aws-sdk-lambda 1.136.0 → 1.144.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -863,6 +863,25 @@ module Aws::Lambda
863
863
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
864
864
  # @return [String]
865
865
  #
866
+ # @!attribute [rw] metrics_config
867
+ # The metrics configuration for your event source. For more
868
+ # information, see [Event source mapping metrics][1].
869
+ #
870
+ #
871
+ #
872
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics
873
+ # @return [Types::EventSourceMappingMetricsConfig]
874
+ #
875
+ # @!attribute [rw] provisioned_poller_config
876
+ # (Amazon MSK and self-managed Apache Kafka only) The Provisioned Mode
877
+ # configuration for the event source. For more information, see
878
+ # [Provisioned Mode][1].
879
+ #
880
+ #
881
+ #
882
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode
883
+ # @return [Types::ProvisionedPollerConfig]
884
+ #
866
885
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/CreateEventSourceMappingRequest AWS API Documentation
867
886
  #
868
887
  class CreateEventSourceMappingRequest < Struct.new(
@@ -890,7 +909,9 @@ module Aws::Lambda
890
909
  :self_managed_kafka_event_source_config,
891
910
  :scaling_config,
892
911
  :document_db_event_source_config,
893
- :kms_key_arn)
912
+ :kms_key_arn,
913
+ :metrics_config,
914
+ :provisioned_poller_config)
894
915
  SENSITIVE = []
895
916
  include Aws::Structure
896
917
  end
@@ -1016,19 +1037,35 @@ module Aws::Lambda
1016
1037
  #
1017
1038
  # @!attribute [rw] kms_key_arn
1018
1039
  # The ARN of the Key Management Service (KMS) customer managed key
1019
- # that's used to encrypt your function's [environment variables][1].
1020
- # When [Lambda SnapStart][2] is activated, Lambda also uses this key
1021
- # is to encrypt your function's snapshot. If you deploy your function
1022
- # using a container image, Lambda also uses this key to encrypt your
1023
- # function when it's deployed. Note that this is not the same key
1024
- # that's used to protect your container image in the Amazon Elastic
1025
- # Container Registry (Amazon ECR). If you don't provide a customer
1026
- # managed key, Lambda uses a default service key.
1040
+ # that's used to encrypt the following resources:
1041
+ #
1042
+ # * The function's [environment variables][1].
1043
+ #
1044
+ # * The function's [Lambda SnapStart][2] snapshots.
1045
+ #
1046
+ # * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
1047
+ # deployment package that's used for function invocations. For more
1048
+ # information, see [ Specifying a customer managed key for
1049
+ # Lambda][3].
1050
+ #
1051
+ # * The optimized version of the container image that's used for
1052
+ # function invocations. Note that this is not the same key that's
1053
+ # used to protect your container image in the Amazon Elastic
1054
+ # Container Registry (Amazon ECR). For more information, see
1055
+ # [Function lifecycle][4].
1056
+ #
1057
+ # If you don't provide a customer managed key, Lambda uses an [Amazon
1058
+ # Web Services owned key][5] or an [Amazon Web Services managed
1059
+ # key][6].
1027
1060
  #
1028
1061
  #
1029
1062
  #
1030
1063
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
1031
1064
  # [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
1065
+ # [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
1066
+ # [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
1067
+ # [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
1068
+ # [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
1032
1069
  # @return [String]
1033
1070
  #
1034
1071
  # @!attribute [rw] tracing_config
@@ -2031,6 +2068,25 @@ module Aws::Lambda
2031
2068
  # The Amazon Resource Name (ARN) of the event source mapping.
2032
2069
  # @return [String]
2033
2070
  #
2071
+ # @!attribute [rw] metrics_config
2072
+ # The metrics configuration for your event source. For more
2073
+ # information, see [Event source mapping metrics][1].
2074
+ #
2075
+ #
2076
+ #
2077
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics
2078
+ # @return [Types::EventSourceMappingMetricsConfig]
2079
+ #
2080
+ # @!attribute [rw] provisioned_poller_config
2081
+ # (Amazon MSK and self-managed Apache Kafka only) The Provisioned Mode
2082
+ # configuration for the event source. For more information, see
2083
+ # [Provisioned Mode][1].
2084
+ #
2085
+ #
2086
+ #
2087
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode
2088
+ # @return [Types::ProvisionedPollerConfig]
2089
+ #
2034
2090
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/EventSourceMappingConfiguration AWS API Documentation
2035
2091
  #
2036
2092
  class EventSourceMappingConfiguration < Struct.new(
@@ -2063,7 +2119,33 @@ module Aws::Lambda
2063
2119
  :document_db_event_source_config,
2064
2120
  :kms_key_arn,
2065
2121
  :filter_criteria_error,
2066
- :event_source_mapping_arn)
2122
+ :event_source_mapping_arn,
2123
+ :metrics_config,
2124
+ :provisioned_poller_config)
2125
+ SENSITIVE = []
2126
+ include Aws::Structure
2127
+ end
2128
+
2129
+ # The metrics configuration for your event source. Use this
2130
+ # configuration object to define which metrics you want your event
2131
+ # source mapping to produce.
2132
+ #
2133
+ # @!attribute [rw] metrics
2134
+ # The metrics you want your event source mapping to produce. Include
2135
+ # `EventCount` to receive event source mapping metrics related to the
2136
+ # number of events processed by your event source mapping. For more
2137
+ # information about these metrics, see [ Event source mapping
2138
+ # metrics][1].
2139
+ #
2140
+ #
2141
+ #
2142
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics
2143
+ # @return [Array<String>]
2144
+ #
2145
+ # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/EventSourceMappingMetricsConfig AWS API Documentation
2146
+ #
2147
+ class EventSourceMappingMetricsConfig < Struct.new(
2148
+ :metrics)
2067
2149
  SENSITIVE = []
2068
2150
  include Aws::Structure
2069
2151
  end
@@ -2181,6 +2263,17 @@ module Aws::Lambda
2181
2263
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html
2182
2264
  # @return [String]
2183
2265
  #
2266
+ # @!attribute [rw] source_kms_key_arn
2267
+ # The ARN of the Key Management Service (KMS) customer managed key
2268
+ # that's used to encrypt your function's .zip deployment package. If
2269
+ # you don't provide a customer managed key, Lambda uses an [Amazon
2270
+ # Web Services owned key][1].
2271
+ #
2272
+ #
2273
+ #
2274
+ # [1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
2275
+ # @return [String]
2276
+ #
2184
2277
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FunctionCode AWS API Documentation
2185
2278
  #
2186
2279
  class FunctionCode < Struct.new(
@@ -2188,7 +2281,8 @@ module Aws::Lambda
2188
2281
  :s3_bucket,
2189
2282
  :s3_key,
2190
2283
  :s3_object_version,
2191
- :image_uri)
2284
+ :image_uri,
2285
+ :source_kms_key_arn)
2192
2286
  SENSITIVE = [:zip_file]
2193
2287
  include Aws::Structure
2194
2288
  end
@@ -2211,13 +2305,25 @@ module Aws::Lambda
2211
2305
  # The resolved URI for the image.
2212
2306
  # @return [String]
2213
2307
  #
2308
+ # @!attribute [rw] source_kms_key_arn
2309
+ # The ARN of the Key Management Service (KMS) customer managed key
2310
+ # that's used to encrypt your function's .zip deployment package. If
2311
+ # you don't provide a customer managed key, Lambda uses an [Amazon
2312
+ # Web Services owned key][1].
2313
+ #
2314
+ #
2315
+ #
2316
+ # [1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
2317
+ # @return [String]
2318
+ #
2214
2319
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FunctionCodeLocation AWS API Documentation
2215
2320
  #
2216
2321
  class FunctionCodeLocation < Struct.new(
2217
2322
  :repository_type,
2218
2323
  :location,
2219
2324
  :image_uri,
2220
- :resolved_image_uri)
2325
+ :resolved_image_uri,
2326
+ :source_kms_key_arn)
2221
2327
  SENSITIVE = []
2222
2328
  include Aws::Structure
2223
2329
  end
@@ -2313,15 +2419,36 @@ module Aws::Lambda
2313
2419
  # @return [Types::EnvironmentResponse]
2314
2420
  #
2315
2421
  # @!attribute [rw] kms_key_arn
2316
- # The KMS key that's used to encrypt the function's [environment
2317
- # variables][1]. When [Lambda SnapStart][2] is activated, this key is
2318
- # also used to encrypt the function's snapshot. This key is returned
2319
- # only if you've configured a customer managed key.
2422
+ # The ARN of the Key Management Service (KMS) customer managed key
2423
+ # that's used to encrypt the following resources:
2424
+ #
2425
+ # * The function's [environment variables][1].
2426
+ #
2427
+ # * The function's [Lambda SnapStart][2] snapshots.
2428
+ #
2429
+ # * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
2430
+ # deployment package that's used for function invocations. For more
2431
+ # information, see [ Specifying a customer managed key for
2432
+ # Lambda][3].
2433
+ #
2434
+ # * The optimized version of the container image that's used for
2435
+ # function invocations. Note that this is not the same key that's
2436
+ # used to protect your container image in the Amazon Elastic
2437
+ # Container Registry (Amazon ECR). For more information, see
2438
+ # [Function lifecycle][4].
2439
+ #
2440
+ # If you don't provide a customer managed key, Lambda uses an [Amazon
2441
+ # Web Services owned key][5] or an [Amazon Web Services managed
2442
+ # key][6].
2320
2443
  #
2321
2444
  #
2322
2445
  #
2323
2446
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
2324
2447
  # [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
2448
+ # [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
2449
+ # [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
2450
+ # [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
2451
+ # [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
2325
2452
  # @return [String]
2326
2453
  #
2327
2454
  # @!attribute [rw] tracing_config
@@ -2505,9 +2632,16 @@ module Aws::Lambda
2505
2632
  #
2506
2633
  # * **Queue** - The ARN of a standard SQS queue.
2507
2634
  #
2635
+ # * **Bucket** - The ARN of an Amazon S3 bucket.
2636
+ #
2508
2637
  # * **Topic** - The ARN of a standard SNS topic.
2509
2638
  #
2510
2639
  # * **Event Bus** - The ARN of an Amazon EventBridge event bus.
2640
+ #
2641
+ # <note markdown="1"> S3 buckets are supported only for on-failure destinations. To retain
2642
+ # records of successful invocations, use another destination type.
2643
+ #
2644
+ # </note>
2511
2645
  # @return [Types::DestinationConfig]
2512
2646
  #
2513
2647
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FunctionEventInvokeConfig AWS API Documentation
@@ -2922,13 +3056,20 @@ module Aws::Lambda
2922
3056
  # @return [Types::FunctionCodeLocation]
2923
3057
  #
2924
3058
  # @!attribute [rw] tags
2925
- # The function's [tags][1].
3059
+ # The function's [tags][1]. Lambda returns tag data only if you have
3060
+ # explicit allow permissions for [lambda:ListTags][2].
2926
3061
  #
2927
3062
  #
2928
3063
  #
2929
3064
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/tagging.html
3065
+ # [2]: https://docs.aws.amazon.com/lambda/latest/api/API_ListTags.html
2930
3066
  # @return [Hash<String,String>]
2931
3067
  #
3068
+ # @!attribute [rw] tags_error
3069
+ # An object that contains details about an error related to retrieving
3070
+ # tags.
3071
+ # @return [Types::TagsError]
3072
+ #
2932
3073
  # @!attribute [rw] concurrency
2933
3074
  # The function's [reserved concurrency][1].
2934
3075
  #
@@ -2943,6 +3084,7 @@ module Aws::Lambda
2943
3084
  :configuration,
2944
3085
  :code,
2945
3086
  :tags,
3087
+ :tags_error,
2946
3088
  :concurrency)
2947
3089
  SENSITIVE = []
2948
3090
  include Aws::Structure
@@ -3614,8 +3756,8 @@ module Aws::Lambda
3614
3756
  # @!attribute [rw] payload
3615
3757
  # The JSON that you want to provide to your Lambda function as input.
3616
3758
  #
3617
- # You can enter the JSON directly. For example, `--payload '\{ "key":
3618
- # "value" \}'`. You can also specify a file path. For example,
3759
+ # You can enter the JSON directly. For example, `--payload '{ "key":
3760
+ # "value" }'`. You can also specify a file path. For example,
3619
3761
  # `--payload file://payload.json`.
3620
3762
  # @return [String]
3621
3763
  #
@@ -3805,8 +3947,8 @@ module Aws::Lambda
3805
3947
  # @!attribute [rw] payload
3806
3948
  # The JSON that you want to provide to your Lambda function as input.
3807
3949
  #
3808
- # You can enter the JSON directly. For example, `--payload '\{ "key":
3809
- # "value" \}'`. You can also specify a file path. For example,
3950
+ # You can enter the JSON directly. For example, `--payload '{ "key":
3951
+ # "value" }'`. You can also specify a file path. For example,
3810
3952
  # `--payload file://payload.json`.
3811
3953
  # @return [String]
3812
3954
  #
@@ -4805,24 +4947,23 @@ module Aws::Lambda
4805
4947
  # @!attribute [rw] destination
4806
4948
  # The Amazon Resource Name (ARN) of the destination resource.
4807
4949
  #
4808
- # To retain records of [asynchronous invocations][1], you can
4809
- # configure an Amazon SNS topic, Amazon SQS queue, Lambda function, or
4810
- # Amazon EventBridge event bus as the destination.
4811
- #
4812
- # To retain records of failed invocations from [Kinesis and DynamoDB
4813
- # event sources][2], you can configure an Amazon SNS topic or Amazon
4814
- # SQS queue as the destination.
4950
+ # To retain records of unsuccessful [asynchronous invocations][1], you
4951
+ # can configure an Amazon SNS topic, Amazon SQS queue, Amazon S3
4952
+ # bucket, Lambda function, or Amazon EventBridge event bus as the
4953
+ # destination.
4815
4954
  #
4816
- # To retain records of failed invocations from [self-managed Kafka][3]
4817
- # or [Amazon MSK][4], you can configure an Amazon SNS topic, Amazon
4818
- # SQS queue, or Amazon S3 bucket as the destination.
4955
+ # To retain records of failed invocations from [Kinesis][2],
4956
+ # [DynamoDB][3], [self-managed Kafka][4] or [Amazon MSK][5], you can
4957
+ # configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket
4958
+ # as the destination.
4819
4959
  #
4820
4960
  #
4821
4961
  #
4822
4962
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations
4823
- # [2]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#event-source-mapping-destinations
4824
- # [3]: https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination
4825
- # [4]: https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination
4963
+ # [2]: https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html
4964
+ # [3]: https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html
4965
+ # [4]: https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination
4966
+ # [5]: https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination
4826
4967
  # @return [String]
4827
4968
  #
4828
4969
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/OnFailure AWS API Documentation
@@ -4835,6 +4976,14 @@ module Aws::Lambda
4835
4976
 
4836
4977
  # A destination for events that were processed successfully.
4837
4978
  #
4979
+ # To retain records of successful [asynchronous invocations][1], you can
4980
+ # configure an Amazon SNS topic, Amazon SQS queue, Lambda function, or
4981
+ # Amazon EventBridge event bus as the destination.
4982
+ #
4983
+ #
4984
+ #
4985
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations
4986
+ #
4838
4987
  # @!attribute [rw] destination
4839
4988
  # The Amazon Resource Name (ARN) of the destination resource.
4840
4989
  # @return [String]
@@ -4966,6 +5115,34 @@ module Aws::Lambda
4966
5115
  include Aws::Structure
4967
5116
  end
4968
5117
 
5118
+ # The [ Provisioned Mode][1] configuration for the event source. Use
5119
+ # Provisioned Mode to customize the minimum and maximum number of event
5120
+ # pollers for your event source. An event poller is a compute unit that
5121
+ # provides approximately 5 MBps of throughput.
5122
+ #
5123
+ #
5124
+ #
5125
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode
5126
+ #
5127
+ # @!attribute [rw] minimum_pollers
5128
+ # The minimum number of event pollers this event source can scale down
5129
+ # to.
5130
+ # @return [Integer]
5131
+ #
5132
+ # @!attribute [rw] maximum_pollers
5133
+ # The maximum number of event pollers this event source can scale up
5134
+ # to.
5135
+ # @return [Integer]
5136
+ #
5137
+ # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/ProvisionedPollerConfig AWS API Documentation
5138
+ #
5139
+ class ProvisionedPollerConfig < Struct.new(
5140
+ :minimum_pollers,
5141
+ :maximum_pollers)
5142
+ SENSITIVE = []
5143
+ include Aws::Structure
5144
+ end
5145
+
4969
5146
  # @!attribute [rw] layer_name
4970
5147
  # The name or Amazon Resource Name (ARN) of the layer.
4971
5148
  # @return [String]
@@ -5277,9 +5454,16 @@ module Aws::Lambda
5277
5454
  #
5278
5455
  # * **Queue** - The ARN of a standard SQS queue.
5279
5456
  #
5457
+ # * **Bucket** - The ARN of an Amazon S3 bucket.
5458
+ #
5280
5459
  # * **Topic** - The ARN of a standard SNS topic.
5281
5460
  #
5282
5461
  # * **Event Bus** - The ARN of an Amazon EventBridge event bus.
5462
+ #
5463
+ # <note markdown="1"> S3 buckets are supported only for on-failure destinations. To retain
5464
+ # records of successful invocations, use another destination type.
5465
+ #
5466
+ # </note>
5283
5467
  # @return [Types::DestinationConfig]
5284
5468
  #
5285
5469
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/PutFunctionEventInvokeConfigRequest AWS API Documentation
@@ -6059,6 +6243,26 @@ module Aws::Lambda
6059
6243
  include Aws::Structure
6060
6244
  end
6061
6245
 
6246
+ # An object that contains details about an error related to retrieving
6247
+ # tags.
6248
+ #
6249
+ # @!attribute [rw] error_code
6250
+ # The error code.
6251
+ # @return [String]
6252
+ #
6253
+ # @!attribute [rw] message
6254
+ # The error message.
6255
+ # @return [String]
6256
+ #
6257
+ # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/TagsError AWS API Documentation
6258
+ #
6259
+ class TagsError < Struct.new(
6260
+ :error_code,
6261
+ :message)
6262
+ SENSITIVE = []
6263
+ include Aws::Structure
6264
+ end
6265
+
6062
6266
  # The request throughput limit was exceeded. For more information, see
6063
6267
  # [Lambda quotas][1].
6064
6268
  #
@@ -6405,6 +6609,25 @@ module Aws::Lambda
6405
6609
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
6406
6610
  # @return [String]
6407
6611
  #
6612
+ # @!attribute [rw] metrics_config
6613
+ # The metrics configuration for your event source. For more
6614
+ # information, see [Event source mapping metrics][1].
6615
+ #
6616
+ #
6617
+ #
6618
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics
6619
+ # @return [Types::EventSourceMappingMetricsConfig]
6620
+ #
6621
+ # @!attribute [rw] provisioned_poller_config
6622
+ # (Amazon MSK and self-managed Apache Kafka only) The Provisioned Mode
6623
+ # configuration for the event source. For more information, see
6624
+ # [Provisioned Mode][1].
6625
+ #
6626
+ #
6627
+ #
6628
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode
6629
+ # @return [Types::ProvisionedPollerConfig]
6630
+ #
6408
6631
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateEventSourceMappingRequest AWS API Documentation
6409
6632
  #
6410
6633
  class UpdateEventSourceMappingRequest < Struct.new(
@@ -6424,7 +6647,9 @@ module Aws::Lambda
6424
6647
  :function_response_types,
6425
6648
  :scaling_config,
6426
6649
  :document_db_event_source_config,
6427
- :kms_key_arn)
6650
+ :kms_key_arn,
6651
+ :metrics_config,
6652
+ :provisioned_poller_config)
6428
6653
  SENSITIVE = []
6429
6654
  include Aws::Structure
6430
6655
  end
@@ -6496,6 +6721,13 @@ module Aws::Lambda
6496
6721
  # default value is `x86_64`.
6497
6722
  # @return [Array<String>]
6498
6723
  #
6724
+ # @!attribute [rw] source_kms_key_arn
6725
+ # The ARN of the Key Management Service (KMS) customer managed key
6726
+ # that's used to encrypt your function's .zip deployment package. If
6727
+ # you don't provide a customer managed key, Lambda uses an Amazon Web
6728
+ # Services managed key.
6729
+ # @return [String]
6730
+ #
6499
6731
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateFunctionCodeRequest AWS API Documentation
6500
6732
  #
6501
6733
  class UpdateFunctionCodeRequest < Struct.new(
@@ -6508,7 +6740,8 @@ module Aws::Lambda
6508
6740
  :publish,
6509
6741
  :dry_run,
6510
6742
  :revision_id,
6511
- :architectures)
6743
+ :architectures,
6744
+ :source_kms_key_arn)
6512
6745
  SENSITIVE = [:zip_file]
6513
6746
  include Aws::Structure
6514
6747
  end
@@ -6620,19 +6853,35 @@ module Aws::Lambda
6620
6853
  #
6621
6854
  # @!attribute [rw] kms_key_arn
6622
6855
  # The ARN of the Key Management Service (KMS) customer managed key
6623
- # that's used to encrypt your function's [environment variables][1].
6624
- # When [Lambda SnapStart][2] is activated, Lambda also uses this key
6625
- # is to encrypt your function's snapshot. If you deploy your function
6626
- # using a container image, Lambda also uses this key to encrypt your
6627
- # function when it's deployed. Note that this is not the same key
6628
- # that's used to protect your container image in the Amazon Elastic
6629
- # Container Registry (Amazon ECR). If you don't provide a customer
6630
- # managed key, Lambda uses a default service key.
6856
+ # that's used to encrypt the following resources:
6857
+ #
6858
+ # * The function's [environment variables][1].
6859
+ #
6860
+ # * The function's [Lambda SnapStart][2] snapshots.
6861
+ #
6862
+ # * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
6863
+ # deployment package that's used for function invocations. For more
6864
+ # information, see [ Specifying a customer managed key for
6865
+ # Lambda][3].
6866
+ #
6867
+ # * The optimized version of the container image that's used for
6868
+ # function invocations. Note that this is not the same key that's
6869
+ # used to protect your container image in the Amazon Elastic
6870
+ # Container Registry (Amazon ECR). For more information, see
6871
+ # [Function lifecycle][4].
6872
+ #
6873
+ # If you don't provide a customer managed key, Lambda uses an [Amazon
6874
+ # Web Services owned key][5] or an [Amazon Web Services managed
6875
+ # key][6].
6631
6876
  #
6632
6877
  #
6633
6878
  #
6634
6879
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
6635
6880
  # [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
6881
+ # [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
6882
+ # [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
6883
+ # [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
6884
+ # [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
6636
6885
  # @return [String]
6637
6886
  #
6638
6887
  # @!attribute [rw] tracing_config
@@ -6764,9 +7013,16 @@ module Aws::Lambda
6764
7013
  #
6765
7014
  # * **Queue** - The ARN of a standard SQS queue.
6766
7015
  #
7016
+ # * **Bucket** - The ARN of an Amazon S3 bucket.
7017
+ #
6767
7018
  # * **Topic** - The ARN of a standard SNS topic.
6768
7019
  #
6769
7020
  # * **Event Bus** - The ARN of an Amazon EventBridge event bus.
7021
+ #
7022
+ # <note markdown="1"> S3 buckets are supported only for on-failure destinations. To retain
7023
+ # records of successful invocations, use another destination type.
7024
+ #
7025
+ # </note>
6770
7026
  # @return [Types::DestinationConfig]
6771
7027
  #
6772
7028
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateFunctionEventInvokeConfigRequest AWS API Documentation
@@ -56,7 +56,7 @@ module Aws::Lambda
56
56
  autoload :Endpoints, 'aws-sdk-lambda/endpoints'
57
57
  autoload :EventStreams, 'aws-sdk-lambda/event_streams'
58
58
 
59
- GEM_VERSION = '1.136.0'
59
+ GEM_VERSION = '1.144.0'
60
60
 
61
61
  end
62
62