AWS Security ChangesHomeSearch

AWS iot documentation change

Service: iot · 2025-11-25 · Documentation low

File: iot/latest/developerguide/iot-rule-actions.md

Summary

Added billing note about external functions in error actions

Security assessment

The change provides cost information but does not address security vulnerabilities or describe security features.

Diff

diff --git a/iot/latest/developerguide/iot-rule-actions.md b/iot/latest/developerguide/iot-rule-actions.md
index 3255b4b1e..1f545070d 100644
--- a//iot/latest/developerguide/iot-rule-actions.md
+++ b//iot/latest/developerguide/iot-rule-actions.md
@@ -42,0 +43,2 @@ Rule action | Description | Name in API
+You can use any [function](./iot-sql-functions.html) or [substitution template](https://docs.aws.amazon.com//iot/latest/developerguide/iot-substitution-templates.html) in an error action's SQL statement including the external functions: [`aws_lambda()`](https://docs.aws.amazon.com//iot/latest/developerguide/iot-sql-functions.html#iot-func-aws-lambda), [`get_dynamodb()`](https://docs.aws.amazon.com//iot/latest/developerguide/iot-sql-functions.html#iot-sql-function-get-dynamodb), [`get_registry_data()`](https://docs.aws.amazon.com//iot/latest/developerguide/iot-sql-functions.html#iot-sql-function-get-registry_data), [`get_thing_shadow()`](https://docs.aws.amazon.com//iot/latest/developerguide/iot-sql-functions.html#iot-sql-function-get-thing-shadow), [`get_secret()`](https://docs.aws.amazon.com//iot/latest/developerguide/iot-sql-functions.html#iot-sql-function-get-secret), [`machinelearning_predict()`](https://docs.aws.amazon.com//iot/latest/developerguide/iot-sql-functions.html#iot-sql-function-machine-learning), and [`decode()`](https://docs.aws.amazon.com//iot/latest/developerguide/iot-sql-functions.html#iot-sql-decode-base64). If an error action requires to call an external function, then invoking the error action can result in additional bill for the external function.
+