@remotion/lambda 4.0.509 → 4.0.511

package/dist/esm/policies.mjs

@@ -5,7 +5,7 @@ import {
   REMOTION_BUCKET_PREFIX,
   RENDER_FN_PREFIX
 } from "@remotion/lambda-client/constants";
-var rolePermissions = [
+var getRolePermissions = (partition) => [
   {
     actions: ["s3:ListAllMyBuckets"],
     resource: ["*"]
@@ -21,24 +21,25 @@ var rolePermissions = [
       "s3:PutObject",
       "s3:GetBucketLocation"
     ],
-    resource: [`arn:aws:s3:::${REMOTION_BUCKET_PREFIX}*`]
+    resource: [`arn:${partition}:s3:::${REMOTION_BUCKET_PREFIX}*`]
   },
   {
     actions: ["lambda:InvokeFunction"],
-    resource: [`arn:aws:lambda:*:*:function:${RENDER_FN_PREFIX}*`]
+    resource: [`arn:${partition}:lambda:*:*:function:${RENDER_FN_PREFIX}*`]
   },
   {
     actions: ["logs:CreateLogGroup"],
-    resource: [`arn:aws:logs:*:*:log-group:${LAMBDA_INSIGHTS_PREFIX}`]
+    resource: [`arn:${partition}:logs:*:*:log-group:${LAMBDA_INSIGHTS_PREFIX}`]
   },
   {
     actions: ["logs:CreateLogStream", "logs:PutLogEvents"],
     resource: [
-      `arn:aws:logs:*:*:log-group:${LOG_GROUP_PREFIX}${RENDER_FN_PREFIX}*`,
-      `arn:aws:logs:*:*:log-group:${LAMBDA_INSIGHTS_PREFIX}:*`
+      `arn:${partition}:logs:*:*:log-group:${LOG_GROUP_PREFIX}${RENDER_FN_PREFIX}*`,
+      `arn:${partition}:logs:*:*:log-group:${LAMBDA_INSIGHTS_PREFIX}:*`
     ]
   }
 ];
+var rolePermissions = getRolePermissions("aws");
 
 // src/api/iam-validation/user-permissions.ts
 import {
@@ -51,7 +52,7 @@ import {
 var REMOTION_HOSTED_LAYER_ARN = `arn:aws:lambda:*:678892195805:layer:remotion-binaries-*`;
 
 // src/api/iam-validation/user-permissions.ts
-var requiredPermissions = [
+var getRequiredPermissions = (partition) => [
   {
     id: "HandleQuotas",
     actions: [
@@ -70,7 +71,7 @@ var requiredPermissions = [
   {
     id: "LambdaInvokation",
     actions: ["iam:PassRole"],
-    resource: ["arn:aws:iam::*:role/remotion-lambda-role"]
+    resource: [`arn:${partition}:iam::*:role/remotion-lambda-role`]
   },
   {
     id: "Storage",
@@ -89,7 +90,7 @@ var requiredPermissions = [
       "s3:PutBucketPolicy",
       "s3:PutLifecycleConfiguration"
     ],
-    resource: [`arn:aws:s3:::${REMOTION_BUCKET_PREFIX2}*`]
+    resource: [`arn:${partition}:s3:::${REMOTION_BUCKET_PREFIX2}*`]
   },
   {
     id: "BucketListing",
@@ -112,55 +113,52 @@ var requiredPermissions = [
       "lambda:PutRuntimeManagementConfig",
       "lambda:TagResource"
     ],
-    resource: [`arn:aws:lambda:*:*:function:${RENDER_FN_PREFIX2}*`]
+    resource: [`arn:${partition}:lambda:*:*:function:${RENDER_FN_PREFIX2}*`]
   },
   {
     id: "LogsRetention",
     actions: ["logs:CreateLogGroup", "logs:PutRetentionPolicy"],
     resource: [
-      `arn:aws:logs:*:*:log-group:${LOG_GROUP_PREFIX2}${RENDER_FN_PREFIX2}*`
+      `arn:${partition}:logs:*:*:log-group:${LOG_GROUP_PREFIX2}${RENDER_FN_PREFIX2}*`
     ]
   },
   {
     id: "FetchBinaries",
     actions: ["lambda:GetLayerVersion"],
-    resource: [
+    resource: partition === "aws-cn" ? ["arn:aws-cn:lambda:*:488211338238:layer:LambdaInsightsExtension*"] : [
       REMOTION_HOSTED_LAYER_ARN,
       "arn:aws:lambda:*:580247275435:layer:LambdaInsightsExtension*"
     ]
   }
 ];
+var requiredPermissions = getRequiredPermissions("aws");
 
 // src/api/iam-validation/suggested-policy.ts
-var suggestedPolicy = {
+var makePolicy = (partition) => ({
   Version: "2012-10-17",
-  Statement: [
-    ...requiredPermissions.map((per) => {
-      return {
-        Sid: per.id,
-        Effect: "Allow",
-        Action: per.actions,
-        Resource: per.resource
-      };
-    })
-  ]
-};
-var suggestedRolePolicy = {
+  Statement: getRequiredPermissions(partition).map((per) => {
+    return {
+      Sid: per.id,
+      Effect: "Allow",
+      Action: per.actions,
+      Resource: per.resource
+    };
+  })
+});
+var makeRolePolicy = (partition) => ({
   Version: "2012-10-17",
-  Statement: [
-    ...rolePermissions.map((per, i) => {
-      return {
-        Sid: String(i),
-        Effect: "Allow",
-        Action: per.actions,
-        Resource: per.resource
-      };
-    })
-  ]
-};
-var getUserPolicy = () => JSON.stringify(suggestedPolicy, null, 2);
+  Statement: getRolePermissions(partition).map((per, i) => {
+    return {
+      Sid: String(i),
+      Effect: "Allow",
+      Action: per.actions,
+      Resource: per.resource
+    };
+  })
+});
+var getUserPolicy = (options) => JSON.stringify(makePolicy(options?.partition ?? "aws"), null, 2);
 var ROLE_NAME = "remotion-lambda-role";
-var getRolePolicy = () => JSON.stringify(suggestedRolePolicy, null, 2);
+var getRolePolicy = (options) => JSON.stringify(makeRolePolicy(options?.partition ?? "aws"), null, 2);
 export {
   getUserPolicy,
   getRolePolicy,

package/dist/functions/helpers/get-current-region.d.ts

@@ -1 +1 @@
-export declare const getCurrentRegionInFunctionImplementation: () => "af-south-1" | "ap-east-1" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-southeast-1" | "ap-southeast-2" | "ap-southeast-4" | "ap-southeast-5" | "ca-central-1" | "eu-central-1" | "eu-central-2" | "eu-north-1" | "eu-south-1" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "sa-east-1" | "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2";
+export declare const getCurrentRegionInFunctionImplementation: () => "af-south-1" | "ap-east-1" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-southeast-1" | "ap-southeast-2" | "ap-southeast-4" | "ap-southeast-5" | "ca-central-1" | "cn-north-1" | "cn-northwest-1" | "eu-central-1" | "eu-central-2" | "eu-north-1" | "eu-south-1" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "sa-east-1" | "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2";

package/dist/functions/helpers/make-aws-artifact.d.ts

@@ -1,3 +1,3 @@
-import type { AwsProvider } from '@remotion/lambda-client';
+import { type AwsProvider } from '@remotion/lambda-client';
 import type { MakeArtifactWithDetails } from '@remotion/serverless';
 export declare const makeAwsArtifact: MakeArtifactWithDetails<AwsProvider>;

package/dist/functions/helpers/make-aws-artifact.js

@@ -1,11 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.makeAwsArtifact = void 0;
+const lambda_client_1 = require("@remotion/lambda-client");
 const makeAwsArtifact = ({ region, renderBucketName, storageKey, artifact, }) => {
+    const { dnsSuffix } = lambda_client_1.LambdaClientInternals.getAwsRegionMetadata(region);
     return {
         filename: artifact.filename,
         sizeInBytes: artifact.content.length,
-        s3Url: `https://s3.${region}.amazonaws.com/${renderBucketName}/${storageKey}`,
+        s3Url: `https://s3.${region}.${dnsSuffix}/${renderBucketName}/${storageKey}`,
         s3Key: storageKey,
     };
 };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import type { AwsRegion, CustomCredentials, DeleteFunctionInput, DeleteRenderInput, EnhancedErrorInfo, EstimatePriceInput, GetAwsClientInput, GetAwsClientOutput, GetCompositionsOnLambdaInput, GetCompositionsOnLambdaOutput, GetFunctionsInput, GetOrCreateBucketInput, GetOrCreateBucketOutput, GetRenderProgressInput, GetSitesInput, GetSitesOutput, RenderMediaOnLambdaInput, RenderMediaOnLambdaOutput, RenderProgress, RenderStillOnLambdaInput, RenderStillOnLambdaOutput } from '@remotion/lambda-client';
+import type { AwsPartition, AwsRegion, CustomCredentials, DeleteFunctionInput, DeleteRenderInput, EnhancedErrorInfo, EstimatePriceInput, GetAwsClientInput, GetAwsClientOutput, GetCompositionsOnLambdaInput, GetCompositionsOnLambdaOutput, GetFunctionsInput, GetOrCreateBucketInput, GetOrCreateBucketOutput, GetRenderProgressInput, GetSitesInput, GetSitesOutput, RenderMediaOnLambdaInput, RenderMediaOnLambdaOutput, RenderProgress, RenderStillOnLambdaInput, RenderStillOnLambdaOutput } from '@remotion/lambda-client';
 import { deleteFunction, deleteRender, renderStillOnLambda as deprecatedRenderStillOnLambda, estimatePrice, getAwsClient, getCompositionsOnLambda, getFunctions, renderVideoOnLambda, validateWebhookSignature } from '@remotion/lambda-client';
 import type { FunctionInfo } from '@remotion/serverless';
 import type { DeleteSiteInput, DeleteSiteOutput } from './api/delete-site';
@@ -44,5 +44,6 @@ declare const presignUrl: <CheckIfObjectExists extends boolean = false>({ region
  */
 declare const getSites: ({ region, forceBucketName, forcePathStyle, compatibleOnly, requestHandler, }: GetSitesInput) => Promise<GetSitesOutput>;
 export { deleteFunction, deleteRender, deleteSite, deployFunction, deploySite, deploySiteFromBundle, downloadMedia, estimatePrice, getAwsClient, getCompositionsOnLambda, getFunctionInfo, getFunctions, getOrCreateBucket, getRegions, getRenderProgress, getRolePolicy, getSites, getUserPolicy, LambdaInternals, presignUrl, renderMediaOnLambda, renderStillOnLambda, renderVideoOnLambda, simulatePermissions, validateWebhookSignature, };
-export type { AwsRegion, CustomCredentials, DeleteFunctionInput, DeleteRenderInput, DeleteSiteInput, DeleteSiteOutput, DeployFunctionInput, DeployFunctionOutput, DeploySiteFromBundleInput, DeploySiteFromBundleOutput, DeploySiteInput, DeploySiteOutput, DownloadMediaInput, DownloadMediaOutput, EnhancedErrorInfo, EstimatePriceInput, FunctionInfo, GetAwsClientInput, GetAwsClientOutput, GetCompositionsOnLambdaInput, GetCompositionsOnLambdaOutput, GetFunctionInfoInput, GetFunctionsInput, GetOrCreateBucketInput, GetOrCreateBucketOutput, GetRenderProgressInput, GetSitesInput, GetSitesOutput, RenderMediaOnLambdaInput, RenderMediaOnLambdaOutput, RenderProgress, RenderStillOnLambdaInput, RenderStillOnLambdaOutput, SimulatePermissionsInput, SimulatePermissionsOutput, };
+export type { AwsPartition, AwsRegion, CustomCredentials, DeleteFunctionInput, DeleteRenderInput, DeleteSiteInput, DeleteSiteOutput, DeployFunctionInput, DeployFunctionOutput, DeploySiteFromBundleInput, DeploySiteFromBundleOutput, DeploySiteInput, DeploySiteOutput, DownloadMediaInput, DownloadMediaOutput, EnhancedErrorInfo, EstimatePriceInput, FunctionInfo, GetAwsClientInput, GetAwsClientOutput, GetCompositionsOnLambdaInput, GetCompositionsOnLambdaOutput, GetFunctionInfoInput, GetFunctionsInput, GetOrCreateBucketInput, GetOrCreateBucketOutput, GetRenderProgressInput, GetSitesInput, GetSitesOutput, RenderMediaOnLambdaInput, RenderMediaOnLambdaOutput, RenderProgress, RenderStillOnLambdaInput, RenderStillOnLambdaOutput, SimulatePermissionsInput, SimulatePermissionsOutput, };
+export type { GetPolicyOptions } from './api/iam-validation/suggested-policy';
 export { _InternalOverallRenderProgress };

package/dist/shared/get-layers.d.ts

@@ -2,5 +2,5 @@ import type { AwsLayer } from './hosted-layers';
 export declare const validateRuntimePreference: (option: unknown) => void;
 export declare const getLayers: ({ option, region, }: {
     option: "apple-emojis" | "cjk" | "default";
-    region: "af-south-1" | "ap-east-1" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-southeast-1" | "ap-southeast-2" | "ap-southeast-4" | "ap-southeast-5" | "ca-central-1" | "eu-central-1" | "eu-central-2" | "eu-north-1" | "eu-south-1" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "sa-east-1" | "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2";
+    region: "af-south-1" | "ap-east-1" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-southeast-1" | "ap-southeast-2" | "ap-southeast-4" | "ap-southeast-5" | "ca-central-1" | "cn-north-1" | "cn-northwest-1" | "eu-central-1" | "eu-central-2" | "eu-north-1" | "eu-south-1" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "sa-east-1" | "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2";
 }) => AwsLayer[];

package/dist/shared/get-layers.js

@@ -13,8 +13,10 @@ const validateRuntimePreference = (option) => {
 };
 exports.validateRuntimePreference = validateRuntimePreference;
 const getLayers = ({ option, region, }) => {
-    const layers = hosted_layers_1.hostedLayers[region];
-    return layers.filter((layer) => {
+    if (!(region in hosted_layers_1.hostedLayers)) {
+        throw new Error(`Remotion-hosted Layers are not available in ${region}.`);
+    }
+    return hosted_layers_1.hostedLayers[region].filter((layer) => {
         if (layer.layerArn.includes('emoji-apple')) {
             return option === 'apple-emojis';
         }

package/dist/shared/hosted-layers.d.ts

@@ -4,7 +4,8 @@ export type AwsLayer = {
     layerArn: string;
     version: number;
 };
+export type HostedLayerRegion = Exclude<AwsRegion, 'cn-north-1' | 'cn-northwest-1'>;
 export type HostedLayers = {
-    [region in AwsRegion]: AwsLayer[];
+    [region in HostedLayerRegion]: AwsLayer[];
 };
 export declare const hostedLayers: HostedLayers;

package/dist/shared/lambda-insights-extensions.js

@@ -25,4 +25,6 @@ exports.lambdaInsightsExtensions = {
     'ap-southeast-4': null,
     'ap-southeast-5': null,
     'eu-central-2': null,
+    'cn-north-1': 'arn:aws-cn:lambda:cn-north-1:488211338238:layer:LambdaInsightsExtension-Arm64:4',
+    'cn-northwest-1': 'arn:aws-cn:lambda:cn-northwest-1:488211338238:layer:LambdaInsightsExtension-Arm64:4',
 };

package/dist/shared/validate-custom-layer-arns.d.ts

@@ -0,0 +1,6 @@
+export declare const validateCustomLayerArns: ({ customLayerArns, enableLambdaInsights, region, runtimePreference, }: {
+    customLayerArns: string[] | null;
+    enableLambdaInsights: boolean;
+    region: "af-south-1" | "ap-east-1" | "ap-northeast-1" | "ap-northeast-2" | "ap-northeast-3" | "ap-south-1" | "ap-southeast-1" | "ap-southeast-2" | "ap-southeast-4" | "ap-southeast-5" | "ca-central-1" | "cn-north-1" | "cn-northwest-1" | "eu-central-1" | "eu-central-2" | "eu-north-1" | "eu-south-1" | "eu-west-1" | "eu-west-2" | "eu-west-3" | "sa-east-1" | "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2";
+    runtimePreference: "apple-emojis" | "cjk" | "default";
+}) => void;

package/dist/shared/validate-custom-layer-arns.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateCustomLayerArns = void 0;
+const lambda_client_1 = require("@remotion/lambda-client");
+const layerVersionArnRegex = /^arn:([a-z0-9][a-z0-9-]*):lambda:([a-z0-9-]+):(\d{12}):layer:([A-Za-z0-9-_]+):(\d+)$/;
+const validateCustomLayerArns = ({ customLayerArns, enableLambdaInsights, region, runtimePreference, }) => {
+    const { partition } = lambda_client_1.LambdaClientInternals.getAwsRegionMetadata(region);
+    if (customLayerArns === null) {
+        if (partition === 'aws-cn') {
+            throw new Error('customLayerArns must be specified when deploying to AWS China regions because Remotion-hosted Layers are not available in the aws-cn partition.');
+        }
+        return;
+    }
+    if (!Array.isArray(customLayerArns) || customLayerArns.length === 0) {
+        throw new TypeError('customLayerArns must contain at least one Layer ARN.');
+    }
+    if (runtimePreference !== 'default') {
+        throw new Error('customLayerArns cannot be combined with a non-default runtimePreference.');
+    }
+    if (customLayerArns.length + (enableLambdaInsights ? 1 : 0) > 5) {
+        throw new Error('Lambda functions support at most 5 Layers, including the Lambda Insights Layer.');
+    }
+    const seen = new Set();
+    for (const layerArn of customLayerArns) {
+        if (typeof layerArn !== 'string' || layerArn.length === 0) {
+            throw new TypeError('Each customLayerArns entry must be a non-empty string.');
+        }
+        const match = layerArn.match(layerVersionArnRegex);
+        if (!match) {
+            throw new TypeError(`Invalid Lambda Layer version ARN: ${layerArn}. Expected arn:<partition>:lambda:<region>:<12-digit-account-id>:layer:<layer-name>:<numeric-version>.`);
+        }
+        if (match[1] !== partition) {
+            throw new Error(`The custom Layer ARN ${layerArn} uses partition ${match[1]}, but region ${region} uses partition ${partition}.`);
+        }
+        if (match[2] !== region) {
+            throw new Error(`The custom Layer ARN ${layerArn} is in region ${match[2]}, but the function is being deployed to ${region}.`);
+        }
+        if (seen.has(layerArn)) {
+            throw new Error(`Duplicate custom Layer ARN: ${layerArn}.`);
+        }
+        seen.add(layerArn);
+    }
+};
+exports.validateCustomLayerArns = validateCustomLayerArns;

package/package.json

@@ -3,7 +3,7 @@
 		"url": "https://github.com/remotion-dev/remotion/tree/main/packages/lambda"
 	},
 	"name": "@remotion/lambda",
-	"version": "4.0.509",
+	"version": "4.0.511",
 	"description": "Render Remotion videos on AWS Lambda",
 	"main": "dist/index.js",
 	"scripts": {
@@ -28,22 +28,22 @@
 		"@aws-sdk/client-cloudwatch-logs": "3.986.0",
 		"@aws-sdk/client-service-quotas": "3.986.0",
 		"@aws-sdk/lib-storage": "3.986.0",
-		"@remotion/bundler": "4.0.509",
-		"@remotion/cli": "4.0.509",
-		"@remotion/lambda-client": "4.0.509",
-		"@remotion/renderer": "4.0.509",
-		"@remotion/serverless": "4.0.509",
-		"@remotion/streaming": "4.0.509",
+		"@remotion/bundler": "4.0.511",
+		"@remotion/cli": "4.0.511",
+		"@remotion/lambda-client": "4.0.511",
+		"@remotion/renderer": "4.0.511",
+		"@remotion/serverless": "4.0.511",
+		"@remotion/streaming": "4.0.511",
 		"@smithy/abort-controller": "4.0.1",
-		"remotion": "4.0.509",
+		"remotion": "4.0.511",
 		"zod": "4.4.3"
 	},
 	"devDependencies": {
-		"@remotion/bundler": "4.0.509",
+		"@remotion/bundler": "4.0.511",
 		"@types/express": "5.0.1",
 		"express": "4.21.0",
-		"@remotion/compositor-linux-arm64-gnu": "4.0.509",
-		"@remotion/eslint-config-internal": "4.0.509",
+		"@remotion/compositor-linux-arm64-gnu": "4.0.511",
+		"@remotion/eslint-config-internal": "4.0.511",
 		"mime-types": "2.1.34",
 		"@types/mime-types": "2.1.1",
 		"@types/minimist": "1.2.2",
@@ -54,7 +54,7 @@
 		"@typescript/native-preview": "7.0.0-dev.20260217.1"
 	},
 	"peerDependencies": {
-		"@remotion/bundler": "4.0.509"
+		"@remotion/bundler": "4.0.511"
 	},
 	"publishConfig": {
 		"access": "public"