@exabugs/dynamodb-client 0.7.3 → 0.7.4

package/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.7.4] - 2025-12-28
+
+### Fixed
+
+- **Lambda KMS Encryption**: Disabled KMS encryption for Lambda function to resolve persistent KMSAccessDeniedException (ADR-004)
+- **Lambda Startup**: Fixed Lambda function startup failure by explicitly setting `kms_key_arn = ""`
+- **502 Bad Gateway**: Resolved Function URL errors caused by Lambda execution environment KMS issues
+
+### Changed
+
+- **Security Model**: Moved from KMS-encrypted Lambda environment to unencrypted for compatibility
+- **ADR-003 Deprecated**: Replaced complex KMS permission approach with simpler encryption disable approach
+
+### Technical
+
+- **Terraform**: Added `kms_key_arn = ""` to Lambda function configuration
+- **Architecture Decision**: Created ADR-004 to document KMS encryption disable decision
+
 ## [0.7.3] - 2025-12-28
 
 ### Fixed

package/dist/server/handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v0.7.3
-// Built: 2025-12-28T10:27:40.943Z
+// @exabugs/dynamodb-client v0.7.4
+// Built: 2025-12-28T10:39:29.906Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exabugs/dynamodb-client",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "description": "DynamoDB Single-Table Client SDK with MongoDB-like API, Shadow Records, and Lambda implementation for serverless applications",
   "author": "exabugs",
   "license": "MIT",

package/terraform/main.tf

@@ -151,6 +151,10 @@ resource "aws_lambda_function" "records" {
   timeout     = 30
   memory_size = 512
 
+  # KMS暗号化を明示的に無効化（ADR-004）
+  # AWS管理のデフォルトKMSキーアクセス権限の問題を回避
+  kms_key_arn = ""
+
   # 環境変数
   environment {
     variables = {