AWS Security ChangesHomeSearch

AWS serverless-application-model documentation change

Service: serverless-application-model · 2025-11-22 · Documentation low

File: serverless-application-model/latest/developerguide/sam-property-function-msk.md

Summary

Added new configuration properties (BisectBatchOnFunctionError, FunctionResponseTypes, MaximumRecordAgeInSeconds, MaximumRetryAttempts) and increased maximum pollers from 20 to 2000

Security assessment

The changes add error handling configurations and scaling parameters for event processing. While MaximumRecordAgeInSeconds and MaximumRetryAttempts help manage processing failures, there's no evidence these address specific security vulnerabilities. The poller increase is a scalability improvement.

Diff

diff --git a/serverless-application-model/latest/developerguide/sam-property-function-msk.md b/serverless-application-model/latest/developerguide/sam-property-function-msk.md
index 521c6b3d9..3b27730b1 100644
--- a//serverless-application-model/latest/developerguide/sam-property-function-msk.md
+++ b//serverless-application-model/latest/developerguide/sam-property-function-msk.md
@@ -22,0 +23 @@ To declare this entity in your AWS SAM template, use the following syntax.
+      BisectBatchOnFunctionError: Boolean
@@ -26,0 +28 @@ To declare this entity in your AWS SAM template, use the following syntax.
+      FunctionResponseTypes: List
@@ -28,0 +31,2 @@ To declare this entity in your AWS SAM template, use the following syntax.
+      MaximumRecordAgeInSeconds: Integer
+      MaximumRetryAttempts: Integer
@@ -54,0 +59,11 @@ _CloudFormation compatibility_ : This property is passed directly to the `[Batch
+`BisectBatchOnFunctionError`
+    
+
+If the function returns an error, split the batch in two and retry.
+
+_Type_ : Boolean
+
+_Required_ : No
+
+_CloudFormation compatibility_ : This property is passed directly to the `[BisectBatchOnFunctionError](http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-bisectbatchonfunctionerror)` property of an `AWS::Lambda::EventSourceMapping` resource.
+
@@ -100,0 +116,13 @@ _CloudFormation compatibility_ : This property is passed directly to the `[Filte
+`FunctionResponseTypes`
+    
+
+A list of the response types currently applied to the event source mapping. For more information, see [Reporting batch item failures](https://docs.aws.amazon.com/lambda/latest/dg/kafka-retry-configurations.html) in the _AWS Lambda Developer Guide_.
+
+_Valid values_ : `ReportBatchItemFailures`
+
+_Type_ : List
+
+_Required_ : No
+
+_CloudFormation compatibility_ : This property is passed directly to the `[FunctionResponseTypes](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-functionresponsetypes)` property of an `AWS::Lambda::EventSourceMapping` resource.
+
@@ -122,0 +151,22 @@ _CloudFormation compatibility_ : This property is passed directly to the `[Maxim
+`MaximumRecordAgeInSeconds`
+    
+
+The maximum age of a record that Lambda sends to a function for processing.
+
+_Type_ : Integer
+
+_Required_ : No
+
+_CloudFormation compatibility_ : This property is passed directly to the `[MaximumRecordAgeInSeconds](http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-maximumrecordageinseconds)` property of an `AWS::Lambda::EventSourceMapping` resource.
+
+`MaximumRetryAttempts`
+    
+
+The maximum number of times to retry when the function returns an error.
+
+_Type_ : Integer
+
+_Required_ : No
+
+_CloudFormation compatibility_ : This property is passed directly to the `[MaximumRetryAttempts](http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html#cfn-lambda-eventsourcemapping-maximumretryattempts)` property of an `AWS::Lambda::EventSourceMapping` resource.
+
@@ -126 +176 @@ _CloudFormation compatibility_ : This property is passed directly to the `[Maxim
-Configuration to increase the amount of pollers used to compute event source mappings. This configuration allows for a minimum of 1 poller and a maximum of 20 pollers. For an example, refer to ProvisionedPollerConfig example.
+Configuration to increase the amount of pollers used to compute event source mappings. This configuration allows for a minimum of 1 poller and a maximum of 2000 pollers. For an example, refer to ProvisionedPollerConfig example.
@@ -128 +178 @@ Configuration to increase the amount of pollers used to compute event source map
-_Type_ : [ProvisionedPollerConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping)
+_Type_ : [ProvisionedPollerConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-provisionedpollerconfig)
@@ -334 +384 @@ The following example shows a complete setup including the required IAM role con
-      MaximumPollers: 20
+      MaximumPollers: 200