AWS cli documentation change
Summary
Updated AWS CLI version reference and made multiple changes to parameter constraints, patterns, and supported values. Key changes include: added new runtime versions (Node.js 22.x/24.x, Java 21/25, Python 3.13/3.14, .NET 10), added min/max constraints for various parameters (Role, MemorySize, Timeout, SubnetIds, SecurityGroupIds), modified ARN patterns to include 'eusc-' region prefix, increased layer ARN max length from 140 to 2048, added new state reason codes, introduced SigningProfileVersionArn/SigningJobArn fields with constraints, added TenancyConfig structure for tenant isolation, and updated CapacityProviderConfig constraints.
Security assessment
The changes primarily focus on adding new features (tenant isolation, signing profiles) and parameter validation constraints. The added TenancyConfig feature enables tenant isolation which improves security posture, but there's no evidence this change addresses a specific vulnerability. The new parameter constraints (min/max/patterns) help prevent misconfigurations but aren't tied to a known security flaw. The signing profile fields relate to code signing security features.
Diff
diff --git a/cli/latest/reference/lambda/update-function-configuration.md b/cli/latest/reference/lambda/update-function-configuration.md index ad6b9a452..865c78652 100644 --- a//cli/latest/reference/lambda/update-function-configuration.md +++ b//cli/latest/reference/lambda/update-function-configuration.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -138 +138 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?` @@ -147,0 +148,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda +> * min: `0` +> * max: `10000` @@ -181,0 +184 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda +> * max: `5400` @@ -211,0 +215,8 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `subnet-[0-9a-z]*` +>>> + @@ -224,0 +236,8 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `sg-[0-9a-zA-Z]*` +>>> + @@ -296,0 +316,4 @@ JSON Syntax: +> * `nodejs18.x` +> * `nodejs20.x` +> * `nodejs22.x` +> * `nodejs24.x` @@ -299,0 +323,3 @@ JSON Syntax: +> * `java17` +> * `java21` +> * `java25` @@ -304,0 +331,5 @@ JSON Syntax: +> * `python3.10` +> * `python3.11` +> * `python3.12` +> * `python3.13` +> * `python3.14` @@ -310,0 +342 @@ JSON Syntax: +> * `dotnet10` @@ -315,5 +346,0 @@ JSON Syntax: -> * `provided` -> * `provided.al2` -> * `nodejs18.x` -> * `python3.10` -> * `java17` @@ -323,11 +349,0 @@ JSON Syntax: -> * `python3.11` -> * `nodejs20.x` -> * `provided.al2023` -> * `python3.12` -> * `java21` -> * `python3.13` -> * `nodejs22.x` -> * `nodejs24.x` -> * `python3.14` -> * `java25` -> * `dotnet10` @@ -334,0 +351,3 @@ JSON Syntax: +> * `provided` +> * `provided.al2` +> * `provided.al2023` @@ -347,0 +367,2 @@ JSON Syntax: +>> * min: `0` +>> * max: `10000` @@ -380,0 +402,2 @@ JSON Syntax: +> * min: `0` +> * max: `10000` @@ -427,2 +450,2 @@ JSON Syntax: ->> * max: `140` ->> * pattern: `arn:[a-zA-Z0-9-]+:lambda:[a-zA-Z0-9-]+:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+` +>> * max: `2048` +>> * pattern: `((arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+)|(arn:[a-zA-Z0-9-]+:lambda:::awslayer:[a-zA-Z0-9-_]+))` @@ -461 +484 @@ Syntax: ->>> * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` +>>> * pattern: `arn:aws[a-zA-Z-]*:elasticfilesystem:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:access-point/fsap-[a-f0-9]{17}$|^arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` @@ -697 +720 @@ JSON Syntax: ->>> * pattern: `arn:aws[a-zA-Z-]*:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+` +>>> * pattern: `arn:aws[a-zA-Z-]*:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:capacity-provider:[a-zA-Z0-9-_]+` @@ -718,2 +741,2 @@ JSON Syntax: ->>> * min: `2.0` ->>> * max: `8.0` +>>> * min: `2` +>>> * max: `8` @@ -951 +974 @@ FunctionName -> (string) -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -963 +986 @@ FunctionArn -> (string) -> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_\.]+(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -984,0 +1008,4 @@ Runtime -> (string) +> * `nodejs18.x` +> * `nodejs20.x` +> * `nodejs22.x` +> * `nodejs24.x` @@ -987,0 +1015,3 @@ Runtime -> (string) +> * `java17` +> * `java21` +> * `java25` @@ -992,0 +1023,5 @@ Runtime -> (string) +> * `python3.10` +> * `python3.11` +> * `python3.12` +> * `python3.13` +> * `python3.14` @@ -998,0 +1034 @@ Runtime -> (string) +> * `dotnet10` @@ -1003,5 +1038,0 @@ Runtime -> (string) -> * `provided` -> * `provided.al2` -> * `nodejs18.x` -> * `python3.10` -> * `java17` @@ -1011,11 +1041,0 @@ Runtime -> (string) -> * `python3.11` -> * `nodejs20.x` -> * `provided.al2023` -> * `python3.12` -> * `java21` -> * `python3.13` -> * `nodejs22.x` -> * `nodejs24.x` -> * `python3.14` -> * `java25` -> * `dotnet10` @@ -1022,0 +1043,3 @@ Runtime -> (string) +> * `provided` +> * `provided.al2` +> * `provided.al2023` @@ -1031,0 +1055,2 @@ Role -> (string) +> * min: `0` +> * max: `10000` @@ -1069,0 +1095 @@ Timeout -> (integer) +> * max: `5400` @@ -1086,0 +1113,8 @@ LastModified -> (string) +> +> Constraints: +> +> * min: `0` +> * max: `100` +> * pattern: `.*` +> + @@ -1119,0 +1154,8 @@ VpcConfig -> (structure) +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `subnet-[0-9a-z]*` +>>> + @@ -1132,0 +1175,8 @@ VpcConfig -> (structure) +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `sg-[0-9a-zA-Z]*` +>>> + @@ -1151,0 +1202,2 @@ DeadLetterConfig -> (structure) +>> * min: `0` +>> * max: `10000` @@ -1200,0 +1253,2 @@ KMSKeyArn -> (string) +> * min: `0` +> * max: `10000` @@ -1228 +1282 @@ MasterArn -> (string) -> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` +> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` @@ -1251,2 +1305,2 @@ Layers -> (list) ->>> * max: `140` ->>> * pattern: `arn:[a-zA-Z0-9-]+:lambda:[a-zA-Z0-9-]+:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+` +>>> * max: `2048` +>>> * pattern: `((arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:layer:[a-zA-Z0-9-_]+:[0-9]+)|(arn:[a-zA-Z0-9-]+:lambda:::awslayer:[a-zA-Z0-9-_]+))` @@ -1266 +1320,3 @@ Layers -> (list) ->>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * min: `0` +>>> * max: `10000` +>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -1276 +1332,3 @@ Layers -> (list) ->>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * min: `0` +>>> * max: `10000` +>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -1331 +1389 @@ StateReasonCode -> (string) -> * `DrainingDurableExecutions` +> * `ServiceQuotaExceededException` @@ -1344,0 +1403 @@ StateReasonCode -> (string) +> * `DrainingDurableExecutions`