AWS lambda documentation change
Summary
Added warning about Amazon SNS message size limits impacting async invocation records, corrected 'funcion' to 'function' typo, updated example message size from 256 KB to 1 MB
Security assessment
The changes address potential delivery failures due to payload size limitations but do not indicate a security vulnerability or weakness. The typo correction and example update are routine documentation improvements.
Diff
diff --git a/lambda/latest/dg/invocation-async-retain-records.md b/lambda/latest/dg/invocation-async-retain-records.md index c56d81b1d..490d55c17 100644 --- a//lambda/latest/dg/invocation-async-retain-records.md +++ b//lambda/latest/dg/invocation-async-retain-records.md @@ -69,0 +70,4 @@ For Amazon S3 destinations, if you have enabled encryption on the bucket using a +###### Important + +When using Amazon SNS as a destination, be aware that Amazon SNS has a maximum message size limit of 256 KB. If your async invocation payload approaches 1 MB, the invocation record (which includes the original payload plus additional metadata) may exceed the Amazon SNS limit and cause delivery failures. Consider using Amazon SQS or Amazon S3 destinations for larger payloads. + @@ -142 +146 @@ The following example shows an IAM policy that limits your function's `s3:PutObj -To add a permissions policy to your funcion's execution role using the AWS Management Console or AWS CLI, refer to the instructions in the following procedures: +To add a permissions policy to your function's execution role using the AWS Management Console or AWS CLI, refer to the instructions in the following procedures: @@ -288 +292 @@ Lambda sends the event to the dead-letter queue as-is, with additional informati -If Lambda can't send a message to the dead-letter queue, it deletes the event and emits the [DeadLetterErrors](./monitoring-metrics-types.html) metric. This can happen because of lack of permissions, or if the total size of the message exceeds the limit for the target queue or topic. For example, say that an Amazon SNS notification with a body close to 256 KB in size triggers a function that results in an error. In that case, the event data that Amazon SNS adds, combined with the attributes that Lambda adds, can cause the message to exceed the maximum size allowed in the dead-letter queue. +If Lambda can't send a message to the dead-letter queue, it deletes the event and emits the [DeadLetterErrors](./monitoring-metrics-types.html) metric. This can happen because of lack of permissions, or if the total size of the message exceeds the limit for the target queue or topic. For example, say that an Amazon SNS notification with a body close to 1 MB in size triggers a function that results in an error. In that case, the event data that Amazon SNS adds, combined with the attributes that Lambda adds, can cause the message to exceed the maximum size allowed in the dead-letter queue.