From 4406c74f94c24cef71af9e33797d4c84365ac58a Mon Sep 17 00:00:00 2001
From: Alex Wang Adds permissions to the resource-based policy of a version of an Lambda layer. Use this action to grant layer usage permission to other accounts. You can grant permission to a single account, all accounts in an organization, or all Amazon Web Services accounts. To revoke permission, call RemoveLayerVersionPermission with the statement ID that you specified when you added it. Grants a principal permission to use a function. You can apply the policy at the function level, or specify a qualifier to restrict access to a single version or alias. If you use a qualifier, the invoker must use the full Amazon Resource Name (ARN) of that version or alias to invoke the function. Note: Lambda does not support adding policies to version $LATEST. To grant permission to another account, specify the account ID as the This operation adds a statement to a resource-based permissions policy for the function. For more information about function policies, see Using resource-based policies for Lambda. Grants an Amazon Web Services service, account, or organization permission to use a function. You can apply the policy at the function level, or specify a qualifier to restrict access to a single version or alias. If you use a qualifier, the invoker must use the full Amazon Resource Name (ARN) of that version or alias to invoke the function. Note: Lambda does not support adding policies to version $LATEST. To grant permission to another account, specify the account ID as the This action adds a statement to a resource-based permissions policy for the function. For more information about function policies, see Lambda Function Policies. Creates an alias for a Lambda function version. Use aliases to provide clients with a function identifier that you can update to invoke a different version. You can also map an alias to split invocation requests between two versions. Use the Creates an alias for a Lambda function version. Use aliases to provide clients with a function identifier that you can update to invoke a different version. You can also map an alias to split invocation requests between two versions. Use the Creates a code signing configuration. A code signing configuration defines a list of allowed signing profiles and defines the code-signing validation policy (action to be taken if deployment validation checks fail). Creates a code signing configuration. A code signing configuration defines a list of allowed signing profiles and defines the code-signing validation policy (action to be taken if deployment validation checks fail). Creates a mapping between an event source and an Lambda function. Lambda reads items from the event source and invokes the function. For details about how to configure different event sources, see the following topics. The following error handling options are available only for stream sources (DynamoDB and Kinesis): For information about which configuration parameters apply to each event source, see the following topics. Creates a mapping between an event source and an Lambda function. Lambda reads items from the event source and invokes the function. For details about how to configure different event sources, see the following topics. The following error handling options are available only for DynamoDB and Kinesis event sources: For stream sources (DynamoDB, Kinesis, Amazon MSK, and self-managed Apache Kafka), the following option is also available: For information about which configuration parameters apply to each event source, see the following topics. Creates a Lambda function. To create a function, you need a deployment package and an execution role. The deployment package is a .zip file archive or container image that contains your function code. The execution role grants the function permission to use Amazon Web Services services, such as Amazon CloudWatch Logs for log streaming and X-Ray for request tracing. You set the package type to You set the package type to When you create a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute or so. During this time, you can't invoke or modify the function. The A function has an unpublished version, and can have published versions and aliases. The unpublished version changes when you update your function's code and configuration. A published version is a snapshot of your function code and configuration that can't be changed. An alias is a named resource that maps to a version, and can be changed to map to a different version. Use the The other parameters let you configure version-specific and function-level settings. You can modify version-specific settings later with UpdateFunctionConfiguration. Function-level settings apply to both the unpublished and published versions of the function, and include tags (TagResource) and per-function concurrency limits (PutFunctionConcurrency). You can use code signing if your deployment package is a .zip file archive. To enable code signing for this function, specify the ARN of a code-signing configuration. When a user attempts to deploy a code package with UpdateFunctionCode, Lambda checks that the code package has a valid signature from a trusted publisher. The code-signing configuration includes set set of signing profiles, which define the trusted publishers for this function. If another account or an Amazon Web Services service invokes your function, use AddPermission to grant permission by creating a resource-based IAM policy. You can grant permissions at the function level, on a version, or on an alias. To invoke your function directly, use Invoke. To invoke your function in response to events in other Amazon Web Services services, create an event source mapping (CreateEventSourceMapping), or configure a function trigger in the other service. For more information, see Invoking Functions. Creates a Lambda function. To create a function, you need a deployment package and an execution role. The deployment package is a .zip file archive or container image that contains your function code. The execution role grants the function permission to use Amazon Web Services services, such as Amazon CloudWatch Logs for log streaming and X-Ray for request tracing. If the deployment package is a container image, then you set the package type to If the deployment package is a .zip file archive, then you set the package type to When you create a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute or so. During this time, you can't invoke or modify the function. The A function has an unpublished version, and can have published versions and aliases. The unpublished version changes when you update your function's code and configuration. A published version is a snapshot of your function code and configuration that can't be changed. An alias is a named resource that maps to a version, and can be changed to map to a different version. Use the The other parameters let you configure version-specific and function-level settings. You can modify version-specific settings later with UpdateFunctionConfiguration. Function-level settings apply to both the unpublished and published versions of the function, and include tags (TagResource) and per-function concurrency limits (PutFunctionConcurrency). You can use code signing if your deployment package is a .zip file archive. To enable code signing for this function, specify the ARN of a code-signing configuration. When a user attempts to deploy a code package with UpdateFunctionCode, Lambda checks that the code package has a valid signature from a trusted publisher. The code-signing configuration includes set of signing profiles, which define the trusted publishers for this function. If another Amazon Web Services account or an Amazon Web Services service invokes your function, use AddPermission to grant permission by creating a resource-based Identity and Access Management (IAM) policy. You can grant permissions at the function level, on a version, or on an alias. To invoke your function directly, use Invoke. To invoke your function in response to events in other Amazon Web Services services, create an event source mapping (CreateEventSourceMapping), or configure a function trigger in the other service. For more information, see Invoking Lambda functions. Creates a Lambda function URL with the specified configuration parameters. A function URL is a dedicated HTTP(S) endpoint that you can use to invoke your function. Deletes a Lambda function alias. Deletes a Lambda function alias. Deletes the code signing configuration. You can delete the code signing configuration only if no function is using it. Deletes the code signing configuration. You can delete the code signing configuration only if no function is using it. Deletes an event source mapping. You can get the identifier of a mapping from the output of ListEventSourceMappings. When you delete an event source mapping, it enters a Deletes an event source mapping. You can get the identifier of a mapping from the output of ListEventSourceMappings. When you delete an event source mapping, it enters a Deletes a Lambda function. To delete a specific function version, use the To delete Lambda event source mappings that invoke a function, use DeleteEventSourceMapping. For Amazon Web Services services and resources that invoke your function directly, delete the trigger in the service where you originally configured it. Deletes a Lambda function. To delete a specific function version, use the To delete Lambda event source mappings that invoke a function, use DeleteEventSourceMapping. For Amazon Web Services services and resources that invoke your function directly, delete the trigger in the service where you originally configured it. Removes the code signing configuration from the function. Removes a concurrent execution limit from a function. Deletes the configuration for asynchronous invocation for a function, version, or alias. To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig. Deletes a Lambda function URL. When you delete a function URL, you can't recover it. Creating a new function URL results in a different URL address. Deletes a version of an Lambda layer. Deleted versions can no longer be viewed or added to functions. To avoid breaking functions, a copy of the version remains in Lambda until no functions refer to it. Deletes a version of an Lambda layer. Deleted versions can no longer be viewed or added to functions. To avoid breaking functions, a copy of the version remains in Lambda until no functions refer to it. Deletes the provisioned concurrency configuration for a function. Deletes the provisioned concurrency configuration for a function. Retrieves details about your account's limits and usage in an Amazon Web Services Region. Retrieves details about your account's limits and usage in an Amazon Web Services Region. Returns details about a Lambda function alias. Returns details about a Lambda function alias. Returns information about the specified code signing configuration. Returns information about the specified code signing configuration. Returns details about an event source mapping. You can get the identifier of a mapping from the output of ListEventSourceMappings. Returns details about an event source mapping. You can get the identifier of a mapping from the output of ListEventSourceMappings. Returns information about the function or function version, with a link to download the deployment package that's valid for 10 minutes. If you specify a function version, only details that are specific to that version are returned. Returns information about the function or function version, with a link to download the deployment package that's valid for 10 minutes. If you specify a function version, only details that are specific to that version are returned. Returns the code signing configuration for the specified function. Returns the code signing configuration for the specified function. Returns details about the reserved concurrency configuration for a function. To set a concurrency limit for a function, use PutFunctionConcurrency. Returns details about the reserved concurrency configuration for a function. To set a concurrency limit for a function, use PutFunctionConcurrency. Returns the version-specific settings of a Lambda function or version. The output includes only options that can vary between versions of a function. To modify these settings, use UpdateFunctionConfiguration. To get all of a function's details, including function-level settings, use GetFunction. Returns the version-specific settings of a Lambda function or version. The output includes only options that can vary between versions of a function. To modify these settings, use UpdateFunctionConfiguration. To get all of a function's details, including function-level settings, use GetFunction. Retrieves the configuration for asynchronous invocation for a function, version, or alias. To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig. Retrieves the configuration for asynchronous invocation for a function, version, or alias. To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig. Returns your function's recursive loop detection configuration. Returns details about a Lambda function URL. Returns details about a Lambda function URL. Returns information about a version of an Lambda layer, with a link to download the layer archive that's valid for 10 minutes. Returns information about a version of an Lambda layer, with a link to download the layer archive that's valid for 10 minutes. Returns information about a version of an Lambda layer, with a link to download the layer archive that's valid for 10 minutes. Returns information about a version of an Lambda layer, with a link to download the layer archive that's valid for 10 minutes. Returns the permission policy for a version of an Lambda layer. For more information, see AddLayerVersionPermission. Returns the permission policy for a version of an Lambda layer. For more information, see AddLayerVersionPermission. Returns the resource-based IAM policy for a function, version, or alias. Returns the resource-based IAM policy for a function, version, or alias. Retrieves the provisioned concurrency configuration for a function's alias or version. Retrieves the provisioned concurrency configuration for a function's alias or version. Retrieves the runtime management configuration for a function's version. If the runtime update mode is Manual, this includes the ARN of the runtime version and the runtime update mode. If the runtime update mode is Auto or Function update, this includes the runtime update mode and Invokes a Lambda function. You can invoke a function synchronously (and wait for the response), or asynchronously. To invoke a function asynchronously, set For synchronous invocation, details about the function response, including errors, are included in the response body and headers. For either invocation type, you can find more information in the execution log and trace. When an error occurs, your function may be invoked multiple times. Retry behavior varies by error type, client, event source, and invocation type. For example, if you invoke a function asynchronously and it returns an error, Lambda executes the function up to two more times. For more information, see Retry Behavior. For asynchronous invocation, Lambda adds events to a queue before sending them to your function. If your function does not have enough capacity to keep up with the queue, events may be lost. Occasionally, your function may receive the same event multiple times, even if no error occurs. To retain events that were not processed, configure your function with a dead-letter queue. The status code in the API response doesn't reflect function errors. Error codes are reserved for errors that prevent your function from executing, such as permissions errors, limit errors, or issues with your function's code and configuration. For example, Lambda returns For functions with a long timeout, your client might be disconnected during synchronous invocation while it waits for a response. Configure your HTTP client, SDK, firewall, proxy, or operating system to allow for long connections with timeout or keep-alive settings. This operation requires permission for the lambda:InvokeFunction action. For details on how to set up permissions for cross-account invocations, see Granting function access to other accounts. Invokes a Lambda function. You can invoke a function synchronously (and wait for the response), or asynchronously. By default, Lambda invokes your function synchronously (i.e. the For synchronous invocation, details about the function response, including errors, are included in the response body and headers. For either invocation type, you can find more information in the execution log and trace. When an error occurs, your function may be invoked multiple times. Retry behavior varies by error type, client, event source, and invocation type. For example, if you invoke a function asynchronously and it returns an error, Lambda executes the function up to two more times. For more information, see Error handling and automatic retries in Lambda. For asynchronous invocation, Lambda adds events to a queue before sending them to your function. If your function does not have enough capacity to keep up with the queue, events may be lost. Occasionally, your function may receive the same event multiple times, even if no error occurs. To retain events that were not processed, configure your function with a dead-letter queue. The status code in the API response doesn't reflect function errors. Error codes are reserved for errors that prevent your function from executing, such as permissions errors, quota errors, or issues with your function's code and configuration. For example, Lambda returns For functions with a long timeout, your client might disconnect during synchronous invocation while it waits for a response. Configure your HTTP client, SDK, firewall, proxy, or operating system to allow for long connections with timeout or keep-alive settings. This operation requires permission for the lambda:InvokeFunction action. For details on how to set up permissions for cross-account invocations, see Granting function access to other accounts. For asynchronous function invocation, use Invoke. Invokes a function asynchronously. For asynchronous function invocation, use Invoke. Invokes a function asynchronously. If you do use the InvokeAsync action, note that it doesn't support the use of X-Ray active tracing. Trace ID is not propagated to the function, even if X-Ray active tracing is turned on.Principal. To grant permission to an organization defined in Organizations, specify the organization ID as the PrincipalOrgID. For Amazon Web Services services, the principal is a domain-style identifier that the service defines, such as s3.amazonaws.com or sns.amazonaws.com. For Amazon Web Services services, you can also specify the ARN of the associated resource as the SourceArn. If you grant permission to a service principal without specifying the source, other accounts could potentially configure resources in their account to invoke your Lambda function.Principal. To grant permission to an organization defined in Organizations, specify the organization ID as the PrincipalOrgID. For Amazon Web Services services, the principal is a domain-style identifier defined by the service, like s3.amazonaws.com or sns.amazonaws.com. For Amazon Web Services services, you can also specify the ARN of the associated resource as the SourceArn. If you grant permission to a service principal without specifying the source, other accounts could potentially configure resources in their account to invoke your Lambda function.RoutingConfig parameter to specify a second version and the percentage of invocation requests that it receives.RoutingConfig parameter to specify a second version and the percentage of invocation requests that it receives.
BisectBatchOnFunctionError - If the function returns an error, split the batch in two and retry.DestinationConfig - Send discarded records to an Amazon SQS queue or Amazon SNS topic.MaximumRecordAgeInSeconds - Discard records older than the specified age. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expiresMaximumRetryAttempts - Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.ParallelizationFactor - Process multiple batches from each shard concurrently.
BisectBatchOnFunctionError – If the function returns an error, split the batch in two and retry.MaximumRecordAgeInSeconds – Discard records older than the specified age. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expiresMaximumRetryAttempts – Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.ParallelizationFactor – Process multiple batches from each shard concurrently.
OnFailure – Send discarded records to an Amazon SQS queue, Amazon SNS topic, or Amazon S3 bucket. For more information, see Adding a destination.
"
},
"CreateFunction":{
"name":"CreateFunction",
@@ -111,17 +128,18 @@
"input":{"shape":"CreateFunctionRequest"},
"output":{"shape":"FunctionConfiguration"},
"errors":[
- {"shape":"ServiceException"},
{"shape":"InvalidParameterValueException"},
- {"shape":"ResourceNotFoundException"},
{"shape":"ResourceConflictException"},
+ {"shape":"ServiceException"},
{"shape":"TooManyRequestsException"},
- {"shape":"CodeStorageExceededException"},
- {"shape":"CodeVerificationFailedException"},
{"shape":"InvalidCodeSignatureException"},
- {"shape":"CodeSigningConfigNotFoundException"}
+ {"shape":"ResourceNotFoundException"},
+ {"shape":"CodeVerificationFailedException"},
+ {"shape":"CodeSigningConfigNotFoundException"},
+ {"shape":"CodeStorageExceededException"}
],
- "documentation":"Image if the deployment package is a container image. For a container image, the code property must include the URI of a container image in the Amazon ECR registry. You do not need to specify the handler and runtime properties. Zip if the deployment package is a .zip file archive. For a .zip file archive, the code property specifies the location of the .zip file. You must also specify the handler and runtime properties. The code in the deployment package must be compatible with the target instruction set architecture of the function (x86-64 or arm64). If you do not specify the architecture, the default value is x86-64.State, StateReason, and StateReasonCode fields in the response from GetFunctionConfiguration indicate when the function is ready to invoke. For more information, see Function States.Publish parameter to create version 1 of your function from its initial configuration.Image. For a container image, the code property must include the URI of a container image in the Amazon ECR registry. You do not need to specify the handler and runtime properties.Zip. For a .zip file archive, the code property specifies the location of the .zip file. You must also specify the handler and runtime properties. The code in the deployment package must be compatible with the target instruction set architecture of the function (x86-64 or arm64). If you do not specify the architecture, then the default value is x86-64.State, StateReason, and StateReasonCode fields in the response from GetFunctionConfiguration indicate when the function is ready to invoke. For more information, see Lambda function states.Publish parameter to create version 1 of your function from its initial configuration.Deleting state and might not be completely deleted for several seconds.Deleting state and might not be completely deleted for several seconds.Qualifier parameter. Otherwise, all versions and aliases are deleted.Qualifier parameter. Otherwise, all versions and aliases are deleted. This doesn't require the user to have explicit permissions for DeleteAlias.null is returned for the ARN. For more information, see Runtime updates.InvocationType to Event.TooManyRequestsException if executing the function would cause you to exceed a concurrency limit at either the account level (ConcurrentInvocationLimitExceeded) or function level (ReservedFunctionConcurrentInvocationLimitExceeded).InvocationType is RequestResponse). To invoke a function asynchronously, set InvocationType to Event. Lambda passes the ClientContext object to your function for synchronous invocations only.TooManyRequestsException if running the function would cause you to exceed a concurrency limit at either the account level (ConcurrentInvocationLimitExceeded) or function level (ReservedFunctionConcurrentInvocationLimitExceeded).
Configure your Lambda functions to stream response payloads back to clients. For more information, see Configuring a Lambda function to stream responses.
This operation requires permission for the lambda:InvokeFunction action. For details on how to set up permissions for cross-account invocations, see Granting function access to other accounts.
" + }, "ListAliases":{ "name":"ListAliases", "http":{ @@ -740,59 +805,63 @@ "input":{"shape":"ListAliasesRequest"}, "output":{"shape":"ListAliasesResponse"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, - {"shape":"TooManyRequestsException"} + {"shape":"ServiceException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"} ], - "documentation":"Returns a list of aliases for a Lambda function.
" + "documentation":"Returns a list of aliases for a Lambda function.
", + "readonly":true }, "ListCodeSigningConfigs":{ "name":"ListCodeSigningConfigs", "http":{ "method":"GET", - "requestUri":"/2020-04-22/code-signing-configs/", + "requestUri":"/2020-04-22/code-signing-configs", "responseCode":200 }, "input":{"shape":"ListCodeSigningConfigsRequest"}, "output":{"shape":"ListCodeSigningConfigsResponse"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"InvalidParameterValueException"} + {"shape":"InvalidParameterValueException"}, + {"shape":"ServiceException"} ], - "documentation":"Returns a list of code signing configurations. A request returns up to 10,000 configurations per call. You can use the MaxItems parameter to return fewer configurations per call.
Returns a list of code signing configurations. A request returns up to 10,000 configurations per call. You can use the MaxItems parameter to return fewer configurations per call.
Lists event source mappings. Specify an EventSourceArn to show only event source mappings for a single event source.
Lists event source mappings. Specify an EventSourceArn to show only event source mappings for a single event source.
Retrieves a list of configurations for asynchronous invocation for a function.
To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig.
" + "documentation":"Retrieves a list of configurations for asynchronous invocation for a function.
To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig.
", + "readonly":true }, "ListFunctionUrlConfigs":{ "name":"ListFunctionUrlConfigs", @@ -824,26 +894,28 @@ "errors":[ {"shape":"InvalidParameterValueException"}, {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"TooManyRequestsException"} + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"} ], - "documentation":"Returns a list of Lambda function URLs for the specified function.
" + "documentation":"Returns a list of Lambda function URLs for the specified function.
", + "readonly":true }, "ListFunctions":{ "name":"ListFunctions", "http":{ "method":"GET", - "requestUri":"/2015-03-31/functions/", + "requestUri":"/2015-03-31/functions", "responseCode":200 }, "input":{"shape":"ListFunctionsRequest"}, "output":{"shape":"ListFunctionsResponse"}, "errors":[ + {"shape":"InvalidParameterValueException"}, {"shape":"ServiceException"}, - {"shape":"TooManyRequestsException"}, - {"shape":"InvalidParameterValueException"} + {"shape":"TooManyRequestsException"} ], - "documentation":"Returns a list of Lambda functions, with the version-specific configuration of each. Lambda returns up to 50 functions per call.
Set FunctionVersion to ALL to include all published versions of each function in addition to the unpublished version.
The ListFunctions action returns a subset of the FunctionConfiguration fields. To get the additional fields (State, StateReasonCode, StateReason, LastUpdateStatus, LastUpdateStatusReason, LastUpdateStatusReasonCode) for a function or version, use GetFunction.
Returns a list of Lambda functions, with the version-specific configuration of each. Lambda returns up to 50 functions per call.
Set FunctionVersion to ALL to include all published versions of each function in addition to the unpublished version.
The ListFunctions operation returns a subset of the FunctionConfiguration fields. To get the additional fields (State, StateReasonCode, StateReason, LastUpdateStatus, LastUpdateStatusReason, LastUpdateStatusReasonCode, RuntimeVersionConfig) for a function or version, use GetFunction.
List the functions that use the specified code signing configuration. You can use this method prior to deleting a code signing configuration, to verify that no functions are using it.
" + "documentation":"List the functions that use the specified code signing configuration. You can use this method prior to deleting a code signing configuration, to verify that no functions are using it.
", + "readonly":true }, "ListLayerVersions":{ "name":"ListLayerVersions", @@ -871,12 +944,13 @@ "input":{"shape":"ListLayerVersionsRequest"}, "output":{"shape":"ListLayerVersionsResponse"}, "errors":[ - {"shape":"ServiceException"}, {"shape":"InvalidParameterValueException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"TooManyRequestsException"} + {"shape":"ServiceException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"} ], - "documentation":"Lists the versions of an Lambda layer. Versions that have been deleted aren't listed. Specify a runtime identifier to list only versions that indicate that they're compatible with that runtime. Specify a compatible architecture to include only layer versions that are compatible with that architecture.
" + "documentation":"Lists the versions of an Lambda layer. Versions that have been deleted aren't listed. Specify a runtime identifier to list only versions that indicate that they're compatible with that runtime. Specify a compatible architecture to include only layer versions that are compatible with that architecture.
", + "readonly":true }, "ListLayers":{ "name":"ListLayers", @@ -888,11 +962,12 @@ "input":{"shape":"ListLayersRequest"}, "output":{"shape":"ListLayersResponse"}, "errors":[ - {"shape":"ServiceException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"} ], - "documentation":"Lists Lambda layers and shows information about the latest version of each. Specify a runtime identifier to list only layers that indicate that they're compatible with that runtime. Specify a compatible architecture to include only layers that are compatible with that instruction set architecture.
" + "documentation":"Lists Lambda layers and shows information about the latest version of each. Specify a runtime identifier to list only layers that indicate that they're compatible with that runtime. Specify a compatible architecture to include only layers that are compatible with that instruction set architecture.
", + "readonly":true }, "ListProvisionedConcurrencyConfigs":{ "name":"ListProvisionedConcurrencyConfigs", @@ -905,27 +980,30 @@ "output":{"shape":"ListProvisionedConcurrencyConfigsResponse"}, "errors":[ {"shape":"InvalidParameterValueException"}, - {"shape":"ResourceNotFoundException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, - {"shape":"ServiceException"} + {"shape":"ResourceNotFoundException"} ], - "documentation":"Retrieves a list of provisioned concurrency configurations for a function.
" + "documentation":"Retrieves a list of provisioned concurrency configurations for a function.
", + "readonly":true }, "ListTags":{ "name":"ListTags", "http":{ "method":"GET", - "requestUri":"/2017-03-31/tags/{ARN}" + "requestUri":"/2017-03-31/tags/{Resource}", + "responseCode":200 }, "input":{"shape":"ListTagsRequest"}, "output":{"shape":"ListTagsResponse"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, - {"shape":"TooManyRequestsException"} + {"shape":"ServiceException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"} ], - "documentation":"Returns a function's tags. You can also view tags with GetFunction.
" + "documentation":"Returns a function, event source mapping, or code signing configuration's tags. You can also view function tags with GetFunction.
", + "readonly":true }, "ListVersionsByFunction":{ "name":"ListVersionsByFunction", @@ -937,12 +1015,13 @@ "input":{"shape":"ListVersionsByFunctionRequest"}, "output":{"shape":"ListVersionsByFunctionResponse"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, - {"shape":"TooManyRequestsException"} + {"shape":"ServiceException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"} ], - "documentation":"Returns a list of versions, with the version-specific configuration of each. Lambda returns up to 50 versions per call.
" + "documentation":"Returns a list of versions, with the version-specific configuration of each. Lambda returns up to 50 versions per call.
", + "readonly":true }, "PublishLayerVersion":{ "name":"PublishLayerVersion", @@ -954,10 +1033,10 @@ "input":{"shape":"PublishLayerVersionRequest"}, "output":{"shape":"PublishLayerVersionResponse"}, "errors":[ + {"shape":"InvalidParameterValueException"}, {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"TooManyRequestsException"}, - {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceNotFoundException"}, {"shape":"CodeStorageExceededException"} ], "documentation":"Creates an Lambda layer from a ZIP archive. Each time you call PublishLayerVersion with the same layer name, a new version is created.
Add layers to your function with CreateFunction or UpdateFunctionConfiguration.
" @@ -972,13 +1051,13 @@ "input":{"shape":"PublishVersionRequest"}, "output":{"shape":"FunctionConfiguration"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceConflictException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"}, {"shape":"CodeStorageExceededException"}, - {"shape":"PreconditionFailedException"}, - {"shape":"ResourceConflictException"} + {"shape":"PreconditionFailedException"} ], "documentation":"Creates a version from the current code and configuration of a function. Use versions to create a snapshot of your function code and configuration that doesn't change.
Lambda doesn't publish a version if the function's configuration and code haven't changed since the last version. Use UpdateFunctionCode or UpdateFunctionConfiguration to update the function before publishing a version.
Clients can invoke versions directly or with an alias. To create an alias, use CreateAlias.
" }, @@ -992,11 +1071,11 @@ "input":{"shape":"PutFunctionCodeSigningConfigRequest"}, "output":{"shape":"PutFunctionCodeSigningConfigResponse"}, "errors":[ - {"shape":"ServiceException"}, {"shape":"InvalidParameterValueException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"TooManyRequestsException"}, {"shape":"ResourceConflictException"}, + {"shape":"ServiceException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"}, {"shape":"CodeSigningConfigNotFoundException"} ], "documentation":"Update the code signing configuration for the function. Changes to the code signing configuration take effect the next time a user tries to deploy a code package to the function.
" @@ -1011,13 +1090,13 @@ "input":{"shape":"PutFunctionConcurrencyRequest"}, "output":{"shape":"Concurrency"}, "errors":[ - {"shape":"ServiceException"}, {"shape":"InvalidParameterValueException"}, - {"shape":"ResourceNotFoundException"}, + {"shape":"ResourceConflictException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, - {"shape":"ResourceConflictException"} + {"shape":"ResourceNotFoundException"} ], - "documentation":"Sets the maximum number of simultaneous executions for a function, and reserves capacity for that concurrency level.
Concurrency settings apply to the function as a whole, including all published versions and the unpublished version. Reserving concurrency both ensures that your function has capacity to process the specified number of events simultaneously, and prevents it from scaling beyond that level. Use GetFunction to see the current setting for a function.
Use GetAccountSettings to see your Regional concurrency limit. You can reserve concurrency for as many functions as you like, as long as you leave at least 100 simultaneous executions unreserved for functions that aren't configured with a per-function limit. For more information, see Managing Concurrency.
" + "documentation":"Sets the maximum number of simultaneous executions for a function, and reserves capacity for that concurrency level.
Concurrency settings apply to the function as a whole, including all published versions and the unpublished version. Reserving concurrency both ensures that your function has capacity to process the specified number of events simultaneously, and prevents it from scaling beyond that level. Use GetFunction to see the current setting for a function.
Use GetAccountSettings to see your Regional concurrency limit. You can reserve concurrency for as many functions as you like, as long as you leave at least 100 simultaneous executions unreserved for functions that aren't configured with a per-function limit. For more information, see Lambda function scaling.
" }, "PutFunctionEventInvokeConfig":{ "name":"PutFunctionEventInvokeConfig", @@ -1029,13 +1108,31 @@ "input":{"shape":"PutFunctionEventInvokeConfigRequest"}, "output":{"shape":"FunctionEventInvokeConfig"}, "errors":[ + {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceConflictException"}, {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"Configures options for asynchronous invocation on a function, version, or alias. If a configuration already exists for a function, version, or alias, this operation overwrites it. If you exclude any settings, they are removed. To set one option without affecting existing settings for other options, use UpdateFunctionEventInvokeConfig.
By default, Lambda retries an asynchronous invocation twice if the function returns an error. It retains events in a queue for up to six hours. When an event fails all processing attempts or stays in the asynchronous invocation queue for too long, Lambda discards it. To retain discarded events, configure a dead-letter queue with UpdateFunctionConfiguration.
To send an invocation record to a queue, topic, S3 bucket, function, or event bus, specify a destination. You can configure separate destinations for successful invocations (on-success) and events that fail all processing attempts (on-failure). You can configure destinations in addition to or instead of a dead-letter queue.
S3 buckets are supported only for on-failure destinations. To retain records of successful invocations, use another destination type.
Configures options for asynchronous invocation on a function, version, or alias. If a configuration already exists for a function, version, or alias, this operation overwrites it. If you exclude any settings, they are removed. To set one option without affecting existing settings for other options, use UpdateFunctionEventInvokeConfig.
By default, Lambda retries an asynchronous invocation twice if the function returns an error. It retains events in a queue for up to six hours. When an event fails all processing attempts or stays in the asynchronous invocation queue for too long, Lambda discards it. To retain discarded events, configure a dead-letter queue with UpdateFunctionConfiguration.
To send an invocation record to a queue, topic, function, or event bus, specify a destination. You can configure separate destinations for successful invocations (on-success) and events that fail all processing attempts (on-failure). You can configure destinations in addition to or instead of a dead-letter queue.
" + "documentation":"Sets your function's recursive loop detection configuration.
When you configure a Lambda function to output to the same service or resource that invokes the function, it's possible to create an infinite recursive loop. For example, a Lambda function might write a message to an Amazon Simple Queue Service (Amazon SQS) queue, which then invokes the same function. This invocation causes the function to write another message to the queue, which in turn invokes the function again.
Lambda can detect certain types of recursive loops shortly after they occur. When Lambda detects a recursive loop and your function's recursive loop detection configuration is set to Terminate, it stops your function being invoked and notifies you.
Adds a provisioned concurrency configuration to a function's alias or version.
" + "documentation":"Adds a provisioned concurrency configuration to a function's alias or version.
", + "idempotent":true }, - "PutResourcePolicy":{ - "name":"PutResourcePolicy", + "PutRuntimeManagementConfig":{ + "name":"PutRuntimeManagementConfig", "http":{ "method":"PUT", - "requestUri":"/2024-09-16/resource-policy/{ResourceArn}", + "requestUri":"/2021-07-20/functions/{FunctionName}/runtime-management-config", "responseCode":200 }, - "input":{"shape":"PutResourcePolicyRequest"}, - "output":{"shape":"PutResourcePolicyResponse"}, + "input":{"shape":"PutRuntimeManagementConfigRequest"}, + "output":{"shape":"PutRuntimeManagementConfigResponse"}, "errors":[ {"shape":"InvalidParameterValueException"}, {"shape":"ResourceConflictException"}, - {"shape":"PublicPolicyException"}, {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, - {"shape":"PolicyLengthExceededException"}, - {"shape":"ResourceNotFoundException"}, - {"shape":"PreconditionFailedException"} - ] + {"shape":"ResourceNotFoundException"} + ], + "documentation":"Sets the runtime management configuration for a function's version. For more information, see Runtime updates.
" }, "RemoveLayerVersionPermission":{ "name":"RemoveLayerVersionPermission", @@ -1084,10 +1180,10 @@ }, "input":{"shape":"RemoveLayerVersionPermissionRequest"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"}, {"shape":"PreconditionFailedException"} ], "documentation":"Removes a statement from the permissions policy for a version of an Lambda layer. For more information, see AddLayerVersionPermission.
" @@ -1101,47 +1197,111 @@ }, "input":{"shape":"RemovePermissionRequest"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"}, {"shape":"PreconditionFailedException"} ], - "documentation":"Revokes function-use permission from an Amazon Web Services service or another account. You can get the ID of the statement from the output of GetPolicy.
" + "documentation":"Revokes function-use permission from an Amazon Web Services service or another Amazon Web Services account. You can get the ID of the statement from the output of GetPolicy.
" + }, + "SendDurableExecutionCallbackFailure":{ + "name":"SendDurableExecutionCallbackFailure", + "http":{ + "method":"POST", + "requestUri":"/2025-12-01/durable-execution-callbacks/{CallbackId}/fail", + "responseCode":200 + }, + "input":{"shape":"SendDurableExecutionCallbackFailureRequest"}, + "output":{"shape":"SendDurableExecutionCallbackFailureResponse"}, + "errors":[ + {"shape":"InvalidParameterValueException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ServiceException"}, + {"shape":"CallbackTimeoutException"} + ] + }, + "SendDurableExecutionCallbackHeartbeat":{ + "name":"SendDurableExecutionCallbackHeartbeat", + "http":{ + "method":"POST", + "requestUri":"/2025-12-01/durable-execution-callbacks/{CallbackId}/heartbeat", + "responseCode":200 + }, + "input":{"shape":"SendDurableExecutionCallbackHeartbeatRequest"}, + "output":{"shape":"SendDurableExecutionCallbackHeartbeatResponse"}, + "errors":[ + {"shape":"InvalidParameterValueException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ServiceException"}, + {"shape":"CallbackTimeoutException"} + ] + }, + "SendDurableExecutionCallbackSuccess":{ + "name":"SendDurableExecutionCallbackSuccess", + "http":{ + "method":"POST", + "requestUri":"/2025-12-01/durable-execution-callbacks/{CallbackId}/succeed", + "responseCode":200 + }, + "input":{"shape":"SendDurableExecutionCallbackSuccessRequest"}, + "output":{"shape":"SendDurableExecutionCallbackSuccessResponse"}, + "errors":[ + {"shape":"InvalidParameterValueException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ServiceException"}, + {"shape":"CallbackTimeoutException"} + ] + }, + "StopDurableExecution":{ + "name":"StopDurableExecution", + "http":{ + "method":"POST", + "requestUri":"/2025-12-01/durable-executions/{DurableExecutionArn}/stop", + "responseCode":200 + }, + "input":{"shape":"StopDurableExecutionRequest"}, + "output":{"shape":"StopDurableExecutionResponse"}, + "errors":[ + {"shape":"InvalidParameterValueException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ServiceException"}, + {"shape":"ResourceNotFoundException"} + ] }, "TagResource":{ "name":"TagResource", "http":{ "method":"POST", - "requestUri":"/2017-03-31/tags/{ARN}", + "requestUri":"/2017-03-31/tags/{Resource}", "responseCode":204 }, "input":{"shape":"TagResourceRequest"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceConflictException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, - {"shape":"ResourceConflictException"} + {"shape":"ResourceNotFoundException"} ], - "documentation":"Adds tags to a function.
" + "documentation":"Adds tags to a function, event source mapping, or code signing configuration.
" }, "UntagResource":{ "name":"UntagResource", "http":{ "method":"DELETE", - "requestUri":"/2017-03-31/tags/{ARN}", + "requestUri":"/2017-03-31/tags/{Resource}", "responseCode":204 }, "input":{"shape":"UntagResourceRequest"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceConflictException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, - {"shape":"ResourceConflictException"} + {"shape":"ResourceNotFoundException"} ], - "documentation":"Removes tags from a function.
" + "documentation":"Removes tags from a function, event source mapping, or code signing configuration.
" }, "UpdateAlias":{ "name":"UpdateAlias", @@ -1153,14 +1313,14 @@ "input":{"shape":"UpdateAliasRequest"}, "output":{"shape":"AliasConfiguration"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceConflictException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, - {"shape":"PreconditionFailedException"}, - {"shape":"ResourceConflictException"} + {"shape":"ResourceNotFoundException"}, + {"shape":"PreconditionFailedException"} ], - "documentation":"Updates the configuration of a Lambda function alias.
" + "documentation":"Updates the configuration of a Lambda function alias.
" }, "UpdateCodeSigningConfig":{ "name":"UpdateCodeSigningConfig", @@ -1172,8 +1332,8 @@ "input":{"shape":"UpdateCodeSigningConfigRequest"}, "output":{"shape":"UpdateCodeSigningConfigResponse"}, "errors":[ - {"shape":"ServiceException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ServiceException"}, {"shape":"ResourceNotFoundException"} ], "documentation":"Update the code signing configuration. Changes to the code signing configuration take effect the next time a user tries to deploy a code package to the function.
" @@ -1188,14 +1348,14 @@ "input":{"shape":"UpdateEventSourceMappingRequest"}, "output":{"shape":"EventSourceMappingConfiguration"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, - {"shape":"TooManyRequestsException"}, + {"shape":"ResourceInUseException"}, {"shape":"ResourceConflictException"}, - {"shape":"ResourceInUseException"} + {"shape":"ServiceException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"} ], - "documentation":"Updates an event source mapping. You can change the function that Lambda invokes, or pause invocation and resume later from the same location.
For details about how to configure different event sources, see the following topics.
The following error handling options are available only for stream sources (DynamoDB and Kinesis):
BisectBatchOnFunctionError - If the function returns an error, split the batch in two and retry.
DestinationConfig - Send discarded records to an Amazon SQS queue or Amazon SNS topic.
MaximumRecordAgeInSeconds - Discard records older than the specified age. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires
MaximumRetryAttempts - Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.
ParallelizationFactor - Process multiple batches from each shard concurrently.
For information about which configuration parameters apply to each event source, see the following topics.
" + "documentation":"Updates an event source mapping. You can change the function that Lambda invokes, or pause invocation and resume later from the same location.
For details about how to configure different event sources, see the following topics.
The following error handling options are available only for DynamoDB and Kinesis event sources:
BisectBatchOnFunctionError – If the function returns an error, split the batch in two and retry.
MaximumRecordAgeInSeconds – Discard records older than the specified age. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires
MaximumRetryAttempts – Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.
ParallelizationFactor – Process multiple batches from each shard concurrently.
For stream sources (DynamoDB, Kinesis, Amazon MSK, and self-managed Apache Kafka), the following option is also available:
OnFailure – Send discarded records to an Amazon SQS queue, Amazon SNS topic, or Amazon S3 bucket. For more information, see Adding a destination.
For information about which configuration parameters apply to each event source, see the following topics.
Updates a Lambda function's code. If code signing is enabled for the function, the code package must be signed by a trusted publisher. For more information, see Configuring code signing.
If the function's package type is Image, you must specify the code package in ImageUri as the URI of a container image in the Amazon ECR registry.
If the function's package type is Zip, you must specify the deployment package as a .zip file archive. Enter the Amazon S3 bucket and key of the code .zip file location. You can also provide the function code inline using the ZipFile field.
The code in the deployment package must be compatible with the target instruction set architecture of the function (x86-64 or arm64).
The function's code is locked when you publish a version. You can't modify the code of a published version, only the unpublished version.
For a function defined as a container image, Lambda resolves the image tag to an image digest. In Amazon ECR, if you update the image tag to a new image, Lambda does not automatically update the function.
Updates a Lambda function's code. If code signing is enabled for the function, the code package must be signed by a trusted publisher. For more information, see Configuring code signing for Lambda.
If the function's package type is Image, then you must specify the code package in ImageUri as the URI of a container image in the Amazon ECR registry.
If the function's package type is Zip, then you must specify the deployment package as a .zip file archive. Enter the Amazon S3 bucket and key of the code .zip file location. You can also provide the function code inline using the ZipFile field.
The code in the deployment package must be compatible with the target instruction set architecture of the function (x86-64 or arm64).
The function's code is locked when you publish a version. You can't modify the code of a published version, only the unpublished version.
For a function defined as a container image, Lambda resolves the image tag to an image digest. In Amazon ECR, if you update the image tag to a new image, Lambda does not automatically update the function.
Modify the version-specific settings of a Lambda function.
When you update a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute. During this time, you can't modify the function, but you can still invoke it. The LastUpdateStatus, LastUpdateStatusReason, and LastUpdateStatusReasonCode fields in the response from GetFunctionConfiguration indicate when the update is complete and the function is processing events with the new configuration. For more information, see Function States.
These settings can vary between versions of a function and are locked when you publish a version. You can't modify the configuration of a published version, only the unpublished version.
To configure function concurrency, use PutFunctionConcurrency. To grant invoke permissions to an account or Amazon Web Services service, use AddPermission.
" + "documentation":"Modify the version-specific settings of a Lambda function.
When you update a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute. During this time, you can't modify the function, but you can still invoke it. The LastUpdateStatus, LastUpdateStatusReason, and LastUpdateStatusReasonCode fields in the response from GetFunctionConfiguration indicate when the update is complete and the function is processing events with the new configuration. For more information, see Lambda function states.
These settings can vary between versions of a function and are locked when you publish a version. You can't modify the configuration of a published version, only the unpublished version.
To configure function concurrency, use PutFunctionConcurrency. To grant invoke permissions to an Amazon Web Services account or Amazon Web Services service, use AddPermission.
" }, "UpdateFunctionEventInvokeConfig":{ "name":"UpdateFunctionEventInvokeConfig", @@ -1252,11 +1412,11 @@ "input":{"shape":"UpdateFunctionEventInvokeConfigRequest"}, "output":{"shape":"FunctionEventInvokeConfig"}, "errors":[ - {"shape":"ServiceException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceConflictException"}, + {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"}, - {"shape":"ResourceConflictException"} + {"shape":"ResourceNotFoundException"} ], "documentation":"Updates the configuration for asynchronous invocation for a function, version, or alias.
To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig.
" }, @@ -1270,11 +1430,11 @@ "input":{"shape":"UpdateFunctionUrlConfigRequest"}, "output":{"shape":"UpdateFunctionUrlConfigResponse"}, "errors":[ - {"shape":"ResourceConflictException"}, - {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceConflictException"}, {"shape":"ServiceException"}, - {"shape":"TooManyRequestsException"} + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceNotFoundException"} ], "documentation":"Updates the configuration for a Lambda function URL.
" } @@ -1394,7 +1554,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name – my-function (name-only), my-function:v1 (with alias).
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -1408,7 +1568,7 @@ }, "Principal":{ "shape":"Principal", - "documentation":"The Amazon Web Services service or account that invokes the function. If you specify a service, use SourceArn or SourceAccount to limit who can invoke the function through that service.
The Amazon Web Services service, Amazon Web Services account, IAM user, or IAM role that invokes the function. If you specify a service, use SourceArn or SourceAccount to limit who can invoke the function through that service.
For Amazon S3, the ID of the account that owns the resource. Use this together with SourceArn to ensure that the resource is owned by the specified account. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.
For Amazon Web Services service, the ID of the Amazon Web Services account that owns the resource. Use this together with SourceArn to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.
For Alexa Smart Home functions, a token that must be supplied by the invoker.
" + "documentation":"For Alexa Smart Home functions, a token that the invoker must supply.
" }, "Qualifier":{ "shape":"Qualifier", @@ -1430,7 +1590,7 @@ }, "RevisionId":{ "shape":"String", - "documentation":"Only update the policy if the revision ID matches the ID that's specified. Use this option to avoid modifying a policy that has changed since you last read it.
" + "documentation":"Update the policy only if the revision ID matches the ID that's specified. Use this option to avoid modifying a policy that has changed since you last read it.
" }, "PrincipalOrgID":{ "shape":"PrincipalOrgID", @@ -1438,8 +1598,9 @@ }, "FunctionUrlAuthType":{ "shape":"FunctionUrlAuthType", - "documentation":"The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated IAM users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
A unique identifier that changes when you update the alias.
" } }, - "documentation":"Provides configuration information about a Lambda function alias.
" + "documentation":"Provides configuration information about a Lambda function alias.
" }, "AliasList":{ "type":"list", @@ -1512,16 +1673,21 @@ }, "documentation":"The traffic-shifting configuration of a Lambda function alias.
" }, - "AllowCredentials":{"type":"boolean"}, + "AllowCredentials":{ + "type":"boolean", + "box":true + }, "AllowMethodsList":{ "type":"list", "member":{"shape":"Method"}, - "max":6 + "max":6, + "min":0 }, "AllowOriginsList":{ "type":"list", "member":{"shape":"Origin"}, - "max":100 + "max":100, + "min":0 }, "AllowedPublishers":{ "type":"structure", @@ -1539,11 +1705,26 @@ "members":{ "ConsumerGroupId":{ "shape":"URI", - "documentation":"The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see services-msk-consumer-group-id.
" + "documentation":"The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see Customizable consumer group ID.
" + }, + "SchemaRegistryConfig":{ + "shape":"KafkaSchemaRegistryConfig", + "documentation":"Specific configuration settings for a Kafka schema registry.
" } }, "documentation":"Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.
" }, + "ApplicationLogLevel":{ + "type":"string", + "enum":[ + "TRACE", + "DEBUG", + "INFO", + "WARN", + "ERROR", + "FATAL" + ] + }, "Architecture":{ "type":"string", "enum":[ @@ -1561,12 +1742,26 @@ "type":"string", "pattern":"arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:([a-z]{2}(-gov)?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)" }, + "AttemptCount":{ + "type":"integer", + "min":0 + }, "BatchSize":{ "type":"integer", + "box":true, "max":10000, "min":1 }, - "BisectBatchOnFunctionError":{"type":"boolean"}, + "BinaryOperationPayload":{ + "type":"blob", + "max":262144, + "min":0, + "sensitive":true + }, + "BisectBatchOnFunctionError":{ + "type":"boolean", + "box":true + }, "Blob":{ "type":"blob", "sensitive":true @@ -1586,15 +1781,16 @@ }, "CallbackFailedDetails":{ "type":"structure", + "required":["Error"], "members":{ - "Error":{"shape":"EventError"}, - "RetryDetails":{"shape":"RetryDetails"} + "Error":{"shape":"EventError"} } }, "CallbackId":{ "type":"string", "max":1024, - "min":1 + "min":1, + "pattern":"[A-Za-z0-9+/]+={0,2}" }, "CallbackOptions":{ "type":"structure", @@ -1605,32 +1801,32 @@ }, "CallbackStartedDetails":{ "type":"structure", + "required":["CallbackId"], "members":{ "CallbackId":{"shape":"CallbackId"}, - "Input":{"shape":"EventInput"}, "HeartbeatTimeout":{"shape":"DurationSeconds"}, "Timeout":{"shape":"DurationSeconds"} } }, "CallbackSucceededDetails":{ "type":"structure", + "required":["Result"], "members":{ - "Result":{"shape":"EventResult"}, - "RetryDetails":{"shape":"RetryDetails"} + "Result":{"shape":"EventResult"} } }, "CallbackTimedOutDetails":{ "type":"structure", + "required":["Error"], "members":{ - "Error":{"shape":"EventError"}, - "RetryDetails":{"shape":"RetryDetails"} + "Error":{"shape":"EventError"} } }, "CallbackTimeoutException":{ "type":"structure", - "required":["message"], "members":{ - "message":{"shape":"String"} + "Type":{"shape":"String"}, + "Message":{"shape":"String"} }, "error":{ "httpStatusCode":400, @@ -1638,22 +1834,107 @@ }, "exception":true }, - "ContextFailedDetails":{ + "ChainedInvokeDetails":{ + "type":"structure", + "members":{ + "Result":{"shape":"OperationPayload"}, + "Error":{"shape":"ErrorObject"} + } + }, + "ChainedInvokeFailedDetails":{ "type":"structure", + "required":["Error"], "members":{ "Error":{"shape":"EventError"} } }, - "ContextStartedDetails":{ + "ChainedInvokeOptions":{ "type":"structure", - "members":{} + "required":["FunctionName"], + "members":{ + "FunctionName":{"shape":"FunctionName"}, + "TenantId":{"shape":"TenantId"} + } }, - "ContextSucceededDetails":{ + "ChainedInvokeStartedDetails":{ + "type":"structure", + "required":["FunctionName"], + "members":{ + "FunctionName":{"shape":"FunctionName"}, + "TenantId":{"shape":"TenantId"}, + "Input":{"shape":"EventInput"}, + "ExecutedVersion":{"shape":"Version"}, + "DurableExecutionArn":{"shape":"DurableExecutionArn"} + } + }, + "ChainedInvokeStoppedDetails":{ "type":"structure", + "required":["Error"], + "members":{ + "Error":{"shape":"EventError"} + } + }, + "ChainedInvokeSucceededDetails":{ + "type":"structure", + "required":["Result"], "members":{ "Result":{"shape":"EventResult"} } }, + "ChainedInvokeTimedOutDetails":{ + "type":"structure", + "required":["Error"], + "members":{ + "Error":{"shape":"EventError"} + } + }, + "CheckpointDurableExecutionRequest":{ + "type":"structure", + "required":[ + "DurableExecutionArn", + "CheckpointToken" + ], + "members":{ + "DurableExecutionArn":{ + "shape":"DurableExecutionArn", + "location":"uri", + "locationName":"DurableExecutionArn" + }, + "CheckpointToken":{"shape":"CheckpointToken"}, + "Updates":{"shape":"OperationUpdates"}, + "ClientToken":{ + "shape":"ClientToken", + "idempotencyToken":true + } + } + }, + "CheckpointDurableExecutionResponse":{ + "type":"structure", + "required":["NewExecutionState"], + "members":{ + "CheckpointToken":{"shape":"CheckpointToken"}, + "NewExecutionState":{"shape":"CheckpointUpdatedExecutionState"} + } + }, + "CheckpointToken":{ + "type":"string", + "max":2048, + "min":1, + "pattern":"[A-Za-z0-9+/]+={0,2}" + }, + "CheckpointUpdatedExecutionState":{ + "type":"structure", + "members":{ + "Operations":{"shape":"Operations"}, + "NextMarker":{"shape":"String"} + } + }, + "ClientToken":{ + "type":"string", + "max":64, + "min":1, + "pattern":"[\\x21-\\x7E]+" + }, "CodeSigningConfig":{ "type":"structure", "required":[ @@ -1694,6 +1975,7 @@ "CodeSigningConfigArn":{ "type":"string", "max":200, + "min":0, "pattern":"arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\\d{1}:\\d{12}:code-signing-config:csc-[a-z0-9]{17}" }, "CodeSigningConfigId":{ @@ -1711,7 +1993,10 @@ "Message":{"shape":"String"} }, "documentation":"The specified code signing configuration does not exist.
", - "error":{"httpStatusCode":404}, + "error":{ + "httpStatusCode":404, + "senderFault":true + }, "exception":true }, "CodeSigningPolicies":{ @@ -1740,8 +2025,11 @@ }, "message":{"shape":"String"} }, - "documentation":"You have exceeded your maximum total code size per account. Learn more
", - "error":{"httpStatusCode":400}, + "documentation":"Your Amazon Web Services account has exceeded its maximum total code size. For more information, see Lambda quotas.
", + "error":{ + "httpStatusCode":400, + "senderFault":true + }, "exception":true }, "CodeVerificationFailedException":{ @@ -1750,29 +2038,72 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"The code signature failed one or more of the validation checks for signature mismatch or expiry, and the code signing policy is set to ENFORCE. Lambda blocks the deployment.
", - "error":{"httpStatusCode":400}, + "documentation":"The code signature failed one or more of the validation checks for signature mismatch or expiry, and the code signing policy is set to ENFORCE. Lambda blocks the deployment.
", + "error":{ + "httpStatusCode":400, + "senderFault":true + }, "exception":true }, + "CollectionName":{ + "type":"string", + "max":57, + "min":1, + "pattern":"(^(?!(system\\x2e)))(^[_a-zA-Z0-9])([^$]*)" + }, "CompatibleArchitectures":{ "type":"list", "member":{"shape":"Architecture"}, - "max":2 + "max":2, + "min":0 }, "CompatibleRuntimes":{ "type":"list", "member":{"shape":"Runtime"}, - "max":15 + "max":15, + "min":0 }, "Concurrency":{ "type":"structure", "members":{ "ReservedConcurrentExecutions":{ "shape":"ReservedConcurrentExecutions", - "documentation":"The number of concurrent executions that are reserved for this function. For more information, see Managing Concurrency.
" + "documentation":"The number of concurrent executions that are reserved for this function. For more information, see Managing Lambda reserved concurrency.
" } } }, + "ContextDetails":{ + "type":"structure", + "members":{ + "ReplayChildren":{"shape":"ReplayChildren"}, + "Result":{"shape":"OperationPayload"}, + "Error":{"shape":"ErrorObject"} + } + }, + "ContextFailedDetails":{ + "type":"structure", + "required":["Error"], + "members":{ + "Error":{"shape":"EventError"} + } + }, + "ContextOptions":{ + "type":"structure", + "members":{ + "ReplayChildren":{"shape":"ReplayChildren"} + } + }, + "ContextStartedDetails":{ + "type":"structure", + "members":{} + }, + "ContextSucceededDetails":{ + "type":"structure", + "required":["Result"], + "members":{ + "Result":{"shape":"EventResult"} + } + }, "Cors":{ "type":"structure", "members":{ @@ -1813,7 +2144,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -1850,6 +2181,10 @@ "CodeSigningPolicies":{ "shape":"CodeSigningPolicies", "documentation":"The code signing policies define the actions to take if the validation checks fail.
" + }, + "Tags":{ + "shape":"Tags", + "documentation":"A list of tags to add to the code signing configuration.
" } } }, @@ -1869,11 +2204,11 @@ "members":{ "EventSourceArn":{ "shape":"Arn", - "documentation":"The Amazon Resource Name (ARN) of the event source.
Amazon Kinesis - The ARN of the data stream or a stream consumer.
Amazon DynamoDB Streams - The ARN of the stream.
Amazon Simple Queue Service - The ARN of the queue.
Amazon Managed Streaming for Apache Kafka - The ARN of the cluster.
The Amazon Resource Name (ARN) of the event source.
Amazon Kinesis – The ARN of the data stream or a stream consumer.
Amazon DynamoDB Streams – The ARN of the stream.
Amazon Simple Queue Service – The ARN of the queue.
Amazon Managed Streaming for Apache Kafka – The ARN of the cluster or the ARN of the VPC connection (for cross-account event source mappings).
Amazon MQ – The ARN of the broker.
Amazon DocumentDB – The ARN of the DocumentDB change stream.
The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Version or Alias ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.
" + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – MyFunction.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Version or Alias ARN – arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD.
Partial ARN – 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.
" }, "Enabled":{ "shape":"Enabled", @@ -1881,47 +2216,51 @@ }, "BatchSize":{ "shape":"BatchSize", - "documentation":"The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).
Amazon Kinesis - Default 100. Max 10,000.
Amazon DynamoDB Streams - Default 100. Max 10,000.
Amazon Simple Queue Service - Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.
Amazon Managed Streaming for Apache Kafka - Default 100. Max 10,000.
Self-managed Apache Kafka - Default 100. Max 10,000.
Amazon MQ (ActiveMQ and RabbitMQ) - Default 100. Max 10,000.
The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).
Amazon Kinesis – Default 100. Max 10,000.
Amazon DynamoDB Streams – Default 100. Max 10,000.
Amazon Simple Queue Service – Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.
Amazon Managed Streaming for Apache Kafka – Default 100. Max 10,000.
Self-managed Apache Kafka – Default 100. Max 10,000.
Amazon MQ (ActiveMQ and RabbitMQ) – Default 100. Max 10,000.
DocumentDB – Default 100. Max 10,000.
(Streams and Amazon SQS) An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see Lambda event filtering.
" + "documentation":"An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see Lambda event filtering.
" }, "MaximumBatchingWindowInSeconds":{ "shape":"MaximumBatchingWindowInSeconds", - "documentation":"(Streams and Amazon SQS standard queues) The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.
Default: 0
Related setting: When you set BatchSize to a value greater than 10, you must set MaximumBatchingWindowInSeconds to at least 1.
The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function. You can configure MaximumBatchingWindowInSeconds to any value from 0 seconds to 300 seconds in increments of seconds.
For Kinesis, DynamoDB, and Amazon SQS event sources, the default batching window is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ, and DocumentDB event sources, the default batching window is 500 ms. Note that because you can only change MaximumBatchingWindowInSeconds in increments of seconds, you cannot revert back to the 500 ms default batching window after you have changed it. To restore the default batching window, you must create a new event source mapping.
Related setting: For Kinesis, DynamoDB, and Amazon SQS event sources, when you set BatchSize to a value greater than 10, you must set MaximumBatchingWindowInSeconds to at least 1.
(Streams only) The number of batches to process from each shard concurrently.
" + "documentation":"(Kinesis and DynamoDB Streams only) The number of batches to process from each shard concurrently.
" }, "StartingPosition":{ "shape":"EventSourcePosition", - "documentation":"The position in a stream from which to start reading. Required for Amazon Kinesis, Amazon DynamoDB, and Amazon MSK Streams sources. AT_TIMESTAMP is supported only for Amazon Kinesis streams.
The position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB Stream event sources. AT_TIMESTAMP is supported only for Amazon Kinesis streams, Amazon DocumentDB, Amazon MSK, and self-managed Apache Kafka.
With StartingPosition set to AT_TIMESTAMP, the time from which to start reading.
With StartingPosition set to AT_TIMESTAMP, the time from which to start reading. StartingPositionTimestamp cannot be in the future.
(Streams only) An Amazon SQS queue or Amazon SNS topic destination for discarded records.
" + "documentation":"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Kafka only) A configuration object that specifies the destination of an event after Lambda processes it.
" }, "MaximumRecordAgeInSeconds":{ "shape":"MaximumRecordAgeInSeconds", - "documentation":"(Streams only) Discard records older than the specified age. The default value is infinite (-1).
" + "documentation":"(Kinesis and DynamoDB Streams only) Discard records older than the specified age. The default value is infinite (-1).
" }, "BisectBatchOnFunctionError":{ "shape":"BisectBatchOnFunctionError", - "documentation":"(Streams only) If the function returns an error, split the batch in two and retry.
" + "documentation":"(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry.
" }, "MaximumRetryAttempts":{ "shape":"MaximumRetryAttemptsEventSourceMapping", - "documentation":"(Streams only) Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.
" + "documentation":"(Kinesis and DynamoDB Streams only) Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.
" + }, + "Tags":{ + "shape":"Tags", + "documentation":"A list of tags to apply to the event source mapping.
" }, "TumblingWindowInSeconds":{ "shape":"TumblingWindowInSeconds", - "documentation":"(Streams only) The duration in seconds of a processing window. The range is between 1 second and 900 seconds.
" + "documentation":"(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.
" }, "Topics":{ "shape":"Topics", @@ -1941,7 +2280,7 @@ }, "FunctionResponseTypes":{ "shape":"FunctionResponseTypeList", - "documentation":"(Streams and Amazon SQS) A list of current response type enums applied to the event source mapping.
" + "documentation":"(Kinesis, DynamoDB Streams, and Amazon SQS) A list of current response type enums applied to the event source mapping.
" }, "AmazonManagedKafkaEventSourceConfig":{ "shape":"AmazonManagedKafkaEventSourceConfig", @@ -1950,6 +2289,26 @@ "SelfManagedKafkaEventSourceConfig":{ "shape":"SelfManagedKafkaEventSourceConfig", "documentation":"Specific configuration settings for a self-managed Apache Kafka event source.
" + }, + "ScalingConfig":{ + "shape":"ScalingConfig", + "documentation":"(Amazon SQS only) The scaling configuration for the event source. For more information, see Configuring maximum concurrency for Amazon SQS event sources.
" + }, + "DocumentDBEventSourceConfig":{ + "shape":"DocumentDBEventSourceConfig", + "documentation":"Specific configuration settings for a DocumentDB event source.
" + }, + "KMSKeyArn":{ + "shape":"KMSKeyArn", + "documentation":"The ARN of the Key Management Service (KMS) customer managed key that Lambda uses to encrypt your function's filter criteria. By default, Lambda does not encrypt your filter criteria object. Specify this property to encrypt data using your own customer managed key.
" + }, + "MetricsConfig":{ + "shape":"EventSourceMappingMetricsConfig", + "documentation":"The metrics configuration for your event source. For more information, see Event source mapping metrics.
" + }, + "ProvisionedPollerConfig":{ + "shape":"ProvisionedPollerConfig", + "documentation":"(Amazon MSK and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see provisioned mode.
" } } }, @@ -1963,11 +2322,11 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
" + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
" }, "Runtime":{ "shape":"Runtime", - "documentation":"The identifier of the function's runtime. Runtime is required if the deployment package is a .zip file archive.
" + "documentation":"The identifier of the function's runtime. Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.
The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
" }, "Role":{ "shape":"RoleArn", @@ -1975,7 +2334,7 @@ }, "Handler":{ "shape":"Handler", - "documentation":"The name of the method within your code that Lambda calls to execute your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see Programming Model.
" + "documentation":"The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see Lambda programming model.
" }, "Code":{ "shape":"FunctionCode", @@ -1987,11 +2346,11 @@ }, "Timeout":{ "shape":"Timeout", - "documentation":"The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For additional information, see Lambda execution environment.
" + "documentation":"The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see Lambda execution environment.
" }, "MemorySize":{ "shape":"MemorySize", - "documentation":"The amount of memory available to the function at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB.
" + "documentation":"The amount of memory available to the function at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB.
" }, "Publish":{ "shape":"Boolean", @@ -1999,15 +2358,15 @@ }, "VpcConfig":{ "shape":"VpcConfig", - "documentation":"For network connectivity to Amazon Web Services resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can only access resources and the internet through that VPC. For more information, see VPC Settings.
" + "documentation":"For network connectivity to Amazon Web Services resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see Configuring a Lambda function to access resources in a VPC.
" }, "PackageType":{ "shape":"PackageType", - "documentation":"The type of deployment package. Set to Image for container image and set Zip for ZIP archive.
The type of deployment package. Set to Image for container image and set to Zip for .zip file archive.
A dead letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see Dead Letter Queues.
" + "documentation":"A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see Dead-letter queues.
" }, "Environment":{ "shape":"Environment", @@ -2015,7 +2374,7 @@ }, "KMSKeyArn":{ "shape":"KMSKeyArn", - "documentation":"The ARN of the Amazon Web Services Key Management Service (KMS) key that's used to encrypt your function's environment variables. If it's not provided, Lambda uses a default service key.
" + "documentation":"The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt the following resources:
The function's environment variables.
The function's Lambda SnapStart snapshots.
When used with SourceKMSKeyArn, the unzipped version of the .zip deployment package that's used for function invocations. For more information, see Specifying a customer managed key for Lambda.
The optimized version of the container image that's used for function invocations. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more information, see Function lifecycle.
If you don't provide a customer managed key, Lambda uses an Amazon Web Services owned key or an Amazon Web Services managed key.
" }, "TracingConfig":{ "shape":"TracingConfig", @@ -2035,7 +2394,7 @@ }, "ImageConfig":{ "shape":"ImageConfig", - "documentation":"Container image configuration values that override the values in the container image Dockerfile.
" + "documentation":"Container image configuration values that override the values in the container image Dockerfile.
" }, "CodeSigningConfigArn":{ "shape":"CodeSigningConfigArn", @@ -2047,21 +2406,17 @@ }, "EphemeralStorage":{ "shape":"EphemeralStorage", - "documentation":"The size of the function’s /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10240 MB.
" - } - , + "documentation":"The size of the function's /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10,240 MB. For more information, see Configuring ephemeral storage (console).
The function's SnapStart setting.
" + "documentation":"The function's SnapStart setting.
" }, "LoggingConfig":{ "shape":"LoggingConfig", - "documentation":"The function's logging configuration.
" + "documentation":"The function's Amazon CloudWatch Logs configuration settings.
" }, - "DurableConfig":{ - "shape":"DurableConfig", - "documentation":"Configuration for durable function execution, including retention period and execution timeout.
" - } + "DurableConfig":{"shape":"DurableConfig"} } }, "CreateFunctionUrlConfigRequest":{ @@ -2073,7 +2428,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -2085,11 +2440,15 @@ }, "AuthType":{ "shape":"FunctionUrlAuthType", - "documentation":"The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated IAM users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The cross-origin resource sharing (CORS) settings for your function URL.
" + }, + "InvokeMode":{ + "shape":"InvokeMode", + "documentation":"Use one of the following options:
BUFFERED – This is the default option. Lambda invokes your function using the Invoke API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
RESPONSE_STREAM – Your function streams payload results as they become available. Lambda invokes your function using the InvokeWithResponseStream API operation. The maximum response payload size is 20 MB, however, you can request a quota increase.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated IAM users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
When the function URL was created, in ISO-8601 format (YYYY-MM-DDThh:mm:ss.sTZD).
" + }, + "InvokeMode":{ + "shape":"InvokeMode", + "documentation":"Use one of the following options:
BUFFERED – This is the default option. Lambda invokes your function using the Invoke API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
RESPONSE_STREAM – Your function streams payload results as they become available. Lambda invokes your function using the InvokeWithResponseStream API operation. The maximum response payload size is 20 MB, however, you can request a quota increase.
The Amazon Resource Name (ARN) of an Amazon SQS queue or Amazon SNS topic.
" } }, - "documentation":"The dead-letter queue for failed asynchronous invocations.
" + "documentation":"The dead-letter queue for failed asynchronous invocations.
" }, "DeleteAliasRequest":{ "type":"structure", @@ -2144,7 +2513,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -2170,8 +2539,7 @@ }, "DeleteCodeSigningConfigResponse":{ "type":"structure", - "members":{ - } + "members":{} }, "DeleteEventSourceMappingRequest":{ "type":"structure", @@ -2191,7 +2559,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" } @@ -2203,7 +2571,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" } @@ -2215,7 +2583,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -2233,13 +2601,13 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function or version.
Name formats
Function name - my-function (name-only), my-function:1 (with version).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function or version.
Name formats
Function name – my-function (name-only), my-function:1 (with version).
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, "Qualifier":{ "shape":"Qualifier", - "documentation":"Specify a version to delete. You can't delete a version that's referenced by an alias.
", + "documentation":"Specify a version to delete. You can't delete a version that an alias references.
", "location":"querystring", "locationName":"Qualifier" } @@ -2251,7 +2619,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -2293,7 +2661,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -2314,26 +2682,64 @@ "type":"string", "max":350, "min":0, - "pattern":"^$|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:([a-z]{2}(-gov)?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)" + "pattern":"$|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:([a-z]{2}(-gov)?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)" }, "DestinationConfig":{ "type":"structure", "members":{ "OnSuccess":{ "shape":"OnSuccess", - "documentation":"The destination configuration for successful invocations.
" + "documentation":"The destination configuration for successful invocations. Not supported in CreateEventSourceMapping or UpdateEventSourceMapping.
The destination configuration for failed invocations.
" } }, - "documentation":"A configuration object that specifies the destination of an event after Lambda processes it.
" + "documentation":"A configuration object that specifies the destination of an event after Lambda processes it. For more information, see Adding a destination.
" + }, + "DocumentDBEventSourceConfig":{ + "type":"structure", + "members":{ + "DatabaseName":{ + "shape":"DatabaseName", + "documentation":"The name of the database to consume within the DocumentDB cluster.
" + }, + "CollectionName":{ + "shape":"CollectionName", + "documentation":"The name of the collection to consume within the database. If you do not specify a collection, Lambda consumes all collections.
" + }, + "FullDocument":{ + "shape":"FullDocument", + "documentation":"Determines what DocumentDB sends to your event stream during document update operations. If set to UpdateLookup, DocumentDB sends a delta describing the changes, along with a copy of the entire document. Otherwise, DocumentDB sends only a partial document that contains the changes.
" + } + }, + "documentation":"Specific configuration settings for a DocumentDB event source.
" + }, + "DurableConfig":{ + "type":"structure", + "members":{ + "RetentionPeriodInDays":{"shape":"RetentionPeriodInDays"}, + "ExecutionTimeout":{"shape":"ExecutionTimeout"} + } + }, + "DurableExecutionAlreadyStartedException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "Message":{"shape":"String"} + }, + "error":{ + "httpStatusCode":409, + "senderFault":true + }, + "exception":true }, "DurableExecutionArn":{ "type":"string", "max":1024, - "min":1 + "min":1, + "pattern":"arn:([a-zA-Z0-9-]+):lambda:([a-zA-Z0-9-]+):(\\d{12}):function:([a-zA-Z0-9_-]+):(\\$LATEST(?:\\.PUBLISHED)?|[0-9]+)/durable-execution/([a-zA-Z0-9_-]+)/([a-zA-Z0-9_-]+)" }, "DurableExecutionName":{ "type":"string", @@ -2347,7 +2753,8 @@ }, "DurationSeconds":{ "type":"integer", - "min":1 + "box":true, + "min":0 }, "EC2AccessDeniedException":{ "type":"structure", @@ -2357,7 +2764,8 @@ }, "documentation":"Need additional permissions to configure VPC settings.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true }, "EC2ThrottledException":{ "type":"structure", @@ -2365,9 +2773,10 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"Lambda was throttled by Amazon EC2 during Lambda function initialization using the execution role provided for the Lambda function.
", + "documentation":"Amazon EC2 throttled Lambda during Lambda function initialization using the execution role provided for the function.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true }, "EC2UnexpectedException":{ "type":"structure", @@ -2376,9 +2785,10 @@ "Message":{"shape":"String"}, "EC2ErrorCode":{"shape":"String"} }, - "documentation":"Lambda received an unexpected EC2 client exception while setting up for the Lambda function.
", + "documentation":"Lambda received an unexpected Amazon EC2 client exception while setting up for the Lambda function.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true }, "EFSIOException":{ "type":"structure", @@ -2387,7 +2797,10 @@ "Message":{"shape":"String"} }, "documentation":"An error occurred when reading from or writing to a connected file system.
", - "error":{"httpStatusCode":410}, + "error":{ + "httpStatusCode":410, + "senderFault":true + }, "exception":true }, "EFSMountConnectivityException":{ @@ -2396,8 +2809,11 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"The function couldn't make a network connection to the configured file system.
", - "error":{"httpStatusCode":408}, + "documentation":"The Lambda function couldn't make a network connection to the configured file system.
", + "error":{ + "httpStatusCode":408, + "senderFault":true + }, "exception":true }, "EFSMountFailureException":{ @@ -2406,8 +2822,11 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"The function couldn't mount the configured file system due to a permission or configuration issue.
", - "error":{"httpStatusCode":403}, + "documentation":"The Lambda function couldn't mount the configured file system due to a permission or configuration issue.
", + "error":{ + "httpStatusCode":403, + "senderFault":true + }, "exception":true }, "EFSMountTimeoutException":{ @@ -2416,8 +2835,11 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"The function was able to make a network connection to the configured file system, but the mount operation timed out.
", - "error":{"httpStatusCode":408}, + "documentation":"The Lambda function made a network connection to the configured file system, but the mount operation timed out.
", + "error":{ + "httpStatusCode":408, + "senderFault":true + }, "exception":true }, "ENILimitReachedException":{ @@ -2426,11 +2848,15 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"Lambda was not able to create an elastic network interface in the VPC, specified as part of Lambda function configuration, because the limit for network interfaces has been reached.
", + "documentation":"Lambda couldn't create an elastic network interface in the VPC, specified as part of Lambda function configuration, because the limit for network interfaces has been reached. For more information, see Lambda quotas.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true + }, + "Enabled":{ + "type":"boolean", + "box":true }, - "Enabled":{"type":"boolean"}, "EndPointType":{ "type":"string", "enum":["KAFKA_BOOTSTRAP_SERVERS"] @@ -2439,7 +2865,7 @@ "type":"string", "max":300, "min":1, - "pattern":"^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9]):[0-9]{1,5}" + "pattern":"(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9]):[0-9]{1,5}" }, "EndpointLists":{ "type":"list", @@ -2462,7 +2888,7 @@ "documentation":"Environment variable key-value pairs. For more information, see Using Lambda environment variables.
" } }, - "documentation":"A function's environment variable settings. You can use environment variables to adjust your function's behavior without updating code. An environment variable is a pair of strings that are stored in a function's version-specific configuration.
" + "documentation":"A function's environment variable settings. You can use environment variables to adjust your function's behavior without updating code. An environment variable is a pair of strings that are stored in a function's version-specific configuration.
" }, "EnvironmentError":{ "type":"structure", @@ -2483,14 +2909,14 @@ "members":{ "Variables":{ "shape":"EnvironmentVariables", - "documentation":"Environment variable key-value pairs.
" + "documentation":"Environment variable key-value pairs. Omitted from CloudTrail logs.
" }, "Error":{ "shape":"EnvironmentError", "documentation":"Error messages for environment variables that couldn't be applied.
" } }, - "documentation":"The results of an operation to update or read environment variables. If the operation is successful, the response contains the environment variables. If it failed, the response contains details about the error.
" + "documentation":"The results of an operation to update or read environment variables. If the operation succeeds, the response contains the environment variables. If it fails, the response contains details about the error.
" }, "EnvironmentVariableName":{ "type":"string", @@ -2513,16 +2939,106 @@ "members":{ "Size":{ "shape":"EphemeralStorageSize", - "documentation":"The size of the function’s /tmp directory.
" + "documentation":"The size of the function's /tmp directory.
The size of the function’s /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10240 MB.
" + "documentation":"The size of the function's /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10,240 MB. For more information, see Configuring ephemeral storage (console).
The position in a stream from which to start reading. Required for Amazon Kinesis, Amazon DynamoDB, and Amazon MSK stream sources. AT_TIMESTAMP is supported only for Amazon Kinesis streams.
The position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB Stream event sources. AT_TIMESTAMP is supported only for Amazon Kinesis streams, Amazon DocumentDB, Amazon MSK, and self-managed Apache Kafka.
With StartingPosition set to AT_TIMESTAMP, the time from which to start reading.
With StartingPosition set to AT_TIMESTAMP, the time from which to start reading. StartingPositionTimestamp cannot be in the future.
(Streams and Amazon SQS standard queues) The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.
Default: 0
Related setting: When you set BatchSize to a value greater than 10, you must set MaximumBatchingWindowInSeconds to at least 1.
The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function. You can configure MaximumBatchingWindowInSeconds to any value from 0 seconds to 300 seconds in increments of seconds.
For streams and Amazon SQS event sources, the default batching window is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ, and DocumentDB event sources, the default batching window is 500 ms. Note that because you can only change MaximumBatchingWindowInSeconds in increments of seconds, you cannot revert back to the 500 ms default batching window after you have changed it. To restore the default batching window, you must create a new event source mapping.
Related setting: For streams and Amazon SQS event sources, when you set BatchSize to a value greater than 10, you must set MaximumBatchingWindowInSeconds to at least 1.
(Streams only) The number of batches to process concurrently from each shard. The default value is 1.
" + "documentation":"(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1.
" }, "EventSourceArn":{ "shape":"Arn", @@ -2556,7 +3072,7 @@ }, "FilterCriteria":{ "shape":"FilterCriteria", - "documentation":"(Streams and Amazon SQS) An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see Lambda event filtering.
" + "documentation":"An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see Lambda event filtering.
If filter criteria is encrypted, this field shows up as null in the response of ListEventSourceMapping API calls. You can view this field in plaintext in the response of GetEventSourceMapping and DeleteEventSourceMapping calls if you have kms:Decrypt permissions for the correct KMS key.
The result of the last Lambda invocation of your function.
" + "documentation":"The result of the event source mapping's last processing attempt.
" }, "State":{ "shape":"String", @@ -2580,7 +3096,7 @@ }, "DestinationConfig":{ "shape":"DestinationConfig", - "documentation":"(Streams only) An Amazon SQS queue or Amazon SNS topic destination for discarded records.
" + "documentation":"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka event sources only) A configuration object that specifies the destination of an event after Lambda processes it.
" }, "Topics":{ "shape":"Topics", @@ -2600,23 +3116,23 @@ }, "MaximumRecordAgeInSeconds":{ "shape":"MaximumRecordAgeInSeconds", - "documentation":"(Streams only) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.
" + "documentation":"(Kinesis and DynamoDB Streams only) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.
The minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed
(Streams only) If the function returns an error, split the batch in two and retry. The default value is false.
" + "documentation":"(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry. The default value is false.
" }, "MaximumRetryAttempts":{ "shape":"MaximumRetryAttemptsEventSourceMapping", - "documentation":"(Streams only) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source.
" + "documentation":"(Kinesis and DynamoDB Streams only) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source.
" }, "TumblingWindowInSeconds":{ "shape":"TumblingWindowInSeconds", - "documentation":"(Streams only) The duration in seconds of a processing window. The range is 1–900 seconds.
" + "documentation":"(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.
" }, "FunctionResponseTypes":{ "shape":"FunctionResponseTypeList", - "documentation":"(Streams and Amazon SQS) A list of current response type enums applied to the event source mapping.
" + "documentation":"(Kinesis, DynamoDB Streams, and Amazon SQS) A list of current response type enums applied to the event source mapping.
" }, "AmazonManagedKafkaEventSourceConfig":{ "shape":"AmazonManagedKafkaEventSourceConfig", @@ -2625,10 +3141,58 @@ "SelfManagedKafkaEventSourceConfig":{ "shape":"SelfManagedKafkaEventSourceConfig", "documentation":"Specific configuration settings for a self-managed Apache Kafka event source.
" + }, + "ScalingConfig":{ + "shape":"ScalingConfig", + "documentation":"(Amazon SQS only) The scaling configuration for the event source. For more information, see Configuring maximum concurrency for Amazon SQS event sources.
" + }, + "DocumentDBEventSourceConfig":{ + "shape":"DocumentDBEventSourceConfig", + "documentation":"Specific configuration settings for a DocumentDB event source.
" + }, + "KMSKeyArn":{ + "shape":"KMSKeyArn", + "documentation":"The ARN of the Key Management Service (KMS) customer managed key that Lambda uses to encrypt your function's filter criteria.
" + }, + "FilterCriteriaError":{ + "shape":"FilterCriteriaError", + "documentation":"An object that contains details about an error related to filter criteria encryption.
" + }, + "EventSourceMappingArn":{ + "shape":"EventSourceMappingArn", + "documentation":"The Amazon Resource Name (ARN) of the event source mapping.
" + }, + "MetricsConfig":{ + "shape":"EventSourceMappingMetricsConfig", + "documentation":"The metrics configuration for your event source. For more information, see Event source mapping metrics.
" + }, + "ProvisionedPollerConfig":{ + "shape":"ProvisionedPollerConfig", + "documentation":"(Amazon MSK and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see provisioned mode.
" } }, "documentation":"A mapping between an Amazon Web Services resource and a Lambda function. For details, see CreateEventSourceMapping.
" }, + "EventSourceMappingMetric":{ + "type":"string", + "enum":["EventCount"] + }, + "EventSourceMappingMetricList":{ + "type":"list", + "member":{"shape":"EventSourceMappingMetric"}, + "max":1, + "min":0 + }, + "EventSourceMappingMetricsConfig":{ + "type":"structure", + "members":{ + "Metrics":{ + "shape":"EventSourceMappingMetricList", + "documentation":" The metrics you want your event source mapping to produce. Include EventCount to receive event source mapping metrics related to the number of events processed by your event source mapping. For more information about these metrics, see Event source mapping metrics.
The metrics configuration for your event source. Use this configuration object to define which metrics you want your event source mapping to produce.
" + }, "EventSourceMappingsList":{ "type":"list", "member":{"shape":"EventSourceMappingConfiguration"} @@ -2647,96 +3211,6 @@ "min":0, "pattern":"[a-zA-Z0-9._\\-]+" }, - "Event":{ - "type":"structure", - "members":{ - "EventType":{"shape":"EventType"}, - "SubType":{"shape":"OperationSubType"}, - "EventId":{"shape":"EventId"}, - "Id":{"shape":"OperationId"}, - "Name":{"shape":"OperationName"}, - "EventTimestamp":{"shape":"ExecutionTimestamp"}, - "ParentId":{"shape":"OperationId"}, - "ExecutionStartedDetails":{"shape":"ExecutionStartedDetails"}, - "ExecutionSucceededDetails":{"shape":"ExecutionSucceededDetails"}, - "ExecutionFailedDetails":{"shape":"ExecutionFailedDetails"}, - "ExecutionTimedOutDetails":{"shape":"ExecutionTimedOutDetails"}, - "ExecutionStoppedDetails":{"shape":"ExecutionStoppedDetails"}, - "ContextStartedDetails":{"shape":"ContextStartedDetails"}, - "ContextSucceededDetails":{"shape":"ContextSucceededDetails"}, - "ContextFailedDetails":{"shape":"ContextFailedDetails"}, - "WaitStartedDetails":{"shape":"WaitStartedDetails"}, - "WaitSucceededDetails":{"shape":"WaitSucceededDetails"}, - "WaitCancelledDetails":{"shape":"WaitCancelledDetails"}, - "StepStartedDetails":{"shape":"StepStartedDetails"}, - "StepSucceededDetails":{"shape":"StepSucceededDetails"}, - "StepFailedDetails":{"shape":"StepFailedDetails"}, - "InvokeStartedDetails":{"shape":"InvokeStartedDetails"}, - "InvokeSucceededDetails":{"shape":"InvokeSucceededDetails"}, - "InvokeFailedDetails":{"shape":"InvokeFailedDetails"}, - "InvokeTimedOutDetails":{"shape":"InvokeTimedOutDetails"}, - "InvokeCancelledDetails":{"shape":"InvokeCancelledDetails"}, - "CallbackStartedDetails":{"shape":"CallbackStartedDetails"}, - "CallbackSucceededDetails":{"shape":"CallbackSucceededDetails"}, - "CallbackFailedDetails":{"shape":"CallbackFailedDetails"}, - "CallbackTimedOutDetails":{"shape":"CallbackTimedOutDetails"} - } - }, - "EventId":{ - "type":"integer", - "box":true, - "min":1 - }, - "Events":{ - "type":"list", - "member":{"shape":"Event"} - }, - "EventDetails":{ - "type":"structure", - "members":{ - "ExecutionStartedDetails":{"shape":"ExecutionStartedDetails"}, - "ExecutionSucceededDetails":{"shape":"ExecutionSucceededDetails"}, - "ExecutionFailedDetails":{"shape":"ExecutionFailedDetails"}, - "ExecutionTimedOutDetails":{"shape":"ExecutionTimedOutDetails"}, - "ExecutionStoppedDetails":{"shape":"ExecutionStoppedDetails"}, - "StepStartedDetails":{"shape":"StepStartedDetails"}, - "StepSucceededDetails":{"shape":"StepSucceededDetails"}, - "StepFailedDetails":{"shape":"StepFailedDetails"}, - "StepTimedOutDetails":{"shape":"StepTimedOutDetails"}, - "WaitStartedDetails":{"shape":"WaitStartedDetails"}, - "WaitSucceededDetails":{"shape":"WaitSucceededDetails"}, - "WaitFailedDetails":{"shape":"WaitFailedDetails"}, - "WaitTimedOutDetails":{"shape":"WaitTimedOutDetails"}, - "InvokeStartedDetails":{"shape":"InvokeStartedDetails"}, - "InvokeSucceededDetails":{"shape":"InvokeSucceededDetails"}, - "InvokeFailedDetails":{"shape":"InvokeFailedDetails"}, - "InvokeTimedOutDetails":{"shape":"InvokeTimedOutDetails"}, - "InvokeCancelledDetails":{"shape":"InvokeCancelledDetails"}, - "CallbackStartedDetails":{"shape":"CallbackStartedDetails"}, - "CallbackSucceededDetails":{"shape":"CallbackSucceededDetails"}, - "CallbackFailedDetails":{"shape":"CallbackFailedDetails"}, - "CallbackTimedOutDetails":{"shape":"CallbackTimedOutDetails"} - } - }, - "EventError":{ - "type":"structure", - "members":{ - "Error":{"shape":"String"}, - "Cause":{"shape":"String"} - } - }, - "EventInput":{ - "type":"string", - "max":262144, - "min":0, - "sensitive":true - }, - "EventResult":{ - "type":"string", - "max":262144, - "min":0, - "sensitive":true - }, "EventType":{ "type":"string", "enum":[ @@ -2745,27 +3219,40 @@ "ExecutionFailed", "ExecutionTimedOut", "ExecutionStopped", + "ContextStarted", + "ContextSucceeded", + "ContextFailed", + "WaitStarted", + "WaitSucceeded", + "WaitCancelled", "StepStarted", "StepSucceeded", "StepFailed", - "StepTimedOut", - "WaitStarted", - "WaitSucceeded", - "WaitFailed", - "WaitTimedOut", - "InvokeStarted", - "InvokeSucceeded", - "InvokeFailed", - "InvokeTimedOut", - "InvokeCancelled", + "ChainedInvokeStarted", + "ChainedInvokeSucceeded", + "ChainedInvokeFailed", + "ChainedInvokeTimedOut", + "ChainedInvokeStopped", "CallbackStarted", "CallbackSucceeded", "CallbackFailed", - "CallbackTimedOut" + "CallbackTimedOut", + "InvocationCompleted" ] }, + "Events":{ + "type":"list", + "member":{"shape":"Event"} + }, "Execution":{ "type":"structure", + "required":[ + "DurableExecutionArn", + "DurableExecutionName", + "FunctionArn", + "Status", + "StartTimestamp" + ], "members":{ "DurableExecutionArn":{"shape":"DurableExecutionArn"}, "DurableExecutionName":{"shape":"DurableExecutionName"}, @@ -2775,6 +3262,30 @@ "EndTimestamp":{"shape":"ExecutionTimestamp"} } }, + "ExecutionDetails":{ + "type":"structure", + "members":{ + "InputPayload":{"shape":"InputPayload"} + } + }, + "ExecutionFailedDetails":{ + "type":"structure", + "required":["Error"], + "members":{ + "Error":{"shape":"EventError"} + } + }, + "ExecutionStartedDetails":{ + "type":"structure", + "required":[ + "Input", + "ExecutionTimeout" + ], + "members":{ + "Input":{"shape":"EventInput"}, + "ExecutionTimeout":{"shape":"DurationSeconds"} + } + }, "ExecutionStatus":{ "type":"string", "enum":[ @@ -2785,10 +3296,41 @@ "STOPPED" ] }, + "ExecutionStatusList":{ + "type":"list", + "member":{"shape":"ExecutionStatus"} + }, + "ExecutionStoppedDetails":{ + "type":"structure", + "required":["Error"], + "members":{ + "Error":{"shape":"EventError"} + } + }, + "ExecutionSucceededDetails":{ + "type":"structure", + "required":["Result"], + "members":{ + "Result":{"shape":"EventResult"} + } + }, + "ExecutionTimedOutDetails":{ + "type":"structure", + "members":{ + "Error":{"shape":"EventError"} + } + }, + "ExecutionTimeout":{ + "type":"integer", + "box":true, + "max":31622400, + "min":1 + }, "ExecutionTimestamp":{"type":"timestamp"}, "FileSystemArn":{ "type":"string", "max":200, + "min":0, "pattern":"arn:aws[a-zA-Z-]*:elasticfilesystem:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\\d{1}:\\d{12}:access-point/fsap-[a-f0-9]{17}" }, "FileSystemConfig":{ @@ -2812,7 +3354,8 @@ "FileSystemConfigList":{ "type":"list", "member":{"shape":"FileSystemConfig"}, - "max":1 + "max":1, + "min":0 }, "Filter":{ "type":"structure", @@ -2834,12 +3377,47 @@ }, "documentation":"An object that contains the filters for an event source.
" }, + "FilterCriteriaError":{ + "type":"structure", + "members":{ + "ErrorCode":{ + "shape":"FilterCriteriaErrorCode", + "documentation":"The KMS exception that resulted from filter criteria encryption or decryption.
" + }, + "Message":{ + "shape":"FilterCriteriaErrorMessage", + "documentation":"The error message.
" + } + }, + "documentation":"An object that contains details about an error related to filter criteria encryption.
" + }, + "FilterCriteriaErrorCode":{ + "type":"string", + "max":50, + "min":10, + "pattern":"[A-Za-z]+Exception" + }, + "FilterCriteriaErrorMessage":{ + "type":"string", + "max":2048, + "min":10, + "pattern":".*" + }, "FilterList":{ "type":"list", "member":{"shape":"Filter"} }, + "FullDocument":{ + "type":"string", + "enum":[ + "UpdateLookup", + "Default" + ] + }, "FunctionArn":{ "type":"string", + "max":10000, + "min":0, "pattern":"arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}(-gov)?-[a-z]+-\\d{1}:\\d{12}:function:[a-zA-Z0-9-_]+(:(\\$LATEST|[a-zA-Z0-9-_]+))?" }, "FunctionArnList":{ @@ -2851,7 +3429,7 @@ "members":{ "ZipFile":{ "shape":"Blob", - "documentation":"The base64-encoded contents of the deployment package. Amazon Web Services SDK and Amazon Web Services CLI clients handle the encoding for you.
" + "documentation":"The base64-encoded contents of the deployment package. Amazon Web Services SDK and CLI clients handle the encoding for you.
" }, "S3Bucket":{ "shape":"S3Bucket", @@ -2868,9 +3446,13 @@ "ImageUri":{ "shape":"String", "documentation":"URI of a container image in the Amazon ECR registry.
" + }, + "SourceKMSKeyArn":{ + "shape":"KMSKeyArn", + "documentation":"The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt your function's .zip deployment package. If you don't provide a customer managed key, Lambda uses an Amazon Web Services owned key.
" } }, - "documentation":"The code for the Lambda function. You can specify either an object in Amazon S3, upload a .zip file archive deployment package directly, or specify the URI of a container image.
" + "documentation":"The code for the Lambda function. You can either specify an object in Amazon S3, upload a .zip file archive deployment package directly, or specify the URI of a container image.
" }, "FunctionCodeLocation":{ "type":"structure", @@ -2890,6 +3472,10 @@ "ResolvedImageUri":{ "shape":"String", "documentation":"The resolved URI for the image.
" + }, + "SourceKMSKeyArn":{ + "shape":"String", + "documentation":"The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt your function's .zip deployment package. If you don't provide a customer managed key, Lambda uses an Amazon Web Services owned key.
" } }, "documentation":"Details about a function's deployment package.
" @@ -2907,7 +3493,7 @@ }, "Runtime":{ "shape":"Runtime", - "documentation":"The runtime environment for the Lambda function.
" + "documentation":"The identifier of the function's runtime. Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.
The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
" }, "Role":{ "shape":"RoleArn", @@ -2915,7 +3501,7 @@ }, "Handler":{ "shape":"Handler", - "documentation":"The function that Lambda calls to begin executing your function.
" + "documentation":"The function that Lambda calls to begin running your function.
" }, "CodeSize":{ "shape":"Long", @@ -2931,7 +3517,7 @@ }, "MemorySize":{ "shape":"MemorySize", - "documentation":"The amount of memory available to the function at runtime.
" + "documentation":"The amount of memory available to the function at runtime.
" }, "LastModified":{ "shape":"Timestamp", @@ -2955,11 +3541,11 @@ }, "Environment":{ "shape":"EnvironmentResponse", - "documentation":"The function's environment variables.
" + "documentation":"The function's environment variables. Omitted from CloudTrail logs.
" }, "KMSKeyArn":{ "shape":"KMSKeyArn", - "documentation":"The KMS key that's used to encrypt the function's environment variables. This key is only returned if you've configured a customer managed key.
" + "documentation":"The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt the following resources:
The function's environment variables.
The function's Lambda SnapStart snapshots.
When used with SourceKMSKeyArn, the unzipped version of the .zip deployment package that's used for function invocations. For more information, see Specifying a customer managed key for Lambda.
The optimized version of the container image that's used for function invocations. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more information, see Function lifecycle.
If you don't provide a customer managed key, Lambda uses an Amazon Web Services owned key or an Amazon Web Services managed key.
" }, "TracingConfig":{ "shape":"TracingConfigResponse", @@ -2975,7 +3561,7 @@ }, "Layers":{ "shape":"LayersReferenceList", - "documentation":"The function's layers.
" + "documentation":"The function's layers.
" }, "State":{ "shape":"State", @@ -3025,22 +3611,23 @@ "shape":"ArchitecturesList", "documentation":"The instruction set architecture that the function supports. Architecture is a string array with one of the valid values. The default architecture value is x86_64.
Configuration for durable function execution, including retention period and execution timeout.
" + "EphemeralStorage":{ + "shape":"EphemeralStorage", + "documentation":"The size of the function's /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10,240 MB. For more information, see Configuring ephemeral storage (console).
The function's SnapStart setting.
" + "documentation":"Set ApplyOn to PublishedVersions to create a snapshot of the initialized execution environment when you publish a function version. For more information, see Improving startup performance with Lambda SnapStart.
The ARN of the runtime and any errors that occured.
" }, "LoggingConfig":{ "shape":"LoggingConfig", - "documentation":"The function's logging configuration.
" + "documentation":"The function's Amazon CloudWatch Logs configuration settings.
" }, - "EphemeralStorage":{ - "shape":"EphemeralStorage", - "documentation":"The size of the function’s /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10240 MB.
" - } + "DurableConfig":{"shape":"DurableConfig"} }, "documentation":"Details about a function's configuration.
" }, @@ -3065,7 +3652,7 @@ }, "DestinationConfig":{ "shape":"DestinationConfig", - "documentation":"A destination for events after they have been sent to a function for processing.
Destinations
Function - The Amazon Resource Name (ARN) of a Lambda function.
Queue - The ARN of an SQS queue.
Topic - The ARN of an SNS topic.
Event Bus - The ARN of an Amazon EventBridge event bus.
A destination for events after they have been sent to a function for processing.
Destinations
Function - The Amazon Resource Name (ARN) of a Lambda function.
Queue - The ARN of a standard SQS queue.
Bucket - The ARN of an Amazon S3 bucket.
Topic - The ARN of a standard SNS topic.
Event Bus - The ARN of an Amazon EventBridge event bus.
S3 buckets are supported only for on-failure destinations. To retain records of successful invocations, use another destination type.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated IAM users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
Use one of the following options:
BUFFERED – This is the default option. Lambda invokes your function using the Invoke API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
RESPONSE_STREAM – Your function streams payload results as they become available. Lambda invokes your function using the InvokeWithResponseStream API operation. The maximum response payload size is 20 MB, however, you can request a quota increase.
Details about a Lambda function URL.
" @@ -3158,8 +3749,7 @@ }, "GetAccountSettingsRequest":{ "type":"structure", - "members":{ - } + "members":{} }, "GetAccountSettingsResponse":{ "type":"structure", @@ -3183,7 +3773,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -3217,18 +3807,6 @@ } } }, - "GetEventSourceMappingRequest":{ - "type":"structure", - "required":["UUID"], - "members":{ - "UUID":{ - "shape":"String", - "documentation":"The identifier of the event source mapping.
", - "location":"uri", - "locationName":"UUID" - } - } - }, "GetDurableExecutionHistoryRequest":{ "type":"structure", "required":["DurableExecutionArn"], @@ -3249,7 +3827,7 @@ "locationName":"MaxItems" }, "Marker":{ - "shape":"PaginationMarker", + "shape":"String", "location":"querystring", "locationName":"Marker" }, @@ -3262,68 +3840,151 @@ }, "GetDurableExecutionHistoryResponse":{ "type":"structure", + "required":["Events"], "members":{ "Events":{"shape":"Events"}, - "NextMarker":{"shape":"PaginationMarker"} + "NextMarker":{"shape":"String"} } }, - "GetFunctionCodeSigningConfigRequest":{ + "GetDurableExecutionRequest":{ "type":"structure", - "required":["FunctionName"], + "required":["DurableExecutionArn"], "members":{ - "FunctionName":{ - "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "DurableExecutionArn":{ + "shape":"DurableExecutionArn", "location":"uri", - "locationName":"FunctionName" + "locationName":"DurableExecutionArn" } } }, - "GetFunctionCodeSigningConfigResponse":{ + "GetDurableExecutionResponse":{ "type":"structure", "required":[ - "CodeSigningConfigArn", - "FunctionName" + "DurableExecutionArn", + "DurableExecutionName", + "FunctionArn", + "StartTimestamp", + "Status" ], "members":{ - "CodeSigningConfigArn":{ - "shape":"CodeSigningConfigArn", - "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
" - }, - "FunctionName":{ - "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
" - } + "DurableExecutionArn":{"shape":"DurableExecutionArn"}, + "DurableExecutionName":{"shape":"DurableExecutionName"}, + "FunctionArn":{"shape":"FunctionArn"}, + "InputPayload":{"shape":"InputPayload"}, + "Result":{"shape":"OutputPayload"}, + "Error":{"shape":"ErrorObject"}, + "StartTimestamp":{"shape":"ExecutionTimestamp"}, + "Status":{"shape":"ExecutionStatus"}, + "EndTimestamp":{"shape":"ExecutionTimestamp"}, + "Version":{"shape":"Version"} } }, - "GetFunctionConcurrencyRequest":{ + "GetDurableExecutionStateRequest":{ "type":"structure", - "required":["FunctionName"], + "required":[ + "DurableExecutionArn", + "CheckpointToken" + ], "members":{ - "FunctionName":{ - "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "DurableExecutionArn":{ + "shape":"DurableExecutionArn", "location":"uri", - "locationName":"FunctionName" - } - } - }, - "GetFunctionConcurrencyResponse":{ - "type":"structure", - "members":{ - "ReservedConcurrentExecutions":{ - "shape":"ReservedConcurrentExecutions", - "documentation":"The number of simultaneous executions that are reserved for the function.
" - } - } - }, - "GetFunctionConfigurationRequest":{ + "locationName":"DurableExecutionArn" + }, + "CheckpointToken":{ + "shape":"CheckpointToken", + "location":"querystring", + "locationName":"CheckpointToken" + }, + "Marker":{ + "shape":"String", + "location":"querystring", + "locationName":"Marker" + }, + "MaxItems":{ + "shape":"ItemCount", + "location":"querystring", + "locationName":"MaxItems" + } + } + }, + "GetDurableExecutionStateResponse":{ + "type":"structure", + "required":["Operations"], + "members":{ + "Operations":{"shape":"Operations"}, + "NextMarker":{"shape":"String"} + } + }, + "GetEventSourceMappingRequest":{ + "type":"structure", + "required":["UUID"], + "members":{ + "UUID":{ + "shape":"String", + "documentation":"The identifier of the event source mapping.
", + "location":"uri", + "locationName":"UUID" + } + } + }, + "GetFunctionCodeSigningConfigRequest":{ + "type":"structure", + "required":["FunctionName"], + "members":{ + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + } + } + }, + "GetFunctionCodeSigningConfigResponse":{ + "type":"structure", + "required":[ + "CodeSigningConfigArn", + "FunctionName" + ], + "members":{ + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
" + }, + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
" + } + } + }, + "GetFunctionConcurrencyRequest":{ + "type":"structure", + "required":["FunctionName"], + "members":{ + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + } + } + }, + "GetFunctionConcurrencyResponse":{ + "type":"structure", + "members":{ + "ReservedConcurrentExecutions":{ + "shape":"ReservedConcurrentExecutions", + "documentation":"The number of simultaneous executions that are reserved for the function.
" + } + } + }, + "GetFunctionConfigurationRequest":{ "type":"structure", "required":["FunctionName"], "members":{ "FunctionName":{ "shape":"NamespacedFunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name – my-function (name-only), my-function:v1 (with alias).
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -3341,7 +4002,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -3353,13 +4014,34 @@ } } }, + "GetFunctionRecursionConfigRequest":{ + "type":"structure", + "required":["FunctionName"], + "members":{ + "FunctionName":{ + "shape":"UnqualifiedFunctionName", + "documentation":"", + "location":"uri", + "locationName":"FunctionName" + } + } + }, + "GetFunctionRecursionConfigResponse":{ + "type":"structure", + "members":{ + "RecursiveLoop":{ + "shape":"RecursiveLoop", + "documentation":"If your function's recursive loop detection configuration is Allow, Lambda doesn't take any action when it detects your function being invoked as part of a recursive loop.
If your function's recursive loop detection configuration is Terminate, Lambda stops your function being invoked and notifies you when it detects your function being invoked as part of a recursive loop.
By default, Lambda sets your function's configuration to Terminate. You can update this configuration using the PutFunctionRecursionConfig action.
The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name – my-function (name-only), my-function:v1 (with alias).
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -3384,7 +4066,11 @@ }, "Tags":{ "shape":"Tags", - "documentation":"The function's tags.
" + "documentation":"The function's tags. Lambda returns tag data only if you have explicit allow permissions for lambda:ListTags.
" + }, + "TagsError":{ + "shape":"TagsError", + "documentation":"An object that contains details about an error related to retrieving tags.
" }, "Concurrency":{ "shape":"Concurrency", @@ -3398,7 +4084,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -3430,7 +4116,7 @@ }, "AuthType":{ "shape":"FunctionUrlAuthType", - "documentation":"The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated IAM users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
When the function URL configuration was last updated, in ISO-8601 format (YYYY-MM-DDThh:mm:ss.sTZD).
" + }, + "InvokeMode":{ + "shape":"InvokeMode", + "documentation":"Use one of the following options:
BUFFERED – This is the default option. Lambda invokes your function using the Invoke API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
RESPONSE_STREAM – Your function streams payload results as they become available. Lambda invokes your function using the InvokeWithResponseStream API operation. The maximum response payload size is 20 MB, however, you can request a quota increase.
The layer's compatible runtimes.
" + "documentation":"The layer's compatible runtimes.
The following list includes deprecated runtimes. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
" }, "LicenseInfo":{ "shape":"LicenseInfo", @@ -3560,7 +4250,7 @@ "members":{ "FunctionName":{ "shape":"NamespacedFunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name – my-function (name-only), my-function:v1 (with alias).
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -3594,7 +4284,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -3619,7 +4309,7 @@ }, "AllocatedProvisionedConcurrentExecutions":{ "shape":"NonNegativeInteger", - "documentation":"The amount of provisioned concurrency allocated.
" + "documentation":"The amount of provisioned concurrency allocated. When a weighted alias is used during linear and canary deployments, this value fluctuates depending on the amount of concurrency that is provisioned for the function versions.
" }, "Status":{ "shape":"ProvisionedConcurrencyStatusEnum", @@ -3635,20 +4325,58 @@ } } }, + "GetRuntimeManagementConfigRequest":{ + "type":"structure", + "required":["FunctionName"], + "members":{ + "FunctionName":{ + "shape":"NamespacedFunctionName", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + }, + "Qualifier":{ + "shape":"Qualifier", + "documentation":"Specify a version of the function. This can be $LATEST or a published version number. If no value is specified, the configuration for the $LATEST version is returned.
The current runtime update mode of the function.
" + }, + "RuntimeVersionArn":{ + "shape":"RuntimeVersionArn", + "documentation":"The ARN of the runtime the function is configured to use. If the runtime update mode is Manual, the ARN is returned, otherwise null is returned.
The Amazon Resource Name (ARN) of your function.
" + } + } + }, "Handler":{ "type":"string", "max":128, + "min":0, "pattern":"[^\\s]+" }, "Header":{ "type":"string", "max":1024, + "min":0, "pattern":".*" }, "HeadersList":{ "type":"list", "member":{"shape":"Header"}, - "max":100 + "max":100, + "min":0 }, "HttpStatus":{"type":"integer"}, "ImageConfig":{ @@ -3660,14 +4388,14 @@ }, "Command":{ "shape":"StringList", - "documentation":"Specifies parameters that you want to pass in with ENTRYPOINT.
" + "documentation":"Specifies parameters that you want to pass in with ENTRYPOINT.
" }, "WorkingDirectory":{ "shape":"WorkingDirectory", "documentation":"Specifies the working directory.
" } }, - "documentation":"Configuration values that override the container image Dockerfile settings. See Container settings.
" + "documentation":"Configuration values that override the container image Dockerfile settings. For more information, see Container image settings.
" }, "ImageConfigError":{ "type":"structure", @@ -3681,7 +4409,7 @@ "documentation":"Error message.
" } }, - "documentation":"Error response to GetFunctionConfiguration.
" + "documentation":"Error response to GetFunctionConfiguration.
Error response to GetFunctionConfiguration.
" + "documentation":"Error response to GetFunctionConfiguration.
Response to GetFunctionConfiguration request.
" + "documentation":"Response to a GetFunctionConfiguration request.
The code signature failed the integrity check. Lambda always blocks deployment if the integrity check fails, even if code signing policy is set to WARN.
", - "error":{"httpStatusCode":400}, + "documentation":"The code signature failed the integrity check. If the integrity check fails, then Lambda blocks deployment, even if the code signing policy is set to WARN.
", + "error":{ + "httpStatusCode":400, + "senderFault":true + }, "exception":true }, "InvalidParameterValueException":{ @@ -3719,8 +4461,11 @@ "documentation":"The exception message.
" } }, - "documentation":"One of the parameters in the request is invalid.
", - "error":{"httpStatusCode":400}, + "documentation":"One of the parameters in the request is not valid.
", + "error":{ + "httpStatusCode":400, + "senderFault":true + }, "exception":true }, "InvalidRequestContentException":{ @@ -3735,8 +4480,11 @@ "documentation":"The exception message.
" } }, - "documentation":"The request body could not be parsed as JSON.
", - "error":{"httpStatusCode":400}, + "documentation":"The request body could not be parsed as JSON, or a request header is invalid. For example, the 'x-amzn-RequestId' header is not a valid UUID string.
", + "error":{ + "httpStatusCode":400, + "senderFault":true + }, "exception":true }, "InvalidRuntimeException":{ @@ -3747,7 +4495,8 @@ }, "documentation":"The runtime or runtime version specified is not supported.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true }, "InvalidSecurityGroupIDException":{ "type":"structure", @@ -3755,9 +4504,10 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"The Security Group ID provided in the Lambda function VPC configuration is invalid.
", + "documentation":"The security group ID provided in the Lambda function VPC configuration is not valid.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true }, "InvalidSubnetIDException":{ "type":"structure", @@ -3765,9 +4515,10 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"The Subnet ID provided in the Lambda function VPC configuration is invalid.
", + "documentation":"The subnet ID provided in the Lambda function VPC configuration is not valid.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true }, "InvalidZipFileException":{ "type":"structure", @@ -3777,7 +4528,22 @@ }, "documentation":"Lambda could not unzip the deployment package.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true + }, + "InvocationCompletedDetails":{ + "type":"structure", + "required":[ + "StartTimestamp", + "EndTimestamp", + "RequestId" + ], + "members":{ + "StartTimestamp":{"shape":"ExecutionTimestamp"}, + "EndTimestamp":{"shape":"ExecutionTimestamp"}, + "RequestId":{"shape":"String"}, + "Error":{"shape":"EventError"} + } }, "InvocationRequest":{ "type":"structure", @@ -3785,13 +4551,13 @@ "members":{ "FunctionName":{ "shape":"NamespacedFunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name – my-function (name-only), my-function:v1 (with alias).
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, "InvocationType":{ "shape":"InvocationType", - "documentation":"Choose from the following options.
RequestResponse (default) - Invoke the function synchronously. Keep the connection open until the function returns a response or times out. The API response includes the function response and additional data.
Event - Invoke the function asynchronously. Send events that fail multiple times to the function's dead-letter queue (if it's configured). The API response only includes a status code.
DryRun - Validate parameter values and verify that the user or role has permission to invoke the function.
Choose from the following options.
RequestResponse (default) – Invoke the function synchronously. Keep the connection open until the function returns a response or times out. The API response includes the function response and additional data.
Event – Invoke the function asynchronously. Send events that fail multiple times to the function's dead-letter queue (if one is configured). The API response only includes a status code.
DryRun – Validate parameter values and verify that the user or role has permission to invoke the function.
Up to 3583 bytes of base64-encoded data about the invoking client to pass to the function in the context object.
", + "documentation":"Up to 3,583 bytes of base64-encoded data about the invoking client to pass to the function in the context object. Lambda passes the ClientContext object to your function for synchronous invocations only.
The JSON that you want to provide to your Lambda function as input.
You can enter the JSON directly. For example, --payload '{ \"key\": \"value\" }'. You can also specify a file path. For example, --payload file://payload.json.
The JSON that you want to provide to your Lambda function as input.
You can enter the JSON directly. For example, --payload '{ \"key\": \"value\" }'. You can also specify a file path. For example, --payload file://payload.json.
The last 4 KB of the execution log, which is base64 encoded.
", + "documentation":"The last 4 KB of the execution log, which is base64-encoded.
", "location":"header", "locationName":"X-Amz-Log-Result" }, @@ -3849,6 +4620,11 @@ "documentation":"The version of the function that executed. When you invoke a function with an alias, this indicates which version the alias resolved to.
", "location":"header", "locationName":"X-Amz-Executed-Version" + }, + "DurableExecutionArn":{ + "shape":"DurableExecutionArn", + "location":"header", + "locationName":"X-Amz-Durable-Execution-Arn" } }, "payload":"Payload" @@ -3870,7 +4646,7 @@ "members":{ "FunctionName":{ "shape":"NamespacedFunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -3891,52 +4667,255 @@ "location":"statusCode" } }, - "documentation":"A success response (202 Accepted) indicates that the request is queued for invocation.
A success response (202 Accepted) indicates that the request is queued for invocation.
Data returned by your Lambda function.
", + "eventpayload":true + } }, - "documentation":"Lambda was unable to decrypt the environment variables because KMS access was denied. Check the Lambda function's KMS permissions.
", - "error":{"httpStatusCode":502}, - "exception":true + "documentation":"A chunk of the streamed response payload.
", + "event":true }, - "KMSDisabledException":{ + "InvokeWithResponseStreamCompleteEvent":{ "type":"structure", "members":{ - "Type":{"shape":"String"}, - "Message":{"shape":"String"} + "ErrorCode":{ + "shape":"String", + "documentation":"An error code.
" + }, + "ErrorDetails":{ + "shape":"String", + "documentation":"The details of any returned error.
" + }, + "LogResult":{ + "shape":"String", + "documentation":"The last 4 KB of the execution log, which is base64-encoded.
" + } }, - "documentation":"Lambda was unable to decrypt the environment variables because the KMS key used is disabled. Check the Lambda function's KMS key settings.
", - "error":{"httpStatusCode":502}, - "exception":true + "documentation":"A response confirming that the event stream is complete.
", + "event":true }, - "KMSInvalidStateException":{ + "InvokeWithResponseStreamRequest":{ "type":"structure", + "required":["FunctionName"], "members":{ - "Type":{"shape":"String"}, - "Message":{"shape":"String"} + "FunctionName":{ + "shape":"NamespacedFunctionName", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + }, + "InvocationType":{ + "shape":"ResponseStreamingInvocationType", + "documentation":"Use one of the following options:
RequestResponse (default) – Invoke the function synchronously. Keep the connection open until the function returns a response or times out. The API operation response includes the function response and additional data.
DryRun – Validate parameter values and verify that the IAM user or role has permission to invoke the function.
Set to Tail to include the execution log in the response. Applies to synchronously invoked functions only.
Up to 3,583 bytes of base64-encoded data about the invoking client to pass to the function in the context object.
", + "location":"header", + "locationName":"X-Amz-Client-Context" + }, + "Qualifier":{ + "shape":"Qualifier", + "documentation":"The alias name.
", + "location":"querystring", + "locationName":"Qualifier" + }, + "Payload":{ + "shape":"Blob", + "documentation":"The JSON that you want to provide to your Lambda function as input.
You can enter the JSON directly. For example, --payload '{ \"key\": \"value\" }'. You can also specify a file path. For example, --payload file://payload.json.
Lambda was unable to decrypt the environment variables because the KMS key used is in an invalid state for Decrypt. Check the function's KMS key settings.
", - "error":{"httpStatusCode":502}, - "exception":true - }, - "KMSKeyArn":{ - "type":"string", - "pattern":"(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()" + "payload":"Payload" }, - "KMSNotFoundException":{ + "InvokeWithResponseStreamResponse":{ "type":"structure", "members":{ - "Type":{"shape":"String"}, - "Message":{"shape":"String"} + "StatusCode":{ + "shape":"Integer", + "documentation":"For a successful request, the HTTP status code is in the 200 range. For the RequestResponse invocation type, this status code is 200. For the DryRun invocation type, this status code is 204.
The version of the function that executed. When you invoke a function with an alias, this indicates which version the alias resolved to.
", + "location":"header", + "locationName":"X-Amz-Executed-Version" + }, + "EventStream":{ + "shape":"InvokeWithResponseStreamResponseEvent", + "documentation":"The stream of response payloads.
" + }, + "ResponseStreamContentType":{ + "shape":"String", + "documentation":"The type of data the stream is returning.
", + "location":"header", + "locationName":"Content-Type" + } }, - "documentation":"Lambda was unable to decrypt the environment variables because the KMS key was not found. Check the function's KMS key settings.
", + "payload":"EventStream" + }, + "InvokeWithResponseStreamResponseEvent":{ + "type":"structure", + "members":{ + "PayloadChunk":{ + "shape":"InvokeResponseStreamUpdate", + "documentation":"A chunk of the streamed response payload.
" + }, + "InvokeComplete":{ + "shape":"InvokeWithResponseStreamCompleteEvent", + "documentation":"An object that's returned when the stream has ended and all the payload chunks have been returned.
" + } + }, + "documentation":"An object that includes a chunk of the response payload. When the stream has ended, Lambda includes a InvokeComplete object.
Lambda couldn't decrypt the environment variables because KMS access was denied. Check the Lambda function's KMS permissions.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true + }, + "KMSDisabledException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "Message":{"shape":"String"} + }, + "documentation":"Lambda couldn't decrypt the environment variables because the KMS key used is disabled. Check the Lambda function's KMS key settings.
", + "error":{"httpStatusCode":502}, + "exception":true, + "fault":true + }, + "KMSInvalidStateException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "Message":{"shape":"String"} + }, + "documentation":"Lambda couldn't decrypt the environment variables because the state of the KMS key used is not valid for Decrypt. Check the function's KMS key settings.
", + "error":{"httpStatusCode":502}, + "exception":true, + "fault":true + }, + "KMSKeyArn":{ + "type":"string", + "pattern":"(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()" + }, + "KMSNotFoundException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "Message":{"shape":"String"} + }, + "documentation":"Lambda couldn't decrypt the environment variables because the KMS key was not found. Check the function's KMS key settings.
", + "error":{"httpStatusCode":502}, + "exception":true, + "fault":true + }, + "KafkaSchemaRegistryAccessConfig":{ + "type":"structure", + "members":{ + "Type":{ + "shape":"KafkaSchemaRegistryAuthType", + "documentation":"The type of authentication Lambda uses to access your schema registry.
" + }, + "URI":{ + "shape":"Arn", + "documentation":"The URI of the secret (Secrets Manager secret ARN) to authenticate with your schema registry.
" + } + }, + "documentation":"Specific access configuration settings that tell Lambda how to authenticate with your schema registry.
If you're working with an Glue schema registry, don't provide authentication details in this object. Instead, ensure that your execution role has the required permissions for Lambda to access your cluster.
If you're working with a Confluent schema registry, choose the authentication method in the Type field, and provide the Secrets Manager secret ARN in the URI field.
The URI for your schema registry. The correct URI format depends on the type of schema registry you're using.
For Glue schema registries, use the ARN of the registry.
For Confluent schema registries, use the URL of the registry.
The record format that Lambda delivers to your function after schema validation.
Choose JSON to have Lambda deliver the record to your function as a standard JSON object.
Choose SOURCE to have Lambda deliver the record to your function in its original source format. Lambda removes all schema metadata, such as the schema ID, before sending the record to your function.
An array of access configuration objects that tell Lambda how to authenticate with your schema registry.
" + }, + "SchemaValidationConfigs":{ + "shape":"KafkaSchemaValidationConfigList", + "documentation":"An array of schema validation configuration objects, which tell Lambda the message attributes you want to validate and filter using your schema registry.
" + } + }, + "documentation":"Specific configuration settings for a Kafka schema registry.
" + }, + "KafkaSchemaValidationAttribute":{ + "type":"string", + "enum":[ + "KEY", + "VALUE" + ] + }, + "KafkaSchemaValidationConfig":{ + "type":"structure", + "members":{ + "Attribute":{ + "shape":"KafkaSchemaValidationAttribute", + "documentation":" The attributes you want your schema registry to validate and filter for. If you selected JSON as the EventRecordFormat, Lambda also deserializes the selected message attributes.
Specific schema validation configuration settings that tell Lambda the message attributes you want to validate and filter using your schema registry.
" + }, + "KafkaSchemaValidationConfigList":{ + "type":"list", + "member":{"shape":"KafkaSchemaValidationConfig"} }, "LastUpdateStatus":{ "type":"string", @@ -3959,18 +4938,20 @@ "InvalidSecurityGroup", "ImageDeleted", "ImageAccessDenied", - "InvalidImage" + "InvalidImage", + "KMSKeyAccessDenied", + "KMSKeyNotFound", + "InvalidStateKMSKey", + "DisabledKMSKey", + "EFSIOError", + "EFSMountConnectivityError", + "EFSMountFailure", + "EFSMountTimeout", + "InvalidRuntime", + "InvalidZipFileException", + "FunctionError" ] }, - "IncludeExecutionData":{ - "type":"boolean", - "box":true - }, - "Integer":{"type":"integer"}, - "ItemCount":{ - "type":"integer", - "min":0 - }, "Layer":{ "type":"structure", "members":{ @@ -4012,6 +4993,7 @@ "LayerPermissionAllowedAction":{ "type":"string", "max":22, + "min":0, "pattern":"lambda:GetLayerVersion" }, "LayerPermissionAllowedPrincipal":{ @@ -4098,7 +5080,7 @@ }, "CompatibleRuntimes":{ "shape":"CompatibleRuntimes", - "documentation":"The layer's compatible runtimes.
" + "documentation":"The layer's compatible runtimes.
The following list includes deprecated runtimes. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
" }, "LicenseInfo":{ "shape":"LicenseInfo", @@ -4139,7 +5121,8 @@ }, "LicenseInfo":{ "type":"string", - "max":512 + "max":512, + "min":0 }, "ListAliasesRequest":{ "type":"structure", @@ -4147,7 +5130,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -4236,17 +5219,17 @@ "Statuses":{ "shape":"ExecutionStatusList", "location":"querystring", - "locationName":"StatusFilter" + "locationName":"Statuses" }, "StartedAfter":{ "shape":"ExecutionTimestamp", "location":"querystring", - "locationName":"TimeAfter" + "locationName":"StartedAfter" }, "StartedBefore":{ "shape":"ExecutionTimestamp", "location":"querystring", - "locationName":"TimeBefore" + "locationName":"StartedBefore" }, "ReverseOrder":{ "shape":"ReverseOrder", @@ -4254,7 +5237,7 @@ "locationName":"ReverseOrder" }, "Marker":{ - "shape":"PaginationMarker", + "shape":"String", "location":"querystring", "locationName":"Marker" }, @@ -4269,7 +5252,7 @@ "type":"structure", "members":{ "DurableExecutions":{"shape":"DurableExecutions"}, - "NextMarker":{"shape":"PaginationMarker"} + "NextMarker":{"shape":"String"} } }, "ListEventSourceMappingsRequest":{ @@ -4277,13 +5260,13 @@ "members":{ "EventSourceArn":{ "shape":"Arn", - "documentation":"The Amazon Resource Name (ARN) of the event source.
Amazon Kinesis - The ARN of the data stream or a stream consumer.
Amazon DynamoDB Streams - The ARN of the stream.
Amazon Simple Queue Service - The ARN of the queue.
Amazon Managed Streaming for Apache Kafka - The ARN of the cluster.
The Amazon Resource Name (ARN) of the event source.
Amazon Kinesis – The ARN of the data stream or a stream consumer.
Amazon DynamoDB Streams – The ARN of the stream.
Amazon Simple Queue Service – The ARN of the queue.
Amazon Managed Streaming for Apache Kafka – The ARN of the cluster or the ARN of the VPC connection (for cross-account event source mappings).
Amazon MQ – The ARN of the broker.
Amazon DocumentDB – The ARN of the DocumentDB change stream.
The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Version or Alias ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – MyFunction.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Version or Alias ARN – arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD.
Partial ARN – 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.
", "location":"querystring", "locationName":"FunctionName" }, @@ -4320,7 +5303,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -4357,7 +5340,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -4431,7 +5414,7 @@ "members":{ "MasterRegion":{ "shape":"MasterRegion", - "documentation":"For Lambda@Edge functions, the Amazon Web Services Region of the master function. For example, us-east-1 filters the list of functions to only include Lambda@Edge functions replicated from a master function in US East (N. Virginia). If specified, you must set FunctionVersion to ALL.
For Lambda@Edge functions, the Amazon Web Services Region of the master function. For example, us-east-1 filters the list of functions to include only Lambda@Edge functions replicated from a master function in US East (N. Virginia). If specified, you must set FunctionVersion to ALL.
A runtime identifier. For example, go1.x.
A runtime identifier.
The following list includes deprecated runtimes. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
", "location":"querystring", "locationName":"CompatibleRuntime" }, @@ -4523,7 +5506,7 @@ "members":{ "CompatibleRuntime":{ "shape":"Runtime", - "documentation":"A runtime identifier. For example, go1.x.
A runtime identifier.
The following list includes deprecated runtimes. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
", "location":"querystring", "locationName":"CompatibleRuntime" }, @@ -4566,7 +5549,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -4602,10 +5585,10 @@ "required":["Resource"], "members":{ "Resource":{ - "shape":"FunctionArn", - "documentation":"The function's Amazon Resource Name (ARN). Note: Lambda does not support adding tags to aliases or versions.
", + "shape":"TaggableResource", + "documentation":"The resource's Amazon Resource Name (ARN). Note: Lambda does not support adding tags to function aliases or versions.
", "location":"uri", - "locationName":"ARN" + "locationName":"Resource" } } }, @@ -4624,7 +5607,7 @@ "members":{ "FunctionName":{ "shape":"NamespacedFunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -4658,7 +5641,21 @@ "LocalMountPath":{ "type":"string", "max":160, - "pattern":"^/mnt/[a-zA-Z0-9-_.]+$" + "min":0, + "pattern":"/mnt/[a-zA-Z0-9-_.]+" + }, + "LogFormat":{ + "type":"string", + "enum":[ + "JSON", + "Text" + ] + }, + "LogGroup":{ + "type":"string", + "max":512, + "min":1, + "pattern":"[\\.\\-_/#A-Za-z0-9]+" }, "LogType":{ "type":"string", @@ -4667,6 +5664,28 @@ "Tail" ] }, + "LoggingConfig":{ + "type":"structure", + "members":{ + "LogFormat":{ + "shape":"LogFormat", + "documentation":"The format in which Lambda sends your function's application and system logs to CloudWatch. Select between plain text and structured JSON.
" + }, + "ApplicationLogLevel":{ + "shape":"ApplicationLogLevel", + "documentation":"Set this property to filter the application logs for your function that Lambda sends to CloudWatch. Lambda only sends application logs at the selected level of detail and lower, where TRACE is the highest level and FATAL is the lowest.
Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where DEBUG is the highest level and WARN is the lowest.
The name of the Amazon CloudWatch log group the function sends logs to. By default, Lambda functions send logs to a default log group named /aws/lambda/<function name>. To use a different log group, enter an existing log group or enter a new log group name.
The function's Amazon CloudWatch Logs configuration settings.
" + }, "Long":{"type":"long"}, "MasterRegion":{ "type":"string", @@ -4674,69 +5693,100 @@ }, "MaxAge":{ "type":"integer", + "box":true, "max":86400, "min":0 }, "MaxFunctionEventInvokeConfigListItems":{ "type":"integer", + "box":true, "max":50, "min":1 }, "MaxItems":{ "type":"integer", + "box":true, "max":50, "min":1 }, "MaxLayerListItems":{ "type":"integer", + "box":true, "max":50, "min":1 }, "MaxListItems":{ "type":"integer", + "box":true, "max":10000, "min":1 }, "MaxProvisionedConcurrencyConfigListItems":{ "type":"integer", + "box":true, "max":50, "min":1 }, "MaximumBatchingWindowInSeconds":{ "type":"integer", + "box":true, "max":300, "min":0 }, + "MaximumConcurrency":{ + "type":"integer", + "box":true, + "max":1000, + "min":2 + }, "MaximumEventAgeInSeconds":{ "type":"integer", + "box":true, "max":21600, "min":60 }, + "MaximumNumberOfPollers":{ + "type":"integer", + "box":true, + "max":2000, + "min":1 + }, "MaximumRecordAgeInSeconds":{ "type":"integer", + "box":true, "max":604800, "min":-1 }, "MaximumRetryAttempts":{ "type":"integer", + "box":true, "max":2, "min":0 }, "MaximumRetryAttemptsEventSourceMapping":{ "type":"integer", + "box":true, "max":10000, "min":-1 }, "MemorySize":{ "type":"integer", + "box":true, "max":10240, "min":128 }, "Method":{ "type":"string", "max":6, + "min":0, "pattern":".*" }, + "MinimumNumberOfPollers":{ + "type":"integer", + "box":true, + "max":200, + "min":1 + }, "NameSpacedFunctionArn":{ "type":"string", "pattern":"arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}(-gov)?-[a-z]+-\\d{1}:\\d{12}:function:[a-zA-Z0-9-_\\.]+(:(\\$LATEST|[a-zA-Z0-9-_]+))?" @@ -4755,6 +5805,7 @@ }, "NonNegativeInteger":{ "type":"integer", + "box":true, "min":0 }, "NullableBoolean":{ @@ -4766,10 +5817,10 @@ "members":{ "Destination":{ "shape":"DestinationArn", - "documentation":"The Amazon Resource Name (ARN) of the destination resource.
" + "documentation":"The Amazon Resource Name (ARN) of the destination resource.
To retain records of unsuccessful asynchronous invocations, you can configure an Amazon SNS topic, Amazon SQS queue, Amazon S3 bucket, Lambda function, or Amazon EventBridge event bus as the destination.
To retain records of failed invocations from Kinesis, DynamoDB, self-managed Kafka or Amazon MSK, you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination.
" } }, - "documentation":"A destination for events that failed processing.
" + "documentation":"A destination for events that failed processing. For more information, see Adding a destination.
" }, "OnSuccess":{ "type":"structure", @@ -4779,156 +5830,127 @@ "documentation":"The Amazon Resource Name (ARN) of the destination resource.
" } }, - "documentation":"A destination for events that were processed successfully.
" - }, - "OrganizationId":{ - "type":"string", - "max":34, - "pattern":"o-[a-z0-9]{10,32}" - }, - "OperationPayload":{ - "type":"blob", - "max":262144, - "min":0, - "sensitive":true + "documentation":"A destination for events that were processed successfully.
To retain records of successful asynchronous invocations, you can configure an Amazon SNS topic, Amazon SQS queue, Lambda function, or Amazon EventBridge event bus as the destination.
OnSuccess is not supported in CreateEventSourceMapping or UpdateEventSourceMapping requests.
The permissions policy for the resource is too large. Learn more
", - "error":{"httpStatusCode":400}, + "documentation":"The permissions policy for the resource is too large. For more information, see Lambda quotas.
", + "error":{ + "httpStatusCode":400, + "senderFault":true + }, "exception":true }, "PositiveInteger":{ "type":"integer", + "box":true, "min":1 }, - "PolicyResourceArn":{ - "type":"string", - "max":256, - "min":0, - "pattern":"arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:\\d{12}:(lite-function|function|layer):[a-zA-Z0-9-_]+(:(\\$LATEST|[a-zA-Z0-9-_])+)?" - }, - "PutResourcePolicyRequest":{ - "type":"structure", - "required":[ - "ResourceArn", - "Policy" - ], - "members":{ - "ResourceArn":{ - "shape":"PolicyResourceArn", - "location":"uri", - "locationName":"ResourceArn" - }, - "Policy":{"shape":"ResourcePolicy"}, - "BlockPublicPolicy":{"shape":"NullableBoolean"}, - "RevisionId":{"shape":"RevisionId"} - } - }, - "PutResourcePolicyResponse":{ - "type":"structure", - "members":{ - "Policy":{"shape":"ResourcePolicy"}, - "RevisionId":{"shape":"RevisionId"} - } - }, "PreconditionFailedException":{ "type":"structure", "members":{ @@ -5015,8 +6013,11 @@ "documentation":"The exception message.
" } }, - "documentation":"The RevisionId provided does not match the latest RevisionId for the Lambda function or alias. Call the GetFunction or the GetAlias API to retrieve the latest RevisionId for your resource.
The RevisionId provided does not match the latest RevisionId for the Lambda function or alias.
For AddPermission and RemovePermission API operations: Call GetPolicy to retrieve the latest RevisionId for your resource.
For all other API operations: Call GetFunction or GetAlias to retrieve the latest RevisionId for your resource.
The amount of provisioned concurrency allocated.
" + "documentation":"The amount of provisioned concurrency allocated. When a weighted alias is used during linear and canary deployments, this value fluctuates depending on the amount of concurrency that is provisioned for the function versions.
" }, "Status":{ "shape":"ProvisionedConcurrencyStatusEnum", @@ -5074,7 +6075,10 @@ "message":{"shape":"String"} }, "documentation":"The specified configuration does not exist.
", - "error":{"httpStatusCode":404}, + "error":{ + "httpStatusCode":404, + "senderFault":true + }, "exception":true }, "ProvisionedConcurrencyStatusEnum":{ @@ -5085,6 +6089,20 @@ "FAILED" ] }, + "ProvisionedPollerConfig":{ + "type":"structure", + "members":{ + "MinimumPollers":{ + "shape":"MinimumNumberOfPollers", + "documentation":"The minimum number of event pollers this event source can scale down to.
" + }, + "MaximumPollers":{ + "shape":"MaximumNumberOfPollers", + "documentation":"The maximum number of event pollers this event source can scale up to.
" + } + }, + "documentation":"The provisioned mode configuration for the event source. Use Provisioned Mode to customize the minimum and maximum number of event pollers for your event source. An event poller is a compute unit that provides approximately 5 MBps of throughput.
" + }, "PublishLayerVersionRequest":{ "type":"structure", "required":[ @@ -5108,7 +6126,7 @@ }, "CompatibleRuntimes":{ "shape":"CompatibleRuntimes", - "documentation":"A list of compatible function runtimes. Used for filtering with ListLayers and ListLayerVersions.
" + "documentation":"A list of compatible function runtimes. Used for filtering with ListLayers and ListLayerVersions.
The following list includes deprecated runtimes. For more information, see Runtime deprecation policy.
" }, "LicenseInfo":{ "shape":"LicenseInfo", @@ -5149,7 +6167,7 @@ }, "CompatibleRuntimes":{ "shape":"CompatibleRuntimes", - "documentation":"The layer's compatible runtimes.
" + "documentation":"The layer's compatible runtimes.
The following list includes deprecated runtimes. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
" }, "LicenseInfo":{ "shape":"LicenseInfo", @@ -5167,7 +6185,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -5198,7 +6216,7 @@ }, "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" } @@ -5217,7 +6235,7 @@ }, "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
" + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
" } } }, @@ -5230,7 +6248,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -5246,7 +6264,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -5266,7 +6284,35 @@ }, "DestinationConfig":{ "shape":"DestinationConfig", - "documentation":"A destination for events after they have been sent to a function for processing.
Destinations
Function - The Amazon Resource Name (ARN) of a Lambda function.
Queue - The ARN of an SQS queue.
Topic - The ARN of an SNS topic.
Event Bus - The ARN of an Amazon EventBridge event bus.
A destination for events after they have been sent to a function for processing.
Destinations
Function - The Amazon Resource Name (ARN) of a Lambda function.
Queue - The ARN of a standard SQS queue.
Bucket - The ARN of an Amazon S3 bucket.
Topic - The ARN of a standard SNS topic.
Event Bus - The ARN of an Amazon EventBridge event bus.
S3 buckets are supported only for on-failure destinations. To retain records of successful invocations, use another destination type.
The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + }, + "RecursiveLoop":{ + "shape":"RecursiveLoop", + "documentation":"If you set your function's recursive loop detection configuration to Allow, Lambda doesn't take any action when it detects your function being invoked as part of a recursive loop. We recommend that you only use this setting if your design intentionally uses a Lambda function to write data back to the same Amazon Web Services resource that invokes it.
If you set your function's recursive loop detection configuration to Terminate, Lambda stops your function being invoked and notifies you when it detects your function being invoked as part of a recursive loop.
By default, Lambda sets your function's configuration to Terminate.
If your design intentionally uses a Lambda function to write data back to the same Amazon Web Services resource that invokes the function, then use caution and implement suitable guard rails to prevent unexpected charges being billed to your Amazon Web Services account. To learn more about best practices for using recursive invocation patterns, see Recursive patterns that cause run-away Lambda functions in Serverless Land.
The status of your function's recursive loop detection configuration.
When this value is set to Allowand Lambda detects your function being invoked as part of a recursive loop, it doesn't take any action.
When this value is set to Terminate and Lambda detects your function being invoked as part of a recursive loop, it stops your function being invoked and notifies you.
The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -5309,7 +6355,7 @@ }, "AllocatedProvisionedConcurrentExecutions":{ "shape":"NonNegativeInteger", - "documentation":"The amount of provisioned concurrency allocated.
" + "documentation":"The amount of provisioned concurrency allocated. When a weighted alias is used during linear and canary deployments, this value fluctuates depending on the amount of concurrency that is provisioned for the function versions.
" }, "Status":{ "shape":"ProvisionedConcurrencyStatusEnum", @@ -5325,6 +6371,56 @@ } } }, + "PutRuntimeManagementConfigRequest":{ + "type":"structure", + "required":[ + "FunctionName", + "UpdateRuntimeOn" + ], + "members":{ + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + }, + "Qualifier":{ + "shape":"Qualifier", + "documentation":"Specify a version of the function. This can be $LATEST or a published version number. If no value is specified, the configuration for the $LATEST version is returned.
Specify the runtime update mode.
Auto (default) - Automatically update to the most recent and secure runtime version using a Two-phase runtime version rollout. This is the best choice for most customers to ensure they always benefit from runtime updates.
Function update - Lambda updates the runtime of your function to the most recent and secure runtime version when you update your function. This approach synchronizes runtime updates with function deployments, giving you control over when runtime updates are applied and allowing you to detect and mitigate rare runtime update incompatibilities early. When using this setting, you need to regularly update your functions to keep their runtime up-to-date.
Manual - You specify a runtime version in your function configuration. The function will use this runtime version indefinitely. In the rare case where a new runtime version is incompatible with an existing function, this allows you to roll back your function to an earlier runtime version. For more information, see Roll back a runtime version.
The ARN of the runtime version you want the function to use.
This is only required if you're using the Manual runtime update mode.
The runtime update mode.
" + }, + "FunctionArn":{ + "shape":"FunctionArn", + "documentation":"The ARN of the function
" + }, + "RuntimeVersionArn":{ + "shape":"RuntimeVersionArn", + "documentation":"The ARN of the runtime the function is configured to use. If the runtime update mode is manual, the ARN is returned, otherwise null is returned.
The exception type.
" + }, + "Message":{ + "shape":"String", + "documentation":"The exception message.
" + } + }, + "documentation":"Lambda has detected your function being invoked in a recursive loop with other Amazon Web Services resources and stopped your function's invocation.
", + "error":{ + "httpStatusCode":400, + "senderFault":true + }, + "exception":true + }, + "RecursiveLoop":{ + "type":"string", + "enum":[ + "Allow", + "Terminate" + ] + }, "RemoveLayerVersionPermissionRequest":{ "type":"structure", "required":[ @@ -5386,7 +6508,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name – my-function (name-only), my-function:v1 (with alias).
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -5404,24 +6526,32 @@ }, "RevisionId":{ "shape":"String", - "documentation":"Only update the policy if the revision ID matches the ID that's specified. Use this option to avoid modifying a policy that has changed since you last read it.
", + "documentation":"Update the policy only if the revision ID matches the ID that's specified. Use this option to avoid modifying a policy that has changed since you last read it.
", "location":"querystring", "locationName":"RevisionId" } } }, + "ReplayChildren":{ + "type":"boolean", + "box":true + }, "RequestTooLargeException":{ "type":"structure", "members":{ "Type":{"shape":"String"}, "message":{"shape":"String"} }, - "documentation":"The request payload exceeded the Invoke request body JSON input limit. For more information, see Limits.
The request payload exceeded the Invoke request body JSON input quota. For more information, see Lambda quotas.
The resource already exists, or another operation is in progress.
", - "error":{"httpStatusCode":409}, + "error":{ + "httpStatusCode":409, + "senderFault":true + }, "exception":true }, "ResourceInUseException":{ @@ -5450,8 +6583,11 @@ "Type":{"shape":"String"}, "Message":{"shape":"String"} }, - "documentation":"The operation conflicts with the resource's availability. For example, you attempted to update an EventSource Mapping in CREATING, or tried to delete a EventSource mapping currently in the UPDATING state.
", - "error":{"httpStatusCode":400}, + "documentation":"The operation conflicts with the resource's availability. For example, you tried to update an event source mapping in the CREATING state, or you tried to delete an event source mapping currently UPDATING.
", + "error":{ + "httpStatusCode":400, + "senderFault":true + }, "exception":true }, "ResourceNotFoundException":{ @@ -5461,21 +6597,12 @@ "Message":{"shape":"String"} }, "documentation":"The resource specified in the request does not exist.
", - "error":{"httpStatusCode":404}, + "error":{ + "httpStatusCode":404, + "senderFault":true + }, "exception":true }, - "ResourcePolicy":{ - "type":"string", - "max":20480, - "min":1, - "pattern":"[\\s\\S]+" - }, - "RevisionId":{ - "type":"string", - "max":36, - "min":36, - "pattern":"[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" - }, "ResourceNotReadyException":{ "type":"structure", "members":{ @@ -5490,16 +6617,37 @@ }, "documentation":"The function is inactive and its VPC connection is no longer available. Wait for the VPC connection to reestablish and try again.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true }, - "RoleArn":{ + "ResponseStreamingInvocationType":{ "type":"string", - "pattern":"arn:(aws[a-zA-Z-]*)?:iam::\\d{12}:role/?[a-zA-Z_0-9+=,.@\\-_/]+" + "enum":[ + "RequestResponse", + "DryRun" + ] + }, + "RetentionPeriodInDays":{ + "type":"integer", + "box":true, + "max":90, + "min":1 + }, + "RetryDetails":{ + "type":"structure", + "members":{ + "CurrentAttempt":{"shape":"AttemptCount"}, + "NextAttemptDelaySeconds":{"shape":"DurationSeconds"} + } }, "ReverseOrder":{ "type":"boolean", "box":true }, + "RoleArn":{ + "type":"string", + "pattern":"arn:(aws[a-zA-Z-]*)?:iam::\\d{12}:role/?[a-zA-Z_0-9+=,.@\\-_/]+" + }, "Runtime":{ "type":"string", "enum":[ @@ -5524,19 +6672,67 @@ "dotnetcore2.1", "dotnetcore3.1", "dotnet6", + "dotnet8", "nodejs4.3-edge", "go1.x", "ruby2.5", "ruby2.7", "provided", - "provided.al2" + "provided.al2", + "nodejs18.x", + "python3.10", + "java17", + "ruby3.2", + "ruby3.3", + "ruby3.4", + "python3.11", + "nodejs20.x", + "provided.al2023", + "python3.12", + "java21", + "python3.13", + "nodejs22.x" ] }, - "S3Bucket":{ + "RuntimeVersionArn":{ "type":"string", - "max":63, - "min":3, - "pattern":"^[0-9A-Za-z\\.\\-_]*(?The ARN of the runtime version you want the function to use." + }, + "Error":{ + "shape":"RuntimeVersionError", + "documentation":"Error response when Lambda is unable to retrieve the runtime version for a function.
" + } + }, + "documentation":"The ARN of the runtime and any errors that occured.
" + }, + "RuntimeVersionError":{ + "type":"structure", + "members":{ + "ErrorCode":{ + "shape":"String", + "documentation":"The error code.
" + }, + "Message":{ + "shape":"SensitiveString", + "documentation":"The error message.
" + } + }, + "documentation":"Any error returned when the runtime version information for the function could not be retrieved.
" + }, + "S3Bucket":{ + "type":"string", + "max":63, + "min":3, + "pattern":"[0-9A-Za-z\\.\\-_]*(?Limits the number of concurrent instances that the Amazon SQS event source can invoke." + } + }, + "documentation":"(Amazon SQS only) The scaling configuration for the event source. To remove the configuration, pass an empty value.
" + }, + "SchemaRegistryEventRecordFormat":{ + "type":"string", + "enum":[ + "JSON", + "SOURCE" + ] + }, + "SchemaRegistryUri":{ + "type":"string", + "max":10000, + "min":1, + "pattern":"[a-zA-Z0-9-\\/*:_+=.@-]*" + }, "SecurityGroupId":{"type":"string"}, "SecurityGroupIds":{ "type":"list", "member":{"shape":"SecurityGroupId"}, - "max":5 + "max":5, + "min":0 }, "SelfManagedEventSource":{ "type":"structure", @@ -5569,15 +6789,80 @@ "members":{ "ConsumerGroupId":{ "shape":"URI", - "documentation":"The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see services-msk-consumer-group-id.
" + "documentation":"The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see Customizable consumer group ID.
" + }, + "SchemaRegistryConfig":{ + "shape":"KafkaSchemaRegistryConfig", + "documentation":"Specific configuration settings for a Kafka schema registry.
" } }, "documentation":"Specific configuration settings for a self-managed Apache Kafka event source.
" }, + "SendDurableExecutionCallbackFailureRequest":{ + "type":"structure", + "required":["CallbackId"], + "members":{ + "CallbackId":{ + "shape":"CallbackId", + "location":"uri", + "locationName":"CallbackId" + }, + "Error":{"shape":"ErrorObject"} + }, + "payload":"Error" + }, + "SendDurableExecutionCallbackFailureResponse":{ + "type":"structure", + "members":{} + }, + "SendDurableExecutionCallbackHeartbeatRequest":{ + "type":"structure", + "required":["CallbackId"], + "members":{ + "CallbackId":{ + "shape":"CallbackId", + "location":"uri", + "locationName":"CallbackId" + } + } + }, + "SendDurableExecutionCallbackHeartbeatResponse":{ + "type":"structure", + "members":{} + }, + "SendDurableExecutionCallbackSuccessRequest":{ + "type":"structure", + "required":["CallbackId"], + "members":{ + "CallbackId":{ + "shape":"CallbackId", + "location":"uri", + "locationName":"CallbackId" + }, + "Result":{"shape":"BinaryOperationPayload"} + }, + "payload":"Result" + }, + "SendDurableExecutionCallbackSuccessResponse":{ + "type":"structure", + "members":{} + }, "SensitiveString":{ "type":"string", "sensitive":true }, + "SerializedRequestEntityTooLargeException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "message":{"shape":"String"} + }, + "error":{ + "httpStatusCode":413, + "senderFault":true + }, + "exception":true + }, "ServiceException":{ "type":"structure", "members":{ @@ -5586,7 +6871,8 @@ }, "documentation":"The Lambda service encountered an internal error.
", "error":{"httpStatusCode":500}, - "exception":true + "exception":true, + "fault":true }, "SigningProfileVersionArns":{ "type":"list", @@ -5594,12 +6880,89 @@ "max":20, "min":1 }, + "SnapStart":{ + "type":"structure", + "members":{ + "ApplyOn":{ + "shape":"SnapStartApplyOn", + "documentation":"Set to PublishedVersions to create a snapshot of the initialized execution environment when you publish a function version.
The function's Lambda SnapStart setting. Set ApplyOn to PublishedVersions to create a snapshot of the initialized execution environment when you publish a function version.
The afterRestore() runtime hook encountered an error. For more information, check the Amazon CloudWatch logs.
Lambda is initializing your function. You can invoke the function when the function state becomes Active.
When set to PublishedVersions, Lambda creates a snapshot of the execution environment when you publish a function version.
When you provide a qualified Amazon Resource Name (ARN), this response element indicates whether SnapStart is activated for the specified function version.
" + } + }, + "documentation":"The function's SnapStart setting.
" + }, + "SnapStartTimeoutException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "Message":{"shape":"String"} + }, + "documentation":"Lambda couldn't restore the snapshot within the timeout limit.
", + "error":{ + "httpStatusCode":408, + "senderFault":true + }, + "exception":true + }, "SourceAccessConfiguration":{ "type":"structure", "members":{ "Type":{ "shape":"SourceAccessType", - "documentation":"The type of authentication protocol, VPC components, or virtual host for your event source. For example: \"Type\":\"SASL_SCRAM_512_AUTH\".
BASIC_AUTH - (Amazon MQ) The Secrets Manager secret that stores your broker credentials.
BASIC_AUTH - (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL/PLAIN authentication of your Apache Kafka brokers.
VPC_SUBNET - The subnets associated with your VPC. Lambda connects to these subnets to fetch data from your self-managed Apache Kafka cluster.
VPC_SECURITY_GROUP - The VPC security group used to manage access to your self-managed Apache Kafka brokers.
SASL_SCRAM_256_AUTH - The Secrets Manager ARN of your secret key used for SASL SCRAM-256 authentication of your self-managed Apache Kafka brokers.
SASL_SCRAM_512_AUTH - The Secrets Manager ARN of your secret key used for SASL SCRAM-512 authentication of your self-managed Apache Kafka brokers.
VIRTUAL_HOST - (Amazon MQ) The name of the virtual host in your RabbitMQ broker. Lambda uses this RabbitMQ host as the event source. This property cannot be specified in an UpdateEventSourceMapping API call.
CLIENT_CERTIFICATE_TLS_AUTH - (Amazon MSK, self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the certificate chain (X.509 PEM), private key (PKCS#8 PEM), and private key password (optional) used for mutual TLS authentication of your MSK/Apache Kafka brokers.
SERVER_ROOT_CA_CERTIFICATE - (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the root CA certificate (X.509 PEM) used for TLS encryption of your Apache Kafka brokers.
The type of authentication protocol, VPC components, or virtual host for your event source. For example: \"Type\":\"SASL_SCRAM_512_AUTH\".
BASIC_AUTH – (Amazon MQ) The Secrets Manager secret that stores your broker credentials.
BASIC_AUTH – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL/PLAIN authentication of your Apache Kafka brokers.
VPC_SUBNET – (Self-managed Apache Kafka) The subnets associated with your VPC. Lambda connects to these subnets to fetch data from your self-managed Apache Kafka cluster.
VPC_SECURITY_GROUP – (Self-managed Apache Kafka) The VPC security group used to manage access to your self-managed Apache Kafka brokers.
SASL_SCRAM_256_AUTH – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-256 authentication of your self-managed Apache Kafka brokers.
SASL_SCRAM_512_AUTH – (Amazon MSK, Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-512 authentication of your self-managed Apache Kafka brokers.
VIRTUAL_HOST –- (RabbitMQ) The name of the virtual host in your RabbitMQ broker. Lambda uses this RabbitMQ host as the event source. This property cannot be specified in an UpdateEventSourceMapping API call.
CLIENT_CERTIFICATE_TLS_AUTH – (Amazon MSK, self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the certificate chain (X.509 PEM), private key (PKCS#8 PEM), and private key password (optional) used for mutual TLS authentication of your MSK/Apache Kafka brokers.
SERVER_ROOT_CA_CERTIFICATE – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the root CA certificate (X.509 PEM) used for TLS encryption of your Apache Kafka brokers.
Lambda was not able to set up VPC access for the Lambda function because one or more configured subnets has no available IP addresses.
", + "documentation":"Lambda couldn't set up VPC access for the Lambda function because one or more configured subnets has no available IP addresses.
", "error":{"httpStatusCode":502}, - "exception":true + "exception":true, + "fault":true }, "SubnetId":{"type":"string"}, "SubnetIds":{ "type":"list", "member":{"shape":"SubnetId"}, - "max":16 + "max":16, + "min":0 + }, + "SystemLogLevel":{ + "type":"string", + "enum":[ + "DEBUG", + "INFO", + "WARN" + ] }, "TagKey":{"type":"string"}, "TagKeyList":{ @@ -5701,42 +7163,79 @@ ], "members":{ "Resource":{ - "shape":"FunctionArn", - "documentation":"The function's Amazon Resource Name (ARN).
", + "shape":"TaggableResource", + "documentation":"The resource's Amazon Resource Name (ARN).
", "location":"uri", - "locationName":"ARN" + "locationName":"Resource" }, "Tags":{ "shape":"Tags", - "documentation":"A list of tags to apply to the function.
" + "documentation":"A list of tags to apply to the resource.
" } } }, "TagValue":{"type":"string"}, + "TaggableResource":{ + "type":"string", + "max":256, + "min":1, + "pattern":"arn:(aws[a-zA-Z-]*):lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:\\d{12}:(function:[a-zA-Z0-9-_]+(:(\\$LATEST|[a-zA-Z0-9-_]+))?|code-signing-config:csc-[a-z0-9]{17}|event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})" + }, "Tags":{ "type":"map", "key":{"shape":"TagKey"}, "value":{"shape":"TagValue"} }, - "ThrottleReason":{ + "TagsError":{ + "type":"structure", + "required":[ + "ErrorCode", + "Message" + ], + "members":{ + "ErrorCode":{ + "shape":"TagsErrorCode", + "documentation":"The error code.
" + }, + "Message":{ + "shape":"TagsErrorMessage", + "documentation":"The error message.
" + } + }, + "documentation":"An object that contains details about an error related to retrieving tags.
" + }, + "TagsErrorCode":{ "type":"string", - "enum":[ - "ConcurrentInvocationLimitExceeded", - "FunctionInvocationRateLimitExceeded", - "ReservedFunctionConcurrentInvocationLimitExceeded", - "ReservedFunctionInvocationRateLimitExceeded", - "CallerRateLimitExceeded" - ] + "max":21, + "min":10, + "pattern":"[A-Za-z]+Exception" }, - "TimeFilter":{ + "TagsErrorMessage":{ "type":"string", - "enum":[ - "START", - "END" + "max":1000, + "min":84, + "pattern":".*" + }, + "TenantId":{ + "type":"string", + "max":256, + "min":1, + "pattern":"[a-zA-Z0-9\\._:\\/=+\\-@ ]+" + }, + "ThrottleReason":{ + "type":"string", + "enum":[ + "ConcurrentInvocationLimitExceeded", + "FunctionInvocationRateLimitExceeded", + "ReservedFunctionConcurrentInvocationLimitExceeded", + "ReservedFunctionInvocationRateLimitExceeded", + "CallerRateLimitExceeded", + "ConcurrentSnapshotCreateLimitExceeded" ] }, "Timeout":{ "type":"integer", + "box":true, "min":1 }, "Timestamp":{"type":"string"}, @@ -5753,15 +7252,18 @@ "message":{"shape":"String"}, "Reason":{"shape":"ThrottleReason"} }, - "documentation":"The request throughput limit was exceeded.
", - "error":{"httpStatusCode":429}, + "documentation":"The request throughput limit was exceeded. For more information, see Lambda quotas.
", + "error":{ + "httpStatusCode":429, + "senderFault":true + }, "exception":true }, "Topic":{ "type":"string", "max":249, "min":1, - "pattern":"^[^.]([a-zA-Z0-9\\-_.]+)" + "pattern":"[^.]([a-zA-Z0-9\\-_.]+)" }, "Topics":{ "type":"list", @@ -5796,8 +7298,13 @@ "PassThrough" ] }, + "Truncated":{ + "type":"boolean", + "box":true + }, "TumblingWindowInSeconds":{ "type":"integer", + "box":true, "max":900, "min":0 }, @@ -5807,8 +7314,15 @@ "min":1, "pattern":"[a-zA-Z0-9-\\/*:_+=.@-]*" }, + "UnqualifiedFunctionName":{ + "type":"string", + "max":140, + "min":1, + "pattern":"(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:)?(\\d{12}:)?(function:)?([a-zA-Z0-9-_]+)" + }, "UnreservedConcurrentExecutions":{ "type":"integer", + "box":true, "min":0 }, "UnsupportedMediaTypeException":{ @@ -5818,7 +7332,10 @@ "message":{"shape":"String"} }, "documentation":"The content type of the Invoke request body is not JSON.
The function's Amazon Resource Name (ARN).
", + "shape":"TaggableResource", + "documentation":"The resource's Amazon Resource Name (ARN).
", "location":"uri", - "locationName":"ARN" + "locationName":"Resource" }, "TagKeys":{ "shape":"TagKeyList", - "documentation":"A list of tag keys to remove from the function.
", + "documentation":"A list of tag keys to remove from the resource.
", "location":"querystring", "locationName":"tagKeys" } @@ -5851,7 +7368,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -5925,7 +7442,7 @@ }, "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Version or Alias ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.
" + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – MyFunction.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Version or Alias ARN – arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD.
Partial ARN – 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.
" }, "Enabled":{ "shape":"Enabled", @@ -5933,35 +7450,35 @@ }, "BatchSize":{ "shape":"BatchSize", - "documentation":"The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).
Amazon Kinesis - Default 100. Max 10,000.
Amazon DynamoDB Streams - Default 100. Max 10,000.
Amazon Simple Queue Service - Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.
Amazon Managed Streaming for Apache Kafka - Default 100. Max 10,000.
Self-managed Apache Kafka - Default 100. Max 10,000.
Amazon MQ (ActiveMQ and RabbitMQ) - Default 100. Max 10,000.
The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).
Amazon Kinesis – Default 100. Max 10,000.
Amazon DynamoDB Streams – Default 100. Max 10,000.
Amazon Simple Queue Service – Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.
Amazon Managed Streaming for Apache Kafka – Default 100. Max 10,000.
Self-managed Apache Kafka – Default 100. Max 10,000.
Amazon MQ (ActiveMQ and RabbitMQ) – Default 100. Max 10,000.
DocumentDB – Default 100. Max 10,000.
(Streams and Amazon SQS) An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see Lambda event filtering.
" + "documentation":"An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see Lambda event filtering.
" }, "MaximumBatchingWindowInSeconds":{ "shape":"MaximumBatchingWindowInSeconds", - "documentation":"(Streams and Amazon SQS standard queues) The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.
Default: 0
Related setting: When you set BatchSize to a value greater than 10, you must set MaximumBatchingWindowInSeconds to at least 1.
The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function. You can configure MaximumBatchingWindowInSeconds to any value from 0 seconds to 300 seconds in increments of seconds.
For Kinesis, DynamoDB, and Amazon SQS event sources, the default batching window is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ, and DocumentDB event sources, the default batching window is 500 ms. Note that because you can only change MaximumBatchingWindowInSeconds in increments of seconds, you cannot revert back to the 500 ms default batching window after you have changed it. To restore the default batching window, you must create a new event source mapping.
Related setting: For Kinesis, DynamoDB, and Amazon SQS event sources, when you set BatchSize to a value greater than 10, you must set MaximumBatchingWindowInSeconds to at least 1.
(Streams only) An Amazon SQS queue or Amazon SNS topic destination for discarded records.
" + "documentation":"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Kafka only) A configuration object that specifies the destination of an event after Lambda processes it.
" }, "MaximumRecordAgeInSeconds":{ "shape":"MaximumRecordAgeInSeconds", - "documentation":"(Streams only) Discard records older than the specified age. The default value is infinite (-1).
" + "documentation":"(Kinesis and DynamoDB Streams only) Discard records older than the specified age. The default value is infinite (-1).
" }, "BisectBatchOnFunctionError":{ "shape":"BisectBatchOnFunctionError", - "documentation":"(Streams only) If the function returns an error, split the batch in two and retry.
" + "documentation":"(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry.
" }, "MaximumRetryAttempts":{ "shape":"MaximumRetryAttemptsEventSourceMapping", - "documentation":"(Streams only) Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.
" + "documentation":"(Kinesis and DynamoDB Streams only) Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.
" }, "ParallelizationFactor":{ "shape":"ParallelizationFactor", - "documentation":"(Streams only) The number of batches to process from each shard concurrently.
" + "documentation":"(Kinesis and DynamoDB Streams only) The number of batches to process from each shard concurrently.
" }, "SourceAccessConfigurations":{ "shape":"SourceAccessConfigurations", @@ -5969,11 +7486,33 @@ }, "TumblingWindowInSeconds":{ "shape":"TumblingWindowInSeconds", - "documentation":"(Streams only) The duration in seconds of a processing window. The range is between 1 second and 900 seconds.
" + "documentation":"(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.
" }, "FunctionResponseTypes":{ "shape":"FunctionResponseTypeList", - "documentation":"(Streams and Amazon SQS) A list of current response type enums applied to the event source mapping.
" + "documentation":"(Kinesis, DynamoDB Streams, and Amazon SQS) A list of current response type enums applied to the event source mapping.
" + }, + "ScalingConfig":{ + "shape":"ScalingConfig", + "documentation":"(Amazon SQS only) The scaling configuration for the event source. For more information, see Configuring maximum concurrency for Amazon SQS event sources.
" + }, + "AmazonManagedKafkaEventSourceConfig":{"shape":"AmazonManagedKafkaEventSourceConfig"}, + "SelfManagedKafkaEventSourceConfig":{"shape":"SelfManagedKafkaEventSourceConfig"}, + "DocumentDBEventSourceConfig":{ + "shape":"DocumentDBEventSourceConfig", + "documentation":"Specific configuration settings for a DocumentDB event source.
" + }, + "KMSKeyArn":{ + "shape":"KMSKeyArn", + "documentation":"The ARN of the Key Management Service (KMS) customer managed key that Lambda uses to encrypt your function's filter criteria. By default, Lambda does not encrypt your filter criteria object. Specify this property to encrypt data using your own customer managed key.
" + }, + "MetricsConfig":{ + "shape":"EventSourceMappingMetricsConfig", + "documentation":"The metrics configuration for your event source. For more information, see Event source mapping metrics.
" + }, + "ProvisionedPollerConfig":{ + "shape":"ProvisionedPollerConfig", + "documentation":"(Amazon MSK and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see provisioned mode.
" } } }, @@ -5983,13 +7522,13 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, "ZipFile":{ "shape":"Blob", - "documentation":"The base64-encoded contents of the deployment package. Amazon Web Services SDK and Amazon Web Services CLI clients handle the encoding for you. Use only with a function defined with a .zip file archive deployment package.
" + "documentation":"The base64-encoded contents of the deployment package. Amazon Web Services SDK and CLI clients handle the encoding for you. Use only with a function defined with a .zip file archive deployment package.
" }, "S3Bucket":{ "shape":"S3Bucket", @@ -6017,11 +7556,15 @@ }, "RevisionId":{ "shape":"String", - "documentation":"Only update the function if the revision ID matches the ID that's specified. Use this option to avoid modifying a function that has changed since you last read it.
" + "documentation":"Update the function only if the revision ID matches the ID that's specified. Use this option to avoid modifying a function that has changed since you last read it.
" }, "Architectures":{ "shape":"ArchitecturesList", "documentation":"The instruction set architecture that the function supports. Enter a string array with one of the valid values (arm64 or x86_64). The default value is x86_64.
The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt your function's .zip deployment package. If you don't provide a customer managed key, Lambda uses an Amazon Web Services managed key.
" } } }, @@ -6031,7 +7574,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -6041,7 +7584,7 @@ }, "Handler":{ "shape":"Handler", - "documentation":"The name of the method within your code that Lambda calls to execute your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see Programming Model.
" + "documentation":"The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see Lambda programming model.
" }, "Description":{ "shape":"Description", @@ -6049,15 +7592,15 @@ }, "Timeout":{ "shape":"Timeout", - "documentation":"The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For additional information, see Lambda execution environment.
" + "documentation":"The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see Lambda execution environment.
" }, "MemorySize":{ "shape":"MemorySize", - "documentation":"The amount of memory available to the function at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB.
" + "documentation":"The amount of memory available to the function at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB.
" }, "VpcConfig":{ "shape":"VpcConfig", - "documentation":"For network connectivity to Amazon Web Services resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can only access resources and the internet through that VPC. For more information, see VPC Settings.
" + "documentation":"For network connectivity to Amazon Web Services resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see Configuring a Lambda function to access resources in a VPC.
" }, "Environment":{ "shape":"Environment", @@ -6065,15 +7608,15 @@ }, "Runtime":{ "shape":"Runtime", - "documentation":"The identifier of the function's runtime. Runtime is required if the deployment package is a .zip file archive.
" + "documentation":"The identifier of the function's runtime. Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.
The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
" }, "DeadLetterConfig":{ "shape":"DeadLetterConfig", - "documentation":"A dead letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see Dead Letter Queues.
" + "documentation":"A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see Dead-letter queues.
" }, "KMSKeyArn":{ "shape":"KMSKeyArn", - "documentation":"The ARN of the Amazon Web Services Key Management Service (KMS) key that's used to encrypt your function's environment variables. If it's not provided, Lambda uses a default service key.
" + "documentation":"The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt the following resources:
The function's environment variables.
The function's Lambda SnapStart snapshots.
When used with SourceKMSKeyArn, the unzipped version of the .zip deployment package that's used for function invocations. For more information, see Specifying a customer managed key for Lambda.
The optimized version of the container image that's used for function invocations. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more information, see Function lifecycle.
If you don't provide a customer managed key, Lambda uses an Amazon Web Services owned key or an Amazon Web Services managed key.
" }, "TracingConfig":{ "shape":"TracingConfig", @@ -6081,7 +7624,7 @@ }, "RevisionId":{ "shape":"String", - "documentation":"Only update the function if the revision ID matches the ID that's specified. Use this option to avoid modifying a function that has changed since you last read it.
" + "documentation":"Update the function only if the revision ID matches the ID that's specified. Use this option to avoid modifying a function that has changed since you last read it.
" }, "Layers":{ "shape":"LayerList", @@ -6093,11 +7636,19 @@ }, "ImageConfig":{ "shape":"ImageConfig", - "documentation":"Container image configuration values that override the values in the container image Docker file.
" + "documentation":"Container image configuration values that override the values in the container image Docker file.
" }, "EphemeralStorage":{ "shape":"EphemeralStorage", - "documentation":"The size of the function’s /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10240 MB.
" + "documentation":"The size of the function's /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10,240 MB. For more information, see Configuring ephemeral storage (console).
The function's SnapStart setting.
" + }, + "LoggingConfig":{ + "shape":"LoggingConfig", + "documentation":"The function's Amazon CloudWatch Logs configuration settings.
" }, "DurableConfig":{"shape":"DurableConfig"} } @@ -6108,7 +7659,7 @@ "members":{ "FunctionName":{ "shape":"FunctionName", - "documentation":"The name of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function, version, or alias.
Name formats
Function name - my-function (name-only), my-function:v1 (with alias).
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -6128,7 +7679,7 @@ }, "DestinationConfig":{ "shape":"DestinationConfig", - "documentation":"A destination for events after they have been sent to a function for processing.
Destinations
Function - The Amazon Resource Name (ARN) of a Lambda function.
Queue - The ARN of an SQS queue.
Topic - The ARN of an SNS topic.
Event Bus - The ARN of an Amazon EventBridge event bus.
A destination for events after they have been sent to a function for processing.
Destinations
Function - The Amazon Resource Name (ARN) of a Lambda function.
Queue - The ARN of a standard SQS queue.
Bucket - The ARN of an Amazon S3 bucket.
Topic - The ARN of a standard SNS topic.
Event Bus - The ARN of an Amazon EventBridge event bus.
S3 buckets are supported only for on-failure destinations. To retain records of successful invocations, use another destination type.
The name of the Lambda function.
Name formats
Function name - my-function.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN - 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "documentation":"The name or ARN of the Lambda function.
Name formats
Function name – my-function.
Function ARN – arn:aws:lambda:us-west-2:123456789012:function:my-function.
Partial ARN – 123456789012:function:my-function.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", "location":"uri", "locationName":"FunctionName" }, @@ -6150,11 +7701,15 @@ }, "AuthType":{ "shape":"FunctionUrlAuthType", - "documentation":"The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated IAM users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The cross-origin resource sharing (CORS) settings for your function URL.
" + }, + "InvokeMode":{ + "shape":"InvokeMode", + "documentation":"Use one of the following options:
BUFFERED – This is the default option. Lambda invokes your function using the Invoke API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
RESPONSE_STREAM – Your function streams payload results as they become available. Lambda invokes your function using the InvokeWithResponseStream API operation. The maximum response payload size is 20 MB, however, you can request a quota increase.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated IAM users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
The type of authentication that your function URL uses. Set to AWS_IAM if you want to restrict access to authenticated users only. Set to NONE if you want to bypass IAM authentication to create a public endpoint. For more information, see Security and auth model for Lambda function URLs.
When the function URL configuration was last updated, in ISO-8601 format (YYYY-MM-DDThh:mm:ss.sTZD).
" + }, + "InvokeMode":{ + "shape":"InvokeMode", + "documentation":"Use one of the following options:
BUFFERED – This is the default option. Lambda invokes your function using the Invoke API operation. Invocation results are available when the payload is complete. The maximum payload size is 6 MB.
RESPONSE_STREAM – Your function streams payload results as they become available. Lambda invokes your function using the InvokeWithResponseStream API operation. The maximum response payload size is 20 MB, however, you can request a quota increase.
A list of VPC security groups IDs.
" + "documentation":"A list of VPC security group IDs.
" + }, + "Ipv6AllowedForDualStack":{ + "shape":"NullableBoolean", + "documentation":"Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
" } }, - "documentation":"The VPC security groups and subnets that are attached to a Lambda function. For more information, see VPC Settings.
" + "documentation":"The VPC security groups and subnets that are attached to a Lambda function. For more information, see Configuring a Lambda function to access resources in a VPC.
" }, "VpcConfigResponse":{ "type":"structure", @@ -6223,404 +7794,71 @@ }, "SecurityGroupIds":{ "shape":"SecurityGroupIds", - "documentation":"A list of VPC security groups IDs.
" + "documentation":"A list of VPC security group IDs.
" }, "VpcId":{ "shape":"VpcId", "documentation":"The ID of the VPC.
" + }, + "Ipv6AllowedForDualStack":{ + "shape":"NullableBoolean", + "documentation":"Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
" } }, "documentation":"The VPC security groups and subnets that are attached to a Lambda function.
" }, "VpcId":{"type":"string"}, - "Weight":{ - "type":"double", - "max":1.0, - "min":0.0 - }, - "DurableConfig":{ - "type":"structure", - "members":{ - "RetentionPeriodInDays":{ - "shape":"RetentionPeriodInDays", - "documentation":"The number of days to retain durable function execution data. Must be between 1 and 90 days.
" - }, - "ExecutionTimeout":{ - "shape":"ExecutionTimeout", - "documentation":"The maximum execution timeout for durable functions in seconds. Must be between 1 and 31622400 seconds (1 year).
" - } - }, - "documentation":"Configuration for durable function execution, including retention period and execution timeout.
" - }, - "DurableExecutionAlreadyStartedException":{ - "type":"structure", - "members":{ - "Type":{"shape":"String"}, - "message":{"shape":"String"} - }, - "error":{ - "httpStatusCode":400, - "senderFault":true - }, - "exception":true - }, - "ExecutionTimeout":{ - "type":"integer", - "max":31622400, - "min":1 - }, - "RetentionPeriodInDays":{ - "type":"integer", - "max":90, - "min":1 - }, - "SendDurableExecutionCallbackFailureRequest":{ - "type":"structure", - "required":["CallbackId"], - "members":{ - "CallbackId":{ - "shape":"CallbackId", - "location":"uri", - "locationName":"CallbackId" - }, - "Error":{"shape":"ErrorObject"} - }, - "payload":"Error" - }, - "SendDurableExecutionCallbackFailureResponse":{ - "type":"structure", - "members":{} - }, - "SendDurableExecutionCallbackHeartbeatRequest":{ - "type":"structure", - "required":["CallbackId"], - "members":{ - "CallbackId":{ - "shape":"CallbackId", - "location":"uri", - "locationName":"CallbackId" - } - } - }, - "SendDurableExecutionCallbackHeartbeatResponse":{ - "type":"structure", - "members":{} - }, - "SendDurableExecutionCallbackSuccessRequest":{ - "type":"structure", - "required":["CallbackId"], - "members":{ - "CallbackId":{ - "shape":"CallbackId", - "location":"uri", - "locationName":"CallbackId" - }, - "Result":{"shape":"BinaryOperationPayload"} - }, - "payload":"Result" - }, - "SendDurableExecutionCallbackSuccessResponse":{ - "type":"structure", - "members":{} - }, - "BinaryOperationPayload":{ - "type":"blob", - "max":262144, - "min":0, - "sensitive":true - }, - "CheckpointDurableExecutionRequest":{ - "type":"structure", - "required":["CheckpointToken"], - "members":{ - "CheckpointToken":{ - "shape":"CheckpointToken", - "location":"uri", - "locationName":"CheckpointToken" - }, - "Updates":{"shape":"OperationUpdates"}, - "ClientToken":{"shape":"ClientToken"} - } - }, - "CheckpointDurableExecutionResponse":{ - "type":"structure", - "members":{ - "CheckpointToken":{"shape":"CheckpointToken"}, - "NewExecutionState":{"shape":"CheckpointUpdatedExecutionState"} - } - }, - "CheckpointToken":{ - "type":"string", - "max":1024, - "min":1 - }, - "CheckpointUpdatedExecutionState":{ - "type":"structure", - "members":{ - "Operations":{"shape":"Operations"}, - "NextMarker":{"shape":"PaginationMarker"} - } - }, - "ClientToken":{ - "type":"string", - "max":64, - "min":1 - }, - "GetDurableExecutionRequest":{ - "type":"structure", - "required":["DurableExecutionArn"], - "members":{ - "DurableExecutionArn":{ - "shape":"DurableExecutionArn", - "location":"uri", - "locationName":"DurableExecutionArn" - } - } - }, - "GetDurableExecutionResponse":{ - "type":"structure", - "members":{ - "DurableExecutionArn":{"shape":"DurableExecutionArn"}, - "DurableExecutionName":{"shape":"DurableExecutionName"}, - "FunctionArn":{"shape":"FunctionArn"}, - "InputPayload":{"shape":"InputPayload"}, - "Status":{"shape":"ExecutionStatus"}, - "StartTimestamp":{"shape":"ExecutionTimestamp"}, - "EndTimestamp":{"shape":"ExecutionTimestamp"}, - "Result":{"shape":"ResultPayload"}, - "ErrorPayload":{"shape":"ErrorPayload"} - } - }, - "GetDurableExecutionStateRequest":{ - "type":"structure", - "required":["CheckpointToken"], - "members":{ - "CheckpointToken":{ - "shape":"CheckpointToken", - "location":"uri", - "locationName":"CheckpointToken" - }, - "MaxItems":{"shape":"ItemCount"}, - "Marker":{"shape":"PaginationMarker"} - } - }, - "GetDurableExecutionStateResponse":{ - "type":"structure", - "members":{ - "Operations":{"shape":"Operations"}, - "NextMarker":{"shape":"PaginationMarker"} - } - }, - "InputPayload":{ - "type":"blob", - "max":6291456, - "min":0, - "sensitive":true - }, - "ResultPayload":{ - "type":"blob", - "max":6291456, - "min":0, - "sensitive":true - }, - "ErrorPayload":{ - "type":"blob", - "max":262144, - "min":0, - "sensitive":true - }, - "Operations":{ - "type":"list", - "member":{"shape":"Operation"} - }, - "Operation":{ - "type":"structure", - "members":{ - "Id":{"shape":"OperationId"}, - "Type":{"shape":"OperationType"}, - "Status":{"shape":"OperationStatus"}, - "ExecutionDetails":{"shape":"ExecutionDetails"}, - "ContextDetails":{"shape":"ContextDetails"}, - "StepDetails":{"shape":"StepDetails"}, - "WaitDetails":{"shape":"WaitDetails"}, - "CallbackDetails":{"shape":"CallbackDetails"}, - "InvokeDetails":{"shape":"InvokeDetails"} - } - }, - "OperationId":{ - "type":"string", - "max":1024, - "min":1 - }, - "OperationName":{ - "type":"string", - "max":128, - "min":1 - }, - "OperationSubType":{ - "type":"string", - "max":128, - "min":1 - }, - "OperationType":{ - "type":"string", - "enum":[ - "EXECUTION", - "CONTEXT", - "STEP", - "WAIT", - "CALLBACK", - "INVOKE" - ] - }, - "OperationStatus":{ - "type":"string", - "enum":[ - "PENDING", - "RUNNING", - "SUCCEEDED", - "FAILED", - "TIMED_OUT", - "CANCELLED" - ] - }, - "OperationUpdates":{ - "type":"list", - "member":{"shape":"OperationUpdate"} - }, - "OperationUpdate":{ - "type":"structure", - "members":{ - "Id":{"shape":"OperationId"}, - "Action":{"shape":"OperationAction"}, - "Payload":{"shape":"OperationPayload"}, - "Error":{"shape":"ErrorObject"}, - "StepOptions":{"shape":"StepOptions"}, - "WaitOptions":{"shape":"WaitOptions"}, - "CallbackOptions":{"shape":"CallbackOptions"}, - "InvokeOptions":{"shape":"InvokeOptions"} - } - }, - "OperationAction":{ - "type":"string", - "enum":[ - "START", - "SUCCEED", - "FAIL", - "CANCEL" - ] - }, - "StepDetails":{ + "WaitCancelledDetails":{ "type":"structure", "members":{ - "Result":{"shape":"OperationPayload"}, - "Error":{"shape":"ErrorObject"} + "Error":{"shape":"EventError"} } }, "WaitDetails":{ "type":"structure", "members":{ - "Result":{"shape":"OperationPayload"}, - "Error":{"shape":"ErrorObject"} - } - }, - "InvokeDetails":{ - "type":"structure", - "members":{ - "DurableExecutionArn":{"shape":"DurableExecutionArn"}, - "Result":{"shape":"OperationPayload"}, - "Error":{"shape":"ErrorObject"} + "ScheduledEndTimestamp":{"shape":"ExecutionTimestamp"} } }, - "StepOptions":{ - "type":"structure", - "members":{} - }, "WaitOptions":{ "type":"structure", "members":{ - "TimeoutSeconds":{"shape":"DurationSeconds"} + "WaitSeconds":{"shape":"WaitOptionsWaitSecondsInteger"} } }, - "InvokeOptions":{ - "type":"structure", - "members":{ - "FunctionName":{"shape":"FunctionName"}, - "FunctionQualifier":{"shape":"Version"}, - "DurableExecutionName":{"shape":"DurableExecutionName"} - } - }, - "WorkingDirectory":{ - "type":"string", - "max":1000 - }, - "LoggingConfig":{ - "type":"structure", - "members":{ - "LogFormat":{"shape":"LogFormat"}, - "ApplicationLogLevel":{"shape":"ApplicationLogLevel"}, - "SystemLogLevel":{"shape":"SystemLogLevel"}, - "LogGroup":{"shape":"LogGroup"} - } - }, - "LogFormat":{ - "type":"string", - "enum":[ - "JSON", - "Text" - ] - }, - "ApplicationLogLevel":{ - "type":"string", - "enum":[ - "TRACE", - "DEBUG", - "INFO", - "WARN", - "ERROR", - "FATAL" - ] - }, - "SystemLogLevel":{ - "type":"string", - "enum":[ - "DEBUG", - "INFO", - "WARN" - ] - }, - "LogGroup":{ - "type":"string", - "max":512, + "WaitOptionsWaitSecondsInteger":{ + "type":"integer", + "box":true, + "max":31622400, "min":1 }, - "SnapStart":{ + "WaitStartedDetails":{ "type":"structure", + "required":[ + "Duration", + "ScheduledEndTimestamp" + ], "members":{ - "ApplyOn":{"shape":"SnapStartApplyOn"} + "Duration":{"shape":"DurationSeconds"}, + "ScheduledEndTimestamp":{"shape":"ExecutionTimestamp"} } }, - "SnapStartApplyOn":{ - "type":"string", - "enum":[ - "PublishedVersions", - "None" - ] - }, - "SnapStartResponse":{ + "WaitSucceededDetails":{ "type":"structure", "members":{ - "ApplyOn":{"shape":"SnapStartApplyOn"}, - "OptimizationStatus":{"shape":"SnapStartOptimizationStatus"} + "Duration":{"shape":"DurationSeconds"} } }, - "SnapStartOptimizationStatus":{ + "Weight":{ + "type":"double", + "max":1.0, + "min":0.0 + }, + "WorkingDirectory":{ "type":"string", - "enum":[ - "On", - "Off" - ] + "max":1000, + "min":0 } }, - "documentation":"Overview
Lambda is a compute service that lets you run code without provisioning or managing servers. Lambda runs your code on a high-availability compute infrastructure and performs all of the administration of the compute resources, including server and operating system maintenance, capacity provisioning and automatic scaling, code monitoring and logging. With Lambda, you can run code for virtually any type of application or backend service. For more information about the Lambda service, see What is Lambda in the Lambda Developer Guide.
The Lambda API Reference provides information about each of the API methods, including details about the parameters in each API request and response.
You can use Software Development Kits (SDKs), Integrated Development Environment (IDE) Toolkits, and command line tools to access the API. For installation instructions, see Tools for Amazon Web Services.
For a list of Region-specific endpoints that Lambda supports, see Lambda endpoints and quotas in the Amazon Web Services General Reference..
When making the API calls, you will need to authenticate your request by providing a signature. Lambda supports signature version 4. For more information, see Signature Version 4 signing process in the Amazon Web Services General Reference..
CA certificates
Because Amazon Web Services SDKs use the CA certificates from your computer, changes to the certificates on the Amazon Web Services servers can cause connection failures when you attempt to use an SDK. You can prevent these failures by keeping your computer's CA certificates and operating system up-to-date. If you encounter this issue in a corporate environment and do not manage your own computer, you might need to ask an administrator to assist with the update process. The following list shows minimum operating system and Java versions:
Microsoft Windows versions that have updates from January 2005 or later installed contain at least one of the required CAs in their trust list.
Mac OS X 10.4 with Java for Mac OS X 10.4 Release 5 (February 2007), Mac OS X 10.5 (October 2007), and later versions contain at least one of the required CAs in their trust list.
Red Hat Enterprise Linux 5 (March 2007), 6, and 7 and CentOS 5, 6, and 7 all contain at least one of the required CAs in their default trusted CA list.
Java 1.4.2_12 (May 2006), 5 Update 2 (March 2005), and all later versions, including Java 6 (December 2006), 7, and 8, contain at least one of the required CAs in their default trusted CA list.
When accessing the Lambda management console or Lambda API endpoints, whether through browsers or programmatically, you will need to ensure your client machines support any of the following CAs:
Amazon Root CA 1
Starfield Services Root Certificate Authority - G2
Starfield Class 2 Certification Authority
Root certificates from the first two authorities are available from Amazon trust services, but keeping your computer up-to-date is the more straightforward solution. To learn more about ACM-provided certificates, see Amazon Web Services Certificate Manager FAQs.
" -} \ No newline at end of file + "documentation":"Overview
Lambda is a compute service that lets you run code without provisioning or managing servers. Lambda runs your code on a high-availability compute infrastructure and performs all of the administration of the compute resources, including server and operating system maintenance, capacity provisioning and automatic scaling, code monitoring and logging. With Lambda, you can run code for virtually any type of application or backend service. For more information about the Lambda service, see What is Lambda in the Lambda Developer Guide.
The Lambda API Reference provides information about each of the API methods, including details about the parameters in each API request and response.
You can use Software Development Kits (SDKs), Integrated Development Environment (IDE) Toolkits, and command line tools to access the API. For installation instructions, see Tools for Amazon Web Services.
For a list of Region-specific endpoints that Lambda supports, see Lambda endpoints and quotas in the Amazon Web Services General Reference..
When making the API calls, you will need to authenticate your request by providing a signature. Lambda supports signature version 4. For more information, see Signature Version 4 signing process in the Amazon Web Services General Reference..
CA certificates
Because Amazon Web Services SDKs use the CA certificates from your computer, changes to the certificates on the Amazon Web Services servers can cause connection failures when you attempt to use an SDK. You can prevent these failures by keeping your computer's CA certificates and operating system up-to-date. If you encounter this issue in a corporate environment and do not manage your own computer, you might need to ask an administrator to assist with the update process. The following list shows minimum operating system and Java versions:
Microsoft Windows versions that have updates from January 2005 or later installed contain at least one of the required CAs in their trust list.
Mac OS X 10.4 with Java for Mac OS X 10.4 Release 5 (February 2007), Mac OS X 10.5 (October 2007), and later versions contain at least one of the required CAs in their trust list.
Red Hat Enterprise Linux 5 (March 2007), 6, and 7 and CentOS 5, 6, and 7 all contain at least one of the required CAs in their default trusted CA list.
Java 1.4.2_12 (May 2006), 5 Update 2 (March 2005), and all later versions, including Java 6 (December 2006), 7, and 8, contain at least one of the required CAs in their default trusted CA list.
When accessing the Lambda management console or Lambda API endpoints, whether through browsers or programmatically, you will need to ensure your client machines support any of the following CAs:
Amazon Root CA 1
Starfield Services Root Certificate Authority - G2
Starfield Class 2 Certification Authority
Root certificates from the first two authorities are available from Amazon trust services, but keeping your computer up-to-date is the more straightforward solution. To learn more about ACM-provided certificates, see Amazon Web Services Certificate Manager FAQs.
" +}