AWS cli documentation change
Summary
Multiple updates including: CLI version references, ARN pattern expansions, new runtime versions, added parameter constraints, field relocations, and new tenant isolation configuration
Security assessment
Added 'TenancyConfig' with 'PER_TENANT' isolation mode enhances security documentation by describing infrastructure isolation for multi-tenant environments. Other changes are routine updates without security implications.
Diff
diff --git a/cli/latest/reference/lambda/get-function-configuration.md b/cli/latest/reference/lambda/get-function-configuration.md index 72ce2d6b6..6fa1d9616 100644 --- a//cli/latest/reference/lambda/get-function-configuration.md +++ b//cli/latest/reference/lambda/get-function-configuration.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -115 +115 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -299 +299 @@ FunctionName -> (string) -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -311 +311 @@ FunctionArn -> (string) -> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -332,0 +333,4 @@ Runtime -> (string) +> * `nodejs18.x` +> * `nodejs20.x` +> * `nodejs22.x` +> * `nodejs24.x` @@ -335,0 +340,3 @@ Runtime -> (string) +> * `java17` +> * `java21` +> * `java25` @@ -340,0 +348,5 @@ Runtime -> (string) +> * `python3.10` +> * `python3.11` +> * `python3.12` +> * `python3.13` +> * `python3.14` @@ -346,0 +359 @@ Runtime -> (string) +> * `dotnet10` @@ -351,5 +363,0 @@ Runtime -> (string) -> * `provided` -> * `provided.al2` -> * `nodejs18.x` -> * `python3.10` -> * `java17` @@ -359,11 +366,0 @@ Runtime -> (string) -> * `python3.11` -> * `nodejs20.x` -> * `provided.al2023` -> * `python3.12` -> * `java21` -> * `python3.13` -> * `nodejs22.x` -> * `nodejs24.x` -> * `python3.14` -> * `java25` -> * `dotnet10` @@ -370,0 +368,3 @@ Runtime -> (string) +> * `provided` +> * `provided.al2` +> * `provided.al2023` @@ -379,0 +380,2 @@ Role -> (string) +> * min: `0` +> * max: `10000` @@ -417,0 +420 @@ Timeout -> (integer) +> * max: `5400` @@ -434,0 +438,8 @@ LastModified -> (string) +> +> Constraints: +> +> * min: `0` +> * max: `100` +> * pattern: `.*` +> + @@ -467,0 +479,8 @@ VpcConfig -> (structure) +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `subnet-[0-9a-z]*` +>>> + @@ -480,0 +500,8 @@ VpcConfig -> (structure) +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `sg-[0-9a-zA-Z]*` +>>> + @@ -499,0 +527,2 @@ DeadLetterConfig -> (structure) +>> * min: `0` +>> * max: `10000` @@ -548,0 +578,2 @@ KMSKeyArn -> (string) +> * min: `0` +> * max: `10000` @@ -576 +607 @@ MasterArn -> (string) -> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` +> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` @@ -599,2 +630,2 @@ Layers -> (list) ->>> * max: `140` ->>> * pattern: `arn:[a-zA-Z0-9-]+:lambda:[a-zA-Z0-9-]+:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+` +>>> * max: `2048` +>>> * pattern: `((arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+)|(arn:[a-zA-Z0-9-]+:lambda:::awslayer:[a-zA-Z0-9-_]+))` @@ -614 +645,3 @@ Layers -> (list) ->>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * min: `0` +>>> * max: `10000` +>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -624 +657,3 @@ Layers -> (list) ->>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * min: `0` +>>> * max: `10000` +>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -679 +714 @@ StateReasonCode -> (string) -> * `DrainingDurableExecutions` +> * `ServiceQuotaExceededException` @@ -692,0 +728 @@ StateReasonCode -> (string) +> * `DrainingDurableExecutions` @@ -738,0 +775 @@ LastUpdateStatusReasonCode -> (string) +> * `ServiceQuotaExceededException` @@ -778 +815 @@ FileSystemConfigs -> (list) ->>> * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` +>>> * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` @@ -793,0 +831,24 @@ FileSystemConfigs -> (list) +SigningProfileVersionArn -> (string) + +> The ARN of the signing profile version. +> +> Constraints: +> +> * min: `0` +> * max: `10000` +> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +> + + +SigningJobArn -> (string) + +> The ARN of the signing job. +> +> Constraints: +> +> * min: `0` +> * max: `10000` +> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +> + + @@ -862,20 +922,0 @@ ImageConfigResponse -> (structure) -SigningProfileVersionArn -> (string) - -> The ARN of the signing profile version. -> -> Constraints: -> -> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` -> - - -SigningJobArn -> (string) - -> The ARN of the signing job. -> -> Constraints: -> -> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` -> - - @@ -955 +996 @@ RuntimeVersionConfig -> (structure) ->> * pattern: `arn:(aws[a-zA-Z-]*):lambda:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}::runtime:.+` +>> * pattern: `arn:(aws[a-zA-Z-]*):lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}::runtime:.+` @@ -1024,0 +1066,14 @@ LoggingConfig -> (structure) +TenancyConfig -> (structure) + +> The function’s tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant. +> +> TenantIsolationMode -> (string) [required] +> +>> Tenant isolation mode allows for invocation to be sent to a corresponding execution environment dedicated to a specific tenant ID. +>> +>> Possible values: +>> +>> * `PER_TENANT` +>> + + @@ -1041 +1096 @@ CapacityProviderConfig -> (structure) ->>> * pattern: `arn:aws[a-zA-Z-]*:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+` +>>> * pattern: `arn:aws[a-zA-Z-]*:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+` @@ -1062,2 +1117,2 @@ CapacityProviderConfig -> (structure) ->>> * min: `2.0` ->>> * max: `8.0` +>>> * min: `2` +>>> * max: `8` @@ -1097,14 +1151,0 @@ DurableConfig -> (structure) -TenancyConfig -> (structure) - -> The function’s tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant. -> -> TenantIsolationMode -> (string) [required] ->