AWS lambda documentation change
Summary
Simplified AWS CLI command syntax by consolidating `--zip-file`/`--source-kms-key-arn` and S3 parameters into a single `--code` parameter for Lambda function creation with encrypted deployment packages.
Security assessment
The change updates documentation syntax without altering security functionality. It continues to document encryption of deployment packages using KMS keys (a security feature), but there is no evidence of a security issue being addressed.
Diff
diff --git a/lambda/latest/dg/encrypt-zip-package.md b/lambda/latest/dg/encrypt-zip-package.md index d2617e5be..7a73e3451 100644 --- a//lambda/latest/dg/encrypt-zip-package.md +++ b//lambda/latest/dg/encrypt-zip-package.md @@ -165,3 +165 @@ In the following [create-function](https://awscli.amazonaws.com/v2/documentation - * `--zip-file`: Specifies the local path to the .zip deployment package. - - * `--source-kms-key-arn`: Specifies the customer managed key to encrypt the zipped version of the deployment package. + * `--code`: Specifies the local path to the .zip deployment package (`ZipFile`) and the customer managed key to encrypt it (`SourceKMSKeyArn`). @@ -180,2 +178 @@ In the following [create-function](https://awscli.amazonaws.com/v2/documentation - --zip-file fileb://myFunction.zip \ - --source-kms-key-arn arn:aws:kms:us-east-1:111122223333:key/key-id \ + --code ZipFile=fileb://myFunction.zip,SourceKMSKeyArn=arn:aws:kms:us-east-1:111122223333:key/key-id \ @@ -186,3 +183 @@ In the following [create-function](https://awscli.amazonaws.com/v2/documentation - * `--code`: Specifies the location of .zip file in an Amazon S3 bucket. You only need to use the `S3ObjectVersion` parameter for versioned objects. - - * `--source-kms-key-arn`: Specifies the customer managed key to encrypt the zipped version of the deployment package. + * `--code`: Specifies the location of the .zip file in an Amazon S3 bucket (`S3Bucket`, `S3Key`, `S3ObjectVersion`) and the customer managed key to encrypt it (`SourceKMSKeyArn`). @@ -200,2 +195 @@ In the following [create-function](https://awscli.amazonaws.com/v2/documentation - --code S3Bucket=amzn-s3-demo-bucket,S3Key=myFileName.zip,S3ObjectVersion=myObjectVersion \ - --source-kms-key-arn arn:aws:kms:us-east-1:111122223333:key/key-id \ + --code S3Bucket=amzn-s3-demo-bucket,S3Key=myFileName.zip,S3ObjectVersion=myObjectVersion,SourceKMSKeyArn=arn:aws:kms:us-east-1:111122223333:key/key-id \