lambda.archiveDir) {
       if (lambda.prepareSourceScript) {
         const outputFolder =