aws-sdk-lambda 1.125.0 → 1.127.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 40b3d33f4b2e56b8fc0b9c01478b440fe801d4acc908d2fd95a530436c4dfba7
-  data.tar.gz: 8e7edf24478d2fc571bb9aae8a37ceea0e06caf355ca05aac662a2b4d4c788d2
+  metadata.gz: 275f1ef6c8d9f4e06be88fb52926b5aa8b24edabfefb35cb7981eaa5b587c1d2
+  data.tar.gz: 06a6aaef69c392106354e7b8afd6715c49abcca48ccdd21e67232da5dc2245ad
 SHA512:
-  metadata.gz: 87b0c01799c406f08a9f86ed387a71e19bf11966f2a4d3f2c4f863523df10f90700b170fd5167471d40004015e43e6a3f6c2a6d5d994c60f3b9faaf7701319af
-  data.tar.gz: f889aa647a68fa2feb2b8baf6838db582a8b5f299585c4e8574bfeb5e4f267a340bd9eb36c799a250ecf87cb58760b6064af1abcdff4c7857291f1bbcc812535
+  metadata.gz: a1052b31f40d459ae4a9a93a97b451663e7c91d94cda950c2cadb1e2c632f92484fc84ab539700a94f40104e26dba21672e47e49a133de0f2e674822a1148f02
+  data.tar.gz: 4e46210809f415c05108bdc475960d61457610d66e3ca883bb296f00c609d1ddef513bda99f74fdfcceb9a9d0cba6aa9e5e766cc5b3c468432ce89fa34acc054

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.127.0 (2024-08-21)
+------------------
+
+* Feature - Release FilterCriteria encryption for Lambda EventSourceMapping,  enabling customers to encrypt their filter criteria using a customer-owned KMS key.
+
+1.126.0 (2024-08-19)
+------------------
+
+* Feature - Release Lambda FunctionRecursiveConfig, enabling customers to turn recursive loop detection on or off on individual functions. This release adds two new APIs, GetFunctionRecursionConfig and PutFunctionRecursionConfig.
+
 1.125.0 (2024-07-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.125.0
+1.127.0

data/lib/aws-sdk-lambda/client.rb

@@ -509,24 +509,24 @@ module Aws::Lambda
       req.send_request(options)
     end
 
-    # Grants an Amazon Web Service, Amazon Web Services account, or Amazon
-    # Web Services organization permission to use a function. You can apply
-    # the policy at the function level, or specify a qualifier to restrict
-    # access to a single version or alias. If you use a qualifier, the
-    # invoker must use the full Amazon Resource Name (ARN) of that version
-    # or alias to invoke the function. Note: Lambda does not support adding
-    # policies to version $LATEST.
+    # Grants an Amazon Web Servicesservice, Amazon Web Services account, or
+    # Amazon Web Services organization permission to use a function. You can
+    # apply the policy at the function level, or specify a qualifier to
+    # restrict access to a single version or alias. If you use a qualifier,
+    # the invoker must use the full Amazon Resource Name (ARN) of that
+    # version or alias to invoke the function. Note: Lambda does not support
+    # adding policies to version $LATEST.
     #
     # To grant permission to another account, specify the account ID as the
     # `Principal`. To grant permission to an organization defined in
     # Organizations, specify the organization ID as the `PrincipalOrgID`.
-    # For Amazon Web Services, the principal is a domain-style identifier
-    # that the service defines, such as `s3.amazonaws.com` or
-    # `sns.amazonaws.com`. For Amazon Web Services, you can also specify the
-    # ARN of the associated resource as the `SourceArn`. If you grant
-    # permission to a service principal without specifying the source, other
-    # accounts could potentially configure resources in their account to
-    # invoke your Lambda function.
+    # For Amazon Web Servicesservices, the principal is a domain-style
+    # identifier that the service defines, such as `s3.amazonaws.com` or
+    # `sns.amazonaws.com`. For Amazon Web Servicesservices, you can also
+    # specify the ARN of the associated resource as the `SourceArn`. If you
+    # grant permission to a service principal without specifying the source,
+    # other accounts could potentially configure resources in their account
+    # to invoke your Lambda function.
     #
     # This operation adds a statement to a resource-based permissions policy
     # for the function. For more information about function policies, see
@@ -562,23 +562,25 @@ module Aws::Lambda
     #   `lambda:InvokeFunction` or `lambda:GetFunction`.
     #
     # @option params [required, String] :principal
-    #   The Amazon Web Service or Amazon Web Services account that invokes the
-    #   function. If you specify a service, use `SourceArn` or `SourceAccount`
-    #   to limit who can invoke the function through that service.
+    #   The Amazon Web Servicesservice or Amazon Web Services account that
+    #   invokes the function. If you specify a service, use `SourceArn` or
+    #   `SourceAccount` to limit who can invoke the function through that
+    #   service.
     #
     # @option params [String] :source_arn
-    #   For Amazon Web Services, the ARN of the Amazon Web Services resource
-    #   that invokes the function. For example, an Amazon S3 bucket or Amazon
-    #   SNS topic.
+    #   For Amazon Web Servicesservices, the ARN of the Amazon Web Services
+    #   resource that invokes the function. For example, an Amazon S3 bucket
+    #   or Amazon SNS topic.
     #
     #   Note that Lambda configures the comparison using the `StringLike`
     #   operator.
     #
     # @option params [String] :source_account
-    #   For Amazon Web Service, the ID of the Amazon Web Services account that
-    #   owns the resource. Use this together with `SourceArn` to ensure that
-    #   the specified account owns the resource. It is possible for an Amazon
-    #   S3 bucket to be deleted by its owner and recreated by another account.
+    #   For Amazon Web Servicesservice, the ID of the Amazon Web Services
+    #   account that owns the resource. Use this together with `SourceArn` to
+    #   ensure that the specified account owns the resource. It is possible
+    #   for an Amazon S3 bucket to be deleted by its owner and recreated by
+    #   another account.
     #
     # @option params [String] :event_source_token
     #   For Alexa Smart Home functions, a token that the invoker must supply.
@@ -937,16 +939,17 @@ module Aws::Lambda
     #   `MaximumBatchingWindowInSeconds` to any value from 0 seconds to 300
     #   seconds in increments of seconds.
     #
-    #   For streams and Amazon SQS event sources, the default batching window
-    #   is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ,
-    #   and DocumentDB event sources, the default batching window is 500 ms.
-    #   Note that because you can only change `MaximumBatchingWindowInSeconds`
-    #   in increments of seconds, you cannot revert back to the 500 ms default
-    #   batching window after you have changed it. To restore the default
-    #   batching window, you must create a new event source mapping.
-    #
-    #   Related setting: For streams and Amazon SQS event sources, when you
-    #   set `BatchSize` to a value greater than 10, you must set
+    #   For Kinesis, DynamoDB, and Amazon SQS event sources, the default
+    #   batching window is 0 seconds. For Amazon MSK, Self-managed Apache
+    #   Kafka, Amazon MQ, and DocumentDB event sources, the default batching
+    #   window is 500 ms. Note that because you can only change
+    #   `MaximumBatchingWindowInSeconds` in increments of seconds, you cannot
+    #   revert back to the 500 ms default batching window after you have
+    #   changed it. To restore the default batching window, you must create a
+    #   new event source mapping.
+    #
+    #   Related setting: For Kinesis, DynamoDB, and Amazon SQS event sources,
+    #   when you set `BatchSize` to a value greater than 10, you must set
     #   `MaximumBatchingWindowInSeconds` to at least 1.
     #
     # @option params [Integer] :parallelization_factor
@@ -1024,6 +1027,16 @@ module Aws::Lambda
     # @option params [Types::DocumentDBEventSourceConfig] :document_db_event_source_config
     #   Specific configuration settings for a DocumentDB event source.
     #
+    # @option params [String] :kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key that
+    #   Lambda uses to encrypt your function's [filter criteria][1]. By
+    #   default, Lambda does not encrypt your filter criteria object. Specify
+    #   this property to encrypt data using your own customer managed key.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
+    #
     # @return [Types::EventSourceMappingConfiguration] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::EventSourceMappingConfiguration#uuid #uuid} => String
@@ -1053,6 +1066,8 @@ module Aws::Lambda
     #   * {Types::EventSourceMappingConfiguration#self_managed_kafka_event_source_config #self_managed_kafka_event_source_config} => Types::SelfManagedKafkaEventSourceConfig
     #   * {Types::EventSourceMappingConfiguration#scaling_config #scaling_config} => Types::ScalingConfig
     #   * {Types::EventSourceMappingConfiguration#document_db_event_source_config #document_db_event_source_config} => Types::DocumentDBEventSourceConfig
+    #   * {Types::EventSourceMappingConfiguration#kms_key_arn #kms_key_arn} => String
+    #   * {Types::EventSourceMappingConfiguration#filter_criteria_error #filter_criteria_error} => Types::FilterCriteriaError
     #
     # @example Request syntax with placeholder values
     #
@@ -1112,6 +1127,7 @@ module Aws::Lambda
     #       collection_name: "CollectionName",
     #       full_document: "UpdateLookup", # accepts UpdateLookup, Default
     #     },
+    #     kms_key_arn: "KMSKeyArn",
     #   })
     #
     # @example Response structure
@@ -1154,6 +1170,9 @@ module Aws::Lambda
     #   resp.document_db_event_source_config.database_name #=> String
     #   resp.document_db_event_source_config.collection_name #=> String
     #   resp.document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.kms_key_arn #=> String
+    #   resp.filter_criteria_error.error_code #=> String
+    #   resp.filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/CreateEventSourceMapping AWS API Documentation
     #
@@ -1168,8 +1187,8 @@ module Aws::Lambda
     # [deployment package][1] and an [execution role][2]. The deployment
     # package is a .zip file archive or container image that contains your
     # function code. The execution role grants the function permission to
-    # use Amazon Web Services, such as Amazon CloudWatch Logs for log
-    # streaming and X-Ray for request tracing.
+    # use Amazon Web Servicesservices, such as Amazon CloudWatch Logs for
+    # log streaming and X-Ray for request tracing.
     #
     # If the deployment package is a [container image][3], then you set the
     # package type to `Image`. For a container image, the code property must
@@ -1215,17 +1234,17 @@ module Aws::Lambda
     # configuration includes set of signing profiles, which define the
     # trusted publishers for this function.
     #
-    # If another Amazon Web Services account or an Amazon Web Service
-    # invokes your function, use AddPermission to grant permission by
-    # creating a resource-based Identity and Access Management (IAM) policy.
-    # You can grant permissions at the function level, on a version, or on
-    # an alias.
+    # If another Amazon Web Services account or an Amazon Web
+    # Servicesservice invokes your function, use AddPermission to grant
+    # permission by creating a resource-based Identity and Access Management
+    # (IAM) policy. You can grant permissions at the function level, on a
+    # version, or on an alias.
     #
     # To invoke your function directly, use Invoke. To invoke your function
-    # in response to events in other Amazon Web Services, create an event
-    # source mapping (CreateEventSourceMapping), or configure a function
-    # trigger in the other service. For more information, see [Invoking
-    # Lambda functions][6].
+    # in response to events in other Amazon Web Servicesservices, create an
+    # event source mapping (CreateEventSourceMapping), or configure a
+    # function trigger in the other service. For more information, see
+    # [Invoking Lambda functions][6].
     #
     #
     #
@@ -1252,16 +1271,24 @@ module Aws::Lambda
     #   only the function name, it is limited to 64 characters in length.
     #
     # @option params [String] :runtime
-    #   The identifier of the function's [runtime][1]. Runtime is required if
-    #   the deployment package is a .zip file archive.
+    #   The identifier of the function's [ runtime][1]. Runtime is required
+    #   if the deployment package is a .zip file archive. Specifying a runtime
+    #   results in an error if you're deploying a function using a container
+    #   image.
     #
-    #   The following list includes deprecated runtimes. For more information,
-    #   see [Runtime deprecation policy][2].
+    #   The following list includes deprecated runtimes. Lambda blocks
+    #   creating new functions and updating existing functions shortly after
+    #   each runtime is deprecated. For more information, see [Runtime use
+    #   after deprecation][2].
+    #
+    #   For a list of all currently supported runtimes, see [Supported
+    #   runtimes][3].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html
-    #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy
+    #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-deprecation-levels
+    #   [3]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-supported
     #
     # @option params [required, String] :role
     #   The Amazon Resource Name (ARN) of the function's execution role.
@@ -1814,6 +1841,8 @@ module Aws::Lambda
     #   * {Types::EventSourceMappingConfiguration#self_managed_kafka_event_source_config #self_managed_kafka_event_source_config} => Types::SelfManagedKafkaEventSourceConfig
     #   * {Types::EventSourceMappingConfiguration#scaling_config #scaling_config} => Types::ScalingConfig
     #   * {Types::EventSourceMappingConfiguration#document_db_event_source_config #document_db_event_source_config} => Types::DocumentDBEventSourceConfig
+    #   * {Types::EventSourceMappingConfiguration#kms_key_arn #kms_key_arn} => String
+    #   * {Types::EventSourceMappingConfiguration#filter_criteria_error #filter_criteria_error} => Types::FilterCriteriaError
     #
     # @example Request syntax with placeholder values
     #
@@ -1861,6 +1890,9 @@ module Aws::Lambda
     #   resp.document_db_event_source_config.database_name #=> String
     #   resp.document_db_event_source_config.collection_name #=> String
     #   resp.document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.kms_key_arn #=> String
+    #   resp.filter_criteria_error.error_code #=> String
+    #   resp.filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/DeleteEventSourceMapping AWS API Documentation
     #
@@ -1877,9 +1909,9 @@ module Aws::Lambda
     # for DeleteAlias.
     #
     # To delete Lambda event source mappings that invoke a function, use
-    # DeleteEventSourceMapping. For Amazon Web Services and resources that
-    # invoke your function directly, delete the trigger in the service where
-    # you originally configured it.
+    # DeleteEventSourceMapping. For Amazon Web Servicesservices and
+    # resources that invoke your function directly, delete the trigger in
+    # the service where you originally configured it.
     #
     # @option params [required, String] :function_name
     #   The name or ARN of the Lambda function or version.
@@ -2301,6 +2333,8 @@ module Aws::Lambda
     #   * {Types::EventSourceMappingConfiguration#self_managed_kafka_event_source_config #self_managed_kafka_event_source_config} => Types::SelfManagedKafkaEventSourceConfig
     #   * {Types::EventSourceMappingConfiguration#scaling_config #scaling_config} => Types::ScalingConfig
     #   * {Types::EventSourceMappingConfiguration#document_db_event_source_config #document_db_event_source_config} => Types::DocumentDBEventSourceConfig
+    #   * {Types::EventSourceMappingConfiguration#kms_key_arn #kms_key_arn} => String
+    #   * {Types::EventSourceMappingConfiguration#filter_criteria_error #filter_criteria_error} => Types::FilterCriteriaError
     #
     # @example Request syntax with placeholder values
     #
@@ -2348,6 +2382,9 @@ module Aws::Lambda
     #   resp.document_db_event_source_config.database_name #=> String
     #   resp.document_db_event_source_config.collection_name #=> String
     #   resp.document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.kms_key_arn #=> String
+    #   resp.filter_criteria_error.error_code #=> String
+    #   resp.filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/GetEventSourceMapping AWS API Documentation
     #
@@ -2786,6 +2823,37 @@ module Aws::Lambda
       req.send_request(options)
     end
 
+    # Returns your function's [recursive loop detection][1] configuration.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-recursion.html
+    #
+    # @option params [required, String] :function_name
+    #
+    # @return [Types::GetFunctionRecursionConfigResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetFunctionRecursionConfigResponse#recursive_loop #recursive_loop} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_function_recursion_config({
+    #     function_name: "UnqualifiedFunctionName", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.recursive_loop #=> String, one of "Allow", "Terminate"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/GetFunctionRecursionConfig AWS API Documentation
+    #
+    # @overload get_function_recursion_config(params = {})
+    # @param [Hash] params ({})
+    def get_function_recursion_config(params = {}, options = {})
+      req = build_request(:get_function_recursion_config, params)
+      req.send_request(options)
+    end
+
     # Returns details about a Lambda function URL.
     #
     # @option params [required, String] :function_name
@@ -3809,6 +3877,9 @@ module Aws::Lambda
     #   resp.event_source_mappings[0].document_db_event_source_config.database_name #=> String
     #   resp.event_source_mappings[0].document_db_event_source_config.collection_name #=> String
     #   resp.event_source_mappings[0].document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.event_source_mappings[0].kms_key_arn #=> String
+    #   resp.event_source_mappings[0].filter_criteria_error.error_code #=> String
+    #   resp.event_source_mappings[0].filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/ListEventSourceMappings AWS API Documentation
     #
@@ -4136,14 +4207,18 @@ module Aws::Lambda
     # [2]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html
     #
     # @option params [String] :compatible_runtime
-    #   A runtime identifier. For example, `java21`.
+    #   A runtime identifier.
     #
     #   The following list includes deprecated runtimes. For more information,
-    #   see [Runtime deprecation policy][1].
+    #   see [Runtime use after deprecation][1].
     #
+    #   For a list of all currently supported runtimes, see [Supported
+    #   runtimes][2].
     #
     #
-    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-deprecation-levels
+    #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-supported
     #
     # @option params [required, String] :layer_name
     #   The name or Amazon Resource Name (ARN) of the layer.
@@ -4214,14 +4289,18 @@ module Aws::Lambda
     # [3]: https://docs.aws.amazon.com/lambda/latest/dg/foundation-arch.html
     #
     # @option params [String] :compatible_runtime
-    #   A runtime identifier. For example, `java21`.
+    #   A runtime identifier.
     #
     #   The following list includes deprecated runtimes. For more information,
-    #   see [Runtime deprecation policy][1].
+    #   see [Runtime use after deprecation][1].
+    #
+    #   For a list of all currently supported runtimes, see [Supported
+    #   runtimes][2].
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-deprecation-levels
+    #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-supported
     #
     # @option params [String] :marker
     #   A pagination token returned by a previous call.
@@ -4993,6 +5072,91 @@ module Aws::Lambda
       req.send_request(options)
     end
 
+    # Sets your function's [recursive loop detection][1] configuration.
+    #
+    # When you configure a Lambda function to output to the same service or
+    # resource that invokes the function, it's possible to create an
+    # infinite recursive loop. For example, a Lambda function might write a
+    # message to an Amazon Simple Queue Service (Amazon SQS) queue, which
+    # then invokes the same function. This invocation causes the function to
+    # write another message to the queue, which in turn invokes the function
+    # again.
+    #
+    # Lambda can detect certain types of recursive loops shortly after they
+    # occur. When Lambda detects a recursive loop and your function's
+    # recursive loop detection configuration is set to `Terminate`, it stops
+    # your function being invoked and notifies you.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-recursion.html
+    #
+    # @option params [required, String] :function_name
+    #   The name or ARN of the Lambda function.
+    #
+    #   **Name formats**
+    #
+    #   * **Function name** – `my-function`.
+    #
+    #   * **Function ARN** –
+    #     `arn:aws:lambda:us-west-2:123456789012:function:my-function`.
+    #
+    #   * **Partial ARN** – `123456789012:function:my-function`.
+    #
+    #   The length constraint applies only to the full ARN. If you specify
+    #   only the function name, it is limited to 64 characters in length.
+    #
+    # @option params [required, String] :recursive_loop
+    #   If you set your function's recursive loop detection configuration to
+    #   `Allow`, Lambda doesn't take any action when it detects your function
+    #   being invoked as part of a recursive loop. We recommend that you only
+    #   use this setting if your design intentionally uses a Lambda function
+    #   to write data back to the same Amazon Web Services resource that
+    #   invokes it.
+    #
+    #   If you set your function's recursive loop detection configuration to
+    #   `Terminate`, Lambda stops your function being invoked and notifies you
+    #   when it detects your function being invoked as part of a recursive
+    #   loop.
+    #
+    #   By default, Lambda sets your function's configuration to `Terminate`.
+    #
+    #   If your design intentionally uses a Lambda function to write data back
+    #   to the same Amazon Web Services resource that invokes the function,
+    #   then use caution and implement suitable guard rails to prevent
+    #   unexpected charges being billed to your Amazon Web Services account.
+    #   To learn more about best practices for using recursive invocation
+    #   patterns, see [Recursive patterns that cause run-away Lambda
+    #   functions][1] in Serverless Land.
+    #
+    #
+    #
+    #   [1]: https://serverlessland.com/content/service/lambda/guides/aws-lambda-operator-guide/recursive-runaway
+    #
+    # @return [Types::PutFunctionRecursionConfigResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::PutFunctionRecursionConfigResponse#recursive_loop #recursive_loop} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_function_recursion_config({
+    #     function_name: "UnqualifiedFunctionName", # required
+    #     recursive_loop: "Allow", # required, accepts Allow, Terminate
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.recursive_loop #=> String, one of "Allow", "Terminate"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/PutFunctionRecursionConfig AWS API Documentation
+    #
+    # @overload put_function_recursion_config(params = {})
+    # @param [Hash] params ({})
+    def put_function_recursion_config(params = {}, options = {})
+      req = build_request(:put_function_recursion_config, params)
+      req.send_request(options)
+    end
+
     # Adds a provisioned concurrency configuration to a function's alias or
     # version.
     #
@@ -5188,9 +5352,9 @@ module Aws::Lambda
       req.send_request(options)
     end
 
-    # Revokes function-use permission from an Amazon Web Service or another
-    # Amazon Web Services account. You can get the ID of the statement from
-    # the output of GetPolicy.
+    # Revokes function-use permission from an Amazon Web Servicesservice or
+    # another Amazon Web Services account. You can get the ID of the
+    # statement from the output of GetPolicy.
     #
     # @option params [required, String] :function_name
     #   The name or ARN of the Lambda function, version, or alias.
@@ -5579,16 +5743,17 @@ module Aws::Lambda
     #   `MaximumBatchingWindowInSeconds` to any value from 0 seconds to 300
     #   seconds in increments of seconds.
     #
-    #   For streams and Amazon SQS event sources, the default batching window
-    #   is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ,
-    #   and DocumentDB event sources, the default batching window is 500 ms.
-    #   Note that because you can only change `MaximumBatchingWindowInSeconds`
-    #   in increments of seconds, you cannot revert back to the 500 ms default
-    #   batching window after you have changed it. To restore the default
-    #   batching window, you must create a new event source mapping.
-    #
-    #   Related setting: For streams and Amazon SQS event sources, when you
-    #   set `BatchSize` to a value greater than 10, you must set
+    #   For Kinesis, DynamoDB, and Amazon SQS event sources, the default
+    #   batching window is 0 seconds. For Amazon MSK, Self-managed Apache
+    #   Kafka, Amazon MQ, and DocumentDB event sources, the default batching
+    #   window is 500 ms. Note that because you can only change
+    #   `MaximumBatchingWindowInSeconds` in increments of seconds, you cannot
+    #   revert back to the 500 ms default batching window after you have
+    #   changed it. To restore the default batching window, you must create a
+    #   new event source mapping.
+    #
+    #   Related setting: For Kinesis, DynamoDB, and Amazon SQS event sources,
+    #   when you set `BatchSize` to a value greater than 10, you must set
     #   `MaximumBatchingWindowInSeconds` to at least 1.
     #
     # @option params [Types::DestinationConfig] :destination_config
@@ -5639,6 +5804,16 @@ module Aws::Lambda
     # @option params [Types::DocumentDBEventSourceConfig] :document_db_event_source_config
     #   Specific configuration settings for a DocumentDB event source.
     #
+    # @option params [String] :kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key that
+    #   Lambda uses to encrypt your function's [filter criteria][1]. By
+    #   default, Lambda does not encrypt your filter criteria object. Specify
+    #   this property to encrypt data using your own customer managed key.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
+    #
     # @return [Types::EventSourceMappingConfiguration] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::EventSourceMappingConfiguration#uuid #uuid} => String
@@ -5668,6 +5843,8 @@ module Aws::Lambda
     #   * {Types::EventSourceMappingConfiguration#self_managed_kafka_event_source_config #self_managed_kafka_event_source_config} => Types::SelfManagedKafkaEventSourceConfig
     #   * {Types::EventSourceMappingConfiguration#scaling_config #scaling_config} => Types::ScalingConfig
     #   * {Types::EventSourceMappingConfiguration#document_db_event_source_config #document_db_event_source_config} => Types::DocumentDBEventSourceConfig
+    #   * {Types::EventSourceMappingConfiguration#kms_key_arn #kms_key_arn} => String
+    #   * {Types::EventSourceMappingConfiguration#filter_criteria_error #filter_criteria_error} => Types::FilterCriteriaError
     #
     # @example Request syntax with placeholder values
     #
@@ -5712,6 +5889,7 @@ module Aws::Lambda
     #       collection_name: "CollectionName",
     #       full_document: "UpdateLookup", # accepts UpdateLookup, Default
     #     },
+    #     kms_key_arn: "KMSKeyArn",
     #   })
     #
     # @example Response structure
@@ -5754,6 +5932,9 @@ module Aws::Lambda
     #   resp.document_db_event_source_config.database_name #=> String
     #   resp.document_db_event_source_config.collection_name #=> String
     #   resp.document_db_event_source_config.full_document #=> String, one of "UpdateLookup", "Default"
+    #   resp.kms_key_arn #=> String
+    #   resp.filter_criteria_error.error_code #=> String
+    #   resp.filter_criteria_error.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateEventSourceMapping AWS API Documentation
     #
@@ -5999,7 +6180,7 @@ module Aws::Lambda
     #
     # To configure function concurrency, use PutFunctionConcurrency. To
     # grant invoke permissions to an Amazon Web Services account or Amazon
-    # Web Service, use AddPermission.
+    # Web Servicesservice, use AddPermission.
     #
     #
     #
@@ -6072,16 +6253,24 @@ module Aws::Lambda
     #   execution.
     #
     # @option params [String] :runtime
-    #   The identifier of the function's [runtime][1]. Runtime is required if
-    #   the deployment package is a .zip file archive.
+    #   The identifier of the function's [ runtime][1]. Runtime is required
+    #   if the deployment package is a .zip file archive. Specifying a runtime
+    #   results in an error if you're deploying a function using a container
+    #   image.
     #
-    #   The following list includes deprecated runtimes. For more information,
-    #   see [Runtime deprecation policy][2].
+    #   The following list includes deprecated runtimes. Lambda blocks
+    #   creating new functions and updating existing functions shortly after
+    #   each runtime is deprecated. For more information, see [Runtime use
+    #   after deprecation][2].
+    #
+    #   For a list of all currently supported runtimes, see [Supported
+    #   runtimes][3].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html
-    #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy
+    #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-deprecation-levels
+    #   [3]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-supported
     #
     # @option params [Types::DeadLetterConfig] :dead_letter_config
     #   A dead-letter queue configuration that specifies the queue or topic
@@ -6543,7 +6732,7 @@ module Aws::Lambda
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-lambda'
-      context[:gem_version] = '1.125.0'
+      context[:gem_version] = '1.127.0'
       Seahorse::Client::Request.new(handlers, context)
     end