AWS cli documentation change
Summary
Updated AWS CLI version reference, added new runtimes (Node.js 18.x-24.x, Java 17/21/25, Python 3.10-3.14, .NET 10), modified ARN patterns to include 'eusc-' region prefix, added constraints (min/max values and patterns) for multiple configuration fields including ReservedConcurrentExecutions, EphemeralStorage, VpcConfig, Layers, FileSystemConfigs, Signing fields, Architectures, and Tags. Added new error code 'ServiceQuotaExceededException' and moved 'DrainingDurableExecutions'. Added 'TenancyConfig' structure.
Security assessment
The changes primarily update validation patterns and constraints without indicating any specific security vulnerability. While new constraints (like min/max values) could prevent misconfigurations, there's no direct evidence of addressing a security weakness. The ARN pattern updates appear to support new region formats rather than fix security flaws.
Diff
diff --git a/cli/latest/reference/lambda/get-function.md b/cli/latest/reference/lambda/get-function.md index 767943ea3..59023b8ad 100644 --- a//cli/latest/reference/lambda/get-function.md +++ b//cli/latest/reference/lambda/get-function.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -113 +113 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -310 +310 @@ Configuration -> (structure) ->> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +>> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -322 +322 @@ Configuration -> (structure) ->> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +>> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -343,0 +344,4 @@ Configuration -> (structure) +>> * `nodejs18.x` +>> * `nodejs20.x` +>> * `nodejs22.x` +>> * `nodejs24.x` @@ -346,0 +351,3 @@ Configuration -> (structure) +>> * `java17` +>> * `java21` +>> * `java25` @@ -351,0 +359,5 @@ Configuration -> (structure) +>> * `python3.10` +>> * `python3.11` +>> * `python3.12` +>> * `python3.13` +>> * `python3.14` @@ -357,0 +370 @@ Configuration -> (structure) +>> * `dotnet10` @@ -362,5 +374,0 @@ Configuration -> (structure) ->> * `provided` ->> * `provided.al2` ->> * `nodejs18.x` ->> * `python3.10` ->> * `java17` @@ -370,11 +377,0 @@ Configuration -> (structure) ->> * `python3.11` ->> * `nodejs20.x` ->> * `provided.al2023` ->> * `python3.12` ->> * `java21` ->> * `python3.13` ->> * `nodejs22.x` ->> * `nodejs24.x` ->> * `python3.14` ->> * `java25` ->> * `dotnet10` @@ -381,0 +379,3 @@ Configuration -> (structure) +>> * `provided` +>> * `provided.al2` +>> * `provided.al2023` @@ -390,0 +391,2 @@ Configuration -> (structure) +>> * min: `0` +>> * max: `10000` @@ -428,0 +431 @@ Configuration -> (structure) +>> * max: `5400` @@ -445,0 +449,8 @@ Configuration -> (structure) +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `100` +>> * pattern: `.*` +>> + @@ -478,0 +490,8 @@ Configuration -> (structure) +>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `1024` +>>>> * pattern: `subnet-[0-9a-z]*` +>>>> + @@ -491,0 +511,8 @@ Configuration -> (structure) +>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `1024` +>>>> * pattern: `sg-[0-9a-zA-Z]*` +>>>> + @@ -510,0 +538,2 @@ Configuration -> (structure) +>>> * min: `0` +>>> * max: `10000` @@ -559,0 +589,2 @@ Configuration -> (structure) +>> * min: `0` +>> * max: `10000` @@ -587 +618 @@ Configuration -> (structure) ->> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` +>> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` @@ -610,2 +641,2 @@ Configuration -> (structure) ->>>> * max: `140` ->>>> * pattern: `arn:[a-zA-Z0-9-]+:lambda:[a-zA-Z0-9-]+:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+` +>>>> * max: `2048` +>>>> * pattern: `((arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+)|(arn:[a-zA-Z0-9-]+:lambda:::awslayer:[a-zA-Z0-9-_]+))` @@ -625 +656,3 @@ Configuration -> (structure) ->>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>>> * min: `0` +>>>> * max: `10000` +>>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -635 +668,3 @@ Configuration -> (structure) ->>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>>> * min: `0` +>>>> * max: `10000` +>>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -690 +725 @@ Configuration -> (structure) ->> * `DrainingDurableExecutions` +>> * `ServiceQuotaExceededException` @@ -703,0 +739 @@ Configuration -> (structure) +>> * `DrainingDurableExecutions` @@ -749,0 +786 @@ Configuration -> (structure) +>> * `ServiceQuotaExceededException` @@ -789 +826 @@ Configuration -> (structure) ->>>> * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` +>>>> * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` @@ -803,0 +841,24 @@ Configuration -> (structure) +> +> SigningProfileVersionArn -> (string) +> +>> The ARN of the signing profile version. +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `10000` +>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>> + +> +> SigningJobArn -> (string) +> +>> The ARN of the signing job. +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `10000` +>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>> + @@ -872,20 +932,0 @@ Configuration -> (structure) -> -> SigningProfileVersionArn -> (string) -> ->> The ARN of the signing profile version. ->> ->> Constraints: ->> ->> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` ->> - -> -> SigningJobArn -> (string) -> ->> The ARN of the signing job. ->> ->> Constraints: ->> ->> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` ->> - @@ -966 +1007 @@ Configuration -> (structure) ->>> * pattern: `arn:(aws[a-zA-Z-]*):lambda:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}::runtime:.+` +>>> * pattern: `arn:(aws[a-zA-Z-]*):lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}::runtime:.+` @@ -1034,0 +1076,14 @@ Configuration -> (structure) +> +> TenancyConfig -> (structure) +> +>> The function’s tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant. +>> +>> TenantIsolationMode -> (string) [required] +>> +>>> Tenant isolation mode allows for invocation to be sent to a corresponding execution environment dedicated to a specific tenant ID. +>>> +>>> Possible values: +>>> +>>> * `PER_TENANT` +>>> + @@ -1052 +1107 @@ Configuration -> (structure) ->>>> * pattern: `arn:aws[a-zA-Z-]*:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+` +>>>> * pattern: `arn:aws[a-zA-Z-]*:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+` @@ -1073,2 +1128,2 @@ Configuration -> (structure) ->>>> * min: `2.0` ->>>> * max: `8.0` +>>>> * min: `2` +>>>> * max: `8` @@ -1107,14 +1161,0 @@ Configuration -> (structure) -> -> TenancyConfig -> (structure) -> ->> The function’s tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant. ->> ->> TenantIsolationMode -> (string) [required]