aws-sdk-lambda 1.136.0 → 1.144.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -863,6 +863,25 @@ module Aws::Lambda
863
863
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
864
864
  # @return [String]
865
865
  #
866
+ # @!attribute [rw] metrics_config
867
+ # The metrics configuration for your event source. For more
868
+ # information, see [Event source mapping metrics][1].
869
+ #
870
+ #
871
+ #
872
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics
873
+ # @return [Types::EventSourceMappingMetricsConfig]
874
+ #
875
+ # @!attribute [rw] provisioned_poller_config
876
+ # (Amazon MSK and self-managed Apache Kafka only) The Provisioned Mode
877
+ # configuration for the event source. For more information, see
878
+ # [Provisioned Mode][1].
879
+ #
880
+ #
881
+ #
882
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode
883
+ # @return [Types::ProvisionedPollerConfig]
884
+ #
866
885
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/CreateEventSourceMappingRequest AWS API Documentation
867
886
  #
868
887
  class CreateEventSourceMappingRequest < Struct.new(
@@ -890,7 +909,9 @@ module Aws::Lambda
890
909
  :self_managed_kafka_event_source_config,
891
910
  :scaling_config,
892
911
  :document_db_event_source_config,
893
- :kms_key_arn)
912
+ :kms_key_arn,
913
+ :metrics_config,
914
+ :provisioned_poller_config)
894
915
  SENSITIVE = []
895
916
  include Aws::Structure
896
917
  end
@@ -1016,19 +1037,35 @@ module Aws::Lambda
1016
1037
  #
1017
1038
  # @!attribute [rw] kms_key_arn
1018
1039
  # The ARN of the Key Management Service (KMS) customer managed key
1019
- # that's used to encrypt your function's [environment variables][1].
1020
- # When [Lambda SnapStart][2] is activated, Lambda also uses this key
1021
- # is to encrypt your function's snapshot. If you deploy your function
1022
- # using a container image, Lambda also uses this key to encrypt your
1023
- # function when it's deployed. Note that this is not the same key
1024
- # that's used to protect your container image in the Amazon Elastic
1025
- # Container Registry (Amazon ECR). If you don't provide a customer
1026
- # managed key, Lambda uses a default service key.
1040
+ # that's used to encrypt the following resources:
1041
+ #
1042
+ # * The function's [environment variables][1].
1043
+ #
1044
+ # * The function's [Lambda SnapStart][2] snapshots.
1045
+ #
1046
+ # * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
1047
+ # deployment package that's used for function invocations. For more
1048
+ # information, see [ Specifying a customer managed key for
1049
+ # Lambda][3].
1050
+ #
1051
+ # * The optimized version of the container image that's used for
1052
+ # function invocations. Note that this is not the same key that's
1053
+ # used to protect your container image in the Amazon Elastic
1054
+ # Container Registry (Amazon ECR). For more information, see
1055
+ # [Function lifecycle][4].
1056
+ #
1057
+ # If you don't provide a customer managed key, Lambda uses an [Amazon
1058
+ # Web Services owned key][5] or an [Amazon Web Services managed
1059
+ # key][6].
1027
1060
  #
1028
1061
  #
1029
1062
  #
1030
1063
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
1031
1064
  # [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
1065
+ # [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
1066
+ # [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
1067
+ # [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
1068
+ # [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
1032
1069
  # @return [String]
1033
1070
  #
1034
1071
  # @!attribute [rw] tracing_config
@@ -2031,6 +2068,25 @@ module Aws::Lambda
2031
2068
  # The Amazon Resource Name (ARN) of the event source mapping.
2032
2069
  # @return [String]
2033
2070
  #
2071
+ # @!attribute [rw] metrics_config
2072
+ # The metrics configuration for your event source. For more
2073
+ # information, see [Event source mapping metrics][1].
2074
+ #
2075
+ #
2076
+ #
2077
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics
2078
+ # @return [Types::EventSourceMappingMetricsConfig]
2079
+ #
2080
+ # @!attribute [rw] provisioned_poller_config
2081
+ # (Amazon MSK and self-managed Apache Kafka only) The Provisioned Mode
2082
+ # configuration for the event source. For more information, see
2083
+ # [Provisioned Mode][1].
2084
+ #
2085
+ #
2086
+ #
2087
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode
2088
+ # @return [Types::ProvisionedPollerConfig]
2089
+ #
2034
2090
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/EventSourceMappingConfiguration AWS API Documentation
2035
2091
  #
2036
2092
  class EventSourceMappingConfiguration < Struct.new(
@@ -2063,7 +2119,33 @@ module Aws::Lambda
2063
2119
  :document_db_event_source_config,
2064
2120
  :kms_key_arn,
2065
2121
  :filter_criteria_error,
2066
- :event_source_mapping_arn)
2122
+ :event_source_mapping_arn,
2123
+ :metrics_config,
2124
+ :provisioned_poller_config)
2125
+ SENSITIVE = []
2126
+ include Aws::Structure
2127
+ end
2128
+
2129
+ # The metrics configuration for your event source. Use this
2130
+ # configuration object to define which metrics you want your event
2131
+ # source mapping to produce.
2132
+ #
2133
+ # @!attribute [rw] metrics
2134
+ # The metrics you want your event source mapping to produce. Include
2135
+ # `EventCount` to receive event source mapping metrics related to the
2136
+ # number of events processed by your event source mapping. For more
2137
+ # information about these metrics, see [ Event source mapping
2138
+ # metrics][1].
2139
+ #
2140
+ #
2141
+ #
2142
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics
2143
+ # @return [Array<String>]
2144
+ #
2145
+ # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/EventSourceMappingMetricsConfig AWS API Documentation
2146
+ #
2147
+ class EventSourceMappingMetricsConfig < Struct.new(
2148
+ :metrics)
2067
2149
  SENSITIVE = []
2068
2150
  include Aws::Structure
2069
2151
  end
@@ -2181,6 +2263,17 @@ module Aws::Lambda
2181
2263
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html
2182
2264
  # @return [String]
2183
2265
  #
2266
+ # @!attribute [rw] source_kms_key_arn
2267
+ # The ARN of the Key Management Service (KMS) customer managed key
2268
+ # that's used to encrypt your function's .zip deployment package. If
2269
+ # you don't provide a customer managed key, Lambda uses an [Amazon
2270
+ # Web Services owned key][1].
2271
+ #
2272
+ #
2273
+ #
2274
+ # [1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
2275
+ # @return [String]
2276
+ #
2184
2277
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FunctionCode AWS API Documentation
2185
2278
  #
2186
2279
  class FunctionCode < Struct.new(
@@ -2188,7 +2281,8 @@ module Aws::Lambda
2188
2281
  :s3_bucket,
2189
2282
  :s3_key,
2190
2283
  :s3_object_version,
2191
- :image_uri)
2284
+ :image_uri,
2285
+ :source_kms_key_arn)
2192
2286
  SENSITIVE = [:zip_file]
2193
2287
  include Aws::Structure
2194
2288
  end
@@ -2211,13 +2305,25 @@ module Aws::Lambda
2211
2305
  # The resolved URI for the image.
2212
2306
  # @return [String]
2213
2307
  #
2308
+ # @!attribute [rw] source_kms_key_arn
2309
+ # The ARN of the Key Management Service (KMS) customer managed key
2310
+ # that's used to encrypt your function's .zip deployment package. If
2311
+ # you don't provide a customer managed key, Lambda uses an [Amazon
2312
+ # Web Services owned key][1].
2313
+ #
2314
+ #
2315
+ #
2316
+ # [1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
2317
+ # @return [String]
2318
+ #
2214
2319
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FunctionCodeLocation AWS API Documentation
2215
2320
  #
2216
2321
  class FunctionCodeLocation < Struct.new(
2217
2322
  :repository_type,
2218
2323
  :location,
2219
2324
  :image_uri,
2220
- :resolved_image_uri)
2325
+ :resolved_image_uri,
2326
+ :source_kms_key_arn)
2221
2327
  SENSITIVE = []
2222
2328
  include Aws::Structure
2223
2329
  end
@@ -2313,15 +2419,36 @@ module Aws::Lambda
2313
2419
  # @return [Types::EnvironmentResponse]
2314
2420
  #
2315
2421
  # @!attribute [rw] kms_key_arn
2316
- # The KMS key that's used to encrypt the function's [environment
2317
- # variables][1]. When [Lambda SnapStart][2] is activated, this key is
2318
- # also used to encrypt the function's snapshot. This key is returned
2319
- # only if you've configured a customer managed key.
2422
+ # The ARN of the Key Management Service (KMS) customer managed key
2423
+ # that's used to encrypt the following resources:
2424
+ #
2425
+ # * The function's [environment variables][1].
2426
+ #
2427
+ # * The function's [Lambda SnapStart][2] snapshots.
2428
+ #
2429
+ # * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
2430
+ # deployment package that's used for function invocations. For more
2431
+ # information, see [ Specifying a customer managed key for
2432
+ # Lambda][3].
2433
+ #
2434
+ # * The optimized version of the container image that's used for
2435
+ # function invocations. Note that this is not the same key that's
2436
+ # used to protect your container image in the Amazon Elastic
2437
+ # Container Registry (Amazon ECR). For more information, see
2438
+ # [Function lifecycle][4].
2439
+ #
2440
+ # If you don't provide a customer managed key, Lambda uses an [Amazon
2441
+ # Web Services owned key][5] or an [Amazon Web Services managed
2442
+ # key][6].
2320
2443
  #
2321
2444
  #
2322
2445
  #
2323
2446
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
2324
2447
  # [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
2448
+ # [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
2449
+ # [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
2450
+ # [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
2451
+ # [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
2325
2452
  # @return [String]
2326
2453
  #
2327
2454
  # @!attribute [rw] tracing_config
@@ -2505,9 +2632,16 @@ module Aws::Lambda
2505
2632
  #
2506
2633
  # * **Queue** - The ARN of a standard SQS queue.
2507
2634
  #
2635
+ # * **Bucket** - The ARN of an Amazon S3 bucket.
2636
+ #
2508
2637
  # * **Topic** - The ARN of a standard SNS topic.
2509
2638
  #
2510
2639
  # * **Event Bus** - The ARN of an Amazon EventBridge event bus.
2640
+ #
2641
+ # <note markdown="1"> S3 buckets are supported only for on-failure destinations. To retain
2642
+ # records of successful invocations, use another destination type.
2643
+ #
2644
+ # </note>
2511
2645
  # @return [Types::DestinationConfig]
2512
2646
  #
2513
2647
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FunctionEventInvokeConfig AWS API Documentation
@@ -2922,13 +3056,20 @@ module Aws::Lambda
2922
3056
  # @return [Types::FunctionCodeLocation]
2923
3057
  #
2924
3058
  # @!attribute [rw] tags
2925
- # The function's [tags][1].
3059
+ # The function's [tags][1]. Lambda returns tag data only if you have
3060
+ # explicit allow permissions for [lambda:ListTags][2].
2926
3061
  #
2927
3062
  #
2928
3063
  #
2929
3064
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/tagging.html
3065
+ # [2]: https://docs.aws.amazon.com/lambda/latest/api/API_ListTags.html
2930
3066
  # @return [Hash<String,String>]
2931
3067
  #
3068
+ # @!attribute [rw] tags_error
3069
+ # An object that contains details about an error related to retrieving
3070
+ # tags.
3071
+ # @return [Types::TagsError]
3072
+ #
2932
3073
  # @!attribute [rw] concurrency
2933
3074
  # The function's [reserved concurrency][1].
2934
3075
  #
@@ -2943,6 +3084,7 @@ module Aws::Lambda
2943
3084
  :configuration,
2944
3085
  :code,
2945
3086
  :tags,
3087
+ :tags_error,
2946
3088
  :concurrency)
2947
3089
  SENSITIVE = []
2948
3090
  include Aws::Structure
@@ -3614,8 +3756,8 @@ module Aws::Lambda
3614
3756
  # @!attribute [rw] payload
3615
3757
  # The JSON that you want to provide to your Lambda function as input.
3616
3758
  #
3617
- # You can enter the JSON directly. For example, `--payload '\{ "key":
3618
- # "value" \}'`. You can also specify a file path. For example,
3759
+ # You can enter the JSON directly. For example, `--payload '{ "key":
3760
+ # "value" }'`. You can also specify a file path. For example,
3619
3761
  # `--payload file://payload.json`.
3620
3762
  # @return [String]
3621
3763
  #
@@ -3805,8 +3947,8 @@ module Aws::Lambda
3805
3947
  # @!attribute [rw] payload
3806
3948
  # The JSON that you want to provide to your Lambda function as input.
3807
3949
  #
3808
- # You can enter the JSON directly. For example, `--payload '\{ "key":
3809
- # "value" \}'`. You can also specify a file path. For example,
3950
+ # You can enter the JSON directly. For example, `--payload '{ "key":
3951
+ # "value" }'`. You can also specify a file path. For example,
3810
3952
  # `--payload file://payload.json`.
3811
3953
  # @return [String]
3812
3954
  #
@@ -4805,24 +4947,23 @@ module Aws::Lambda
4805
4947
  # @!attribute [rw] destination
4806
4948
  # The Amazon Resource Name (ARN) of the destination resource.
4807
4949
  #
4808
- # To retain records of [asynchronous invocations][1], you can
4809
- # configure an Amazon SNS topic, Amazon SQS queue, Lambda function, or
4810
- # Amazon EventBridge event bus as the destination.
4811
- #
4812
- # To retain records of failed invocations from [Kinesis and DynamoDB
4813
- # event sources][2], you can configure an Amazon SNS topic or Amazon
4814
- # SQS queue as the destination.
4950
+ # To retain records of unsuccessful [asynchronous invocations][1], you
4951
+ # can configure an Amazon SNS topic, Amazon SQS queue, Amazon S3
4952
+ # bucket, Lambda function, or Amazon EventBridge event bus as the
4953
+ # destination.
4815
4954
  #
4816
- # To retain records of failed invocations from [self-managed Kafka][3]
4817
- # or [Amazon MSK][4], you can configure an Amazon SNS topic, Amazon
4818
- # SQS queue, or Amazon S3 bucket as the destination.
4955
+ # To retain records of failed invocations from [Kinesis][2],
4956
+ # [DynamoDB][3], [self-managed Kafka][4] or [Amazon MSK][5], you can
4957
+ # configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket
4958
+ # as the destination.
4819
4959
  #
4820
4960
  #
4821
4961
  #
4822
4962
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations
4823
- # [2]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#event-source-mapping-destinations
4824
- # [3]: https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination
4825
- # [4]: https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination
4963
+ # [2]: https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html
4964
+ # [3]: https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html
4965
+ # [4]: https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination
4966
+ # [5]: https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination
4826
4967
  # @return [String]
4827
4968
  #
4828
4969
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/OnFailure AWS API Documentation
@@ -4835,6 +4976,14 @@ module Aws::Lambda
4835
4976
 
4836
4977
  # A destination for events that were processed successfully.
4837
4978
  #
4979
+ # To retain records of successful [asynchronous invocations][1], you can
4980
+ # configure an Amazon SNS topic, Amazon SQS queue, Lambda function, or
4981
+ # Amazon EventBridge event bus as the destination.
4982
+ #
4983
+ #
4984
+ #
4985
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations
4986
+ #
4838
4987
  # @!attribute [rw] destination
4839
4988
  # The Amazon Resource Name (ARN) of the destination resource.
4840
4989
  # @return [String]
@@ -4966,6 +5115,34 @@ module Aws::Lambda
4966
5115
  include Aws::Structure
4967
5116
  end
4968
5117
 
5118
+ # The [ Provisioned Mode][1] configuration for the event source. Use
5119
+ # Provisioned Mode to customize the minimum and maximum number of event
5120
+ # pollers for your event source. An event poller is a compute unit that
5121
+ # provides approximately 5 MBps of throughput.
5122
+ #
5123
+ #
5124
+ #
5125
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode
5126
+ #
5127
+ # @!attribute [rw] minimum_pollers
5128
+ # The minimum number of event pollers this event source can scale down
5129
+ # to.
5130
+ # @return [Integer]
5131
+ #
5132
+ # @!attribute [rw] maximum_pollers
5133
+ # The maximum number of event pollers this event source can scale up
5134
+ # to.
5135
+ # @return [Integer]
5136
+ #
5137
+ # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/ProvisionedPollerConfig AWS API Documentation
5138
+ #
5139
+ class ProvisionedPollerConfig < Struct.new(
5140
+ :minimum_pollers,
5141
+ :maximum_pollers)
5142
+ SENSITIVE = []
5143
+ include Aws::Structure
5144
+ end
5145
+
4969
5146
  # @!attribute [rw] layer_name
4970
5147
  # The name or Amazon Resource Name (ARN) of the layer.
4971
5148
  # @return [String]
@@ -5277,9 +5454,16 @@ module Aws::Lambda
5277
5454
  #
5278
5455
  # * **Queue** - The ARN of a standard SQS queue.
5279
5456
  #
5457
+ # * **Bucket** - The ARN of an Amazon S3 bucket.
5458
+ #
5280
5459
  # * **Topic** - The ARN of a standard SNS topic.
5281
5460
  #
5282
5461
  # * **Event Bus** - The ARN of an Amazon EventBridge event bus.
5462
+ #
5463
+ # <note markdown="1"> S3 buckets are supported only for on-failure destinations. To retain
5464
+ # records of successful invocations, use another destination type.
5465
+ #
5466
+ # </note>
5283
5467
  # @return [Types::DestinationConfig]
5284
5468
  #
5285
5469
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/PutFunctionEventInvokeConfigRequest AWS API Documentation
@@ -6059,6 +6243,26 @@ module Aws::Lambda
6059
6243
  include Aws::Structure
6060
6244
  end
6061
6245
 
6246
+ # An object that contains details about an error related to retrieving
6247
+ # tags.
6248
+ #
6249
+ # @!attribute [rw] error_code
6250
+ # The error code.
6251
+ # @return [String]
6252
+ #
6253
+ # @!attribute [rw] message
6254
+ # The error message.
6255
+ # @return [String]
6256
+ #
6257
+ # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/TagsError AWS API Documentation
6258
+ #
6259
+ class TagsError < Struct.new(
6260
+ :error_code,
6261
+ :message)
6262
+ SENSITIVE = []
6263
+ include Aws::Structure
6264
+ end
6265
+
6062
6266
  # The request throughput limit was exceeded. For more information, see
6063
6267
  # [Lambda quotas][1].
6064
6268
  #
@@ -6405,6 +6609,25 @@ module Aws::Lambda
6405
6609
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics
6406
6610
  # @return [String]
6407
6611
  #
6612
+ # @!attribute [rw] metrics_config
6613
+ # The metrics configuration for your event source. For more
6614
+ # information, see [Event source mapping metrics][1].
6615
+ #
6616
+ #
6617
+ #
6618
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics
6619
+ # @return [Types::EventSourceMappingMetricsConfig]
6620
+ #
6621
+ # @!attribute [rw] provisioned_poller_config
6622
+ # (Amazon MSK and self-managed Apache Kafka only) The Provisioned Mode
6623
+ # configuration for the event source. For more information, see
6624
+ # [Provisioned Mode][1].
6625
+ #
6626
+ #
6627
+ #
6628
+ # [1]: https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode
6629
+ # @return [Types::ProvisionedPollerConfig]
6630
+ #
6408
6631
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateEventSourceMappingRequest AWS API Documentation
6409
6632
  #
6410
6633
  class UpdateEventSourceMappingRequest < Struct.new(
@@ -6424,7 +6647,9 @@ module Aws::Lambda
6424
6647
  :function_response_types,
6425
6648
  :scaling_config,
6426
6649
  :document_db_event_source_config,
6427
- :kms_key_arn)
6650
+ :kms_key_arn,
6651
+ :metrics_config,
6652
+ :provisioned_poller_config)
6428
6653
  SENSITIVE = []
6429
6654
  include Aws::Structure
6430
6655
  end
@@ -6496,6 +6721,13 @@ module Aws::Lambda
6496
6721
  # default value is `x86_64`.
6497
6722
  # @return [Array<String>]
6498
6723
  #
6724
+ # @!attribute [rw] source_kms_key_arn
6725
+ # The ARN of the Key Management Service (KMS) customer managed key
6726
+ # that's used to encrypt your function's .zip deployment package. If
6727
+ # you don't provide a customer managed key, Lambda uses an Amazon Web
6728
+ # Services managed key.
6729
+ # @return [String]
6730
+ #
6499
6731
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateFunctionCodeRequest AWS API Documentation
6500
6732
  #
6501
6733
  class UpdateFunctionCodeRequest < Struct.new(
@@ -6508,7 +6740,8 @@ module Aws::Lambda
6508
6740
  :publish,
6509
6741
  :dry_run,
6510
6742
  :revision_id,
6511
- :architectures)
6743
+ :architectures,
6744
+ :source_kms_key_arn)
6512
6745
  SENSITIVE = [:zip_file]
6513
6746
  include Aws::Structure
6514
6747
  end
@@ -6620,19 +6853,35 @@ module Aws::Lambda
6620
6853
  #
6621
6854
  # @!attribute [rw] kms_key_arn
6622
6855
  # The ARN of the Key Management Service (KMS) customer managed key
6623
- # that's used to encrypt your function's [environment variables][1].
6624
- # When [Lambda SnapStart][2] is activated, Lambda also uses this key
6625
- # is to encrypt your function's snapshot. If you deploy your function
6626
- # using a container image, Lambda also uses this key to encrypt your
6627
- # function when it's deployed. Note that this is not the same key
6628
- # that's used to protect your container image in the Amazon Elastic
6629
- # Container Registry (Amazon ECR). If you don't provide a customer
6630
- # managed key, Lambda uses a default service key.
6856
+ # that's used to encrypt the following resources:
6857
+ #
6858
+ # * The function's [environment variables][1].
6859
+ #
6860
+ # * The function's [Lambda SnapStart][2] snapshots.
6861
+ #
6862
+ # * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
6863
+ # deployment package that's used for function invocations. For more
6864
+ # information, see [ Specifying a customer managed key for
6865
+ # Lambda][3].
6866
+ #
6867
+ # * The optimized version of the container image that's used for
6868
+ # function invocations. Note that this is not the same key that's
6869
+ # used to protect your container image in the Amazon Elastic
6870
+ # Container Registry (Amazon ECR). For more information, see
6871
+ # [Function lifecycle][4].
6872
+ #
6873
+ # If you don't provide a customer managed key, Lambda uses an [Amazon
6874
+ # Web Services owned key][5] or an [Amazon Web Services managed
6875
+ # key][6].
6631
6876
  #
6632
6877
  #
6633
6878
  #
6634
6879
  # [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
6635
6880
  # [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
6881
+ # [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
6882
+ # [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
6883
+ # [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
6884
+ # [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
6636
6885
  # @return [String]
6637
6886
  #
6638
6887
  # @!attribute [rw] tracing_config
@@ -6764,9 +7013,16 @@ module Aws::Lambda
6764
7013
  #
6765
7014
  # * **Queue** - The ARN of a standard SQS queue.
6766
7015
  #
7016
+ # * **Bucket** - The ARN of an Amazon S3 bucket.
7017
+ #
6767
7018
  # * **Topic** - The ARN of a standard SNS topic.
6768
7019
  #
6769
7020
  # * **Event Bus** - The ARN of an Amazon EventBridge event bus.
7021
+ #
7022
+ # <note markdown="1"> S3 buckets are supported only for on-failure destinations. To retain
7023
+ # records of successful invocations, use another destination type.
7024
+ #
7025
+ # </note>
6770
7026
  # @return [Types::DestinationConfig]
6771
7027
  #
6772
7028
  # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateFunctionEventInvokeConfigRequest AWS API Documentation
@@ -56,7 +56,7 @@ module Aws::Lambda
56
56
  autoload :Endpoints, 'aws-sdk-lambda/endpoints'
57
57
  autoload :EventStreams, 'aws-sdk-lambda/event_streams'
58
58
 
59
- GEM_VERSION = '1.136.0'
59
+ GEM_VERSION = '1.144.0'
60
60
 
61
61
  end
62
62