Allow overriding NAT Gateway for fallback

README.md

@@ -237,6 +237,13 @@ While we'd like for this to be available on the Terraform Registry, it requires
   ```
 - If you see errors like: `error connecting to https://www.google.com/: <urlopen error [Errno 97] Address family not supported by protocol>` in the connectivity tester logs, you can set `lambda_has_ipv6 = false`. This will cause the lambda to request IPv4 addresses only in DNS lookups.
 
+- If you want to use just a single NAT Gateway for fallback, you can create it externally and provide its ID through the `nat_gateway_id` variable. Note that you will incur cross AZ traffic charges of $0.01/GB.
+
+  ```tf
+    create_nat_gateways = false
+    nat_gateway_id      = "nat-..."
+  ```
+
 
 
 ## Future work

functions/replace-route/app.py

@@ -82,6 +82,11 @@ def get_vpc_id(route_table):
 
 
 def get_nat_gateway_id(vpc_id, subnet_id):
+    nat_gateway_id = os.getenv("NAT_GATEWAY_ID")
+    if nat_gateway_id:
+        logger.info("Using NAT_GATEWAY_ID env. variable (%s)", nat_gateway_id)
+        return nat_gateway_id
+
     try:
         nat_gateways = ec2_client.describe_nat_gateways(
             Filters=[

modules/terraform-aws-alternat/lambda.tf

@@ -36,6 +36,7 @@ resource "aws_lambda_function" "alternat_autoscaling_hook" {
   environment {
     variables = merge(
       local.autoscaling_func_env_vars,
+      { NAT_GATEWAY_ID = var.nat_gateway_id },
       var.lambda_environment_variables,
     )
   }
@@ -156,6 +157,7 @@ resource "aws_lambda_function" "alternat_connectivity_tester" {
         ROUTE_TABLE_IDS_CSV = join(",", each.value.route_table_ids),
         PUBLIC_SUBNET_ID    = each.value.public_subnet_id
         CHECK_URLS          = join(",", var.connectivity_test_check_urls)
+        NAT_GATEWAY_ID      = var.nat_gateway_id,
       },
       local.has_ipv6_env_var,
       var.lambda_environment_variables,

modules/terraform-aws-alternat/variables.tf

@@ -195,6 +195,12 @@ variable "vpc_az_maps" {
   }))
 }
 
+variable "nat_gateway_id" {
+  description = "NAT Gateway ID to use for fallback. If not provided, the gateway in the same subnet as relevant NAT instance is selected."
+  type        = string
+  default     = ""
+}
+
 variable "vpc_id" {
   description = "The ID of the VPC."
   type        = string