aws-sdk-lambda 1.160.0 → 1.161.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 418eb4bdcdb11410cd73be623659caf9e73613bb02cd5cd7bed8f1aef22cfc94
-  data.tar.gz: e0969b7d74e405d9342e21c89ba40ace42a866b81b1b07c0f97b72dc02d60509
+  metadata.gz: 2d261f707b6906a6734ae9cc34b831caae7040dea6065db86f9bc5936efc98dc
+  data.tar.gz: bce3533debe10bf07bab974fccd3f2e7990f0855c343b88d3dc6c66fff6dbdfa
 SHA512:
-  metadata.gz: 4d1438957edf44bc8a627fd6c8e02a2fe33a959afa7e97bb5cede6338696030096d6b2a06470b50f439da619c266f5b58194573164ce38126aaef370b105feb9
-  data.tar.gz: b0814eb19f7c8910edca72e01b57a4265b4232b9cdb55ae76fc09a6a510a1e99da7d2151459d086bfc6701a4e8a3d4fed08cd9a728189984b0335b102a41aaf7
+  metadata.gz: e799de907d46f26c97d2382547946b0a3b7b153ac03eaf9826e671d2bb2dbc4c51216e47fb606ed5fc48b5a1e1553fe1c8f9273876a8f8fce96d73c045de60a8
+  data.tar.gz: 3f3937af2e8a7131fa6d322e9fe045645feab052a3bd5b1deaaf77a1cae7453c450d9dcaa0f087e5063f08a0e60ce4079a87e68132d17455d57bb1e63ade4703

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.161.0 (2025-10-10)
+------------------
+
+* Feature - Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes.
+
 1.160.0 (2025-08-26)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.160.0
+1.161.0

data/lib/aws-sdk-lambda/client.rb

@@ -680,6 +680,17 @@ module Aws::Lambda
     #
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html
     #
+    # @option params [Boolean] :invoked_via_function_url
+    #   Restricts the `lambda:InvokeFunction` action to calls coming from a
+    #   function URL. When set to `true`, this prevents the principal from
+    #   invoking the function by any means other than the function URL. For
+    #   more information, see [Security and auth model for Lambda function
+    #   URLs][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html
+    #
     # @return [Types::AddPermissionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::AddPermissionResponse#statement #statement} => String
@@ -734,6 +745,7 @@ module Aws::Lambda
     #     revision_id: "String",
     #     principal_org_id: "PrincipalOrgID",
     #     function_url_auth_type: "NONE", # accepts NONE, AWS_IAM
+    #     invoked_via_function_url: false,
     #   })
     #
     # @example Response structure
@@ -3869,9 +3881,9 @@ module Aws::Lambda
     #   * {Types::GetProvisionedConcurrencyConfigResponse#last_modified #last_modified} => Time
     #
     #
-    # @example Example: To get a provisioned concurrency configuration
+    # @example Example: To view a provisioned concurrency configuration
     #
-    #   # The following example returns details for the provisioned concurrency configuration for the BLUE alias of the specified
+    #   # The following example displays details for the provisioned concurrency configuration for the BLUE alias of the specified
     #   # function.
     #
     #   resp = client.get_provisioned_concurrency_config({
@@ -3888,9 +3900,9 @@ module Aws::Lambda
     #     status: "READY", 
     #   }
     #
-    # @example Example: To view a provisioned concurrency configuration
+    # @example Example: To get a provisioned concurrency configuration
     #
-    #   # The following example displays details for the provisioned concurrency configuration for the BLUE alias of the specified
+    #   # The following example returns details for the provisioned concurrency configuration for the BLUE alias of the specified
     #   # function.
     #
     #   resp = client.get_provisioned_concurrency_config({
@@ -8350,7 +8362,7 @@ module Aws::Lambda
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-lambda'
-      context[:gem_version] = '1.160.0'
+      context[:gem_version] = '1.161.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-lambda/client_api.rb

@@ -191,6 +191,7 @@ module Aws::Lambda
     InvokeWithResponseStreamRequest = Shapes::StructureShape.new(name: 'InvokeWithResponseStreamRequest')
     InvokeWithResponseStreamResponse = Shapes::StructureShape.new(name: 'InvokeWithResponseStreamResponse')
     InvokeWithResponseStreamResponseEvent = Shapes::StructureShape.new(name: 'InvokeWithResponseStreamResponseEvent')
+    InvokedViaFunctionUrl = Shapes::BooleanShape.new(name: 'InvokedViaFunctionUrl')
     KMSAccessDeniedException = Shapes::StructureShape.new(name: 'KMSAccessDeniedException')
     KMSDisabledException = Shapes::StructureShape.new(name: 'KMSDisabledException')
     KMSInvalidStateException = Shapes::StructureShape.new(name: 'KMSInvalidStateException')
@@ -434,6 +435,7 @@ module Aws::Lambda
     AddPermissionRequest.add_member(:revision_id, Shapes::ShapeRef.new(shape: String, location_name: "RevisionId"))
     AddPermissionRequest.add_member(:principal_org_id, Shapes::ShapeRef.new(shape: PrincipalOrgID, location_name: "PrincipalOrgID"))
     AddPermissionRequest.add_member(:function_url_auth_type, Shapes::ShapeRef.new(shape: FunctionUrlAuthType, location_name: "FunctionUrlAuthType"))
+    AddPermissionRequest.add_member(:invoked_via_function_url, Shapes::ShapeRef.new(shape: InvokedViaFunctionUrl, location_name: "InvokedViaFunctionUrl"))
     AddPermissionRequest.struct_class = Types::AddPermissionRequest
 
     AddPermissionResponse.add_member(:statement, Shapes::ShapeRef.new(shape: String, location_name: "Statement"))

data/lib/aws-sdk-lambda/customizations.rb

@@ -1,8 +0,0 @@
-# frozen_string_literal: true
-# WARNING ABOUT GENERATED CODE
-#
-# This file is generated. See the contributing for info on making contributions:
-# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
-#
-# WARNING ABOUT GENERATED CODE
-

data/lib/aws-sdk-lambda/types.rb

@@ -224,6 +224,18 @@ module Aws::Lambda
     #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html
     #   @return [String]
     #
+    # @!attribute [rw] invoked_via_function_url
+    #   Restricts the `lambda:InvokeFunction` action to calls coming from a
+    #   function URL. When set to `true`, this prevents the principal from
+    #   invoking the function by any means other than the function URL. For
+    #   more information, see [Security and auth model for Lambda function
+    #   URLs][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/lambda-2015-03-31/AddPermissionRequest AWS API Documentation
     #
     class AddPermissionRequest < Struct.new(
@@ -237,7 +249,8 @@ module Aws::Lambda
       :qualifier,
       :revision_id,
       :principal_org_id,
-      :function_url_auth_type)
+      :function_url_auth_type,
+      :invoked_via_function_url)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -436,8 +449,9 @@ module Aws::Lambda
     #   Code signing configuration policy for deployment validation failure.
     #   If you set the policy to `Enforce`, Lambda blocks the deployment
     #   request if signature validation checks fail. If you set the policy
-    #   to `Warn`, Lambda allows the deployment and creates a CloudWatch
-    #   log.
+    #   to `Warn`, Lambda allows the deployment and issues a new Amazon
+    #   CloudWatch metric (`SignatureValidationErrors`) and also stores the
+    #   warning in the CloudTrail log.
     #
     #   Default value: `Warn`
     #   @return [String]

data/lib/aws-sdk-lambda.rb

@@ -56,7 +56,7 @@ module Aws::Lambda
   autoload :Endpoints, 'aws-sdk-lambda/endpoints'
   autoload :EventStreams, 'aws-sdk-lambda/event_streams'
 
-  GEM_VERSION = '1.160.0'
+  GEM_VERSION = '1.161.0'
 
 end
 

data/sig/client.rbs

@@ -114,7 +114,8 @@ module Aws
                             ?qualifier: ::String,
                             ?revision_id: ::String,
                             ?principal_org_id: ::String,
-                            ?function_url_auth_type: ("NONE" | "AWS_IAM")
+                            ?function_url_auth_type: ("NONE" | "AWS_IAM"),
+                            ?invoked_via_function_url: bool
                           ) -> _AddPermissionResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _AddPermissionResponseSuccess
 

data/sig/types.rbs

@@ -52,6 +52,7 @@ module Aws::Lambda
       attr_accessor revision_id: ::String
       attr_accessor principal_org_id: ::String
       attr_accessor function_url_auth_type: ("NONE" | "AWS_IAM")
+      attr_accessor invoked_via_function_url: bool
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-lambda
 version: !ruby/object:Gem::Version
-  version: 1.160.0
+  version: 1.161.0
 platform: ruby
 authors:
 - Amazon Web Services