aws-sdk-lambda 1.192.0 → 1.194.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2f1be7073c08fcd6051bb64c7cb1c0b923bb10c530fe975c678177df2697a6a2
-  data.tar.gz: fc63d24237852fcc074ea900616e5202b1e22015c079dd51c5361b288dd0befa
+  metadata.gz: ee5c1fb98f514866da65aa9a517599e6cfbc0e1d2e7df6b5cf60410a10f389f8
+  data.tar.gz: c5ec4f3339bb43fb88daa4b2ca9a77f0a99a9c5618980799afcd9303bae90e2f
 SHA512:
-  metadata.gz: a7f57e6c45cb32fd37e50a66561b3f660b05268108fe52814090295dd895370e049273e4be773d30fa0b24dbb872f04e080d246aa203e034dc91b70677e2dbbe
-  data.tar.gz: 0010475155705dea32cb54f0e8b62ae8a0c3afb7d48fad506f1361378f4cfd414b413458af2e526b85e3390da4421cd6bcc00195fbff0e32f60b12ee54ca2601
+  metadata.gz: 435e41d797bf594c3c37cde7b41e63a40cc99aa490857a7374fa3d8aac1cdb9e9e865856e10df8b3d6a0545370906ea3de63117facc9318a79833e752f9972fc
+  data.tar.gz: 9efd60cee6ebeebac9a664f1b7a747df115db784b280c0c7118f83cc09f5e64979cd9e924c4aa5f4a24054fbabf598808dc7605b5c80f0f9fa3e1aa3afd2101c

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.194.0 (2026-09-01)
+------------------
+
+* Feature - AWS Lambda now provides configurable control over S3 direct access, allowing you to explicitly enable or disable how functions stream file reads directly from S3 buckets. This gives you flexibility to tune data access behavior based on your workload requirements, independent of memory size.
+
+1.193.0 (2026-08-20)
+------------------
+
+* Feature - Adds support for full JSON resource-based policies, enabling customers to create, retrieve, update, and delete function resource policies as complete JSON documents.
+
 1.192.0 (2026-07-30)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.192.0
+1.194.0

data/lib/aws-sdk-lambda/client.rb

@@ -2161,6 +2161,9 @@ module Aws::Lambda
     #       {
     #         arn: "FileSystemArn", # required
     #         local_mount_path: "LocalMountPath", # required
+    #         s3_files_config: {
+    #           direct_s3_read: "ENABLED", # accepts ENABLED, DISABLED, AUTO
+    #         },
     #       },
     #     ],
     #     code_signing_config_arn: "CodeSigningConfigArn",
@@ -2242,6 +2245,7 @@ module Aws::Lambda
     #   resp.file_system_configs #=> Array
     #   resp.file_system_configs[0].arn #=> String
     #   resp.file_system_configs[0].local_mount_path #=> String
+    #   resp.file_system_configs[0].s3_files_config.direct_s3_read #=> String, one of "ENABLED", "DISABLED", "AUTO"
     #   resp.signing_profile_version_arn #=> String
     #   resp.signing_job_arn #=> String
     #   resp.package_type #=> String, one of "Zip", "Image"
@@ -2999,6 +3003,42 @@ module Aws::Lambda
       req.send_request(options)
     end
 
+    # Deletes a [resource-based policy][1] from a Lambda resource.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the Lambda resource you want to
+    #   delete the policy from. You can use a qualified or an unqualified ARN.
+    #   The value must be a complete ARN, and the operation does not accept
+    #   wildcard characters.
+    #
+    # @option params [String] :revision_id
+    #   The revision ID that the existing policy must match for the deletion
+    #   to proceed. If the revision ID doesn't match, the operation fails
+    #   with a `PreconditionFailedException` error. To retrieve the current
+    #   revision ID, use the GetResourcePolicy operation.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_resource_policy({
+    #     resource_arn: "PolicyResourceArn", # required
+    #     revision_id: "RevisionId",
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/DeleteResourcePolicy AWS API Documentation
+    #
+    # @overload delete_resource_policy(params = {})
+    # @param [Hash] params ({})
+    def delete_resource_policy(params = {}, options = {})
+      req = build_request(:delete_resource_policy, params)
+      req.send_request(options)
+    end
+
     # Retrieves details about your account's [limits][1] and usage in an
     # Amazon Web Services Region.
     #
@@ -3855,6 +3895,7 @@ module Aws::Lambda
     #   resp.configuration.file_system_configs #=> Array
     #   resp.configuration.file_system_configs[0].arn #=> String
     #   resp.configuration.file_system_configs[0].local_mount_path #=> String
+    #   resp.configuration.file_system_configs[0].s3_files_config.direct_s3_read #=> String, one of "ENABLED", "DISABLED", "AUTO"
     #   resp.configuration.signing_profile_version_arn #=> String
     #   resp.configuration.signing_job_arn #=> String
     #   resp.configuration.package_type #=> String, one of "Zip", "Image"
@@ -4179,6 +4220,7 @@ module Aws::Lambda
     #   resp.file_system_configs #=> Array
     #   resp.file_system_configs[0].arn #=> String
     #   resp.file_system_configs[0].local_mount_path #=> String
+    #   resp.file_system_configs[0].s3_files_config.direct_s3_read #=> String, one of "ENABLED", "DISABLED", "AUTO"
     #   resp.signing_profile_version_arn #=> String
     #   resp.signing_job_arn #=> String
     #   resp.package_type #=> String, one of "Zip", "Image"
@@ -4762,9 +4804,9 @@ module Aws::Lambda
     #   * {Types::GetProvisionedConcurrencyConfigResponse#last_modified #last_modified} => Time
     #
     #
-    # @example Example: To get a provisioned concurrency configuration
+    # @example Example: To view a provisioned concurrency configuration
     #
-    #   # The following example returns details for the provisioned concurrency configuration for the BLUE alias of the specified
+    #   # The following example displays details for the provisioned concurrency configuration for the BLUE alias of the specified
     #   # function.
     #
     #   resp = client.get_provisioned_concurrency_config({
@@ -4781,9 +4823,9 @@ module Aws::Lambda
     #     status: "READY", 
     #   }
     #
-    # @example Example: To view a provisioned concurrency configuration
+    # @example Example: To get a provisioned concurrency configuration
     #
-    #   # The following example displays details for the provisioned concurrency configuration for the BLUE alias of the specified
+    #   # The following example returns details for the provisioned concurrency configuration for the BLUE alias of the specified
     #   # function.
     #
     #   resp = client.get_provisioned_concurrency_config({
@@ -4825,6 +4867,44 @@ module Aws::Lambda
       req.send_request(options)
     end
 
+    # Retrieves the [resource-based policy][1] attached to a Lambda
+    # resource.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the Lambda resource you want to
+    #   retrieve the policy for. You can use a qualified or an unqualified
+    #   ARN. The value must be a complete ARN, and the operation does not
+    #   accept wildcard characters.
+    #
+    # @return [Types::GetResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetResourcePolicyResponse#policy #policy} => String
+    #   * {Types::GetResourcePolicyResponse#revision_id #revision_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_resource_policy({
+    #     resource_arn: "PolicyResourceArn", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy #=> String
+    #   resp.revision_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/GetResourcePolicy AWS API Documentation
+    #
+    # @overload get_resource_policy(params = {})
+    # @param [Hash] params ({})
+    def get_resource_policy(params = {}, options = {})
+      req = build_request(:get_resource_policy, params)
+      req.send_request(options)
+    end
+
     # Retrieves the runtime management configuration for a function's
     # version. If the runtime update mode is **Manual**, this includes the
     # ARN of the runtime version and the runtime update mode. If the runtime
@@ -6224,6 +6304,7 @@ module Aws::Lambda
     #   resp.functions[0].file_system_configs #=> Array
     #   resp.functions[0].file_system_configs[0].arn #=> String
     #   resp.functions[0].file_system_configs[0].local_mount_path #=> String
+    #   resp.functions[0].file_system_configs[0].s3_files_config.direct_s3_read #=> String, one of "ENABLED", "DISABLED", "AUTO"
     #   resp.functions[0].signing_profile_version_arn #=> String
     #   resp.functions[0].signing_job_arn #=> String
     #   resp.functions[0].package_type #=> String, one of "Zip", "Image"
@@ -6840,6 +6921,7 @@ module Aws::Lambda
     #   resp.versions[0].file_system_configs #=> Array
     #   resp.versions[0].file_system_configs[0].arn #=> String
     #   resp.versions[0].file_system_configs[0].local_mount_path #=> String
+    #   resp.versions[0].file_system_configs[0].s3_files_config.direct_s3_read #=> String, one of "ENABLED", "DISABLED", "AUTO"
     #   resp.versions[0].signing_profile_version_arn #=> String
     #   resp.versions[0].signing_job_arn #=> String
     #   resp.versions[0].package_type #=> String, one of "Zip", "Image"
@@ -7217,6 +7299,7 @@ module Aws::Lambda
     #   resp.file_system_configs #=> Array
     #   resp.file_system_configs[0].arn #=> String
     #   resp.file_system_configs[0].local_mount_path #=> String
+    #   resp.file_system_configs[0].s3_files_config.direct_s3_read #=> String, one of "ENABLED", "DISABLED", "AUTO"
     #   resp.signing_profile_version_arn #=> String
     #   resp.signing_job_arn #=> String
     #   resp.package_type #=> String, one of "Zip", "Image"
@@ -7737,6 +7820,73 @@ module Aws::Lambda
       req.send_request(options)
     end
 
+    # Adds a [resource-based policy][1] to a Lambda resource. Resource-based
+    # policies grant access to other [Amazon Web Services accounts][2],
+    # [organizations][3], or [services][4]. Resource-based policies apply to
+    # a single Lambda resource (for example, a function, function version,
+    # or function alias).
+    #
+    # This operation replaces any existing policy on the Lambda resource. If
+    # you previously added permissions using the AddPermission operation,
+    # the new policy overwrites those permissions.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html
+    # [2]: https://docs.aws.amazon.com/lambda/latest/dg/permissions-function-cross-account.html
+    # [3]: https://docs.aws.amazon.com/lambda/latest/dg/permissions-function-organization.html
+    # [4]: https://docs.aws.amazon.com/lambda/latest/dg/permissions-function-services.html
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the Lambda resource you want to add
+    #   the policy to. You can use a qualified or an unqualified ARN. The
+    #   value must be a complete ARN, and the operation does not accept
+    #   wildcard characters.
+    #
+    # @option params [required, String] :policy
+    #   The policy document you want to add to your Lambda resource. This is
+    #   formatted as a JSON string.
+    #
+    #   For more information, see [Working with resource-based policies in
+    #   Lambda][1] in the *Lambda Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html
+    #
+    # @option params [String] :revision_id
+    #   The revision ID that the existing policy must match for the
+    #   replacement to proceed. If the revision ID doesn't match, the
+    #   operation fails with a `PreconditionFailedException` error. To
+    #   retrieve the current revision ID, use the GetResourcePolicy operation.
+    #
+    # @return [Types::PutResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::PutResourcePolicyResponse#policy #policy} => String
+    #   * {Types::PutResourcePolicyResponse#revision_id #revision_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_resource_policy({
+    #     resource_arn: "PolicyResourceArn", # required
+    #     policy: "ResourcePolicy", # required
+    #     revision_id: "RevisionId",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy #=> String
+    #   resp.revision_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/PutResourcePolicy AWS API Documentation
+    #
+    # @overload put_resource_policy(params = {})
+    # @param [Hash] params ({})
+    def put_resource_policy(params = {}, options = {})
+      req = build_request(:put_resource_policy, params)
+      req.send_request(options)
+    end
+
     # Sets the runtime management configuration for a function's version.
     # For more information, see [Runtime updates][1].
     #
@@ -9135,6 +9285,7 @@ module Aws::Lambda
     #   resp.file_system_configs #=> Array
     #   resp.file_system_configs[0].arn #=> String
     #   resp.file_system_configs[0].local_mount_path #=> String
+    #   resp.file_system_configs[0].s3_files_config.direct_s3_read #=> String, one of "ENABLED", "DISABLED", "AUTO"
     #   resp.signing_profile_version_arn #=> String
     #   resp.signing_job_arn #=> String
     #   resp.package_type #=> String, one of "Zip", "Image"
@@ -9506,6 +9657,9 @@ module Aws::Lambda
     #       {
     #         arn: "FileSystemArn", # required
     #         local_mount_path: "LocalMountPath", # required
+    #         s3_files_config: {
+    #           direct_s3_read: "ENABLED", # accepts ENABLED, DISABLED, AUTO
+    #         },
     #       },
     #     ],
     #     image_config: {
@@ -9582,6 +9736,7 @@ module Aws::Lambda
     #   resp.file_system_configs #=> Array
     #   resp.file_system_configs[0].arn #=> String
     #   resp.file_system_configs[0].local_mount_path #=> String
+    #   resp.file_system_configs[0].s3_files_config.direct_s3_read #=> String, one of "ENABLED", "DISABLED", "AUTO"
     #   resp.signing_profile_version_arn #=> String
     #   resp.signing_job_arn #=> String
     #   resp.package_type #=> String, one of "Zip", "Image"
@@ -9875,7 +10030,7 @@ module Aws::Lambda
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-lambda'
-      context[:gem_version] = '1.192.0'
+      context[:gem_version] = '1.194.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-lambda/client_api.rb

@@ -132,9 +132,11 @@ module Aws::Lambda
     DeleteFunctionUrlConfigRequest = Shapes::StructureShape.new(name: 'DeleteFunctionUrlConfigRequest')
     DeleteLayerVersionRequest = Shapes::StructureShape.new(name: 'DeleteLayerVersionRequest')
     DeleteProvisionedConcurrencyConfigRequest = Shapes::StructureShape.new(name: 'DeleteProvisionedConcurrencyConfigRequest')
+    DeleteResourcePolicyRequest = Shapes::StructureShape.new(name: 'DeleteResourcePolicyRequest')
     Description = Shapes::StringShape.new(name: 'Description')
     DestinationArn = Shapes::StringShape.new(name: 'DestinationArn')
     DestinationConfig = Shapes::StructureShape.new(name: 'DestinationConfig')
+    DirectS3Read = Shapes::StringShape.new(name: 'DirectS3Read')
     DocumentDBEventSourceConfig = Shapes::StructureShape.new(name: 'DocumentDBEventSourceConfig')
     DurableConfig = Shapes::StructureShape.new(name: 'DurableConfig')
     DurableExecutionAlreadyStartedException = Shapes::StructureShape.new(name: 'DurableExecutionAlreadyStartedException')
@@ -270,6 +272,8 @@ module Aws::Lambda
     GetPolicyResponse = Shapes::StructureShape.new(name: 'GetPolicyResponse')
     GetProvisionedConcurrencyConfigRequest = Shapes::StructureShape.new(name: 'GetProvisionedConcurrencyConfigRequest')
     GetProvisionedConcurrencyConfigResponse = Shapes::StructureShape.new(name: 'GetProvisionedConcurrencyConfigResponse')
+    GetResourcePolicyRequest = Shapes::StructureShape.new(name: 'GetResourcePolicyRequest')
+    GetResourcePolicyResponse = Shapes::StructureShape.new(name: 'GetResourcePolicyResponse')
     GetRuntimeManagementConfigRequest = Shapes::StructureShape.new(name: 'GetRuntimeManagementConfigRequest')
     GetRuntimeManagementConfigResponse = Shapes::StructureShape.new(name: 'GetRuntimeManagementConfigResponse')
     Handler = Shapes::StringShape.new(name: 'Handler')
@@ -423,6 +427,7 @@ module Aws::Lambda
     Pattern = Shapes::StringShape.new(name: 'Pattern')
     PerExecutionEnvironmentMaxConcurrency = Shapes::IntegerShape.new(name: 'PerExecutionEnvironmentMaxConcurrency')
     PolicyLengthExceededException = Shapes::StructureShape.new(name: 'PolicyLengthExceededException')
+    PolicyResourceArn = Shapes::StringShape.new(name: 'PolicyResourceArn')
     PositiveInteger = Shapes::IntegerShape.new(name: 'PositiveInteger')
     PreconditionFailedException = Shapes::StructureShape.new(name: 'PreconditionFailedException')
     Principal = Shapes::StringShape.new(name: 'Principal')
@@ -451,6 +456,8 @@ module Aws::Lambda
     PutFunctionScalingConfigResponse = Shapes::StructureShape.new(name: 'PutFunctionScalingConfigResponse')
     PutProvisionedConcurrencyConfigRequest = Shapes::StructureShape.new(name: 'PutProvisionedConcurrencyConfigRequest')
     PutProvisionedConcurrencyConfigResponse = Shapes::StructureShape.new(name: 'PutProvisionedConcurrencyConfigResponse')
+    PutResourcePolicyRequest = Shapes::StructureShape.new(name: 'PutResourcePolicyRequest')
+    PutResourcePolicyResponse = Shapes::StructureShape.new(name: 'PutResourcePolicyResponse')
     PutRuntimeManagementConfigRequest = Shapes::StructureShape.new(name: 'PutRuntimeManagementConfigRequest')
     PutRuntimeManagementConfigResponse = Shapes::StructureShape.new(name: 'PutRuntimeManagementConfigResponse')
     Qualifier = Shapes::StringShape.new(name: 'Qualifier')
@@ -469,16 +476,19 @@ module Aws::Lambda
     ResourceInUseException = Shapes::StructureShape.new(name: 'ResourceInUseException')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ResourceNotReadyException = Shapes::StructureShape.new(name: 'ResourceNotReadyException')
+    ResourcePolicy = Shapes::StringShape.new(name: 'ResourcePolicy')
     ResponseStreamingInvocationType = Shapes::StringShape.new(name: 'ResponseStreamingInvocationType')
     RetentionPeriodInDays = Shapes::IntegerShape.new(name: 'RetentionPeriodInDays')
     RetryDetails = Shapes::StructureShape.new(name: 'RetryDetails')
     ReverseOrder = Shapes::BooleanShape.new(name: 'ReverseOrder')
+    RevisionId = Shapes::StringShape.new(name: 'RevisionId')
     RoleArn = Shapes::StringShape.new(name: 'RoleArn')
     Runtime = Shapes::StringShape.new(name: 'Runtime')
     RuntimeVersionArn = Shapes::StringShape.new(name: 'RuntimeVersionArn')
     RuntimeVersionConfig = Shapes::StructureShape.new(name: 'RuntimeVersionConfig')
     RuntimeVersionError = Shapes::StructureShape.new(name: 'RuntimeVersionError')
     S3Bucket = Shapes::StringShape.new(name: 'S3Bucket')
+    S3FilesConfig = Shapes::StructureShape.new(name: 'S3FilesConfig')
     S3FilesMountConnectivityException = Shapes::StructureShape.new(name: 'S3FilesMountConnectivityException')
     S3FilesMountFailureException = Shapes::StructureShape.new(name: 'S3FilesMountFailureException')
     S3FilesMountTimeoutException = Shapes::StructureShape.new(name: 'S3FilesMountTimeoutException')
@@ -1005,6 +1015,10 @@ module Aws::Lambda
     DeleteProvisionedConcurrencyConfigRequest.add_member(:qualifier, Shapes::ShapeRef.new(shape: Qualifier, required: true, location: "querystring", location_name: "Qualifier"))
     DeleteProvisionedConcurrencyConfigRequest.struct_class = Types::DeleteProvisionedConcurrencyConfigRequest
 
+    DeleteResourcePolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: PolicyResourceArn, required: true, location: "uri", location_name: "ResourceArn"))
+    DeleteResourcePolicyRequest.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location: "querystring", location_name: "RevisionId"))
+    DeleteResourcePolicyRequest.struct_class = Types::DeleteResourcePolicyRequest
+
     DestinationConfig.add_member(:on_success, Shapes::ShapeRef.new(shape: OnSuccess, location_name: "OnSuccess"))
     DestinationConfig.add_member(:on_failure, Shapes::ShapeRef.new(shape: OnFailure, location_name: "OnFailure"))
     DestinationConfig.struct_class = Types::DestinationConfig
@@ -1214,6 +1228,7 @@ module Aws::Lambda
 
     FileSystemConfig.add_member(:arn, Shapes::ShapeRef.new(shape: FileSystemArn, required: true, location_name: "Arn"))
     FileSystemConfig.add_member(:local_mount_path, Shapes::ShapeRef.new(shape: LocalMountPath, required: true, location_name: "LocalMountPath"))
+    FileSystemConfig.add_member(:s3_files_config, Shapes::ShapeRef.new(shape: S3FilesConfig, location_name: "S3FilesConfig"))
     FileSystemConfig.struct_class = Types::FileSystemConfig
 
     FileSystemConfigList.member = Shapes::ShapeRef.new(shape: FileSystemConfig)
@@ -1505,6 +1520,13 @@ module Aws::Lambda
     GetProvisionedConcurrencyConfigResponse.add_member(:last_modified, Shapes::ShapeRef.new(shape: Timestamp, location_name: "LastModified"))
     GetProvisionedConcurrencyConfigResponse.struct_class = Types::GetProvisionedConcurrencyConfigResponse
 
+    GetResourcePolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: PolicyResourceArn, required: true, location: "uri", location_name: "ResourceArn"))
+    GetResourcePolicyRequest.struct_class = Types::GetResourcePolicyRequest
+
+    GetResourcePolicyResponse.add_member(:policy, Shapes::ShapeRef.new(shape: ResourcePolicy, location_name: "Policy"))
+    GetResourcePolicyResponse.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "RevisionId"))
+    GetResourcePolicyResponse.struct_class = Types::GetResourcePolicyResponse
+
     GetRuntimeManagementConfigRequest.add_member(:function_name, Shapes::ShapeRef.new(shape: NamespacedFunctionName, required: true, location: "uri", location_name: "FunctionName"))
     GetRuntimeManagementConfigRequest.add_member(:qualifier, Shapes::ShapeRef.new(shape: NumericLatestPublishedOrAliasQualifier, location: "querystring", location_name: "Qualifier"))
     GetRuntimeManagementConfigRequest.struct_class = Types::GetRuntimeManagementConfigRequest
@@ -2024,6 +2046,15 @@ module Aws::Lambda
     PutProvisionedConcurrencyConfigResponse.add_member(:last_modified, Shapes::ShapeRef.new(shape: Timestamp, location_name: "LastModified"))
     PutProvisionedConcurrencyConfigResponse.struct_class = Types::PutProvisionedConcurrencyConfigResponse
 
+    PutResourcePolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: PolicyResourceArn, required: true, location: "uri", location_name: "ResourceArn"))
+    PutResourcePolicyRequest.add_member(:policy, Shapes::ShapeRef.new(shape: ResourcePolicy, required: true, location_name: "Policy"))
+    PutResourcePolicyRequest.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "RevisionId"))
+    PutResourcePolicyRequest.struct_class = Types::PutResourcePolicyRequest
+
+    PutResourcePolicyResponse.add_member(:policy, Shapes::ShapeRef.new(shape: ResourcePolicy, location_name: "Policy"))
+    PutResourcePolicyResponse.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "RevisionId"))
+    PutResourcePolicyResponse.struct_class = Types::PutResourcePolicyResponse
+
     PutRuntimeManagementConfigRequest.add_member(:function_name, Shapes::ShapeRef.new(shape: NamespacedFunctionName, required: true, location: "uri", location_name: "FunctionName"))
     PutRuntimeManagementConfigRequest.add_member(:qualifier, Shapes::ShapeRef.new(shape: NumericLatestPublishedOrAliasQualifier, location: "querystring", location_name: "Qualifier"))
     PutRuntimeManagementConfigRequest.add_member(:update_runtime_on, Shapes::ShapeRef.new(shape: UpdateRuntimeOn, required: true, location_name: "UpdateRuntimeOn"))
@@ -2090,6 +2121,9 @@ module Aws::Lambda
     RuntimeVersionError.add_member(:message, Shapes::ShapeRef.new(shape: SensitiveString, location_name: "Message"))
     RuntimeVersionError.struct_class = Types::RuntimeVersionError
 
+    S3FilesConfig.add_member(:direct_s3_read, Shapes::ShapeRef.new(shape: DirectS3Read, location_name: "DirectS3Read"))
+    S3FilesConfig.struct_class = Types::S3FilesConfig
+
     S3FilesMountConnectivityException.add_member(:type, Shapes::ShapeRef.new(shape: String, location_name: "Type"))
     S3FilesMountConnectivityException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "Message"))
     S3FilesMountConnectivityException.struct_class = Types::S3FilesMountConnectivityException
@@ -2688,6 +2722,20 @@ module Aws::Lambda
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:delete_resource_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteResourcePolicy"
+        o.http_method = "DELETE"
+        o.http_request_uri = "/2026-07-09/resource-policy/{ResourceArn}"
+        o.input = Shapes::ShapeRef.new(shape: DeleteResourcePolicyRequest)
+        o.output = Shapes::ShapeRef.new(shape: Shapes::StructureShape.new(struct_class: Aws::EmptyStructure))
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterValueException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: PreconditionFailedException)
+      end)
+
       api.add_operation(:get_account_settings, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetAccountSettings"
         o.http_method = "GET"
@@ -2962,6 +3010,18 @@ module Aws::Lambda
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:get_resource_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetResourcePolicy"
+        o.http_method = "GET"
+        o.http_request_uri = "/2026-07-09/resource-policy/{ResourceArn}"
+        o.input = Shapes::ShapeRef.new(shape: GetResourcePolicyRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetResourcePolicyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterValueException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+      end)
+
       api.add_operation(:get_runtime_management_config, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetRuntimeManagementConfig"
         o.http_method = "GET"
@@ -3474,6 +3534,22 @@ module Aws::Lambda
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:put_resource_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "PutResourcePolicy"
+        o.http_method = "PUT"
+        o.http_request_uri = "/2026-07-09/resource-policy/{ResourceArn}"
+        o.input = Shapes::ShapeRef.new(shape: PutResourcePolicyRequest)
+        o.output = Shapes::ShapeRef.new(shape: PutResourcePolicyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterValueException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: PublicPolicyException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: PolicyLengthExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: PreconditionFailedException)
+      end)
+
       api.add_operation(:put_runtime_management_config, Seahorse::Model::Operation.new.tap do |o|
         o.name = "PutRuntimeManagementConfig"
         o.http_method = "PUT"

data/lib/aws-sdk-lambda/types.rb

@@ -2461,6 +2461,29 @@ module Aws::Lambda
       include Aws::Structure
     end
 
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the Lambda resource you want to
+    #   delete the policy from. You can use a qualified or an unqualified
+    #   ARN. The value must be a complete ARN, and the operation does not
+    #   accept wildcard characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The revision ID that the existing policy must match for the deletion
+    #   to proceed. If the revision ID doesn't match, the operation fails
+    #   with a `PreconditionFailedException` error. To retrieve the current
+    #   revision ID, use the GetResourcePolicy operation.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/DeleteResourcePolicyRequest AWS API Documentation
+    #
+    class DeleteResourcePolicyRequest < Struct.new(
+      :resource_arn,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A configuration object that specifies the destination of an event
     # after Lambda processes it. For more information, see [Adding a
     # destination][1].
@@ -3609,7 +3632,7 @@ module Aws::Lambda
     end
 
     # Details about the connection between a Lambda function and an [Amazon
-    # EFS file system][1] or an [Amazon S3 Files file system][1].
+    # EFS file system][1] or an [Amazon S3 file system][1].
     #
     #
     #
@@ -3625,11 +3648,20 @@ module Aws::Lambda
     #   with `/mnt/`.
     #   @return [String]
     #
+    # @!attribute [rw] s3_files_config
+    #   The configuration for how your function accesses data on an Amazon
+    #   S3 file system. Valid only when the file system access point ARN is
+    #   an Amazon S3 Files access point. If you specify a different access
+    #   point type (for example, Amazon Elastic File System), the operation
+    #   returns an `InvalidParameterException`.
+    #   @return [Types::S3FilesConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/FileSystemConfig AWS API Documentation
     #
     class FileSystemConfig < Struct.new(
       :arn,
-      :local_mount_path)
+      :local_mount_path,
+      :s3_files_config)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4003,7 +4035,7 @@ module Aws::Lambda
     #
     # @!attribute [rw] file_system_configs
     #   Connection settings for an [Amazon EFS file system][1] or an [Amazon
-    #   S3 Files file system][1].
+    #   S3 file system][1].
     #
     #
     #
@@ -5351,6 +5383,41 @@ module Aws::Lambda
       include Aws::Structure
     end
 
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the Lambda resource you want to
+    #   retrieve the policy for. You can use a qualified or an unqualified
+    #   ARN. The value must be a complete ARN, and the operation does not
+    #   accept wildcard characters.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/GetResourcePolicyRequest AWS API Documentation
+    #
+    class GetResourcePolicyRequest < Struct.new(
+      :resource_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] policy
+    #   The resource-based policy attached to the Lambda resource you
+    #   specified.
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The revision ID of the policy. Pass this value as the `RevisionId`
+    #   in a PutResourcePolicy or DeleteResourcePolicy request. Doing so
+    #   ensures the operation acts on the expected version of the policy.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/GetResourcePolicyResponse AWS API Documentation
+    #
+    class GetResourcePolicyResponse < Struct.new(
+      :policy,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] function_name
     #   The name or ARN of the Lambda function.
     #
@@ -7707,10 +7774,10 @@ module Aws::Lambda
     #
     # @!attribute [rw] maximum_pollers
     #   The maximum number of event pollers this event source can scale up
-    #   to. For Amazon SQS events source mappings, default is 200, and
-    #   minimum value allowed is 2. For Amazon MSK and self-managed Apache
-    #   Kafka event source mappings, default is 200, and minimum value
-    #   allowed is 1.
+    #   to. For Amazon SQS event source mappings, the accepted range is
+    #   between 2 and 10,000, with a default of 200. For Amazon MSK and
+    #   self-managed Apache Kafka event source mappings, the accepted range
+    #   is between 1 and 2,000, with a default of 200.
     #   @return [Integer]
     #
     # @!attribute [rw] poller_group_name
@@ -7733,15 +7800,8 @@ module Aws::Lambda
       include Aws::Structure
     end
 
-    # The resource-based policy you tried to add to the Lambda function
-    # would grant public access to it, and your account's
-    # `BlockPublicAccess` setting prevents public access. For more
-    # information about blocking public access to Lambda functions, see
-    # [Block public access to Lambda resources][1].
-    #
-    #
-    #
-    # [1]: https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html#access-control-block-public-access
+    # The resource-based policy you tried to add to the Lambda resource
+    # would grant public access to it, which isn't allowed.
     #
     # @!attribute [rw] type
     #   The exception type.
@@ -8293,6 +8353,61 @@ module Aws::Lambda
       include Aws::Structure
     end
 
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the Lambda resource you want to
+    #   add the policy to. You can use a qualified or an unqualified ARN.
+    #   The value must be a complete ARN, and the operation does not accept
+    #   wildcard characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy
+    #   The policy document you want to add to your Lambda resource. This is
+    #   formatted as a JSON string.
+    #
+    #   For more information, see [Working with resource-based policies in
+    #   Lambda][1] in the *Lambda Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The revision ID that the existing policy must match for the
+    #   replacement to proceed. If the revision ID doesn't match, the
+    #   operation fails with a `PreconditionFailedException` error. To
+    #   retrieve the current revision ID, use the GetResourcePolicy
+    #   operation.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/PutResourcePolicyRequest AWS API Documentation
+    #
+    class PutResourcePolicyRequest < Struct.new(
+      :resource_arn,
+      :policy,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] policy
+    #   The resource-based policy that Lambda adds to the resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The revision ID of the policy that Lambda adds to your Lambda
+    #   resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/PutResourcePolicyResponse AWS API Documentation
+    #
+    class PutResourcePolicyResponse < Struct.new(
+      :policy,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] function_name
     #   The name or ARN of the Lambda function.
     #
@@ -8665,6 +8780,37 @@ module Aws::Lambda
       include Aws::Structure
     end
 
+    # Setting controls how your function accesses data from an Amazon S3
+    # file system.
+    #
+    # @!attribute [rw] direct_s3_read
+    #   Specifies if a function reads from the file system for the lowest
+    #   latency, or through Amazon S3 Files feature "direct Amazon S3
+    #   bucket reads" for the highest throughput. Valid values:
+    #
+    #   * `AUTO` (default) – Direct reads are active for functions you
+    #     configure with 512 MB or more of memory.
+    #
+    #   * `ENABLED` – Enforces all reads are directly from the Amazon S3
+    #     bucket, regardless of available memory (less than 512 MB).
+    #
+    #   * `DISABLED` – Routes all reads through the file system, regardless
+    #     of memory configuration.
+    #
+    #   To use direct reads, you must grant the execution role the
+    #   `s3:GetObject` and `s3:GetObjectVersion` permissions. If a direct
+    #   read fails, Lambda automatically falls back to reading through the
+    #   file system.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/S3FilesConfig AWS API Documentation
+    #
+    class S3FilesConfig < Struct.new(
+      :direct_s3_read)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Lambda function couldn't make a network connection to the
     # configured S3 Files access point.
     #

data/lib/aws-sdk-lambda.rb

@@ -56,7 +56,7 @@ module Aws::Lambda
   autoload :Endpoints, 'aws-sdk-lambda/endpoints'
   autoload :EventStreams, 'aws-sdk-lambda/event_streams'
 
-  GEM_VERSION = '1.192.0'
+  GEM_VERSION = '1.194.0'
 
 end
 

data/sig/client.rbs

@@ -419,7 +419,10 @@ module Aws
                              ?file_system_configs: Array[
                                {
                                  arn: ::String,
-                                 local_mount_path: ::String
+                                 local_mount_path: ::String,
+                                 s3_files_config: {
+                                   direct_s3_read: ("ENABLED" | "DISABLED" | "AUTO")?
+                                 }?
                                }
                              ],
                              ?code_signing_config_arn: ::String,
@@ -597,6 +600,13 @@ module Aws
                                                  ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
                                                | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
 
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lambda/Client.html#delete_resource_policy-instance_method
+      def delete_resource_policy: (
+                                    resource_arn: ::String,
+                                    ?revision_id: ::String
+                                  ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
+                                | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
+
       interface _GetAccountSettingsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetAccountSettingsResponse]
         def account_limit: () -> Types::AccountLimit
@@ -954,6 +964,17 @@ module Aws
                                               ) -> _GetProvisionedConcurrencyConfigResponseSuccess
                                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetProvisionedConcurrencyConfigResponseSuccess
 
+      interface _GetResourcePolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetResourcePolicyResponse]
+        def policy: () -> ::String
+        def revision_id: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lambda/Client.html#get_resource_policy-instance_method
+      def get_resource_policy: (
+                                 resource_arn: ::String
+                               ) -> _GetResourcePolicyResponseSuccess
+                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetResourcePolicyResponseSuccess
+
       interface _GetRuntimeManagementConfigResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetRuntimeManagementConfigResponse]
         def update_runtime_on: () -> ("Auto" | "Manual" | "FunctionUpdate")
@@ -1389,6 +1410,19 @@ module Aws
                                               ) -> _PutProvisionedConcurrencyConfigResponseSuccess
                                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutProvisionedConcurrencyConfigResponseSuccess
 
+      interface _PutResourcePolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::PutResourcePolicyResponse]
+        def policy: () -> ::String
+        def revision_id: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Lambda/Client.html#put_resource_policy-instance_method
+      def put_resource_policy: (
+                                 resource_arn: ::String,
+                                 policy: ::String,
+                                 ?revision_id: ::String
+                               ) -> _PutResourcePolicyResponseSuccess
+                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutResourcePolicyResponseSuccess
+
       interface _PutRuntimeManagementConfigResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::PutRuntimeManagementConfigResponse]
         def update_runtime_on: () -> ("Auto" | "Manual" | "FunctionUpdate")
@@ -1767,7 +1801,10 @@ module Aws
                                            ?file_system_configs: Array[
                                              {
                                                arn: ::String,
-                                               local_mount_path: ::String
+                                               local_mount_path: ::String,
+                                               s3_files_config: {
+                                                 direct_s3_read: ("ENABLED" | "DISABLED" | "AUTO")?
+                                               }?
                                              }
                                            ],
                                            ?image_config: {

data/sig/types.rbs

@@ -542,6 +542,12 @@ module Aws::Lambda
       SENSITIVE: []
     end
 
+    class DeleteResourcePolicyRequest
+      attr_accessor resource_arn: ::String
+      attr_accessor revision_id: ::String
+      SENSITIVE: []
+    end
+
     class DestinationConfig
       attr_accessor on_success: Types::OnSuccess
       attr_accessor on_failure: Types::OnFailure
@@ -798,6 +804,7 @@ module Aws::Lambda
     class FileSystemConfig
       attr_accessor arn: ::String
       attr_accessor local_mount_path: ::String
+      attr_accessor s3_files_config: Types::S3FilesConfig
       SENSITIVE: []
     end
 
@@ -1171,6 +1178,17 @@ module Aws::Lambda
       SENSITIVE: []
     end
 
+    class GetResourcePolicyRequest
+      attr_accessor resource_arn: ::String
+      SENSITIVE: []
+    end
+
+    class GetResourcePolicyResponse
+      attr_accessor policy: ::String
+      attr_accessor revision_id: ::String
+      SENSITIVE: []
+    end
+
     class GetRuntimeManagementConfigRequest
       attr_accessor function_name: ::String
       attr_accessor qualifier: ::String
@@ -1837,6 +1855,19 @@ module Aws::Lambda
       SENSITIVE: []
     end
 
+    class PutResourcePolicyRequest
+      attr_accessor resource_arn: ::String
+      attr_accessor policy: ::String
+      attr_accessor revision_id: ::String
+      SENSITIVE: []
+    end
+
+    class PutResourcePolicyResponse
+      attr_accessor policy: ::String
+      attr_accessor revision_id: ::String
+      SENSITIVE: []
+    end
+
     class PutRuntimeManagementConfigRequest
       attr_accessor function_name: ::String
       attr_accessor qualifier: ::String
@@ -1929,6 +1960,11 @@ module Aws::Lambda
       SENSITIVE: [:message]
     end
 
+    class S3FilesConfig
+      attr_accessor direct_s3_read: ("ENABLED" | "DISABLED" | "AUTO")
+      SENSITIVE: []
+    end
+
     class S3FilesMountConnectivityException
       attr_accessor type: ::String
       attr_accessor message: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-lambda
 version: !ruby/object:Gem::Version
-  version: 1.192.0
+  version: 1.194.0
 platform: ruby
 authors:
 - Amazon Web Services