AWS lambda documentation change
Summary
Added documentation for two new error types: CodeArtifactUserException errors (with 3 sub-errors) and InvalidEntrypoint errors (with 2 sub-errors), including troubleshooting guidance
Security assessment
The changes add troubleshooting guidance for container-related deployment and configuration errors. While misconfigured entrypoints could theoretically lead to security issues, there's no explicit mention of vulnerabilities, exploits, or security patches. The errors relate to deployment failures (CodeArtifact optimization) and configuration validation (ENTRYPOINT requirements) rather than security controls.
Diff
diff --git a/lambda/latest/dg/troubleshooting-invocation.md b/lambda/latest/dg/troubleshooting-invocation.md index d327a1255..32d6c0f8a 100644 --- a//lambda/latest/dg/troubleshooting-invocation.md +++ b//lambda/latest/dg/troubleshooting-invocation.md @@ -5 +5 @@ -Lambda: Function times out during Init phase (Sandbox.Timedout)IAM: lambda:InvokeFunction not authorizedLambda: Couldn't find valid bootstrap (Runtime.InvalidEntrypoint)Lambda: Operation cannot be performed ResourceConflictExceptionLambda: Function is stuck in PendingLambda: One function is using all concurrencyGeneral: Cannot invoke function with other accounts or servicesGeneral: Function invocation is loopingLambda: Alias routing with provisioned concurrencyLambda: Cold starts with provisioned concurrencyLambda: Cold starts with new versionsEFS: Function could not mount the EFS file systemEFS: Function could not connect to the EFS file systemEFS: Function could not mount the EFS file system due to timeoutLambda: Lambda detected an IO process that was taking too long +Lambda: Function times out during Init phase (Sandbox.Timedout)IAM: lambda:InvokeFunction not authorizedLambda: Couldn't find valid bootstrap (Runtime.InvalidEntrypoint)Lambda: Operation cannot be performed ResourceConflictExceptionLambda: Function is stuck in PendingLambda: One function is using all concurrencyGeneral: Cannot invoke function with other accounts or servicesGeneral: Function invocation is loopingLambda: Alias routing with provisioned concurrencyLambda: Cold starts with provisioned concurrencyLambda: Cold starts with new versionsEFS: Function could not mount the EFS file systemEFS: Function could not connect to the EFS file systemEFS: Function could not mount the EFS file system due to timeoutLambda: Lambda detected an IO process that was taking too longContainer: CodeArtifactUserException errorsContainer: InvalidEntrypoint errors @@ -46,0 +47,4 @@ For a list of error types that the `Invoke` operation can return, see [Invoke](h + * Container: CodeArtifactUserException errors + + * Container: InvalidEntrypoint errors + @@ -190,0 +195,24 @@ A previous invocation timed out and Lambda couldn't terminate the function handl +## Container: CodeArtifactUserException errors + +**Error:** _CodeArtifactUserPendingException error message_ + +The CodeArtifact is pending optimization. The function transitions to the [Active state](./functions-states.html) when Lambda completes the optimization. HTTP response code 409. + +**Error:** _CodeArtifactUserDeletedException error message_ + +The CodeArtifact is scheduled to be deleted. HTTP response code 409. + +**Error:** _CodeArtifactUserFailedException error message_ + +Lambda failed to optimize the code. You need to correct the code and upload it again. HTTP response code 409. + +## Container: InvalidEntrypoint errors + +**Error:** _Runtime.ExitError or "errorType": "Runtime.InvalidEntrypoint"_ + +Verify that the ENTRYPOINT to your container image includes the absolute path as the location. Also verify that the image does not contain a symlink as the ENTRYPOINT. + +**Error:** _You are using an AWS CloudFormation template, and your container ENTRYPOINT is being overridden with a null or empty value._ + +Review the [ImageConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-function-imageconfig.html) resource in the AWS CloudFormation template. If you declare an `ImageConfig` resource in your template, you must provide non-empty values for all three of the properties. +