AWS cli medium security documentation change
Summary
Added new parameters (--kms-key-arn, --metrics-config, --logging-config, --scaling-config) for event source mapping encryption, monitoring, and scaling. Updated constraints, patterns, and documentation structure for various parameters including UUID validation, ARN patterns, and Kafka configurations.
Security assessment
Added KMS encryption for event filter criteria (--kms-key-arn) which directly addresses data security. Introduced logging configuration (--logging-config) with DEBUG/INFO/WARN levels for security monitoring. Added UUID length constraints (min:36, max:36) to prevent malformed identifiers. These changes enhance security controls and monitoring capabilities.
Diff
diff --git a/cli/latest/reference/lambda/update-event-source-mapping.md b/cli/latest/reference/lambda/update-event-source-mapping.md index 942229412..23f044429 100644 --- a//cli/latest/reference/lambda/update-event-source-mapping.md +++ b//cli/latest/reference/lambda/update-event-source-mapping.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -111,0 +112,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda + [--kms-key-arn <value>] + [--metrics-config <value>] + [--logging-config <value>] + [--scaling-config <value>] @@ -112,0 +117 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda + [--parallelization-factor <value>] @@ -117,2 +121,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda - [--parallelization-factor <value>] - [--source-access-configurations <value>] @@ -119,0 +123 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda + [--source-access-configurations <value>] @@ -121 +124,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda - [--scaling-config <value>] @@ -125,3 +127,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda - [--kms-key-arn <value>] - [--metrics-config <value>] - [--logging-config <value>] @@ -156,0 +157,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda +> +> Constraints: +> +> * min: `36` +> * max: `36` +> + @@ -177 +184 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -228 +235 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda ->>>> * pattern: `.*` +>>>> * pattern: `[\s\S]*` @@ -250,0 +258,118 @@ JSON Syntax: +`--kms-key-arn` (string) + +> The ARN of the Key Management Service (KMS) customer managed key that Lambda uses to encrypt your function’s [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics) . By default, Lambda does not encrypt your filter criteria object. Specify this property to encrypt data using your own customer managed key. +> +> Constraints: +> +> * min: `0` +> * max: `10000` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()` +> + + +`--metrics-config` (structure) + +> The metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics) . +> +> Metrics -> (list) +> +>> The metrics you want your event source mapping to produce, including `EventCount` , `ErrorCount` , `KafkaMetrics` . +>> +>> * `EventCount` to receive metrics related to the number of events processed by your event source mapping. +>> * `ErrorCount` (Amazon MSK and self-managed Apache Kafka) to receive metrics related to the number of errors in your event source mapping processing. +>> * `KafkaMetrics` (Amazon MSK and self-managed Apache Kafka) to receive metrics related to the Kafka consumers from your event source mapping. +>> + +>> +>> For more information about these metrics, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics) . +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `3` +>> + +>> +>> (string) +>> +>>> Possible values: +>>> +>>> * `EventCount` +>>> * `ErrorCount` +>>> * `KafkaMetrics` +>>> + + +Shorthand Syntax: + + + Metrics=string,string + + +JSON Syntax: + + + { + "Metrics": ["EventCount"|"ErrorCount"|"KafkaMetrics", ...] + } + + +`--logging-config` (structure) + +> (Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. Use this configuration object to define the level of logs for your event source mapping. +> +> SystemLogLevel -> (string) +> +>> The log level you want your event source mapping to use. Lambda event poller only sends system logs at the selected level of detail and lower, where `DEBUG` is the highest level and `WARN` is the lowest. For more information about these metrics, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html) . +>> +>> Possible values: +>> +>> * `DEBUG` +>> * `INFO` +>> * `WARN` +>> + + +Shorthand Syntax: + + + SystemLogLevel=string + + +JSON Syntax: + + + { + "SystemLogLevel": "DEBUG"|"INFO"|"WARN" + } + + +`--scaling-config` (structure) + +> (Amazon SQS only) The scaling configuration for the event source. For more information, see [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency) . +> +> MaximumConcurrency -> (integer) +> +>> Limits the number of concurrent instances that the Amazon SQS event source can invoke. +>> +>> Constraints: +>> +>> * min: `2` +>> * max: `1000` +>> + + +Shorthand Syntax: + + + MaximumConcurrency=integer + + +JSON Syntax: + + + { + "MaximumConcurrency": integer + } + + @@ -265,0 +391,11 @@ JSON Syntax: +`--parallelization-factor` (integer) + +> (Kinesis and DynamoDB Streams only) The number of batches to process from each shard concurrently. +> +> Constraints: +> +> * min: `1` +> * max: `10` +> + + @@ -286 +422 @@ JSON Syntax: ->>> * pattern: `$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * pattern: `$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -310 +446 @@ JSON Syntax: ->>> * pattern: `$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * pattern: `$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -359 +495 @@ JSON Syntax: -`--parallelization-factor` (integer) +`--tumbling-window-in-seconds` (integer) @@ -361 +497 @@ JSON Syntax: -> (Kinesis and DynamoDB Streams only) The number of batches to process from each shard concurrently. +> (Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window. @@ -365,2 +501,2 @@ JSON Syntax: -> * min: `1` -> * max: `10` +> * min: `0` +> * max: `900` @@ -377 +513 @@ JSON Syntax: -> * max: `22` +> * max: `23` @@ -444,11 +579,0 @@ JSON Syntax: -`--tumbling-window-in-seconds` (integer) - -> (Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window. -> -> Constraints: -> -> * min: `0` -> * max: `900` ->