@remotion/lambda 4.0.508 → 4.0.510

package/dist/esm/index.mjs

@@ -8604,7 +8604,7 @@ var require_package = __commonJS((exports, module) => {
       url: "https://github.com/remotion-dev/remotion/tree/main/packages/lambda"
     },
     name: "@remotion/lambda",
-    version: "4.0.508",
+    version: "4.0.510",
     description: "Render Remotion videos on AWS Lambda",
     main: "dist/index.js",
     scripts: {
@@ -8778,7 +8778,7 @@ var deleteSite = (props) => {
 
 // src/api/deploy-function.ts
 import {
-  LambdaClientInternals as LambdaClientInternals5,
+  LambdaClientInternals as LambdaClientInternals6,
   speculateFunctionName
 } from "@remotion/lambda-client";
 import { DEFAULT_EPHEMERAL_STORAGE_IN_MB } from "@remotion/lambda-client/constants";
@@ -8797,9 +8797,11 @@ import {
 import {
   CreateFunctionCommand,
   GetFunctionCommand,
+  GetFunctionConfigurationCommand,
   PutFunctionEventInvokeConfigCommand,
   PutRuntimeManagementConfigCommand,
-  TagResourceCommand
+  TagResourceCommand,
+  UpdateFunctionConfigurationCommand
 } from "@aws-sdk/client-lambda";
 import {
   LambdaClientInternals as LambdaClientInternals3
@@ -9335,8 +9337,10 @@ var getLayers = ({
   option,
   region
 }) => {
-  const layers = hostedLayers[region];
-  return layers.filter((layer) => {
+  if (!(region in hostedLayers)) {
+    throw new Error(`Remotion-hosted Layers are not available in ${region}.`);
+  }
+  return hostedLayers[region].filter((layer) => {
     if (layer.layerArn.includes("emoji-apple")) {
       return option === "apple-emojis";
     }
@@ -9380,7 +9384,9 @@ var lambdaInsightsExtensions = {
   "sa-east-1": "arn:aws:lambda:sa-east-1:580247275435:layer:LambdaInsightsExtension-Arm64:3",
   "ap-southeast-4": null,
   "ap-southeast-5": null,
-  "eu-central-2": null
+  "eu-central-2": null,
+  "cn-north-1": "arn:aws-cn:lambda:cn-north-1:488211338238:layer:LambdaInsightsExtension-Arm64:4",
+  "cn-northwest-1": "arn:aws-cn:lambda:cn-northwest-1:488211338238:layer:LambdaInsightsExtension-Arm64:4"
 };
 
 // src/api/iam-validation/role-permissions.ts
@@ -9390,7 +9396,7 @@ import {
   REMOTION_BUCKET_PREFIX,
   RENDER_FN_PREFIX
 } from "@remotion/lambda-client/constants";
-var rolePermissions = [
+var getRolePermissions = (partition) => [
   {
     actions: ["s3:ListAllMyBuckets"],
     resource: ["*"]
@@ -9406,24 +9412,25 @@ var rolePermissions = [
       "s3:PutObject",
       "s3:GetBucketLocation"
     ],
-    resource: [`arn:aws:s3:::${REMOTION_BUCKET_PREFIX}*`]
+    resource: [`arn:${partition}:s3:::${REMOTION_BUCKET_PREFIX}*`]
   },
   {
     actions: ["lambda:InvokeFunction"],
-    resource: [`arn:aws:lambda:*:*:function:${RENDER_FN_PREFIX}*`]
+    resource: [`arn:${partition}:lambda:*:*:function:${RENDER_FN_PREFIX}*`]
   },
   {
     actions: ["logs:CreateLogGroup"],
-    resource: [`arn:aws:logs:*:*:log-group:${LAMBDA_INSIGHTS_PREFIX}`]
+    resource: [`arn:${partition}:logs:*:*:log-group:${LAMBDA_INSIGHTS_PREFIX}`]
   },
   {
     actions: ["logs:CreateLogStream", "logs:PutLogEvents"],
     resource: [
-      `arn:aws:logs:*:*:log-group:${LOG_GROUP_PREFIX}${RENDER_FN_PREFIX}*`,
-      `arn:aws:logs:*:*:log-group:${LAMBDA_INSIGHTS_PREFIX}:*`
+      `arn:${partition}:logs:*:*:log-group:${LOG_GROUP_PREFIX}${RENDER_FN_PREFIX}*`,
+      `arn:${partition}:logs:*:*:log-group:${LAMBDA_INSIGHTS_PREFIX}:*`
     ]
   }
 ];
+var rolePermissions = getRolePermissions("aws");
 
 // src/api/iam-validation/user-permissions.ts
 import {
@@ -9431,7 +9438,7 @@ import {
   REMOTION_BUCKET_PREFIX as REMOTION_BUCKET_PREFIX2,
   RENDER_FN_PREFIX as RENDER_FN_PREFIX2
 } from "@remotion/lambda-client/constants";
-var requiredPermissions = [
+var getRequiredPermissions = (partition) => [
   {
     id: "HandleQuotas",
     actions: [
@@ -9450,7 +9457,7 @@ var requiredPermissions = [
   {
     id: "LambdaInvokation",
     actions: ["iam:PassRole"],
-    resource: ["arn:aws:iam::*:role/remotion-lambda-role"]
+    resource: [`arn:${partition}:iam::*:role/remotion-lambda-role`]
   },
   {
     id: "Storage",
@@ -9469,7 +9476,7 @@ var requiredPermissions = [
       "s3:PutBucketPolicy",
       "s3:PutLifecycleConfiguration"
     ],
-    resource: [`arn:aws:s3:::${REMOTION_BUCKET_PREFIX2}*`]
+    resource: [`arn:${partition}:s3:::${REMOTION_BUCKET_PREFIX2}*`]
   },
   {
     id: "BucketListing",
@@ -9492,55 +9499,52 @@ var requiredPermissions = [
       "lambda:PutRuntimeManagementConfig",
       "lambda:TagResource"
     ],
-    resource: [`arn:aws:lambda:*:*:function:${RENDER_FN_PREFIX2}*`]
+    resource: [`arn:${partition}:lambda:*:*:function:${RENDER_FN_PREFIX2}*`]
   },
   {
     id: "LogsRetention",
     actions: ["logs:CreateLogGroup", "logs:PutRetentionPolicy"],
     resource: [
-      `arn:aws:logs:*:*:log-group:${LOG_GROUP_PREFIX2}${RENDER_FN_PREFIX2}*`
+      `arn:${partition}:logs:*:*:log-group:${LOG_GROUP_PREFIX2}${RENDER_FN_PREFIX2}*`
     ]
   },
   {
     id: "FetchBinaries",
     actions: ["lambda:GetLayerVersion"],
-    resource: [
+    resource: partition === "aws-cn" ? ["arn:aws-cn:lambda:*:488211338238:layer:LambdaInsightsExtension*"] : [
       REMOTION_HOSTED_LAYER_ARN,
       "arn:aws:lambda:*:580247275435:layer:LambdaInsightsExtension*"
     ]
   }
 ];
+var requiredPermissions = getRequiredPermissions("aws");
 
 // src/api/iam-validation/suggested-policy.ts
-var suggestedPolicy = {
+var makePolicy = (partition) => ({
   Version: "2012-10-17",
-  Statement: [
-    ...requiredPermissions.map((per) => {
-      return {
-        Sid: per.id,
-        Effect: "Allow",
-        Action: per.actions,
-        Resource: per.resource
-      };
-    })
-  ]
-};
-var suggestedRolePolicy = {
+  Statement: getRequiredPermissions(partition).map((per) => {
+    return {
+      Sid: per.id,
+      Effect: "Allow",
+      Action: per.actions,
+      Resource: per.resource
+    };
+  })
+});
+var makeRolePolicy = (partition) => ({
   Version: "2012-10-17",
-  Statement: [
-    ...rolePermissions.map((per, i) => {
-      return {
-        Sid: String(i),
-        Effect: "Allow",
-        Action: per.actions,
-        Resource: per.resource
-      };
-    })
-  ]
-};
-var getUserPolicy = () => JSON.stringify(suggestedPolicy, null, 2);
+  Statement: getRolePermissions(partition).map((per, i) => {
+    return {
+      Sid: String(i),
+      Effect: "Allow",
+      Action: per.actions,
+      Resource: per.resource
+    };
+  })
+});
+var getUserPolicy = (options) => JSON.stringify(makePolicy(options?.partition ?? "aws"), null, 2);
 var ROLE_NAME = "remotion-lambda-role";
-var getRolePolicy = () => JSON.stringify(suggestedRolePolicy, null, 2);
+var getRolePolicy = (options) => JSON.stringify(makeRolePolicy(options?.partition ?? "aws"), null, 2);
 
 // src/api/create-function.ts
 var createFunction = async ({
@@ -9555,6 +9559,7 @@ var createFunction = async ({
   retentionInDays,
   ephemerealStorageInMb,
   customRoleArn,
+  customLayerArns,
   enableLambdaInsights,
   logLevel,
   vpcSubnetIds,
@@ -9584,15 +9589,47 @@ var createFunction = async ({
     }));
     RenderInternals.Log.verbose({ indent: false, logLevel }, `Set retention to ${retentionInDays} days`);
   }
+  const insightsLayer = enableLambdaInsights ? lambdaInsightsExtensions[region] : null;
+  if (enableLambdaInsights && !insightsLayer) {
+    throw new Error(`Lambda Insights is not supported by AWS in region ${region}. Please disable Lambda Insights. See http://remotion.dev/docs/lambda/insights#unsupported-regions`);
+  }
+  const layers = (customLayerArns ?? getLayers({
+    option: runtimePreference,
+    region
+  }).map(({ layerArn, version }) => `${layerArn}:${version}`)).concat(insightsLayer ? [insightsLayer] : []);
   if (alreadyCreated) {
     RenderInternals.Log.verbose({ indent: false, logLevel }, `Function ${functionName} already existed`);
+    if (customLayerArns === null) {
+      return { FunctionName: functionName };
+    }
+    const lambdaClient = LambdaClientInternals3.getLambdaClient(region, undefined, requestHandler);
+    const currentConfiguration = await lambdaClient.send(new GetFunctionConfigurationCommand({ FunctionName: functionName }));
+    const currentLayers = (currentConfiguration.Layers ?? []).map((layer) => layer.Arn);
+    const layersAreEqual = currentLayers.length === layers.length && currentLayers.every((layer, index) => layer === layers[index]);
+    if (layersAreEqual) {
+      return { FunctionName: functionName };
+    }
+    RenderInternals.Log.verbose({ indent: false, logLevel }, `Updating Layers for function ${functionName}`);
+    await lambdaClient.send(new UpdateFunctionConfigurationCommand({
+      FunctionName: functionName,
+      Layers: layers
+    }));
+    while (true) {
+      const configuration = await lambdaClient.send(new GetFunctionConfigurationCommand({ FunctionName: functionName }));
+      if (configuration.State === "Failed" || configuration.LastUpdateStatus === "Failed") {
+        throw new Error(`Failed to update Layers for function ${functionName}: ${configuration.StateReason ?? configuration.LastUpdateStatusReason ?? "Unknown reason"}`);
+      }
+      if (configuration.State === "Active" && configuration.LastUpdateStatus !== "InProgress") {
+        break;
+      }
+      await new Promise((resolve) => {
+        setTimeout(resolve, 1000);
+      });
+    }
     return { FunctionName: functionName };
   }
-  const defaultRoleName = `arn:aws:iam::${accountId}:role/${ROLE_NAME}`;
-  const layers = getLayers({
-    option: runtimePreference,
-    region
-  });
+  const { partition } = LambdaClientInternals3.getAwsRegionMetadata(region);
+  const defaultRoleName = `arn:${partition}:iam::${accountId}:role/${ROLE_NAME}`;
   let vpcConfig;
   if (vpcSubnetIds && vpcSecurityGroupIds) {
     vpcConfig = {
@@ -9601,10 +9638,6 @@ var createFunction = async ({
     };
   }
   RenderInternals.Log.verbose({ indent: false, logLevel }, "Deploying new Lambda function");
-  const insightsLayer = enableLambdaInsights ? lambdaInsightsExtensions[region] : null;
-  if (enableLambdaInsights && !insightsLayer) {
-    throw new Error(`Lambda Insights is not supported by AWS in region ${region}. Please disable Lambda Insights. See http://remotion.dev/docs/lambda/insights#unsupported-regions`);
-  }
   const { FunctionName, FunctionArn } = await LambdaClientInternals3.getLambdaClient(region, undefined, requestHandler).send(new CreateFunctionCommand({
     Code: {
       ZipFile: new Uint8Array(readFileSync(zipFile))
@@ -9616,7 +9649,7 @@ var createFunction = async ({
     Description: "Renders a Remotion video.",
     MemorySize: memorySizeInMb,
     Timeout: timeoutInSeconds,
-    Layers: layers.map(({ layerArn, version }) => `${layerArn}:${version}`).concat(insightsLayer ? [insightsLayer] : []),
+    Layers: layers,
     Architectures: ["arm64"],
     EphemeralStorage: {
       Size: ephemerealStorageInMb
@@ -9650,6 +9683,7 @@ var createFunction = async ({
   RenderInternals.Log.verbose({ indent: false, logLevel }, "Set function retries to 0.");
   RenderInternals.Log.verbose({ indent: false, logLevel }, "Waiting for the function to be ready...");
   let state = "Pending";
+  let currentRuntimeVersionArn = null;
   while (state === "Pending") {
     const getFn = await LambdaClientInternals3.getLambdaClient(region, undefined, requestHandler).send(new GetFunctionCommand({
       FunctionName
@@ -9658,20 +9692,24 @@ var createFunction = async ({
       setTimeout(() => resolve(), 1000);
     });
     state = getFn.Configuration?.State;
+    currentRuntimeVersionArn = getFn.Configuration?.RuntimeVersionConfig?.RuntimeVersionArn ?? null;
   }
   RenderInternals.Log.verbose({ indent: false, logLevel }, "Function is now ready.");
   RenderInternals.Log.verbose({ indent: false, logLevel }, "Locking the runtime version of the function...");
-  const RuntimeVersionArn = `arn:aws:lambda:${region}::runtime:58a37e8413ed69058c4ac3b1df642118591f17d40def93d6101f867c72cd03c2`;
+  const runtimeVersionArn = partition === "aws-cn" ? currentRuntimeVersionArn : `arn:aws:lambda:${region}::runtime:58a37e8413ed69058c4ac3b1df642118591f17d40def93d6101f867c72cd03c2`;
   try {
+    if (!runtimeVersionArn) {
+      throw new Error("AWS did not return a runtime version ARN.");
+    }
     await LambdaClientInternals3.getLambdaClient(region, undefined, requestHandler).send(new PutRuntimeManagementConfigCommand({
       FunctionName,
       UpdateRuntimeOn: "Manual",
-      RuntimeVersionArn
+      RuntimeVersionArn: runtimeVersionArn
     }));
+    RenderInternals.Log.verbose({ indent: false, logLevel }, `Function runtime is locked to ${runtimeVersionArn}`);
   } catch {
     console.warn("⚠️ Could not lock the runtime version. We recommend to update your policies to prevent your functions from breaking in the future in case the AWS runtime changes. See https://remotion.dev/docs/lambda/feb-2023-incident for an example on how to update your policy.");
   }
-  RenderInternals.Log.verbose({ indent: false, logLevel }, `Function runtime is locked to ${RuntimeVersionArn}`);
   return { FunctionName };
 };
 
@@ -9896,6 +9934,55 @@ var b = "../";
 var a = "remotionlambda-arm64.zip";
 var FUNCTION_ZIP_ARM64 = path4.resolve(__require.resolve(`../` + b), "..", "..", a);
 
+// src/shared/validate-custom-layer-arns.ts
+import {
+  LambdaClientInternals as LambdaClientInternals5
+} from "@remotion/lambda-client";
+var layerVersionArnRegex = /^arn:([a-z0-9][a-z0-9-]*):lambda:([a-z0-9-]+):(\d{12}):layer:([A-Za-z0-9-_]+):(\d+)$/;
+var validateCustomLayerArns = ({
+  customLayerArns,
+  enableLambdaInsights,
+  region,
+  runtimePreference
+}) => {
+  const { partition } = LambdaClientInternals5.getAwsRegionMetadata(region);
+  if (customLayerArns === null) {
+    if (partition === "aws-cn") {
+      throw new Error("customLayerArns must be specified when deploying to AWS China regions because Remotion-hosted Layers are not available in the aws-cn partition.");
+    }
+    return;
+  }
+  if (!Array.isArray(customLayerArns) || customLayerArns.length === 0) {
+    throw new TypeError("customLayerArns must contain at least one Layer ARN.");
+  }
+  if (runtimePreference !== "default") {
+    throw new Error("customLayerArns cannot be combined with a non-default runtimePreference.");
+  }
+  if (customLayerArns.length + (enableLambdaInsights ? 1 : 0) > 5) {
+    throw new Error("Lambda functions support at most 5 Layers, including the Lambda Insights Layer.");
+  }
+  const seen = new Set;
+  for (const layerArn of customLayerArns) {
+    if (typeof layerArn !== "string" || layerArn.length === 0) {
+      throw new TypeError("Each customLayerArns entry must be a non-empty string.");
+    }
+    const match = layerArn.match(layerVersionArnRegex);
+    if (!match) {
+      throw new TypeError(`Invalid Lambda Layer version ARN: ${layerArn}. Expected arn:<partition>:lambda:<region>:<12-digit-account-id>:layer:<layer-name>:<numeric-version>.`);
+    }
+    if (match[1] !== partition) {
+      throw new Error(`The custom Layer ARN ${layerArn} uses partition ${match[1]}, but region ${region} uses partition ${partition}.`);
+    }
+    if (match[2] !== region) {
+      throw new Error(`The custom Layer ARN ${layerArn} is in region ${match[2]}, but the function is being deployed to ${region}.`);
+    }
+    if (seen.has(layerArn)) {
+      throw new Error(`Duplicate custom Layer ARN: ${layerArn}.`);
+    }
+    seen.add(layerArn);
+  }
+};
+
 // src/shared/validate-custom-role-arn.ts
 var validateCustomRoleArn = (customRoleArn) => {
   if (typeof customRoleArn !== "undefined" && typeof customRoleArn !== "string") {
@@ -9952,13 +10039,19 @@ var validateTimeout = (timeoutInSeconds) => {
 
 // src/api/deploy-function.ts
 var internalDeployFunction = async (params) => {
-  LambdaClientInternals5.validateMemorySize(params.memorySizeInMb);
+  LambdaClientInternals6.validateMemorySize(params.memorySizeInMb);
   validateTimeout(params.timeoutInSeconds);
-  LambdaClientInternals5.validateAwsRegion(params.region);
+  LambdaClientInternals6.validateAwsRegion(params.region);
   validateCloudWatchRetentionPeriod(params.cloudWatchLogRetentionPeriodInDays);
-  LambdaClientInternals5.validateDiskSizeInMb(params.diskSizeInMb);
+  LambdaClientInternals6.validateDiskSizeInMb(params.diskSizeInMb);
   validateCustomRoleArn(params.customRoleArn);
   validateRuntimePreference(params.runtimePreference);
+  validateCustomLayerArns({
+    customLayerArns: params.customLayerArns,
+    enableLambdaInsights: params.enableLambdaInsights,
+    region: params.region,
+    runtimePreference: params.runtimePreference
+  });
   const functionName = speculateFunctionName({
     diskSizeInMb: params.diskSizeInMb,
     memorySizeInMb: params.memorySizeInMb,
@@ -9980,10 +10073,11 @@ var internalDeployFunction = async (params) => {
     accountId,
     memorySizeInMb: params.memorySizeInMb,
     timeoutInSeconds: params.timeoutInSeconds,
-    retentionInDays: params.cloudWatchLogRetentionPeriodInDays ?? LambdaClientInternals5.DEFAULT_CLOUDWATCH_RETENTION_PERIOD,
+    retentionInDays: params.cloudWatchLogRetentionPeriodInDays ?? LambdaClientInternals6.DEFAULT_CLOUDWATCH_RETENTION_PERIOD,
     alreadyCreated: Boolean(alreadyDeployed),
     ephemerealStorageInMb: params.diskSizeInMb,
     customRoleArn: params.customRoleArn,
+    customLayerArns: params.customLayerArns,
     enableLambdaInsights: params.enableLambdaInsights ?? false,
     logLevel: params.logLevel,
     vpcSubnetIds: params.vpcSubnetIds,
@@ -10007,6 +10101,7 @@ var deployFunction = ({
   timeoutInSeconds,
   cloudWatchLogRetentionPeriodInDays,
   customRoleArn,
+  customLayerArns,
   enableLambdaInsights,
   indent,
   logLevel,
@@ -10025,6 +10120,7 @@ var deployFunction = ({
     logLevel: logLevel ?? "info",
     createCloudWatchLogGroup,
     customRoleArn: customRoleArn ?? undefined,
+    customLayerArns: customLayerArns ?? null,
     diskSizeInMb: diskSizeInMb ?? DEFAULT_EPHEMERAL_STORAGE_IN_MB,
     enableLambdaInsights: enableLambdaInsights ?? false,
     memorySizeInMb,
@@ -10034,7 +10130,7 @@ var deployFunction = ({
     vpcSubnetIds,
     vpcSecurityGroupIds,
     runtimePreference: runtimePreference ?? "default",
-    providerSpecifics: LambdaClientInternals5.awsImplementation,
+    providerSpecifics: LambdaClientInternals6.awsImplementation,
     fullClientSpecifics: awsFullClientSpecifics,
     requestHandler
   });
@@ -10042,12 +10138,12 @@ var deployFunction = ({
 
 // src/api/deploy-site.ts
 import fs4 from "node:fs";
-import { LambdaClientInternals as LambdaClientInternals7 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals8 } from "@remotion/lambda-client";
 import { getSitesKey as getSitesKey3 } from "@remotion/lambda-client/constants";
 import { wrapWithErrorHandling as wrapWithErrorHandling2 } from "@remotion/renderer/error-handling";
 
 // src/shared/deploy-site-with-bundle.ts
-import { LambdaClientInternals as LambdaClientInternals6 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals7 } from "@remotion/lambda-client";
 import {
   getSitesKey as getSitesKey2,
   REMOTION_BUCKET_PREFIX as REMOTION_BUCKET_PREFIX3
@@ -10142,7 +10238,7 @@ var deploySiteWithBundle = async ({
   requestHandler,
   getBundle
 }) => {
-  LambdaClientInternals6.validateAwsRegion(region);
+  LambdaClientInternals7.validateAwsRegion(region);
   validateBucketName({
     bucketName,
     bucketNamePrefix: REMOTION_BUCKET_PREFIX3,
@@ -10216,7 +10312,7 @@ var deploySiteWithBundle = async ({
   };
   await upload(assetsToUpload);
   await upload(indexHtmlToUpload);
-  const limit2 = LambdaClientInternals6.pLimit(deleteConcurrency);
+  const limit2 = LambdaClientInternals7.pLimit(deleteConcurrency);
   const deletePromises = toDelete.map((d) => {
     return limit2(() => {
       return providerSpecifics.deleteFile({
@@ -10231,7 +10327,7 @@ var deploySiteWithBundle = async ({
   });
   await waitForPromisesToFinish(deletePromises);
   return {
-    serveUrl: LambdaClientInternals6.makeS3ServeUrl({
+    serveUrl: LambdaClientInternals7.makeS3ServeUrl({
       bucketName,
       subFolder,
       region
@@ -10350,11 +10446,11 @@ var deploySite = (args) => {
     gitSource: args.gitSource ?? null,
     options: args.options ?? {},
     privacy: args.privacy ?? "public",
-    siteName: args.siteName ?? LambdaClientInternals7.awsImplementation.randomHash(),
+    siteName: args.siteName ?? LambdaClientInternals8.awsImplementation.randomHash(),
     indent: false,
     logLevel: "info",
     throwIfSiteExists: args.throwIfSiteExists ?? false,
-    providerSpecifics: LambdaClientInternals7.awsImplementation,
+    providerSpecifics: LambdaClientInternals8.awsImplementation,
     forcePathStyle: args.forcePathStyle ?? false,
     fullClientSpecifics: awsFullClientSpecifics,
     requestHandler: args.requestHandler ?? null
@@ -10362,7 +10458,7 @@ var deploySite = (args) => {
 };
 
 // src/api/deploy-site-from-bundle.ts
-import { LambdaClientInternals as LambdaClientInternals8 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals9 } from "@remotion/lambda-client";
 import { wrapWithErrorHandling as wrapWithErrorHandling3 } from "@remotion/renderer/error-handling";
 
 // src/shared/validate-bundle-dir.ts
@@ -10458,11 +10554,11 @@ var deploySiteFromBundle = (args) => {
     region: args.region,
     options: args.options ?? {},
     privacy: args.privacy ?? "public",
-    siteName: args.siteName ?? LambdaClientInternals8.awsImplementation.randomHash(),
+    siteName: args.siteName ?? LambdaClientInternals9.awsImplementation.randomHash(),
     indent: false,
     logLevel: args.logLevel ?? "info",
     throwIfSiteExists: args.throwIfSiteExists ?? false,
-    providerSpecifics: LambdaClientInternals8.awsImplementation,
+    providerSpecifics: LambdaClientInternals9.awsImplementation,
     forcePathStyle: args.forcePathStyle ?? false,
     fullClientSpecifics: awsFullClientSpecifics,
     requestHandler: args.requestHandler ?? null
@@ -10471,7 +10567,7 @@ var deploySiteFromBundle = (args) => {
 
 // src/api/download-media.ts
 import path6 from "node:path";
-import { LambdaClientInternals as LambdaClientInternals10 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals11 } from "@remotion/lambda-client";
 import { REMOTION_BUCKET_PREFIX as REMOTION_BUCKET_PREFIX4 } from "@remotion/lambda-client/constants";
 import { RenderInternals as RenderInternals3 } from "@remotion/renderer";
 import {
@@ -10482,7 +10578,7 @@ import {
 // src/functions/helpers/read-with-progress.ts
 import { GetObjectCommand } from "@aws-sdk/client-s3";
 import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
-import { LambdaClientInternals as LambdaClientInternals9 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals10 } from "@remotion/lambda-client";
 import { RenderInternals as RenderInternals2 } from "@remotion/renderer";
 var lambdaDownloadFileWithProgress = async ({
   bucketName,
@@ -10497,7 +10593,7 @@ var lambdaDownloadFileWithProgress = async ({
   requestHandler,
   abortSignal
 }) => {
-  const client = LambdaClientInternals9.getS3Client({
+  const client = LambdaClientInternals10.getS3Client({
     region,
     customCredentials,
     forcePathStyle,
@@ -10574,7 +10670,7 @@ var internalDownloadMedia = async (input) => {
 var downloadMedia = (input) => {
   return internalDownloadMedia({
     ...input,
-    providerSpecifics: LambdaClientInternals10.awsImplementation,
+    providerSpecifics: LambdaClientInternals11.awsImplementation,
     forcePathStyle: false,
     onProgress: input.onProgress ?? (() => {
       return;
@@ -10590,7 +10686,7 @@ var downloadMedia = (input) => {
 import { GetFunctionCommand as GetFunctionCommand2 } from "@aws-sdk/client-lambda";
 import {
   getFunctionVersion,
-  LambdaClientInternals as LambdaClientInternals11
+  LambdaClientInternals as LambdaClientInternals12
 } from "@remotion/lambda-client";
 import { DEFAULT_EPHEMERAL_STORAGE_IN_MB as DEFAULT_EPHEMERAL_STORAGE_IN_MB2 } from "@remotion/lambda-client/constants";
 var getFunctionInfo = async ({
@@ -10599,9 +10695,9 @@ var getFunctionInfo = async ({
   logLevel,
   requestHandler
 }) => {
-  LambdaClientInternals11.validateAwsRegion(region);
+  LambdaClientInternals12.validateAwsRegion(region);
   const [functionInfo, version] = await Promise.all([
-    LambdaClientInternals11.getLambdaClient(region, undefined, requestHandler).send(new GetFunctionCommand2({
+    LambdaClientInternals12.getLambdaClient(region, undefined, requestHandler).send(new GetFunctionCommand2({
       FunctionName: functionName
     })),
     getFunctionVersion({
@@ -10621,14 +10717,14 @@ var getFunctionInfo = async ({
 };
 
 // src/api/get-or-create-bucket.ts
-import { LambdaClientInternals as LambdaClientInternals12 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals13 } from "@remotion/lambda-client";
 import { internalGetOrCreateBucket } from "@remotion/serverless";
 var getOrCreateBucket = (options) => {
   return internalGetOrCreateBucket({
     region: options.region,
     enableFolderExpiry: options.enableFolderExpiry ?? null,
     customCredentials: options.customCredentials ?? null,
-    providerSpecifics: LambdaClientInternals12.awsImplementation,
+    providerSpecifics: LambdaClientInternals13.awsImplementation,
     forcePathStyle: false,
     skipPutAcl: false,
     requestHandler: options.requestHandler ?? null,
@@ -10648,14 +10744,44 @@ var getRegions = (options) => {
 
 // src/api/iam-validation/simulate.ts
 import { GetCallerIdentityCommand } from "@aws-sdk/client-sts";
-import { LambdaClientInternals as LambdaClientInternals14 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals15 } from "@remotion/lambda-client";
+
+// src/api/iam-validation/resolve-caller-arn.ts
+var resolveCallerArnForSimulation = ({
+  callerIdentityArn,
+  region,
+  regionPartition
+}) => {
+  const components = callerIdentityArn.match(/^arn:([^:]+):([^:]+)::(\d+):([^/]+)(.*)$/);
+  if (!components) {
+    throw new Error("Unknown AWS Caller Identity ARN detected");
+  }
+  const callerPartition = components[1];
+  if (callerPartition !== regionPartition) {
+    throw new Error(`AWS Caller Identity partition ${callerPartition} does not match region ${region}, which uses partition ${regionPartition}.`);
+  }
+  const service = components[2];
+  const accountId = components[3];
+  const resourceType = components[4];
+  if (service === "iam" && resourceType === "user") {
+    return callerIdentityArn;
+  }
+  if (service === "sts" && resourceType === "assumed-role") {
+    const assumedRoleComponents = components[5].match(/^\/([^/]+)\/(.*)$/);
+    if (!assumedRoleComponents) {
+      throw new Error("Unsupported AWS Caller Identity as Assumed-Role ARN detected");
+    }
+    return `arn:${callerPartition}:iam::${accountId}:role/${assumedRoleComponents[1]}`;
+  }
+  throw new Error("Unsupported AWS Caller Identity ARN detected");
+};
 
 // src/api/iam-validation/simulate-rule.ts
 import { SimulatePrincipalPolicyCommand } from "@aws-sdk/client-iam";
-import { LambdaClientInternals as LambdaClientInternals13 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals14 } from "@remotion/lambda-client";
 var simulateRule = async (options) => {
   try {
-    const res = await LambdaClientInternals13.getIamClient(options.region, options.requestHandler).send(new SimulatePrincipalPolicyCommand({
+    const res = await LambdaClientInternals14.getIamClient(options.region, options.requestHandler).send(new SimulatePrincipalPolicyCommand({
       ActionNames: options.actionNames,
       PolicySourceArn: options.arn,
       ResourceArns: options.resource
@@ -10690,29 +10816,18 @@ var logPermissionOutput = (output) => {
   return [getEmojiForStatus(output.decision), output.name].join(" ");
 };
 var simulatePermissions = async (options) => {
-  const callerIdentity = await LambdaClientInternals14.getStsClient(options.region, options.requestHandler).send(new GetCallerIdentityCommand({}));
+  const callerIdentity = await LambdaClientInternals15.getStsClient(options.region, options.requestHandler).send(new GetCallerIdentityCommand({}));
   if (!callerIdentity?.Arn) {
     throw new Error("No valid AWS Caller Identity detected");
   }
-  const callerIdentityArnComponents = callerIdentity.Arn.match(/arn:aws:([^:]+)::(\d+):([^/]+)(.*)/);
-  if (!callerIdentityArnComponents) {
-    throw new Error("Unknown AWS Caller Identity ARN detected");
-  }
-  const callerIdentityArnType = callerIdentityArnComponents[1];
-  let callerArn;
-  if (callerIdentityArnType === "iam" && callerIdentityArnComponents[3] === "user") {
-    callerArn = callerIdentity.Arn;
-  } else if (callerIdentityArnType === "sts" && callerIdentityArnComponents[3] === "assumed-role") {
-    const assumedRoleComponents = callerIdentityArnComponents[4].match(/\/([^/]+)\/(.*)/);
-    if (!assumedRoleComponents) {
-      throw new Error("Unsupported AWS Caller Identity as Assumed-Role ARN detected");
-    }
-    callerArn = `arn:aws:iam::${callerIdentityArnComponents[2]}:role/${assumedRoleComponents[1]}`;
-  } else {
-    throw new Error("Unsupported AWS Caller Identity ARN detected");
-  }
+  const { partition: regionPartition } = LambdaClientInternals15.getAwsRegionMetadata(options.region);
+  const callerArn = resolveCallerArnForSimulation({
+    callerIdentityArn: callerIdentity.Arn,
+    region: options.region,
+    regionPartition
+  });
   const results = [];
-  for (const per of requiredPermissions) {
+  for (const per of getRequiredPermissions(regionPartition)) {
     const result = await simulateRule({
       actionNames: per.actions,
       arn: callerArn,
@@ -10731,7 +10846,7 @@ var simulatePermissions = async (options) => {
 
 // src/cli/index.ts
 import { CliInternals as CliInternals23 } from "@remotion/cli";
-import { LambdaClientInternals as LambdaClientInternals24 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals27 } from "@remotion/lambda-client";
 import { BINARY_NAME as BINARY_NAME14 } from "@remotion/lambda-client/constants";
 import { RenderInternals as RenderInternals7 } from "@remotion/renderer";
 import {
@@ -10762,29 +10877,29 @@ var forceFlagProvided = parsedLambdaCli.f || parsedLambdaCli.force || parsedLamb
 import { CliInternals as CliInternals8 } from "@remotion/cli";
 import {
   getCompositionsOnLambda,
-  LambdaClientInternals as LambdaClientInternals18
+  LambdaClientInternals as LambdaClientInternals19
 } from "@remotion/lambda-client";
 import { BINARY_NAME as BINARY_NAME4 } from "@remotion/lambda-client/constants";
 import { BrowserSafeApis } from "@remotion/renderer/client";
 
 // src/cli/get-aws-region.ts
-import { LambdaClientInternals as LambdaClientInternals15 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals16 } from "@remotion/lambda-client";
 import { DEFAULT_REGION } from "@remotion/lambda-client/constants";
 var getAwsRegion = () => {
   if (parsedLambdaCli.region) {
-    LambdaClientInternals15.validateAwsRegion(parsedLambdaCli.region);
+    LambdaClientInternals16.validateAwsRegion(parsedLambdaCli.region);
     return parsedLambdaCli.region;
   }
-  const envVariable = LambdaClientInternals15.getEnvVariable("REMOTION_AWS_REGION") ?? LambdaClientInternals15.getEnvVariable("AWS_REGION");
+  const envVariable = LambdaClientInternals16.getEnvVariable("REMOTION_AWS_REGION") ?? LambdaClientInternals16.getEnvVariable("AWS_REGION");
   if (envVariable) {
-    LambdaClientInternals15.validateAwsRegion(envVariable);
+    LambdaClientInternals16.validateAwsRegion(envVariable);
     return envVariable;
   }
   return DEFAULT_REGION;
 };
 
 // src/cli/helpers/find-function-name.ts
-import { LambdaClientInternals as LambdaClientInternals17 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals18 } from "@remotion/lambda-client";
 import { BINARY_NAME as BINARY_NAME3 } from "@remotion/lambda-client/constants";
 import { VERSION as VERSION4 } from "remotion/version";
 
@@ -10799,7 +10914,7 @@ var quit = (exitCode) => {
 
 // src/cli/commands/functions/deploy.ts
 import { CliInternals as CliInternals3 } from "@remotion/cli";
-import { LambdaClientInternals as LambdaClientInternals16 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals17 } from "@remotion/lambda-client";
 import {
   DEFAULT_CLOUDWATCH_RETENTION_PERIOD,
   DEFAULT_EPHEMERAL_STORAGE_IN_MB as DEFAULT_EPHEMERAL_STORAGE_IN_MB3,
@@ -10856,6 +10971,7 @@ var functionsDeploySubcommand = async ({
   const memorySizeInMb = parsedLambdaCli.memory ?? DEFAULT_MEMORY_SIZE;
   const diskSizeInMb = parsedLambdaCli.disk ?? DEFAULT_EPHEMERAL_STORAGE_IN_MB3;
   const customRoleArn = parsedLambdaCli["custom-role-arn"] ?? undefined;
+  const customLayerArns = parsedLambdaCli["custom-layer-arns"] === undefined ? null : parsedLambdaCli["custom-layer-arns"].split(",").map((arn) => arn.trim());
   const createCloudWatchLogGroup = !parsedLambdaCli["disable-cloudwatch"];
   const enableLambdaInsights = parsedLambdaCli["enable-lambda-insights"] ?? false;
   const cloudWatchLogRetentionPeriodInDays = parsedLambdaCli["retention-period"] ?? DEFAULT_CLOUDWATCH_RETENTION_PERIOD;
@@ -10866,9 +10982,9 @@ var functionsDeploySubcommand = async ({
   const vpcSubnetIds = parsedLambdaCli["vpc-subnet-ids"] ?? undefined;
   const vpcSecurityGroupIds = parsedLambdaCli["vpc-security-group-ids"] ?? undefined;
   const runtimePreference = parsedLambdaCli["runtime-preference"] ?? "default";
-  LambdaClientInternals16.validateMemorySize(memorySizeInMb);
+  LambdaClientInternals17.validateMemorySize(memorySizeInMb);
   validateTimeout(timeoutInSeconds);
-  LambdaClientInternals16.validateDiskSizeInMb(diskSizeInMb);
+  LambdaClientInternals17.validateDiskSizeInMb(diskSizeInMb);
   validateCustomRoleArn(customRoleArn);
   validateVpcSubnetIds(vpcSubnetIds);
   validateVpcSecurityGroupIds(vpcSecurityGroupIds);
@@ -10882,6 +10998,7 @@ Version = ${VERSION3}
 CloudWatch Logging Enabled = ${createCloudWatchLogGroup}
 CloudWatch Retention Period = ${cloudWatchLogRetentionPeriodInDays} days
 Lambda Insights Enabled = ${enableLambdaInsights}
+Custom Layers = ${customLayerArns === null ? "Not specified" : customLayerArns.length}
 
 				`.trim()));
     if (vpcSubnetIds) {
@@ -10907,6 +11024,7 @@ VPC Security Group IDs = ${vpcSecurityGroupIds}
     cloudWatchLogRetentionPeriodInDays,
     diskSizeInMb,
     customRoleArn,
+    customLayerArns,
     enableLambdaInsights,
     indent: false,
     logLevel,
@@ -11224,7 +11342,7 @@ var findFunctionName = async ({
   if (cliFlag) {
     const compatibleFunctionExists = lambdasWithMatchingVersion.find((l) => l.functionName === cliFlag);
     if (!compatibleFunctionExists) {
-      Log.warn({ indent: false, logLevel }, `The name passed to --function-name "${cliFlag}" does not match the naming convention this version of the CLI expects: ${LambdaClientInternals17.innerSpeculateFunctionName({ diskSizeInMb: "[disk]", memorySizeInMb: "[memory]", timeoutInSeconds: "[timeout]" })}.`);
+      Log.warn({ indent: false, logLevel }, `The name passed to --function-name "${cliFlag}" does not match the naming convention this version of the CLI expects: ${LambdaClientInternals18.innerSpeculateFunctionName({ diskSizeInMb: "[disk]", memorySizeInMb: "[memory]", timeoutInSeconds: "[timeout]" })}.`);
       Log.warn({ indent: false, logLevel }, "Remotion relies on the naming to determine function information. This is an unsupported workflow.");
       if (lambdasWithMatchingVersion.length > 0) {
         Log.info(logOptions, "The following functions were found:");
@@ -11326,7 +11444,7 @@ var compositionsCommand = async ({
     darkMode
   };
   const region = getAwsRegion();
-  LambdaClientInternals18.validateServeUrl(serveUrl);
+  LambdaClientInternals19.validateServeUrl(serveUrl);
   const functionName = await findFunctionName({ logLevel, providerSpecifics });
   const comps = await getCompositionsOnLambda({
     functionName,
@@ -11348,15 +11466,21 @@ import { CliInternals as CliInternals9 } from "@remotion/cli";
 import { BINARY_NAME as BINARY_NAME5 } from "@remotion/lambda-client/constants";
 
 // src/cli/commands/policies/role.ts
+import { LambdaClientInternals as LambdaClientInternals20 } from "@remotion/lambda-client";
 var ROLE_SUBCOMMAND = "role";
 var roleSubcommand = (logLevel) => {
-  Log.info({ indent: false, logLevel }, getRolePolicy());
+  const region = getAwsRegion();
+  const { partition } = LambdaClientInternals20.getAwsRegionMetadata(region);
+  Log.info({ indent: false, logLevel }, getRolePolicy({ partition }));
 };
 
 // src/cli/commands/policies/user.ts
+import { LambdaClientInternals as LambdaClientInternals21 } from "@remotion/lambda-client";
 var USER_SUBCOMMAND = "user";
 var userSubcommand = (logLevel) => {
-  Log.info({ indent: false, logLevel }, getUserPolicy());
+  const region = getAwsRegion();
+  const { partition } = LambdaClientInternals21.getAwsRegionMetadata(region);
+  Log.info({ indent: false, logLevel }, getUserPolicy({ partition }));
 };
 
 // src/cli/commands/policies/validate.ts
@@ -11422,7 +11546,7 @@ import {
   RequestServiceQuotaIncreaseCommand
 } from "@aws-sdk/client-service-quotas";
 import {
-  LambdaClientInternals as LambdaClientInternals19
+  LambdaClientInternals as LambdaClientInternals22
 } from "@remotion/lambda-client";
 import {
   BINARY_NAME as BINARY_NAME6,
@@ -11433,20 +11557,22 @@ var makeQuotaUrl = ({
   region,
   quotaId
 }) => {
-  return `https://${region}.console.aws.amazon.com/servicequotas/home/services/lambda/quotas/${quotaId}`;
+  const { consoleDomain } = LambdaClientInternals22.getAwsRegionMetadata(region);
+  return `https://${region}.${consoleDomain}/servicequotas/home/services/lambda/quotas/${quotaId}`;
 };
 async function quotasIncreaseCommand(logLevel, requestHandler) {
   const region = getAwsRegion();
+  const { consoleDomain } = LambdaClientInternals22.getAwsRegionMetadata(region);
   const [concurrencyLimit, defaultConcurrencyLimit, changes] = await Promise.all([
-    LambdaClientInternals19.getServiceQuotasClient(region, requestHandler).send(new GetServiceQuotaCommand({
+    LambdaClientInternals22.getServiceQuotasClient(region, requestHandler).send(new GetServiceQuotaCommand({
       QuotaCode: LAMBDA_CONCURRENCY_LIMIT_QUOTA,
       ServiceCode: "lambda"
     })),
-    LambdaClientInternals19.getServiceQuotasClient(region, requestHandler).send(new GetAWSDefaultServiceQuotaCommand({
+    LambdaClientInternals22.getServiceQuotasClient(region, requestHandler).send(new GetAWSDefaultServiceQuotaCommand({
       QuotaCode: LAMBDA_CONCURRENCY_LIMIT_QUOTA,
       ServiceCode: "lambda"
     })),
-    LambdaClientInternals19.getServiceQuotasClient(region, requestHandler).send(new ListRequestedServiceQuotaChangeHistoryByQuotaCommand({
+    LambdaClientInternals22.getServiceQuotasClient(region, requestHandler).send(new ListRequestedServiceQuotaChangeHistoryByQuotaCommand({
       QuotaCode: LAMBDA_CONCURRENCY_LIMIT_QUOTA,
       ServiceCode: "lambda"
     }))
@@ -11458,7 +11584,7 @@ async function quotasIncreaseCommand(logLevel, requestHandler) {
       logLevel
     };
     Log.warn(logOptions, `A request to increase it to ${openCase.DesiredValue} is already pending:`);
-    Log.warn(logOptions, `https://${region}.console.aws.amazon.com/support/home#/case/?displayId=${openCase.CaseId}`);
+    Log.warn(logOptions, `https://${region}.${consoleDomain}/support/home#/case/?displayId=${openCase.CaseId}`);
     exit(1);
   }
   const concurrencyCurrent = concurrencyLimit.Quota?.Value;
@@ -11480,7 +11606,7 @@ async function quotasIncreaseCommand(logLevel, requestHandler) {
     quit(1);
   }
   try {
-    await LambdaClientInternals19.getServiceQuotasClient(region, requestHandler).send(new RequestServiceQuotaIncreaseCommand({
+    await LambdaClientInternals22.getServiceQuotasClient(region, requestHandler).send(new RequestServiceQuotaIncreaseCommand({
       QuotaCode: LAMBDA_CONCURRENCY_LIMIT_QUOTA,
       DesiredValue: newLimit,
       ServiceCode: "lambda"
@@ -11506,25 +11632,26 @@ import {
   ListRequestedServiceQuotaChangeHistoryByQuotaCommand as ListRequestedServiceQuotaChangeHistoryByQuotaCommand2
 } from "@aws-sdk/client-service-quotas";
 import { CliInternals as CliInternals10 } from "@remotion/cli";
-import { LambdaClientInternals as LambdaClientInternals20 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals23 } from "@remotion/lambda-client";
 import {
   BINARY_NAME as BINARY_NAME7,
   LAMBDA_CONCURRENCY_LIMIT_QUOTA as LAMBDA_CONCURRENCY_LIMIT_QUOTA2
 } from "@remotion/lambda-client/constants";
 var quotasListCommand = async (logLevel) => {
   const region = getAwsRegion();
+  const { consoleDomain } = LambdaClientInternals23.getAwsRegionMetadata(region);
   Log.info({ indent: false, logLevel }, CliInternals10.chalk.gray(`Region = ${region}`));
   Log.info({ indent: false, logLevel });
   const [concurrencyLimit, defaultConcurrencyLimit, changes] = await Promise.all([
-    LambdaClientInternals20.getServiceQuotasClient(region, null).send(new GetServiceQuotaCommand2({
+    LambdaClientInternals23.getServiceQuotasClient(region, null).send(new GetServiceQuotaCommand2({
       QuotaCode: LAMBDA_CONCURRENCY_LIMIT_QUOTA2,
       ServiceCode: "lambda"
     })),
-    LambdaClientInternals20.getServiceQuotasClient(region, null).send(new GetAWSDefaultServiceQuotaCommand2({
+    LambdaClientInternals23.getServiceQuotasClient(region, null).send(new GetAWSDefaultServiceQuotaCommand2({
       QuotaCode: LAMBDA_CONCURRENCY_LIMIT_QUOTA2,
       ServiceCode: "lambda"
     })),
-    LambdaClientInternals20.getServiceQuotasClient(region, null).send(new ListRequestedServiceQuotaChangeHistoryByQuotaCommand2({
+    LambdaClientInternals23.getServiceQuotasClient(region, null).send(new ListRequestedServiceQuotaChangeHistoryByQuotaCommand2({
       QuotaCode: LAMBDA_CONCURRENCY_LIMIT_QUOTA2,
       ServiceCode: "lambda"
     }))
@@ -11540,7 +11667,7 @@ var quotasListCommand = async (logLevel) => {
   }
   if (openCase) {
     Log.warn({ indent: false, logLevel }, `A request to increase it to ${openCase.DesiredValue} is pending:`);
-    Log.warn({ indent: false, logLevel }, `https://${region}.console.aws.amazon.com/support/home#/case/?displayId=${openCase.CaseId}`);
+    Log.warn({ indent: false, logLevel }, `https://${region}.${consoleDomain}/support/home#/case/?displayId=${openCase.CaseId}`);
   }
   Log.info({ indent: false, logLevel }, CliInternals10.chalk.gray("The maximum amount of Lambda functions which can concurrently execute."));
   Log.info({ indent: false, logLevel }, CliInternals10.chalk.gray(`Run \`npx ${BINARY_NAME7} ${QUOTAS_COMMAND} ${INCREASE_SUBCOMMAND}\` to ask AWS to increase your limit.`));
@@ -11585,7 +11712,7 @@ import { CliInternals as CliInternals14 } from "@remotion/cli";
 import { ConfigInternals } from "@remotion/cli/config";
 import {
   getRenderProgress,
-  LambdaClientInternals as LambdaClientInternals22
+  LambdaClientInternals as LambdaClientInternals25
 } from "@remotion/lambda-client";
 import {
   BINARY_NAME as BINARY_NAME9,
@@ -11624,7 +11751,7 @@ function validateMaxRetries(maxRetries) {
 }
 
 // src/cli/helpers/get-s3-output-provider-from-cli.ts
-import { LambdaClientInternals as LambdaClientInternals21 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals24 } from "@remotion/lambda-client";
 var S3_OUTPUT_PROVIDER_ACCESS_KEY_ID_ENV_NAME = "REMOTION_S3_OUTPUT_PROVIDER_ACCESS_KEY_ID";
 var S3_OUTPUT_PROVIDER_SECRET_ACCESS_KEY_ENV_NAME = "REMOTION_S3_OUTPUT_PROVIDER_SECRET_ACCESS_KEY";
 var getS3OutputProviderFromCli = ({
@@ -11641,8 +11768,8 @@ var getS3OutputProviderFromCli = ({
   }
   return {
     endpoint,
-    accessKeyId: LambdaClientInternals21.getEnvVariable(S3_OUTPUT_PROVIDER_ACCESS_KEY_ID_ENV_NAME) ?? null,
-    secretAccessKey: LambdaClientInternals21.getEnvVariable(S3_OUTPUT_PROVIDER_SECRET_ACCESS_KEY_ENV_NAME) ?? null,
+    accessKeyId: LambdaClientInternals24.getEnvVariable(S3_OUTPUT_PROVIDER_ACCESS_KEY_ID_ENV_NAME) ?? null,
+    secretAccessKey: LambdaClientInternals24.getEnvVariable(S3_OUTPUT_PROVIDER_SECRET_ACCESS_KEY_ENV_NAME) ?? null,
     region,
     forcePathStyle
   };
@@ -12039,7 +12166,7 @@ var renderCommand = async ({
   let composition = args[1];
   if (!composition) {
     Log.info({ indent: false, logLevel }, "No compositions passed. Fetching compositions...");
-    LambdaClientInternals22.validateServeUrl(serveUrl);
+    LambdaClientInternals25.validateServeUrl(serveUrl);
     if (!serveUrl.startsWith("https://") && !serveUrl.startsWith("http://")) {
       throw Error(`Passing the shorthand serve URL without composition name is currently not supported.
  Make sure to pass a composition name after the shorthand serve URL or pass the complete serveURL without composition name to get to choose between all compositions.`);
@@ -12135,7 +12262,7 @@ var renderCommand = async ({
   const concurrency = parsedLambdaCli["concurrency"] ?? undefined;
   const concurrencyPerLambda = parsedLambdaCli["concurrency-per-lambda"] ?? 1;
   const webhookCustomData = getWebhookCustomData(logLevel);
-  const res = await LambdaClientInternals22.internalRenderMediaOnLambdaRaw({
+  const res = await LambdaClientInternals25.internalRenderMediaOnLambdaRaw({
     functionName,
     serveUrl,
     inputProps,
@@ -12204,8 +12331,8 @@ var renderCommand = async ({
     indent: false,
     logLevel
   });
-  Log.info({ indent: false, logLevel }, CliInternals14.chalk.gray(`Bucket: ${CliInternals14.makeHyperlink({ text: res.bucketName, fallback: res.bucketName, url: `https://${getAwsRegion()}.console.aws.amazon.com/s3/buckets/${res.bucketName}/?region=${getAwsRegion()}` })}`));
-  Log.info({ indent: false, logLevel }, CliInternals14.chalk.gray(`Function: ${CliInternals14.makeHyperlink({ text: functionName, fallback: functionName, url: `https://${getAwsRegion()}.console.aws.amazon.com/lambda/home#/functions/${functionName}?tab=code` })}`));
+  Log.info({ indent: false, logLevel }, CliInternals14.chalk.gray(`Bucket: ${CliInternals14.makeHyperlink({ text: res.bucketName, fallback: res.bucketName, url: LambdaClientInternals25.getS3BucketUrl({ region: getAwsRegion(), bucketName: res.bucketName }) })}`));
+  Log.info({ indent: false, logLevel }, CliInternals14.chalk.gray(`Function: ${CliInternals14.makeHyperlink({ text: functionName, fallback: functionName, url: LambdaClientInternals25.getLambdaFunctionUrl({ region: getAwsRegion(), functionName }) })}`));
   Log.info({ indent: false, logLevel }, CliInternals14.chalk.gray(`Render ID: ${CliInternals14.makeHyperlink({ text: res.renderId, fallback: res.renderId, url: res.folderInS3Console })}`));
   Log.info({ indent: false, logLevel }, CliInternals14.chalk.gray(`progress.json: ${CliInternals14.makeHyperlink({
     text: (clickInstruction) => {
@@ -12243,7 +12370,7 @@ var renderCommand = async ({
       fallback: `Render folder: ${res.folderInS3Console}`
     }));
   }
-  const adheresToFunctionNameConvention = LambdaClientInternals22.parseFunctionName(functionName);
+  const adheresToFunctionNameConvention = LambdaClientInternals25.parseFunctionName(functionName);
   const status = await getRenderProgress({
     functionName,
     bucketName: res.bucketName,
@@ -12820,7 +12947,7 @@ var sitesCommand = (args, remotionRoot, logLevel, providerSpecifics) => {
 import path9 from "path";
 import { CliInternals as CliInternals21 } from "@remotion/cli";
 import { ConfigInternals as ConfigInternals3 } from "@remotion/cli/config";
-import { LambdaClientInternals as LambdaClientInternals23 } from "@remotion/lambda-client";
+import { LambdaClientInternals as LambdaClientInternals26 } from "@remotion/lambda-client";
 import {
   BINARY_NAME as BINARY_NAME12,
   DEFAULT_MAX_RETRIES as DEFAULT_MAX_RETRIES2,
@@ -12934,7 +13061,7 @@ var stillCommand = async ({
   }).value;
   if (!composition) {
     Log.info({ indent: false, logLevel }, "No compositions passed. Fetching compositions...");
-    LambdaClientInternals23.validateServeUrl(serveUrl);
+    LambdaClientInternals26.validateServeUrl(serveUrl);
     if (!serveUrl.startsWith("https://") && !serveUrl.startsWith("http://")) {
       throw Error(`Passing the shorthand serve URL without composition name is currently not supported.
  Make sure to pass a composition name after the shorthand serve URL or pass the complete serveURL without composition name to get to choose between all compositions.`);
@@ -13017,7 +13144,7 @@ var stillCommand = async ({
     isLambda: true,
     fromUi: null
   });
-  Log.info({ indent: false, logLevel }, CliInternals21.chalk.gray(`Function: ${CliInternals21.makeHyperlink({ text: functionName, fallback: functionName, url: `https://${getAwsRegion()}.console.aws.amazon.com/lambda/home#/functions/${functionName}?tab=code` })}`));
+  Log.info({ indent: false, logLevel }, CliInternals21.chalk.gray(`Function: ${CliInternals21.makeHyperlink({ text: functionName, fallback: functionName, url: LambdaClientInternals26.getLambdaFunctionUrl({ region: getAwsRegion(), functionName }) })}`));
   Log.info({ indent: false, logLevel }, CliInternals21.chalk.gray(`Image Format = ${imageFormat} (${imageFormatReason})`));
   const deleteAfter = parsedLambdaCli[deleteAfterOption2.cliFlag];
   const scale = scaleOption2.getValue({
@@ -13026,7 +13153,7 @@ var stillCommand = async ({
   const jpegQuality = jpegQualityOption2.getValue({
     commandLine: parsedCli
   }).value;
-  const res = await LambdaClientInternals23.internalRenderStillOnLambda({
+  const res = await LambdaClientInternals26.internalRenderStillOnLambda({
     functionName,
     serveUrl,
     inputProps,
@@ -13072,8 +13199,8 @@ var stillCommand = async ({
     mediaCacheSizeInBytes,
     isProduction: parsedLambdaCli[BrowserSafeApis5.options.isProductionOption.cliFlag] ?? true
   });
-  Log.info({ indent: false, logLevel }, CliInternals21.chalk.gray(`Render ID: ${CliInternals21.makeHyperlink({ text: res.renderId, fallback: res.renderId, url: LambdaClientInternals23.getS3RenderUrl({ bucketName: res.bucketName, renderId: res.renderId, region: getAwsRegion() }) })}`));
-  Log.info({ indent: false, logLevel }, CliInternals21.chalk.gray(`Bucket: ${CliInternals21.makeHyperlink({ text: res.bucketName, fallback: res.bucketName, url: `https://${getAwsRegion()}.console.aws.amazon.com/s3/buckets/${res.bucketName}/?region=${getAwsRegion()}` })}`));
+  Log.info({ indent: false, logLevel }, CliInternals21.chalk.gray(`Render ID: ${CliInternals21.makeHyperlink({ text: res.renderId, fallback: res.renderId, url: LambdaClientInternals26.getS3RenderUrl({ bucketName: res.bucketName, renderId: res.renderId, region: getAwsRegion() }) })}`));
+  Log.info({ indent: false, logLevel }, CliInternals21.chalk.gray(`Bucket: ${CliInternals21.makeHyperlink({ text: res.bucketName, fallback: res.bucketName, url: LambdaClientInternals26.getS3BucketUrl({ region: getAwsRegion(), bucketName: res.bucketName }) })}`));
   const artifactProgress = makeArtifactProgress(res.artifacts);
   if (artifactProgress) {
     Log.info({
@@ -13246,7 +13373,7 @@ var matchCommand = ({
 };
 var executeCommand = async (args, remotionRoot, logLevel, _providerSpecifics, fullClientSpecifics) => {
   try {
-    const providerSpecifics = _providerSpecifics ?? LambdaClientInternals24.awsImplementation;
+    const providerSpecifics = _providerSpecifics ?? LambdaClientInternals27.awsImplementation;
     await matchCommand({
       args,
       remotionRoot,
@@ -13290,8 +13417,8 @@ AWS returned an "ConcurrentInvocationLimitExceeded" error message which could me
 `.trim());
     }
     if (error.stack?.includes("The security token included in the request is invalid")) {
-      const keyButDoesntStartWithAki = LambdaClientInternals24.getEnvVariable("REMOTION_AWS_ACCESS_KEY_ID") && !LambdaClientInternals24.getEnvVariable("REMOTION_AWS_ACCESS_KEY_ID").startsWith("AKI");
-      const pureKeyButDoesntStartWithAki = LambdaClientInternals24.getEnvVariable("AWS_ACCESS_KEY_ID") && !LambdaClientInternals24.getEnvVariable("AWS_ACCESS_KEY_ID").startsWith("AKI");
+      const keyButDoesntStartWithAki = LambdaClientInternals27.getEnvVariable("REMOTION_AWS_ACCESS_KEY_ID") && !LambdaClientInternals27.getEnvVariable("REMOTION_AWS_ACCESS_KEY_ID").startsWith("AKI");
+      const pureKeyButDoesntStartWithAki = LambdaClientInternals27.getEnvVariable("AWS_ACCESS_KEY_ID") && !LambdaClientInternals27.getEnvVariable("AWS_ACCESS_KEY_ID").startsWith("AKI");
       if (keyButDoesntStartWithAki || pureKeyButDoesntStartWithAki) {
         Log.error({ indent: false, logLevel }, `
 	AWS returned an error message "The security token included in the request is invalid". A possible reason is that your AWS Access key ID is set but doesn't start with "AKI", which it usually should. The original message is: