AWS lambda medium security documentation change
Summary
Updated runtime deprecation timelines, added Amazon Linux 2 EOL notice with security patch commitments, and announced future Amazon Linux 2023 runtimes for Java
Security assessment
The change explicitly states Amazon Linux 2 will receive critical/important security patches until deprecation dates, which directly addresses ongoing security maintenance. While not fixing a specific vulnerability, it documents security update policies for aging systems.
Diff
diff --git a/lambda/latest/dg/lambda-runtimes.md b/lambda/latest/dg/lambda-runtimes.md index 8b3fbc0c5..a41d6e542 100644 --- a//lambda/latest/dg/lambda-runtimes.md +++ b//lambda/latest/dg/lambda-runtimes.md @@ -26,0 +27,6 @@ The following table lists the supported Lambda runtimes and projected deprecatio +###### Important + +Amazon Linux 2 is scheduled for end of life on June 30, 2026. Lambda runtimes and container base images for Java 8 (AL2), Java 11, Java 17, Python 3.10, Python 3.11, and provided.al2 will continue to receive patches for [critical and selected important](https://alas.aws.amazon.com/faqs.html) Amazon Linux 2 security issues, in addition to language runtime patches, until the deprecation dates shown in the table below. + +We recommend customers upgrade to an Amazon Linux 2023-based runtime as soon as possible. For customers upgrading to Java 21 or Java 25, you can use [AWS Transform custom](https://docs.aws.amazon.com/transform/latest/userguide/custom.html) to assist with these upgrades. For customers unable to upgrade their Java version, we plan to release Amazon Linux 2023-based runtimes for Java 8, Java 11, and Java 17 before the end of Q2 2026. + @@ -31 +37 @@ Node.js 22 | `nodejs22.x` | Amazon Linux 2023 | Apr 30, 2027 | Jun 1, 2027 -Node.js 20 | `nodejs20.x` | Amazon Linux 2023 | Apr 30, 2026 | Jun 1, 2026 | Jul 1, 2026 +Node.js 20 | `nodejs20.x` | Amazon Linux 2023 | Apr 30, 2026 | Aug 31, 2026 | Sep 30, 2026 @@ -35,2 +41,2 @@ Python 3.12 | `python3.12` | Amazon Linux 2023 | Oct 31, 2028 | Nov 30, 202 -Python 3.11 | `python3.11` | Amazon Linux 2 | Jun 30, 2026 | Jul 31, 2026 | Aug 31, 2026 -Python 3.10 | `python3.10` | Amazon Linux 2 | Jun 30, 2026 | Jul 31, 2026 | Aug 31, 2026 +Python 3.11 | `python3.11` | Amazon Linux 2 | Jun 30, 2027 | Jul 31, 2027 | Aug 31, 2027 +Python 3.10 | `python3.10` | Amazon Linux 2 | Oct 31, 2026 | Nov 30, 2026 | Jan 15, 2027 @@ -39,3 +45,3 @@ Java 21 | `java21` | Amazon Linux 2023 | Jun 30, 2029 | Jul 31, 2029 | Au -Java 17 | `java17` | Amazon Linux 2 | Jun 30, 2026 | Jul 31, 2026 | Aug 31, 2026 -Java 11 | `java11` | Amazon Linux 2 | Jun 30, 2026 | Jul 31, 2026 | Aug 31, 2026 -Java 8 | `java8.al2` | Amazon Linux 2 | Jun 30, 2026 | Jul 31, 2026 | Aug 31, 2026 +Java 17 | `java17` | Amazon Linux 2 | Jun 30, 2027 | Jul 31, 2027 | Aug 31, 2027 +Java 11 | `java11` | Amazon Linux 2 | Jun 30, 2027 | Jul 31, 2027 | Aug 31, 2027 +Java 8 | `java8.al2` | Amazon Linux 2 | Jun 30, 2027 | Jul 31, 2027 | Aug 31, 2027 @@ -47 +53 @@ Ruby 3.3 | `ruby3.3` | Amazon Linux 2023 | Mar 31, 2027 | Apr 30, 2027 | -Ruby 3.2 | `ruby3.2` | Amazon Linux 2 | Mar 31, 2026 | Jun 1, 2026 | Jul 1, 2026 +Ruby 3.2 | `ruby3.2` | Amazon Linux 2 | Mar 31, 2026 | Aug 31, 2026 | Sep 30, 2026 @@ -49 +55 @@ OS-only Runtime | `provided.al2023` | Amazon Linux 2023 | Jun 30, 2029 | Ju -OS-only Runtime | `provided.al2` | Amazon Linux 2 | Jun 30, 2026 | Jul 31, 2026 | Aug 31, 2026 +OS-only Runtime | `provided.al2` | Amazon Linux 2 | Jul 31, 2026 | Aug 31, 2026 | Sep 30, 2026 @@ -87,0 +94,2 @@ The following list shows the target launch month for upcoming Lambda runtimes. T + * **Java 8, 11, and 17 on AL2023** \- Q2 2026 + @@ -197,5 +205,5 @@ Name | Identifier | Operating system | Deprecation date | Block function create -Python 3.9 | `python3.9` | Amazon Linux 2 | Dec 15, 2025 | Jun 1, 2026 | Jul 1, 2026 -Node.js 18 | `nodejs18.x` | Amazon Linux 2 | Sep 1, 2025 | Jun 1, 2026 | Jul 1, 2026 -.NET 6 | `dotnet6` | Amazon Linux 2 | Dec 20, 2024 | Jun 1, 2026 | Jul 1, 2026 -Python 3.8 | `python3.8` | Amazon Linux 2 | Oct 14, 2024 | Jun 1, 2026 | Jul 1, 2026 -Node.js 16 | `nodejs16.x` | Amazon Linux 2 | Jun 12, 2024 | Jun 1, 2026 | Jul 1, 2026 +Python 3.9 | `python3.9` | Amazon Linux 2 | Dec 15, 2025 | Aug 31, 2026 | Sep 30, 2026 +Node.js 18 | `nodejs18.x` | Amazon Linux 2 | Sep 1, 2025 | Aug 31, 2026 | Sep 30, 2026 +.NET 6 | `dotnet6` | Amazon Linux 2 | Dec 20, 2024 | Aug 31, 2026 | Sep 30, 2026 +Python 3.8 | `python3.8` | Amazon Linux 2 | Oct 14, 2024 | Aug 31, 2026 | Sep 30, 2026 +Node.js 16 | `nodejs16.x` | Amazon Linux 2 | Jun 12, 2024 | Aug 31, 2026 | Sep 30, 2026 @@ -203,6 +211,6 @@ Node.js 16 | `nodejs16.x` | Amazon Linux 2 | Jun 12, 2024 | Jun 1, 2026 | -Java 8 | `java8` | Amazon Linux | Jan 8, 2024 | Feb 8, 2024 | Jul 1, 2026 -Go 1.x | `go1.x` | Amazon Linux | Jan 8, 2024 | Feb 8, 2024 | Jul 1, 2026 -OS-only Runtime | `provided` | Amazon Linux | Jan 8, 2024 | Feb 8, 2024 | Jul 1, 2026 -Ruby 2.7 | `ruby2.7` | Amazon Linux 2 | Dec 7, 2023 | Jan 9, 2024 | Jul 1, 2026 -Node.js 14 | `nodejs14.x` | Amazon Linux 2 | Dec 4, 2023 | Jan 9, 2024 | Jul 1, 2026 -Python 3.7 | `python3.7` | Amazon Linux | Dec 4, 2023 | Jan 9, 2024 | Mar 9, 2026 +Java 8 | `java8` | Amazon Linux | Jan 8, 2024 | Feb 8, 2024 | Sep 30, 2026 +Go 1.x | `go1.x` | Amazon Linux | Jan 8, 2024 | Feb 8, 2024 | Sep 30, 2026 +OS-only Runtime | `provided` | Amazon Linux | Jan 8, 2024 | Feb 8, 2024 | Sep 30, 2026 +Ruby 2.7 | `ruby2.7` | Amazon Linux 2 | Dec 7, 2023 | Jan 9, 2024 | Sep 30, 2026 +Node.js 14 | `nodejs14.x` | Amazon Linux 2 | Dec 4, 2023 | Jan 9, 2024 | Sep 30, 2026 +Python 3.7 | `python3.7` | Amazon Linux | Dec 4, 2023 | Jan 9, 2024 | Sep 30, 2026