[SVLS-8152] Add Ruby 3.2, 3.3, and 3.4 support (#70)

* Add ruby support

* Don't check in zip file

* Fix README

* Update layer versions

* Cleanup

* Bump ruby layer to 27

Author: TalUsvyatsky

README.md

@@ -33,8 +33,8 @@ module "lambda-datadog" {
     "DD_VERSION" : "1.0.0"
   }
 
-  datadog_extension_layer_version = 74
-  datadog_python_layer_version = 106
+  datadog_extension_layer_version = 90
+  datadog_python_layer_version = 120
 }
 ```
 
@@ -59,8 +59,8 @@ module "lambda-datadog" {
     "DD_VERSION" : "1.0.0"
   }
 
-  datadog_extension_layer_version = 74
-  datadog_node_layer_version = 123
+  datadog_extension_layer_version = 90
+  datadog_node_layer_version = 132
 }
 ```
 
@@ -85,8 +85,8 @@ module "lambda-datadog" {
     "DD_VERSION" : "1.0.0"
   }
 
-  datadog_extension_layer_version = 74
-  datadog_dotnet_layer_version = 19
+  datadog_extension_layer_version = 90
+  datadog_dotnet_layer_version = 23
 }
 ```
 
@@ -111,8 +111,8 @@ module "lambda-datadog" {
     "DD_VERSION" : "1.0.0"
   }
 
-  datadog_extension_layer_version = 74
-  datadog_java_layer_version = 19
+  datadog_extension_layer_version = 90
+  datadog_java_layer_version = 24
 }
 ```
 
@@ -137,10 +137,35 @@ module "lambda-datadog" {
     "DD_VERSION" : "1.0.0"
   }
 
-  datadog_extension_layer_version = 74
+  datadog_extension_layer_version = 90
 }
 ```
 
+### Ruby
+```
+module "lambda-datadog" {
+  source  = "DataDog/lambda-datadog/aws"
+  version = "4.1.1"
+
+  filename      = "example.zip"
+  function_name = "example-function"
+  role          = aws_iam_role.lambda_role.arn
+  handler       = "lambda_function.lambda_handler"
+  runtime       = "ruby3.4"
+  memory_size   = 256
+
+  environment_variables = {
+    "DD_API_KEY_SECRET_ARN" : "arn:aws:secretsmanager:us-east-1:000000000000:secret:example-secret"
+    "DD_ENV" : "dev"
+    "DD_SERVICE" : "example-service"
+    "DD_SITE": "datadoghq.com"
+    "DD_VERSION" : "1.0.0"
+  }
+
+  datadog_ruby_layer_version = 27
+  datadog_extension_layer_version = 90
+}
+```
 
 ## Configuration
 
@@ -211,6 +236,7 @@ Use the following variables to select the versions of the Datadog Lambda layers
 | `datadog_java_layer_version` | Version of the [Datadog Java Lambda layer](https://github.com/DataDog/datadog-lambda-java/releases) to install |
 | `datadog_node_layer_version` | Version of the [Datadog Node Lambda layer](https://github.com/DataDog/datadog-lambda-js/releases) to install |
 | `datadog_python_layer_version` | Version of the [Datadog Python Lambda layer](https://github.com/DataDog/datadog-lambda-python/releases) to install |
+| `datadog_ruby_layer_version` | Version of the [Datadog Ruby Lambda layer](https://github.com/DataDog/datadog-lambda-rb/releases) to install |
 
 #### Selecting the Datadog Site
 
@@ -226,6 +252,7 @@ Use Environment variables to configure Datadog Serverless Monitoring. Refer to t
   - [Java](https://docs.datadoghq.com/tracing/trace_collection/library_config/java/)
   - [Node](https://github.com/DataDog/datadog-lambda-js?tab=readme-ov-file#configuration)
   - [Python](https://github.com/DataDog/datadog-lambda-python?tab=readme-ov-file#configuration)
+  - [Ruby](https://github.com/DataDog/datadog-lambda-rb?tab=readme-ov-file#configuration)
 
 <!-- BEGIN_TF_DOCS -->
 ## Requirements
@@ -258,11 +285,12 @@ No modules.
 |------|-------------|----------------|---------|:--------:|
 | <a name="input_architectures"></a> [architectures](#input\_architectures) | Instruction set architecture for your Lambda function. Valid values are ["x86\_64"] and ["arm64"]. | `list(string)` | <pre>["x86_64"]</pre> | no |
 | <a name="input_code_signing_config_arn"></a> [code\_signing\_config\_arn](#input\_code\_signing\_config\_arn) | To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function. | `string`       | `null` | no |
-| <a name="input_datadog_extension_layer_version"></a> [datadog\_extension\_layer\_version](#input\_datadog\_extension\_layer\_version) | Version for the Datadog Extension Layer | `number`       | `74` | no |
-| <a name="input_datadog_dotnet_layer_version"></a> [datadog\_dotnet\_layer\_version](#input\_datadog\_dotnet\_layer\_version) | Version for the Datadog .NET Layer | `number`       | `19` | no |
-| <a name="input_datadog_java_layer_version"></a> [datadog\_java\_layer\_version](#input\_datadog\_java\_layer\_version) | Version for the Datadog Java Layer | `number`       | `19` | no |
-| <a name="input_datadog_node_layer_version"></a> [datadog\_node\_layer\_version](#input\_datadog\_node\_layer\_version) | Version for the Datadog Node Layer | `number`       | `123` | no |
-| <a name="input_datadog_python_layer_version"></a> [datadog\_python\_layer\_version](#input\_datadog\_python\_layer\_version) | Version for the Datadog Python Layer | `number`       | `106` | no |
+| <a name="input_datadog_extension_layer_version"></a> [datadog\_extension\_layer\_version](#input\_datadog\_extension\_layer\_version) | Version for the Datadog Extension Layer | `number`       | `90` | no |
+| <a name="input_datadog_dotnet_layer_version"></a> [datadog\_dotnet\_layer\_version](#input\_datadog\_dotnet\_layer\_version) | Version for the Datadog .NET Layer | `number`       | `23` | no |
+| <a name="input_datadog_java_layer_version"></a> [datadog\_java\_layer\_version](#input\_datadog\_java\_layer\_version) | Version for the Datadog Java Layer | `number`       | `24` | no |
+| <a name="input_datadog_node_layer_version"></a> [datadog\_node\_layer\_version](#input\_datadog\_node\_layer\_version) | Version for the Datadog Node Layer | `number`       | `132` | no |
+| <a name="input_datadog_python_layer_version"></a> [datadog\_python\_layer\_version](#input\_datadog\_python\_layer\_version) | Version for the Datadog Python Layer | `number`       | `120` | no |
+| <a name="input_datadog_ruby_layer_version"></a> [datadog\_ruby\_layer\_version](#input\_datadog\_ruby\_layer\_version) | Version for the Datadog Ruby Layer | `number`       | `27` | no |
 | <a name="input_dead_letter_config_target_arn"></a> [dead\_letter\_config\_target\_arn](#input\_dead\_letter\_config\_target\_arn) | ARN of an SNS topic or SQS queue to notify when an invocation fails. | `string`       | `null` | no |
 | <a name="input_description"></a> [description](#input\_description) | Description of what your Lambda Function does. | `string`       | `null` | no |
 | <a name="input_environment_variables"></a> [environment\_variables](#input\_environment\_variables) | Map of environment variables that are accessible from the function code during execution. | `map(string)`  | `{}` | no |

examples/ruby/README.md

@@ -0,0 +1,67 @@
+# Ruby Example
+
+A simple Ruby Lambda function with out of the box Datadog instrumentation.
+
+## Usage
+
+* Create a [Datadog API Key](https://app.datadoghq.com/organization-settings/api-keys)
+* Create a secret in [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) and add the Datadog API Key as the secret value in plaintext
+* Create a `terraform.tfvars` file
+  - Set the `datadog_secret_arn` to the arn of the secret you just created
+  - Set the `datadog_service_name` to the name of the service you want to use to filter for the resource in Datadog
+  - Set the `datadog_site` to the [Datadog destination site](https://docs.datadoghq.com/getting_started/site/) for your metrics, traces, and logs
+* Run the following commands
+
+```
+terraform init
+terraform plan
+terraform apply
+```
+
+<!-- BEGIN_TF_DOCS -->
+## Requirements
+
+| Name | Version |
+|------|---------|
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.5.0 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 5.77.0 |
+
+## Providers
+
+| Name | Version |
+|------|---------|
+| <a name="provider_archive"></a> [archive](#provider\_archive) | 2.4.2 |
+| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 5.77.0 |
+
+## Modules
+
+| Name | Source | Version |
+|------|--------|---------|
+| <a name="module_lambda-datadog"></a> [lambda-datadog](#module\_lambda-datadog) | ../../ | n/a |
+
+## Resources
+
+| Name | Type |
+|------|------|
+| [aws_iam_policy.secrets_manager_read_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |
+| [aws_iam_role.lambda_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource |
+| [aws_iam_role_policy_attachment.attach_iam_policy_to_iam_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |
+| [aws_iam_role_policy_attachment.attach_secrets_manager_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |
+| [archive_file.zip_code](https://registry.terraform.io/providers/hashicorp/archive/latest/docs/data-sources/file) | data source |
+
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| <a name="input_datadog_secret_arn"></a> [datadog\_secret\_arn](#input\_datadog\_secret\_arn) | Secret for Datadog API Key | `string` | n/a | yes |
+| <a name="input_datadog_service_name"></a> [datadog\_service\_name](#input\_datadog\_service\_name) | Service used to filter for resources in Datadog | `string` | n/a | yes |
+| <a name="input_datadog_site"></a> [datadog\_site](#input\_datadog\_site) | Destination site for your metrics, traces, and logs | `string` | n/a | yes |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| <a name="output_arn"></a> [arn](#output\_arn) | Amazon Resource Name (ARN) identifying your Lambda Function. |
+| <a name="output_function_name"></a> [function\_name](#output\_function\_name) | Unique name for your Lambda Function |
+| <a name="output_invoke_arn"></a> [invoke\_arn](#output\_invoke\_arn) | ARN to be used for invoking Lambda Function from API Gateway. |
+<!-- END_TF_DOCS -->

examples/ruby/main.tf

@@ -0,0 +1,72 @@
+resource "aws_iam_role" "lambda_role" {
+  name = "terraform-example-ruby-${var.datadog_service_name}-role"
+  assume_role_policy = jsonencode(
+    {
+      "Version" : "2012-10-17",
+      "Statement" : [
+        {
+          "Sid" : "",
+          "Effect" : "Allow",
+          "Action" : "sts:AssumeRole",
+          "Principal" : {
+            "Service" : "lambda.amazonaws.com"
+          }
+        }
+      ]
+  })
+}
+
+resource "aws_iam_policy" "secrets_manager_read_policy" {
+  name        = "terraform-example-ruby-${var.datadog_service_name}-secrets-manager-policy"
+  description = "Policy to allow read access to Secrets Manager"
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Sid      = "ReadSecret"
+        Effect   = "Allow"
+        Action   = "secretsmanager:GetSecretValue"
+        Resource = var.datadog_secret_arn
+      }
+    ]
+  })
+}
+
+resource "aws_iam_role_policy_attachment" "attach_iam_policy_to_iam_role" {
+  role       = aws_iam_role.lambda_role.name
+  policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+}
+
+resource "aws_iam_role_policy_attachment" "attach_secrets_manager_policy" {
+  role       = aws_iam_role.lambda_role.name
+  policy_arn = aws_iam_policy.secrets_manager_read_policy.arn
+}
+
+data "archive_file" "zip_code" {
+  type        = "zip"
+  source_dir  = "${path.module}/src/"
+  output_path = "${path.module}/hello-ruby.zip"
+}
+
+
+
+module "lambda-datadog" {
+  source = "../../"
+
+  filename      = "${path.module}/hello-ruby.zip"
+  function_name = "terraform-example-ruby-${var.datadog_service_name}-function"
+  role          = aws_iam_role.lambda_role.arn
+  handler       = "rb_handler.hello"
+  runtime       = "ruby3.4"
+  architectures = ["arm64"]
+  memory_size   = 256
+
+  environment_variables = {
+    "DD_API_KEY_SECRET_ARN" : var.datadog_secret_arn
+    "DD_ENV" : "dev"
+    "DD_SERVICE" : var.datadog_service_name
+    "DD_SITE": var.datadog_site
+    "DD_VERSION" : "1.0.0"
+  }
+}
+

examples/ruby/outputs.tf

@@ -0,0 +1,14 @@
+output "arn" {
+  description = "Amazon Resource Name (ARN) identifying your Lambda Function."
+  value       = module.lambda-datadog.arn
+}
+
+output "invoke_arn" {
+  description = "ARN to be used for invoking Lambda Function from API Gateway."
+  value       = module.lambda-datadog.invoke_arn
+}
+
+output "function_name" {
+  description = "Unique name for your Lambda Function"
+  value       = module.lambda-datadog.function_name
+}

examples/ruby/src/rb_handler.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+require 'datadog/lambda'
+
+Datadog::Lambda.configure_apm do |c|
+end
+
+def hello(event:, context:)
+  Datadog::Lambda.wrap(event, context) do
+    body = {
+      'message' => "Datadog <3 Serverless!",
+      'input' => event
+    }
+
+    response = {
+      'statusCode' => 200,
+      'body' => body
+    }
+
+    response
+  end
+end

examples/ruby/variables.tf

@@ -0,0 +1,14 @@
+variable "datadog_secret_arn" {
+  description = "Secret for Datadog API Key"
+  type        = string
+}
+
+variable "datadog_service_name" {
+  description = "Service used to filter for resources in Datadog"
+  type        = string
+}
+
+variable "datadog_site" {
+  description = "Destination site for your metrics, traces, and logs"
+  type        = string
+}

examples/ruby/versions.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = ">= 1.5.0"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 5.77.0"
+    }
+  }
+}

main.tf

@@ -20,18 +20,23 @@ locals {
     python = {
       DD_LAMBDA_HANDLER = var.handler
     }
+    ruby = {
+      DD_LAMBDA_HANDLER = var.handler
+    }
   }
   runtime_base_handler_map = {
     dotnet = var.handler
     java   = var.handler
     nodejs = "/opt/nodejs/node_modules/datadog-lambda-js/handler.handler"
     python = "datadog_lambda.handler.handler"
+    ruby   = var.handler
   }
   runtime_base_layer_version_map = {
     dotnet = var.datadog_dotnet_layer_version
     java   = var.datadog_java_layer_version
     nodejs = var.datadog_node_layer_version
     python = var.datadog_python_layer_version
+    ruby   = var.datadog_ruby_layer_version
   }
   runtime_layer_map = {
     "dotnet6"    = "dd-trace-dotnet"
@@ -52,6 +57,9 @@ locals {
     "python3.12" = "Datadog-Python312"
     "python3.13" = "Datadog-Python313"
     "python3.14" = "Datadog-Python314"
+    "ruby3.2"    = "Datadog-Ruby3-2"
+    "ruby3.3"    = "Datadog-Ruby3-3"
+    "ruby3.4"    = "Datadog-Ruby3-4"
   }
 }
 
@@ -120,6 +128,9 @@ check "runtime_support" {
         "python3.14",
         "provided.al2",
         "provided.al2023",
+        "ruby3.2",
+        "ruby3.3",
+        "ruby3.4",
       ],
     var.runtime)
     error_message = "${var.runtime} Lambda runtime is not supported by the lambda-datadog Terraform module"

variables.tf

@@ -11,7 +11,7 @@ variable "datadog_extension_layer_version" {
 variable "datadog_dotnet_layer_version" {
   description = "Version for the Datadog .NET Layer"
   type        = number
-  default     = 22
+  default     = 23
 }
 
 variable "datadog_java_layer_version" {
@@ -32,6 +32,12 @@ variable "datadog_python_layer_version" {
   default     = 120
 }
 
+variable "datadog_ruby_layer_version" {
+  description = "Version for the Datadog Ruby Layer"
+  type        = number
+  default     = 27
+}
+
 variable "fips" {
   description = "Enable FIPS mode for Datadog Lambda extension"
   type        = bool