AWS cli documentation change

Service: cli · 2026-07-10 · Documentation low

File: cli/latest/reference/lambda/update-function-configuration.md

Summary

Enhanced DurableConfig documentation to include KMSKeyArn parameter and updated syntax to support encryption of execution payloads

Security assessment

Expands security documentation by adding encryption configuration for durable functions using KMS keys. No evidence of patching a security vulnerability.

Diff

diff --git a/cli/latest/reference/lambda/update-function-configuration.md b/cli/latest/reference/lambda/update-function-configuration.md
index 75f93469d..a6ea97395 100644
--- a//cli/latest/reference/lambda/update-function-configuration.md
+++ b//cli/latest/reference/lambda/update-function-configuration.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »
@@ -766 +766,13 @@ JSON Syntax:
-> Configuration settings for durable functions. Allows updating execution timeout and retention period for functions with durability enabled.
+> Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html) , including execution timeout, retention period for execution history, and an optional ARN of the Key Management Service (KMS) customer managed key that is used to encrypt your durable execution’s payload data, including input, output, and error payloads.
+> 
+> KMSKeyArn -> (string)
+>
+>> The ARN of the Key Management Service (KMS) customer managed key that is used to encrypt your durable execution’s payload data, including input, output, and error payloads.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `10000`
+>>   * pattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()`
+>> 
+
@@ -793 +805 @@ Shorthand Syntax:
-    RetentionPeriodInDays=integer,ExecutionTimeout=integer
+    KMSKeyArn=string,RetentionPeriodInDays=integer,ExecutionTimeout=integer
@@ -799,0 +812 @@ JSON Syntax:
+      "KMSKeyArn": "string",
@@ -1803,0 +1817,12 @@ DurableConfig -> (structure)
+> 
+> KMSKeyArn -> (string)
+>
+>> The ARN of the Key Management Service (KMS) customer managed key that is used to encrypt your durable execution’s payload data, including input, output, and error payloads.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `10000`
+>>   * pattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()`
+>> 
+
@@ -1837 +1862 @@ DurableConfig -> (structure)
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »