AWS cli documentation change
Summary
Updated Lambda documentation including new runtime versions (Node.js 18.x-24.x, Java 17-25, Python 3.10-3.14, .NET 10), added parameter constraints (min/max values), modified ARN patterns to support 'eusc-' regions, reordered runtime options, added SigningProfileVersionArn/SigningJobArn fields with constraints, and added TenancyConfig for tenant isolation.
Security assessment
Adds documentation for code signing (SigningProfileVersionArn/SigningJobArn) and tenant isolation (TenancyConfig) which are security features, but no vulnerability fixes are indicated. Changes are feature enhancements and documentation improvements without evidence of patching security flaws.
Diff
diff --git a/cli/latest/reference/lambda/publish-version.md b/cli/latest/reference/lambda/publish-version.md index c6716f039..9fad80334 100644 --- a//cli/latest/reference/lambda/publish-version.md +++ b//cli/latest/reference/lambda/publish-version.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -120 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?` @@ -316 +316 @@ FunctionName -> (string) -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -328 +328 @@ FunctionArn -> (string) -> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -349,0 +350,4 @@ Runtime -> (string) +> * `nodejs18.x` +> * `nodejs20.x` +> * `nodejs22.x` +> * `nodejs24.x` @@ -352,0 +357,3 @@ Runtime -> (string) +> * `java17` +> * `java21` +> * `java25` @@ -357,0 +365,5 @@ Runtime -> (string) +> * `python3.10` +> * `python3.11` +> * `python3.12` +> * `python3.13` +> * `python3.14` @@ -363,0 +376 @@ Runtime -> (string) +> * `dotnet10` @@ -368,5 +380,0 @@ Runtime -> (string) -> * `provided` -> * `provided.al2` -> * `nodejs18.x` -> * `python3.10` -> * `java17` @@ -376,11 +383,0 @@ Runtime -> (string) -> * `python3.11` -> * `nodejs20.x` -> * `provided.al2023` -> * `python3.12` -> * `java21` -> * `python3.13` -> * `nodejs22.x` -> * `nodejs24.x` -> * `python3.14` -> * `java25` -> * `dotnet10` @@ -387,0 +385,3 @@ Runtime -> (string) +> * `provided` +> * `provided.al2` +> * `provided.al2023` @@ -396,0 +397,2 @@ Role -> (string) +> * min: `0` +> * max: `10000` @@ -434,0 +437 @@ Timeout -> (integer) +> * max: `5400` @@ -451,0 +455,8 @@ LastModified -> (string) +> +> Constraints: +> +> * min: `0` +> * max: `100` +> * pattern: `.*` +> + @@ -484,0 +496,8 @@ VpcConfig -> (structure) +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `subnet-[0-9a-z]*` +>>> + @@ -497,0 +517,8 @@ VpcConfig -> (structure) +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `sg-[0-9a-zA-Z]*` +>>> + @@ -516,0 +544,2 @@ DeadLetterConfig -> (structure) +>> * min: `0` +>> * max: `10000` @@ -565,0 +595,2 @@ KMSKeyArn -> (string) +> * min: `0` +> * max: `10000` @@ -593 +624 @@ MasterArn -> (string) -> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` +> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` @@ -616,2 +647,2 @@ Layers -> (list) ->>> * max: `140` ->>> * pattern: `arn:[a-zA-Z0-9-]+:lambda:[a-zA-Z0-9-]+:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+` +>>> * max: `2048` +>>> * pattern: `((arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+)|(arn:[a-zA-Z0-9-]+:lambda:::awslayer:[a-zA-Z0-9-_]+))` @@ -631 +662,3 @@ Layers -> (list) ->>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * min: `0` +>>> * max: `10000` +>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -641 +674,3 @@ Layers -> (list) ->>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * min: `0` +>>> * max: `10000` +>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -696 +731 @@ StateReasonCode -> (string) -> * `DrainingDurableExecutions` +> * `ServiceQuotaExceededException` @@ -709,0 +745 @@ StateReasonCode -> (string) +> * `DrainingDurableExecutions` @@ -755,0 +792 @@ LastUpdateStatusReasonCode -> (string) +> * `ServiceQuotaExceededException` @@ -795 +832 @@ FileSystemConfigs -> (list) ->>> * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` +>>> * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` @@ -810,0 +848,24 @@ FileSystemConfigs -> (list) +SigningProfileVersionArn -> (string) + +> The ARN of the signing profile version. +> +> Constraints: +> +> * min: `0` +> * max: `10000` +> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +> + + +SigningJobArn -> (string) + +> The ARN of the signing job. +> +> Constraints: +> +> * min: `0` +> * max: `10000` +> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +> + + @@ -879,20 +939,0 @@ ImageConfigResponse -> (structure) -SigningProfileVersionArn -> (string) - -> The ARN of the signing profile version. -> -> Constraints: -> -> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` -> - - -SigningJobArn -> (string) - -> The ARN of the signing job. -> -> Constraints: -> -> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` -> - - @@ -972 +1013 @@ RuntimeVersionConfig -> (structure) ->> * pattern: `arn:(aws[a-zA-Z-]*):lambda:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}::runtime:.+` +>> * pattern: `arn:(aws[a-zA-Z-]*):lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}::runtime:.+` @@ -1041,0 +1083,14 @@ LoggingConfig -> (structure) +TenancyConfig -> (structure) + +> The function’s tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant. +> +> TenantIsolationMode -> (string) [required] +> +>> Tenant isolation mode allows for invocation to be sent to a corresponding execution environment dedicated to a specific tenant ID. +>> +>> Possible values: +>> +>> * `PER_TENANT` +>> + + @@ -1058 +1113 @@ CapacityProviderConfig -> (structure) ->>> * pattern: `arn:aws[a-zA-Z-]*:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+` +>>> * pattern: `arn:aws[a-zA-Z-]*:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+` @@ -1079,2 +1134,2 @@ CapacityProviderConfig -> (structure) ->>> * min: `2.0` ->>> * max: `8.0` +>>> * min: `2` +>>> * max: `8` @@ -1114,14 +1168,0 @@ DurableConfig -> (structure) -TenancyConfig -> (structure) - -> The function’s tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant. -> -> TenantIsolationMode -> (string) [required] ->