AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-19 · Documentation medium

File: cli/latest/reference/lambda/list-functions.md

Summary

Updated AWS CLI version to 2.35.8; modified ARN patterns; added parameter constraints; updated runtime support; added TenancyConfig structure; reorganized existing content.

Security assessment

The TenancyConfig addition documents tenant isolation capabilities ('PER_TENANT' mode), a security feature enabling dedicated execution environments per tenant. However, no specific security vulnerability is addressed. Other changes include routine ARN pattern updates, new runtime versions, and parameter constraints.

Diff

diff --git a/cli/latest/reference/lambda/list-functions.md b/cli/latest/reference/lambda/list-functions.md
index 79dd3d1d1..4909145ca 100644
--- a//cli/latest/reference/lambda/list-functions.md
+++ b//cli/latest/reference/lambda/list-functions.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »
@@ -112 +112,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
->   * pattern: `ALL|[a-z]{2}(-gov)?-[a-z]+-\d{1}`
+>   * min: `1`
+>   * max: `50`
+>   * pattern: `ALL|(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}`
@@ -142,0 +145,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `10000`
+> 
+
@@ -378 +387 @@ Functions -> (list)
->>>   * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`
+>>>   * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`
@@ -390 +399 @@ Functions -> (list)
->>>   * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`
+>>>   * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`
@@ -411,0 +421,4 @@ Functions -> (list)
+>>>   * `nodejs18.x`
+>>>   * `nodejs20.x`
+>>>   * `nodejs22.x`
+>>>   * `nodejs24.x`
@@ -414,0 +428,3 @@ Functions -> (list)
+>>>   * `java17`
+>>>   * `java21`
+>>>   * `java25`
@@ -419,0 +436,5 @@ Functions -> (list)
+>>>   * `python3.10`
+>>>   * `python3.11`
+>>>   * `python3.12`
+>>>   * `python3.13`
+>>>   * `python3.14`
@@ -425,0 +447 @@ Functions -> (list)
+>>>   * `dotnet10`
@@ -430,5 +451,0 @@ Functions -> (list)
->>>   * `provided`
->>>   * `provided.al2`
->>>   * `nodejs18.x`
->>>   * `python3.10`
->>>   * `java17`
@@ -438,11 +454,0 @@ Functions -> (list)
->>>   * `python3.11`
->>>   * `nodejs20.x`
->>>   * `provided.al2023`
->>>   * `python3.12`
->>>   * `java21`
->>>   * `python3.13`
->>>   * `nodejs22.x`
->>>   * `nodejs24.x`
->>>   * `python3.14`
->>>   * `java25`
->>>   * `dotnet10`
@@ -449,0 +456,3 @@ Functions -> (list)
+>>>   * `provided`
+>>>   * `provided.al2`
+>>>   * `provided.al2023`
@@ -458,0 +468,2 @@ Functions -> (list)
+>>>   * min: `0`
+>>>   * max: `10000`
@@ -496,0 +508 @@ Functions -> (list)
+>>>   * max: `5400`
@@ -513,0 +526,8 @@ Functions -> (list)
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `100`
+>>>   * pattern: `.*`
+>>> 
+
@@ -546,0 +567,8 @@ Functions -> (list)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `1024`
+>>>>>   * pattern: `subnet-[0-9a-z]*`
+>>>>> 
+
@@ -559,0 +588,8 @@ Functions -> (list)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `1024`
+>>>>>   * pattern: `sg-[0-9a-zA-Z]*`
+>>>>> 
+
@@ -578,0 +615,2 @@ Functions -> (list)
+>>>>   * min: `0`
+>>>>   * max: `10000`
@@ -627,0 +666,2 @@ Functions -> (list)
+>>>   * min: `0`
+>>>   * max: `10000`
@@ -655 +695 @@ Functions -> (list)
->>>   * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?`
+>>>   * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?`
@@ -678,2 +718,2 @@ Functions -> (list)
->>>>>   * max: `140`
->>>>>   * pattern: `arn:[a-zA-Z0-9-]+:lambda:[a-zA-Z0-9-]+:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `((arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+)|(arn:[a-zA-Z0-9-]+:lambda:::awslayer:[a-zA-Z0-9-_]+))`
@@ -693 +733,3 @@ Functions -> (list)
->>>>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
+>>>>>   * min: `0`
+>>>>>   * max: `10000`
+>>>>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
@@ -703 +745,3 @@ Functions -> (list)
->>>>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
+>>>>>   * min: `0`
+>>>>>   * max: `10000`
+>>>>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
@@ -758 +802 @@ Functions -> (list)
->>>   * `DrainingDurableExecutions`
+>>>   * `ServiceQuotaExceededException`
@@ -771,0 +816 @@ Functions -> (list)
+>>>   * `DrainingDurableExecutions`
@@ -817,0 +863 @@ Functions -> (list)
+>>>   * `ServiceQuotaExceededException`
@@ -857 +903 @@ Functions -> (list)
->>>>>   * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}`
+>>>>>   * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}`
@@ -871,0 +918,24 @@ Functions -> (list)
+>> 
+>> SigningProfileVersionArn -> (string)
+>>
+>>> The ARN of the signing profile version.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `10000`
+>>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
+>>> 
+
+>> 
+>> SigningJobArn -> (string)
+>>
+>>> The ARN of the signing job.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `10000`
+>>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
+>>> 
+
@@ -940,20 +1009,0 @@ Functions -> (list)
->> 
->> SigningProfileVersionArn -> (string)
->>
->>> The ARN of the signing profile version.
->>> 
->>> Constraints:
->>> 
->>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
->>> 
-
->> 
->> SigningJobArn -> (string)
->>
->>> The ARN of the signing job.
->>> 
->>> Constraints:
->>> 
->>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
->>> 
-
@@ -1034 +1084 @@ Functions -> (list)
->>>>   * pattern: `arn:(aws[a-zA-Z-]*):lambda:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}::runtime:.+`
+>>>>   * pattern: `arn:(aws[a-zA-Z-]*):lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}::runtime:.+`
@@ -1102,0 +1153,14 @@ Functions -> (list)
+>> 
+>> TenancyConfig -> (structure)
+>>
+>>> The function’s tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant.
+>>> 
+>>> TenantIsolationMode -> (string) [required]
+>>>
+>>>> Tenant isolation mode allows for invocation to be sent to a corresponding execution environment dedicated to a specific tenant ID.
+>>>> 
+>>>> Possible values:
+>>>> 
+>>>>   * `PER_TENANT`
+>>>> 
+
@@ -1120 +1184 @@ Functions -> (list)
->>>>>   * pattern: `arn:aws[a-zA-Z-]*:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+`
+>>>>>   * pattern: `arn:aws[a-zA-Z-]*:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+`
@@ -1141,2 +1205,2 @@ Functions -> (list)
->>>>>   * min: `2.0`