AWS Security ChangesHomeSearch

AWS lambda documentation change

Service: lambda · 2025-05-22 · Documentation low

File: lambda/latest/dg/provisioned-concurrency.md

Summary

Expanded description of provisioned concurrency use cases and added guidance on monitoring cold starts with X-Ray, clarifying that provisioned concurrency must be applied to specific versions/aliases.

Security assessment

The changes focus on performance optimization (reducing cold starts) and configuration guidance. While the X-Ray monitoring addition improves observability, there is no evidence of addressing security vulnerabilities or documenting security-specific features. The version/alias clarification prevents misconfiguration but relates to functionality rather than security.

Diff

diff --git a/lambda/latest/dg/provisioned-concurrency.md b/lambda/latest/dg/provisioned-concurrency.md
index c6ea7ac2f..86e2361a9 100644
--- a//lambda/latest/dg/provisioned-concurrency.md
+++ b//lambda/latest/dg/provisioned-concurrency.md
@@ -13 +13 @@ In Lambda, [concurrency](./lambda-concurrency.html) is the number of in-flight r
-  * Provisioned concurrency – This is the number of pre-initialized execution environments allocated to your function. These execution environments are ready to respond immediately to incoming function requests. Provisioned concurrency is useful for reducing cold start latencies for functions. Configuring provisioned concurrency incurs additional charges to your AWS account.
+  * Provisioned concurrency – This is the number of pre-initialized execution environments allocated to your function. These execution environments are ready to respond immediately to incoming function requests. Provisioned concurrency is useful for reducing cold start latencies for functions and designed to make functions available with double-digit millisecond response times. Generally, interactive workloads benefit the most from the feature. Those are applications with users initiating requests, such as web and mobile applications, and are the most sensitive to latency. Asynchronous workloads, such as data processing pipelines, are often less latency sensitive and so do not usually need provisioned concurrency. Configuring provisioned concurrency incurs additional charges to your AWS account.
@@ -142,0 +143,2 @@ In the previous example, instead of initializing `CLIENT_A` outside of the main
+You can measure cold starts as Lambda scales up by adding X-Ray monitoring to your function. A function using provisioned concurrency does not exhibit cold start behavior since the execution environment is prepared ahead of invocation. However, provisioned concurrency must be applied to a [specific version or alias](https://docs.aws.amazon.com/lambda/latest/dg/configuration-versions.html) of a function, not the $LATEST version. In cases where you continue to see cold start behavior, ensure that you are invoking the version of alias with provisioned concurrency configured.
+