aws-sdk-lambda 1.138.0 → 1.140.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3a50fc0147ae147df20b3ea44d022386321c20fe460054b3cfaafc357d34882a
-  data.tar.gz: ac311e7731eeefdc925901d5dc4c5424c858fc01a94f9852dceaa85c87299117
+  metadata.gz: b345c545812a8bf5e1b00f4b14d40d6e15e91a31f2c34d0a11b960f7c3edaa63
+  data.tar.gz: f65aaf58a147766deb19cac0224ed0dc74f0690c06a3ec36b1905089aa362e35
 SHA512:
-  metadata.gz: 9af3081399ca7e635d774c626eeb216dd91476f6cfc08af25048a8d64e7927715b70881c69683e438de2b925313a170b776a0e5d4a366a2bed710433057366fd
-  data.tar.gz: bd670f36d41bed2a1df6c42b1b18fc22696f880e3b2f0d85b33b24321882fd03378d62bcf1d773886f31215fbca91c2761a53a64ea05de279d3f0ee3e168f063
+  metadata.gz: 0eba8465dbbc3ffa6981d36bd01e3babdb560056fdef88e4a0404d3159a60f85f4df7fde55915aa002b4d7dc06712006d1d36bc375a331a4236baeaf9359e820
+  data.tar.gz: '09f2b303083d0408052f9f3d4e0e920fd0374e904cdff520edc17213fa4b517a55263823139b09e10444249ffc7ca8df9f032b51b0e6704fa879b5629dfed7e5'

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.140.0 (2024-11-08)
+------------------
+
+* Feature - This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages.
+
+1.139.0 (2024-11-06)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.138.0 (2024-10-25)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.138.0
+1.140.0

data/lib/aws-sdk-lambda/client.rb

@@ -1497,19 +1497,33 @@ module Aws::Lambda
     #
     # @option params [String] :kms_key_arn
     #   The ARN of the Key Management Service (KMS) customer managed key
-    #   that's used to encrypt your function's [environment variables][1].
-    #   When [Lambda SnapStart][2] is activated, Lambda also uses this key is
-    #   to encrypt your function's snapshot. If you deploy your function
-    #   using a container image, Lambda also uses this key to encrypt your
-    #   function when it's deployed. Note that this is not the same key
-    #   that's used to protect your container image in the Amazon Elastic
-    #   Container Registry (Amazon ECR). If you don't provide a customer
-    #   managed key, Lambda uses a default service key.
+    #   that's used to encrypt the following resources:
+    #
+    #   * The function's [environment variables][1].
+    #
+    #   * The function's [Lambda SnapStart][2] snapshots.
+    #
+    #   * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
+    #     deployment package that's used for function invocations. For more
+    #     information, see [ Specifying a customer managed key for Lambda][3].
+    #
+    #   * The optimized version of the container image that's used for
+    #     function invocations. Note that this is not the same key that's
+    #     used to protect your container image in the Amazon Elastic Container
+    #     Registry (Amazon ECR). For more information, see [Function
+    #     lifecycle][4].
+    #
+    #   If you don't provide a customer managed key, Lambda uses an [Amazon
+    #   Web Services owned key][5] or an [Amazon Web Services managed key][6].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
     #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
+    #   [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
+    #   [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
+    #   [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
+    #   [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
     #
     # @option params [Types::TracingConfig] :tracing_config
     #   Set `Mode` to `Active` to sample and trace a subset of incoming
@@ -1690,6 +1704,7 @@ module Aws::Lambda
     #       s3_key: "S3Key",
     #       s3_object_version: "S3ObjectVersion",
     #       image_uri: "String",
+    #       source_kms_key_arn: "KMSKeyArn",
     #     },
     #     description: "Description",
     #     timeout: 1,
@@ -2904,6 +2919,7 @@ module Aws::Lambda
     #   resp.code.location #=> String
     #   resp.code.image_uri #=> String
     #   resp.code.resolved_image_uri #=> String
+    #   resp.code.source_kms_key_arn #=> String
     #   resp.tags #=> Hash
     #   resp.tags["TagKey"] #=> String
     #   resp.tags_error.error_code #=> String
@@ -3708,9 +3724,9 @@ module Aws::Lambda
     #   * {Types::GetProvisionedConcurrencyConfigResponse#last_modified #last_modified} => Time
     #
     #
-    # @example Example: To get a provisioned concurrency configuration
+    # @example Example: To view a provisioned concurrency configuration
     #
-    #   # The following example returns details for the provisioned concurrency configuration for the BLUE alias of the specified
+    #   # The following example displays details for the provisioned concurrency configuration for the BLUE alias of the specified
     #   # function.
     #
     #   resp = client.get_provisioned_concurrency_config({
@@ -3727,9 +3743,9 @@ module Aws::Lambda
     #     status: "READY", 
     #   }
     #
-    # @example Example: To view a provisioned concurrency configuration
+    # @example Example: To get a provisioned concurrency configuration
     #
-    #   # The following example displays details for the provisioned concurrency configuration for the BLUE alias of the specified
+    #   # The following example returns details for the provisioned concurrency configuration for the BLUE alias of the specified
     #   # function.
     #
     #   resp = client.get_provisioned_concurrency_config({
@@ -3931,9 +3947,9 @@ module Aws::Lambda
     # @option params [String, StringIO, File] :payload
     #   The JSON that you want to provide to your Lambda function as input.
     #
-    #   You can enter the JSON directly. For example, `--payload '\{ "key":
-    #   "value" \}'`. You can also specify a file path. For example,
-    #   `--payload file://payload.json`.
+    #   You can enter the JSON directly. For example, `--payload '{ "key":
+    #   "value" }'`. You can also specify a file path. For example, `--payload
+    #   file://payload.json`.
     #
     # @option params [String] :qualifier
     #   Specify a version or alias to invoke a published version of the
@@ -4130,9 +4146,9 @@ module Aws::Lambda
     # @option params [String, StringIO, File] :payload
     #   The JSON that you want to provide to your Lambda function as input.
     #
-    #   You can enter the JSON directly. For example, `--payload '\{ "key":
-    #   "value" \}'`. You can also specify a file path. For example,
-    #   `--payload file://payload.json`.
+    #   You can enter the JSON directly. For example, `--payload '{ "key":
+    #   "value" }'`. You can also specify a file path. For example, `--payload
+    #   file://payload.json`.
     #
     # @return [Types::InvokeWithResponseStreamResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -7237,6 +7253,12 @@ module Aws::Lambda
     #   string array with one of the valid values (arm64 or x86\_64). The
     #   default value is `x86_64`.
     #
+    # @option params [String] :source_kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key
+    #   that's used to encrypt your function's .zip deployment package. If
+    #   you don't provide a customer managed key, Lambda uses an Amazon Web
+    #   Services managed key.
+    #
     # @return [Types::FunctionConfiguration] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::FunctionConfiguration#function_name #function_name} => String
@@ -7321,6 +7343,7 @@ module Aws::Lambda
     #     dry_run: false,
     #     revision_id: "String",
     #     architectures: ["x86_64"], # accepts x86_64, arm64
+    #     source_kms_key_arn: "KMSKeyArn",
     #   })
     #
     # @example Response structure
@@ -7519,19 +7542,33 @@ module Aws::Lambda
     #
     # @option params [String] :kms_key_arn
     #   The ARN of the Key Management Service (KMS) customer managed key
-    #   that's used to encrypt your function's [environment variables][1].
-    #   When [Lambda SnapStart][2] is activated, Lambda also uses this key is
-    #   to encrypt your function's snapshot. If you deploy your function
-    #   using a container image, Lambda also uses this key to encrypt your
-    #   function when it's deployed. Note that this is not the same key
-    #   that's used to protect your container image in the Amazon Elastic
-    #   Container Registry (Amazon ECR). If you don't provide a customer
-    #   managed key, Lambda uses a default service key.
+    #   that's used to encrypt the following resources:
+    #
+    #   * The function's [environment variables][1].
+    #
+    #   * The function's [Lambda SnapStart][2] snapshots.
+    #
+    #   * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
+    #     deployment package that's used for function invocations. For more
+    #     information, see [ Specifying a customer managed key for Lambda][3].
+    #
+    #   * The optimized version of the container image that's used for
+    #     function invocations. Note that this is not the same key that's
+    #     used to protect your container image in the Amazon Elastic Container
+    #     Registry (Amazon ECR). For more information, see [Function
+    #     lifecycle][4].
+    #
+    #   If you don't provide a customer managed key, Lambda uses an [Amazon
+    #   Web Services owned key][5] or an [Amazon Web Services managed key][6].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
     #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
+    #   [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
+    #   [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
+    #   [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
+    #   [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
     #
     # @option params [Types::TracingConfig] :tracing_config
     #   Set `Mode` to `Active` to sample and trace a subset of incoming
@@ -8034,7 +8071,7 @@ module Aws::Lambda
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-lambda'
-      context[:gem_version] = '1.138.0'
+      context[:gem_version] = '1.140.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-lambda/client_api.rb

@@ -740,12 +740,14 @@ module Aws::Lambda
     FunctionCode.add_member(:s3_key, Shapes::ShapeRef.new(shape: S3Key, location_name: "S3Key"))
     FunctionCode.add_member(:s3_object_version, Shapes::ShapeRef.new(shape: S3ObjectVersion, location_name: "S3ObjectVersion"))
     FunctionCode.add_member(:image_uri, Shapes::ShapeRef.new(shape: String, location_name: "ImageUri"))
+    FunctionCode.add_member(:source_kms_key_arn, Shapes::ShapeRef.new(shape: KMSKeyArn, location_name: "SourceKMSKeyArn"))
     FunctionCode.struct_class = Types::FunctionCode
 
     FunctionCodeLocation.add_member(:repository_type, Shapes::ShapeRef.new(shape: String, location_name: "RepositoryType"))
     FunctionCodeLocation.add_member(:location, Shapes::ShapeRef.new(shape: String, location_name: "Location"))
     FunctionCodeLocation.add_member(:image_uri, Shapes::ShapeRef.new(shape: String, location_name: "ImageUri"))
     FunctionCodeLocation.add_member(:resolved_image_uri, Shapes::ShapeRef.new(shape: String, location_name: "ResolvedImageUri"))
+    FunctionCodeLocation.add_member(:source_kms_key_arn, Shapes::ShapeRef.new(shape: String, location_name: "SourceKMSKeyArn"))
     FunctionCodeLocation.struct_class = Types::FunctionCodeLocation
 
     FunctionConfiguration.add_member(:function_name, Shapes::ShapeRef.new(shape: NamespacedFunctionName, location_name: "FunctionName"))
@@ -1490,6 +1492,7 @@ module Aws::Lambda
     UpdateFunctionCodeRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
     UpdateFunctionCodeRequest.add_member(:revision_id, Shapes::ShapeRef.new(shape: String, location_name: "RevisionId"))
     UpdateFunctionCodeRequest.add_member(:architectures, Shapes::ShapeRef.new(shape: ArchitecturesList, location_name: "Architectures"))
+    UpdateFunctionCodeRequest.add_member(:source_kms_key_arn, Shapes::ShapeRef.new(shape: KMSKeyArn, location_name: "SourceKMSKeyArn"))
     UpdateFunctionCodeRequest.struct_class = Types::UpdateFunctionCodeRequest
 
     UpdateFunctionConfigurationRequest.add_member(:function_name, Shapes::ShapeRef.new(shape: FunctionName, required: true, location: "uri", location_name: "FunctionName"))

data/lib/aws-sdk-lambda/types.rb

@@ -1016,19 +1016,35 @@ module Aws::Lambda
     #
     # @!attribute [rw] kms_key_arn
     #   The ARN of the Key Management Service (KMS) customer managed key
-    #   that's used to encrypt your function's [environment variables][1].
-    #   When [Lambda SnapStart][2] is activated, Lambda also uses this key
-    #   is to encrypt your function's snapshot. If you deploy your function
-    #   using a container image, Lambda also uses this key to encrypt your
-    #   function when it's deployed. Note that this is not the same key
-    #   that's used to protect your container image in the Amazon Elastic
-    #   Container Registry (Amazon ECR). If you don't provide a customer
-    #   managed key, Lambda uses a default service key.
+    #   that's used to encrypt the following resources:
+    #
+    #   * The function's [environment variables][1].
+    #
+    #   * The function's [Lambda SnapStart][2] snapshots.
+    #
+    #   * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
+    #     deployment package that's used for function invocations. For more
+    #     information, see [ Specifying a customer managed key for
+    #     Lambda][3].
+    #
+    #   * The optimized version of the container image that's used for
+    #     function invocations. Note that this is not the same key that's
+    #     used to protect your container image in the Amazon Elastic
+    #     Container Registry (Amazon ECR). For more information, see
+    #     [Function lifecycle][4].
+    #
+    #   If you don't provide a customer managed key, Lambda uses an [Amazon
+    #   Web Services owned key][5] or an [Amazon Web Services managed
+    #   key][6].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
     #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
+    #   [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
+    #   [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
+    #   [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
+    #   [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
     #   @return [String]
     #
     # @!attribute [rw] tracing_config
@@ -2181,6 +2197,17 @@ module Aws::Lambda
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html
     #   @return [String]
     #
+    # @!attribute [rw] source_kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key
+    #   that's used to encrypt your function's .zip deployment package. If
+    #   you don't provide a customer managed key, Lambda uses an [Amazon
+    #   Web Services owned key][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FunctionCode AWS API Documentation
     #
     class FunctionCode < Struct.new(
@@ -2188,7 +2215,8 @@ module Aws::Lambda
       :s3_bucket,
       :s3_key,
       :s3_object_version,
-      :image_uri)
+      :image_uri,
+      :source_kms_key_arn)
       SENSITIVE = [:zip_file]
       include Aws::Structure
     end
@@ -2211,13 +2239,25 @@ module Aws::Lambda
     #   The resolved URI for the image.
     #   @return [String]
     #
+    # @!attribute [rw] source_kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key
+    #   that's used to encrypt your function's .zip deployment package. If
+    #   you don't provide a customer managed key, Lambda uses an [Amazon
+    #   Web Services owned key][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FunctionCodeLocation AWS API Documentation
     #
     class FunctionCodeLocation < Struct.new(
       :repository_type,
       :location,
       :image_uri,
-      :resolved_image_uri)
+      :resolved_image_uri,
+      :source_kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2313,15 +2353,36 @@ module Aws::Lambda
     #   @return [Types::EnvironmentResponse]
     #
     # @!attribute [rw] kms_key_arn
-    #   The KMS key that's used to encrypt the function's [environment
-    #   variables][1]. When [Lambda SnapStart][2] is activated, this key is
-    #   also used to encrypt the function's snapshot. This key is returned
-    #   only if you've configured a customer managed key.
+    #   The ARN of the Key Management Service (KMS) customer managed key
+    #   that's used to encrypt the following resources:
+    #
+    #   * The function's [environment variables][1].
+    #
+    #   * The function's [Lambda SnapStart][2] snapshots.
+    #
+    #   * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
+    #     deployment package that's used for function invocations. For more
+    #     information, see [ Specifying a customer managed key for
+    #     Lambda][3].
+    #
+    #   * The optimized version of the container image that's used for
+    #     function invocations. Note that this is not the same key that's
+    #     used to protect your container image in the Amazon Elastic
+    #     Container Registry (Amazon ECR). For more information, see
+    #     [Function lifecycle][4].
+    #
+    #   If you don't provide a customer managed key, Lambda uses an [Amazon
+    #   Web Services owned key][5] or an [Amazon Web Services managed
+    #   key][6].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
     #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
+    #   [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
+    #   [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
+    #   [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
+    #   [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
     #   @return [String]
     #
     # @!attribute [rw] tracing_config
@@ -2928,7 +2989,7 @@ module Aws::Lambda
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/tagging.html
-    #   [2]: https://docs.aws.amazon.com/https:/docs.aws.amazon.com/lambda/latest/api/API_ListTags.html
+    #   [2]: https://docs.aws.amazon.com/lambda/latest/api/API_ListTags.html
     #   @return [Hash<String,String>]
     #
     # @!attribute [rw] tags_error
@@ -3622,8 +3683,8 @@ module Aws::Lambda
     # @!attribute [rw] payload
     #   The JSON that you want to provide to your Lambda function as input.
     #
-    #   You can enter the JSON directly. For example, `--payload '\{ "key":
-    #   "value" \}'`. You can also specify a file path. For example,
+    #   You can enter the JSON directly. For example, `--payload '{ "key":
+    #   "value" }'`. You can also specify a file path. For example,
     #   `--payload file://payload.json`.
     #   @return [String]
     #
@@ -3813,8 +3874,8 @@ module Aws::Lambda
     # @!attribute [rw] payload
     #   The JSON that you want to provide to your Lambda function as input.
     #
-    #   You can enter the JSON directly. For example, `--payload '\{ "key":
-    #   "value" \}'`. You can also specify a file path. For example,
+    #   You can enter the JSON directly. For example, `--payload '{ "key":
+    #   "value" }'`. You can also specify a file path. For example,
     #   `--payload file://payload.json`.
     #   @return [String]
     #
@@ -6524,6 +6585,13 @@ module Aws::Lambda
     #   default value is `x86_64`.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] source_kms_key_arn
+    #   The ARN of the Key Management Service (KMS) customer managed key
+    #   that's used to encrypt your function's .zip deployment package. If
+    #   you don't provide a customer managed key, Lambda uses an Amazon Web
+    #   Services managed key.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/UpdateFunctionCodeRequest AWS API Documentation
     #
     class UpdateFunctionCodeRequest < Struct.new(
@@ -6536,7 +6604,8 @@ module Aws::Lambda
       :publish,
       :dry_run,
       :revision_id,
-      :architectures)
+      :architectures,
+      :source_kms_key_arn)
       SENSITIVE = [:zip_file]
       include Aws::Structure
     end
@@ -6648,19 +6717,35 @@ module Aws::Lambda
     #
     # @!attribute [rw] kms_key_arn
     #   The ARN of the Key Management Service (KMS) customer managed key
-    #   that's used to encrypt your function's [environment variables][1].
-    #   When [Lambda SnapStart][2] is activated, Lambda also uses this key
-    #   is to encrypt your function's snapshot. If you deploy your function
-    #   using a container image, Lambda also uses this key to encrypt your
-    #   function when it's deployed. Note that this is not the same key
-    #   that's used to protect your container image in the Amazon Elastic
-    #   Container Registry (Amazon ECR). If you don't provide a customer
-    #   managed key, Lambda uses a default service key.
+    #   that's used to encrypt the following resources:
+    #
+    #   * The function's [environment variables][1].
+    #
+    #   * The function's [Lambda SnapStart][2] snapshots.
+    #
+    #   * When used with `SourceKMSKeyArn`, the unzipped version of the .zip
+    #     deployment package that's used for function invocations. For more
+    #     information, see [ Specifying a customer managed key for
+    #     Lambda][3].
+    #
+    #   * The optimized version of the container image that's used for
+    #     function invocations. Note that this is not the same key that's
+    #     used to protect your container image in the Amazon Elastic
+    #     Container Registry (Amazon ECR). For more information, see
+    #     [Function lifecycle][4].
+    #
+    #   If you don't provide a customer managed key, Lambda uses an [Amazon
+    #   Web Services owned key][5] or an [Amazon Web Services managed
+    #   key][6].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
     #   [2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
+    #   [3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
+    #   [4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
+    #   [5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
+    #   [6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
     #   @return [String]
     #
     # @!attribute [rw] tracing_config

data/lib/aws-sdk-lambda.rb

@@ -56,7 +56,7 @@ module Aws::Lambda
   autoload :Endpoints, 'aws-sdk-lambda/endpoints'
   autoload :EventStreams, 'aws-sdk-lambda/event_streams'
 
-  GEM_VERSION = '1.138.0'
+  GEM_VERSION = '1.140.0'
 
 end
 

data/sig/client.rbs

@@ -296,7 +296,8 @@ module Aws
                                s3_bucket: ::String?,
                                s3_key: ::String?,
                                s3_object_version: ::String?,
-                               image_uri: ::String?
+                               image_uri: ::String?,
+                               source_kms_key_arn: ::String?
                              },
                              ?description: ::String,
                              ?timeout: ::Integer,
@@ -1338,7 +1339,8 @@ module Aws
                                   ?publish: bool,
                                   ?dry_run: bool,
                                   ?revision_id: ::String,
-                                  ?architectures: Array[("x86_64" | "arm64")]
+                                  ?architectures: Array[("x86_64" | "arm64")],
+                                  ?source_kms_key_arn: ::String
                                 ) -> _UpdateFunctionCodeResponseSuccess
                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateFunctionCodeResponseSuccess
 

data/sig/types.rbs

@@ -441,6 +441,7 @@ module Aws::Lambda
       attr_accessor s3_key: ::String
       attr_accessor s3_object_version: ::String
       attr_accessor image_uri: ::String
+      attr_accessor source_kms_key_arn: ::String
       SENSITIVE: [:zip_file]
     end
 
@@ -449,6 +450,7 @@ module Aws::Lambda
       attr_accessor location: ::String
       attr_accessor image_uri: ::String
       attr_accessor resolved_image_uri: ::String
+      attr_accessor source_kms_key_arn: ::String
       SENSITIVE: []
     end
 
@@ -1413,6 +1415,7 @@ module Aws::Lambda
       attr_accessor dry_run: bool
       attr_accessor revision_id: ::String
       attr_accessor architectures: ::Array[("x86_64" | "arm64")]
+      attr_accessor source_kms_key_arn: ::String
       SENSITIVE: [:zip_file]
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-lambda
 version: !ruby/object:Gem::Version
-  version: 1.138.0
+  version: 1.140.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-10-25 00:00:00.000000000 Z
+date: 2024-11-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core