aws-cdk-lib 2.117.0__py3-none-any.whl → 2.119.0__py3-none-any.whl

aws_cdk/aws_lambda/__init__.py

@@ -5987,8 +5987,6 @@ class CfnFunction(
         # The values are placeholders you should change.
         from aws_cdk import aws_lambda as lambda_
         
-        # policy: Any
-        
         cfn_function = lambda_.CfnFunction(self, "MyCfnFunction",
             code=lambda.CfnFunction.CodeProperty(
                 image_uri="imageUri",
@@ -6035,7 +6033,6 @@ class CfnFunction(
             ),
             memory_size=123,
             package_type="packageType",
-            policy=policy,
             reserved_concurrent_executions=123,
             runtime="runtime",
             runtime_management_config=lambda.CfnFunction.RuntimeManagementConfigProperty(
@@ -6085,7 +6082,6 @@ class CfnFunction(
         logging_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFunction.LoggingConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         memory_size: typing.Optional[jsii.Number] = None,
         package_type: typing.Optional[builtins.str] = None,
-        policy: typing.Any = None,
         reserved_concurrent_executions: typing.Optional[jsii.Number] = None,
         runtime: typing.Optional[builtins.str] = None,
         runtime_management_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnFunction.RuntimeManagementConfigProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -6101,29 +6097,28 @@ class CfnFunction(
         :param code: The code for the function.
         :param role: The Amazon Resource Name (ARN) of the function's execution role.
         :param architectures: The instruction set architecture that the function supports. Enter a string array with one of the valid values (arm64 or x86_64). The default value is ``x86_64`` .
-        :param code_signing_config_arn: A unique Arn for CodeSigningConfig resource.
-        :param dead_letter_config: The dead-letter queue for failed asynchronous invocations.
+        :param code_signing_config_arn: To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function.
+        :param dead_letter_config: A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see `Dead-letter queues <https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-dlq>`_ .
         :param description: A description of the function.
-        :param environment: A function's environment variable settings.
-        :param ephemeral_storage: A function's ephemeral storage settings.
-        :param file_system_configs: Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an AWS::EFS::MountTarget resource, you must also specify a DependsOn attribute to ensure that the mount target is created or updated before the function.
-        :param function_name: The name of the Lambda function, up to 64 characters in length. If you don't specify a name, AWS CloudFormation generates one.
-        :param handler: The name of the method within your code that Lambda calls to execute your function. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime
+        :param environment: Environment variables that are accessible from function code during execution.
+        :param ephemeral_storage: The size of the function's ``/tmp`` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB.
+        :param file_system_configs: Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an `AWS::EFS::MountTarget <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html>`_ resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function. For more information about using the ``DependsOn`` attribute, see `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ .
+        :param function_name: The name of the Lambda function, up to 64 characters in length. If you don't specify a name, AWS CloudFormation generates one. If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
+        :param handler: The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see `Lambda programming model <https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html>`_ .
         :param image_config: Configuration values that override the container image Dockerfile settings. For more information, see `Container image settings <https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms>`_ .
-        :param kms_key_arn: The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables. If it's not provided, AWS Lambda uses a default service key.
-        :param layers: A list of function layers to add to the function's execution environment. Specify each layer by its ARN, including the version.
-        :param logging_config: LoggingConfig for the function.
-        :param memory_size: The amount of memory that your function has access to. Increasing the function's memory also increases its CPU allocation. The default value is 128 MB. The value must be a multiple of 64 MB.
-        :param package_type: PackageType.
-        :param policy: The resource policy of your function.
+        :param kms_key_arn: The ARN of the AWS Key Management Service ( AWS KMS ) customer managed key that's used to encrypt your function's `environment variables <https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption>`_ . When `Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html>`_ is activated, Lambda also uses this key is to encrypt your function's snapshot. If you deploy your function using a container image, Lambda also uses this key to encrypt your function when it's deployed. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). If you don't provide a customer managed key, Lambda uses a default service key.
+        :param layers: A list of `function layers <https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html>`_ to add to the function's execution environment. Specify each layer by its ARN, including the version.
+        :param logging_config: The function's Amazon CloudWatch Logs configuration settings.
+        :param memory_size: The amount of `memory available to the function <https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-common.html#configuration-memory-console>`_ at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB. Note that new AWS accounts have reduced concurrency and memory quotas. AWS raises these quotas automatically based on your usage. You can also request a quota increase.
+        :param package_type: The type of deployment package. Set to ``Image`` for container image and set ``Zip`` for .zip file archive.
         :param reserved_concurrent_executions: The number of simultaneous executions to reserve for the function.
-        :param runtime: The identifier of the function's runtime.
+        :param runtime: The identifier of the function's `runtime <https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html>`_ . Runtime is required if the deployment package is a .zip file archive. The following list includes deprecated runtimes. For more information, see `Runtime deprecation policy <https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy>`_ .
         :param runtime_management_config: Sets the runtime management configuration for a function's version. For more information, see `Runtime updates <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html>`_ .
-        :param snap_start: The function's SnapStart setting. When set to PublishedVersions, Lambda creates a snapshot of the execution environment when you publish a function version.
-        :param tags: A list of tags to apply to the function.
-        :param timeout: The amount of time that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds.
-        :param tracing_config: The function's AWS X-Ray tracing configuration. To sample and record incoming requests, set Mode to Active.
-        :param vpc_config: The VPC security groups and subnets that are attached to a Lambda function. When you connect a function to a VPC, Lambda creates an elastic network interface for each combination of security group and subnet in the function's VPC configuration. The function can only access resources and the internet through that VPC.
+        :param snap_start: The function's `AWS Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html>`_ setting.
+        :param tags: A list of `tags <https://docs.aws.amazon.com/lambda/latest/dg/tagging.html>`_ to apply to the function.
+        :param timeout: The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see `Lambda execution environment <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html>`_ .
+        :param tracing_config: Set ``Mode`` to ``Active`` to sample and trace a subset of incoming requests with `X-Ray <https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html>`_ .
+        :param vpc_config: For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see `Configuring a Lambda function to access resources in a VPC <https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html>`_ .
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__d971f3872acf20816e6da364ff9e6bec83fe2e68bbb9a7debc845b40036ee553)
@@ -6147,7 +6142,6 @@ class CfnFunction(
             logging_config=logging_config,
             memory_size=memory_size,
             package_type=package_type,
-            policy=policy,
             reserved_concurrent_executions=reserved_concurrent_executions,
             runtime=runtime,
             runtime_management_config=runtime_management_config,
@@ -6193,7 +6187,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="attrArn")
     def attr_arn(self) -> builtins.str:
-        '''Unique identifier for function resources.
+        '''The Amazon Resource Name (ARN) of the function.
 
         :cloudformationAttribute: Arn
         '''
@@ -6284,7 +6278,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="codeSigningConfigArn")
     def code_signing_config_arn(self) -> typing.Optional[builtins.str]:
-        '''A unique Arn for CodeSigningConfig resource.'''
+        '''To enable code signing for this function, specify the ARN of a code-signing configuration.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "codeSigningConfigArn"))
 
     @code_signing_config_arn.setter
@@ -6299,7 +6293,7 @@ class CfnFunction(
     def dead_letter_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.DeadLetterConfigProperty"]]:
-        '''The dead-letter queue for failed asynchronous invocations.'''
+        '''A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.DeadLetterConfigProperty"]], jsii.get(self, "deadLetterConfig"))
 
     @dead_letter_config.setter
@@ -6330,7 +6324,7 @@ class CfnFunction(
     def environment(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.EnvironmentProperty"]]:
-        '''A function's environment variable settings.'''
+        '''Environment variables that are accessible from function code during execution.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.EnvironmentProperty"]], jsii.get(self, "environment"))
 
     @environment.setter
@@ -6348,7 +6342,7 @@ class CfnFunction(
     def ephemeral_storage(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.EphemeralStorageProperty"]]:
-        '''A function's ephemeral storage settings.'''
+        '''The size of the function's ``/tmp`` directory in MB.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.EphemeralStorageProperty"]], jsii.get(self, "ephemeralStorage"))
 
     @ephemeral_storage.setter
@@ -6395,7 +6389,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="handler")
     def handler(self) -> typing.Optional[builtins.str]:
-        '''The name of the method within your code that Lambda calls to execute your function.'''
+        '''The name of the method within your code that Lambda calls to run your function.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "handler"))
 
     @handler.setter
@@ -6426,7 +6420,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="kmsKeyArn")
     def kms_key_arn(self) -> typing.Optional[builtins.str]:
-        '''The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables.'''
+        '''The ARN of the AWS Key Management Service ( AWS KMS ) customer managed key that's used to encrypt your function's `environment variables <https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption>`_ . When `Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html>`_ is activated, Lambda also uses this key is to encrypt your function's snapshot. If you deploy your function using a container image, Lambda also uses this key to encrypt your function when it's deployed. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). If you don't provide a customer managed key, Lambda uses a default service key.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "kmsKeyArn"))
 
     @kms_key_arn.setter
@@ -6439,7 +6433,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="layers")
     def layers(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''A list of function layers to add to the function's execution environment.'''
+        '''A list of `function layers <https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html>`_ to add to the function's execution environment. Specify each layer by its ARN, including the version.'''
         return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "layers"))
 
     @layers.setter
@@ -6454,7 +6448,7 @@ class CfnFunction(
     def logging_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.LoggingConfigProperty"]]:
-        '''LoggingConfig for the function.'''
+        '''The function's Amazon CloudWatch Logs configuration settings.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.LoggingConfigProperty"]], jsii.get(self, "loggingConfig"))
 
     @logging_config.setter
@@ -6470,7 +6464,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="memorySize")
     def memory_size(self) -> typing.Optional[jsii.Number]:
-        '''The amount of memory that your function has access to.'''
+        '''The amount of `memory available to the function <https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-common.html#configuration-memory-console>`_ at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB. Note that new AWS accounts have reduced concurrency and memory quotas. AWS raises these quotas automatically based on your usage. You can also request a quota increase.'''
         return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "memorySize"))
 
     @memory_size.setter
@@ -6483,7 +6477,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="packageType")
     def package_type(self) -> typing.Optional[builtins.str]:
-        '''PackageType.'''
+        '''The type of deployment package.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "packageType"))
 
     @package_type.setter
@@ -6493,19 +6487,6 @@ class CfnFunction(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "packageType", value)
 
-    @builtins.property
-    @jsii.member(jsii_name="policy")
-    def policy(self) -> typing.Any:
-        '''The resource policy of your function.'''
-        return typing.cast(typing.Any, jsii.get(self, "policy"))
-
-    @policy.setter
-    def policy(self, value: typing.Any) -> None:
-        if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__4a54210e26bffc8d85473b7ef012a678281a822dad29846097f8060e1a584fd8)
-            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "policy", value)
-
     @builtins.property
     @jsii.member(jsii_name="reservedConcurrentExecutions")
     def reserved_concurrent_executions(self) -> typing.Optional[jsii.Number]:
@@ -6525,7 +6506,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="runtime")
     def runtime(self) -> typing.Optional[builtins.str]:
-        '''The identifier of the function's runtime.'''
+        '''The identifier of the function's `runtime <https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html>`_ . Runtime is required if the deployment package is a .zip file archive.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "runtime"))
 
     @runtime.setter
@@ -6558,7 +6539,7 @@ class CfnFunction(
     def snap_start(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.SnapStartProperty"]]:
-        '''The function's SnapStart setting.'''
+        '''The function's `AWS Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html>`_ setting.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.SnapStartProperty"]], jsii.get(self, "snapStart"))
 
     @snap_start.setter
@@ -6574,7 +6555,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''A list of tags to apply to the function.'''
+        '''A list of `tags <https://docs.aws.amazon.com/lambda/latest/dg/tagging.html>`_ to apply to the function.'''
         return typing.cast(typing.Optional[typing.List[_CfnTag_f6864754]], jsii.get(self, "tagsRaw"))
 
     @tags_raw.setter
@@ -6587,7 +6568,7 @@ class CfnFunction(
     @builtins.property
     @jsii.member(jsii_name="timeout")
     def timeout(self) -> typing.Optional[jsii.Number]:
-        '''The amount of time that Lambda allows a function to run before stopping it.'''
+        '''The amount of time (in seconds) that Lambda allows a function to run before stopping it.'''
         return typing.cast(typing.Optional[jsii.Number], jsii.get(self, "timeout"))
 
     @timeout.setter
@@ -6602,7 +6583,7 @@ class CfnFunction(
     def tracing_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.TracingConfigProperty"]]:
-        '''The function's AWS X-Ray tracing configuration.'''
+        '''Set ``Mode`` to ``Active`` to sample and trace a subset of incoming requests with `X-Ray <https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html>`_ .'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.TracingConfigProperty"]], jsii.get(self, "tracingConfig"))
 
     @tracing_config.setter
@@ -6620,7 +6601,7 @@ class CfnFunction(
     def vpc_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.VpcConfigProperty"]]:
-        '''The VPC security groups and subnets that are attached to a Lambda function.'''
+        '''For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnFunction.VpcConfigProperty"]], jsii.get(self, "vpcConfig"))
 
     @vpc_config.setter
@@ -6658,11 +6639,11 @@ class CfnFunction(
 
             Changes to a deployment package in Amazon S3 or a container image in ECR are not detected automatically during stack updates. To update the function code, change the object key or version in the template.
 
-            :param image_uri: ImageUri.
-            :param s3_bucket: An Amazon S3 bucket in the same AWS Region as your function. The bucket can be in a different AWS account.
+            :param image_uri: URI of a `container image <https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html>`_ in the Amazon ECR registry.
+            :param s3_bucket: An Amazon S3 bucket in the same AWS Region as your function. The bucket can be in a different AWS account .
             :param s3_key: The Amazon S3 key of the deployment package.
             :param s3_object_version: For versioned objects, the version of the deployment package object to use.
-            :param zip_file: The source code of your Lambda function. If you include your function source inline with this parameter, AWS CloudFormation places it in a file named index and zips it to create a deployment package..
+            :param zip_file: (Node.js and Python) The source code of your Lambda function. If you include your function source inline with this parameter, AWS CloudFormation places it in a file named ``index`` and zips it to create a `deployment package <https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html>`_ . This zip file cannot exceed 4MB. For the ``Handler`` property, the first part of the handler identifier must be ``index`` . For example, ``index.handler`` . For JSON, you must escape quotes and special characters such as newline ( ``\\n`` ) with a backslash. If you specify a function that interacts with an AWS CloudFormation custom resource, you don't have to write your own functions to send responses to the custom resource that invoked the function. AWS CloudFormation provides a response module ( `cfn-response <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-lambda-function-code-cfnresponsemodule.html>`_ ) that simplifies sending responses. See `Using AWS Lambda with AWS CloudFormation <https://docs.aws.amazon.com/lambda/latest/dg/services-cloudformation.html>`_ for details.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html
             :exampleMetadata: fixture=_generated
@@ -6702,7 +6683,7 @@ class CfnFunction(
 
         @builtins.property
         def image_uri(self) -> typing.Optional[builtins.str]:
-            '''ImageUri.
+            '''URI of a `container image <https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html>`_ in the Amazon ECR registry.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-imageuri
             '''
@@ -6713,7 +6694,7 @@ class CfnFunction(
         def s3_bucket(self) -> typing.Optional[builtins.str]:
             '''An Amazon S3 bucket in the same AWS Region as your function.
 
-            The bucket can be in a different AWS account.
+            The bucket can be in a different AWS account .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-s3bucket
             '''
@@ -6740,9 +6721,11 @@ class CfnFunction(
 
         @builtins.property
         def zip_file(self) -> typing.Optional[builtins.str]:
-            '''The source code of your Lambda function.
+            '''(Node.js and Python) The source code of your Lambda function. If you include your function source inline with this parameter, AWS CloudFormation places it in a file named ``index`` and zips it to create a `deployment package <https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html>`_ . This zip file cannot exceed 4MB. For the ``Handler`` property, the first part of the handler identifier must be ``index`` . For example, ``index.handler`` .
 
-            If you include your function source inline with this parameter, AWS CloudFormation places it in a file named index and zips it to create a deployment package..
+            For JSON, you must escape quotes and special characters such as newline ( ``\\n`` ) with a backslash.
+
+            If you specify a function that interacts with an AWS CloudFormation custom resource, you don't have to write your own functions to send responses to the custom resource that invoked the function. AWS CloudFormation provides a response module ( `cfn-response <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-lambda-function-code-cfnresponsemodule.html>`_ ) that simplifies sending responses. See `Using AWS Lambda with AWS CloudFormation <https://docs.aws.amazon.com/lambda/latest/dg/services-cloudformation.html>`_ for details.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-zipfile
             '''
@@ -6767,7 +6750,7 @@ class CfnFunction(
     )
     class DeadLetterConfigProperty:
         def __init__(self, *, target_arn: typing.Optional[builtins.str] = None) -> None:
-            '''The dead-letter queue for failed asynchronous invocations.
+            '''The `dead-letter queue <https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#dlq>`_ for failed asynchronous invocations.
 
             :param target_arn: The Amazon Resource Name (ARN) of an Amazon SQS queue or Amazon SNS topic.
 
@@ -6824,7 +6807,9 @@ class CfnFunction(
         ) -> None:
             '''A function's environment variable settings.
 
-            :param variables: Environment variable key-value pairs.
+            You can use environment variables to adjust your function's behavior without updating code. An environment variable is a pair of strings that are stored in a function's version-specific configuration.
+
+            :param variables: Environment variable key-value pairs. For more information, see `Using Lambda environment variables <https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html>`_ .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-environment.html
             :exampleMetadata: fixture=_generated
@@ -6854,6 +6839,8 @@ class CfnFunction(
         ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
             '''Environment variable key-value pairs.
 
+            For more information, see `Using Lambda environment variables <https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html>`_ .
+
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-environment.html#cfn-lambda-function-environment-variables
             '''
             result = self._values.get("variables")
@@ -6877,9 +6864,11 @@ class CfnFunction(
     )
     class EphemeralStorageProperty:
         def __init__(self, *, size: jsii.Number) -> None:
-            '''A function's ephemeral storage settings.
+            '''The size of the function's ``/tmp`` directory in MB.
 
-            :param size: The amount of ephemeral storage that your function has access to.
+            The default value is 512, but it can be any whole number between 512 and 10,240 MB.
+
+            :param size: The size of the function's ``/tmp`` directory.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-ephemeralstorage.html
             :exampleMetadata: fixture=_generated
@@ -6903,7 +6892,7 @@ class CfnFunction(
 
         @builtins.property
         def size(self) -> jsii.Number:
-            '''The amount of ephemeral storage that your function has access to.
+            '''The size of the function's ``/tmp`` directory.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-ephemeralstorage.html#cfn-lambda-function-ephemeralstorage-size
             '''
@@ -6937,7 +6926,7 @@ class CfnFunction(
             '''Details about the connection between a Lambda function and an `Amazon EFS file system <https://docs.aws.amazon.com/lambda/latest/dg/configuration-filesystem.html>`_ .
 
             :param arn: The Amazon Resource Name (ARN) of the Amazon EFS access point that provides access to the file system.
-            :param local_mount_path: The path where the function can access the file system, starting with /mnt/.
+            :param local_mount_path: The path where the function can access the file system, starting with ``/mnt/`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-filesystemconfig.html
             :exampleMetadata: fixture=_generated
@@ -6974,7 +6963,7 @@ class CfnFunction(
 
         @builtins.property
         def local_mount_path(self) -> builtins.str:
-            '''The path where the function can access the file system, starting with /mnt/.
+            '''The path where the function can access the file system, starting with ``/mnt/`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-filesystemconfig.html#cfn-lambda-function-filesystemconfig-localmountpath
             '''
@@ -7014,9 +7003,9 @@ class CfnFunction(
 
             For more information, see `Container image settings <https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms>`_ .
 
-            :param command: Command.
-            :param entry_point: EntryPoint.
-            :param working_directory: WorkingDirectory.
+            :param command: Specifies parameters that you want to pass in with ENTRYPOINT. You can specify a maximum of 1,500 parameters in the list.
+            :param entry_point: Specifies the entry point to their application, which is typically the location of the runtime executable. You can specify a maximum of 1,500 string entries in the list.
+            :param working_directory: Specifies the working directory. The length of the directory string cannot exceed 1,000 characters.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-imageconfig.html
             :exampleMetadata: fixture=_generated
@@ -7048,7 +7037,9 @@ class CfnFunction(
 
         @builtins.property
         def command(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''Command.
+            '''Specifies parameters that you want to pass in with ENTRYPOINT.
+
+            You can specify a maximum of 1,500 parameters in the list.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-imageconfig.html#cfn-lambda-function-imageconfig-command
             '''
@@ -7057,7 +7048,9 @@ class CfnFunction(
 
         @builtins.property
         def entry_point(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''EntryPoint.
+            '''Specifies the entry point to their application, which is typically the location of the runtime executable.
+
+            You can specify a maximum of 1,500 string entries in the list.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-imageconfig.html#cfn-lambda-function-imageconfig-entrypoint
             '''
@@ -7066,7 +7059,9 @@ class CfnFunction(
 
         @builtins.property
         def working_directory(self) -> typing.Optional[builtins.str]:
-            '''WorkingDirectory.
+            '''Specifies the working directory.
+
+            The length of the directory string cannot exceed 1,000 characters.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-imageconfig.html#cfn-lambda-function-imageconfig-workingdirectory
             '''
@@ -7103,12 +7098,12 @@ class CfnFunction(
             log_group: typing.Optional[builtins.str] = None,
             system_log_level: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''LoggingConfig for the function.
+            '''The function's Amazon CloudWatch Logs configuration settings.
 
-            :param application_log_level: Unique identifier for a runtime version arn.
-            :param log_format: Trigger for runtime update.
-            :param log_group: Unique identifier for a runtime version arn.
-            :param system_log_level: Unique identifier for a runtime version arn.
+            :param application_log_level: Set this property to filter the application logs for your function that Lambda sends to CloudWatch. Lambda only sends application logs at the selected level and lower.
+            :param log_format: The format in which Lambda sends your function's application and system logs to CloudWatch. Select between plain text and structured JSON.
+            :param log_group: The name of the Amazon CloudWatch log group the function sends logs to. By default, Lambda functions send logs to a default log group named ``/aws/lambda/<function name>`` . To use a different log group, enter an existing log group or enter a new log group name.
+            :param system_log_level: Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level and lower.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-loggingconfig.html
             :exampleMetadata: fixture=_generated
@@ -7144,7 +7139,9 @@ class CfnFunction(
 
         @builtins.property
         def application_log_level(self) -> typing.Optional[builtins.str]:
-            '''Unique identifier for a runtime version arn.
+            '''Set this property to filter the application logs for your function that Lambda sends to CloudWatch.
+
+            Lambda only sends application logs at the selected level and lower.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-loggingconfig.html#cfn-lambda-function-loggingconfig-applicationloglevel
             '''
@@ -7153,7 +7150,9 @@ class CfnFunction(
 
         @builtins.property
         def log_format(self) -> typing.Optional[builtins.str]:
-            '''Trigger for runtime update.
+            '''The format in which Lambda sends your function's application and system logs to CloudWatch.
+
+            Select between plain text and structured JSON.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-loggingconfig.html#cfn-lambda-function-loggingconfig-logformat
             '''
@@ -7162,7 +7161,9 @@ class CfnFunction(
 
         @builtins.property
         def log_group(self) -> typing.Optional[builtins.str]:
-            '''Unique identifier for a runtime version arn.
+            '''The name of the Amazon CloudWatch log group the function sends logs to.
+
+            By default, Lambda functions send logs to a default log group named ``/aws/lambda/<function name>`` . To use a different log group, enter an existing log group or enter a new log group name.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-loggingconfig.html#cfn-lambda-function-loggingconfig-loggroup
             '''
@@ -7171,7 +7172,9 @@ class CfnFunction(
 
         @builtins.property
         def system_log_level(self) -> typing.Optional[builtins.str]:
-            '''Unique identifier for a runtime version arn.
+            '''Set this property to filter the system logs for your function that Lambda sends to CloudWatch.
+
+            Lambda only sends system logs at the selected level and lower.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-loggingconfig.html#cfn-lambda-function-loggingconfig-systemloglevel
             '''
@@ -7208,8 +7211,8 @@ class CfnFunction(
 
             For more information, see `Runtime updates <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html>`_ .
 
-            :param update_runtime_on: Trigger for runtime update.
-            :param runtime_version_arn: Unique identifier for a runtime version arn.
+            :param update_runtime_on: Specify the runtime update mode. - *Auto (default)* - Automatically update to the most recent and secure runtime version using a `Two-phase runtime version rollout <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-two-phase>`_ . This is the best choice for most customers to ensure they always benefit from runtime updates. - *FunctionUpdate* - Lambda updates the runtime of you function to the most recent and secure runtime version when you update your function. This approach synchronizes runtime updates with function deployments, giving you control over when runtime updates are applied and allowing you to detect and mitigate rare runtime update incompatibilities early. When using this setting, you need to regularly update your functions to keep their runtime up-to-date. - *Manual* - You specify a runtime version in your function configuration. The function will use this runtime version indefinitely. In the rare case where a new runtime version is incompatible with an existing function, this allows you to roll back your function to an earlier runtime version. For more information, see `Roll back a runtime version <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-rollback>`_ . *Valid Values* : ``Auto`` | ``FunctionUpdate`` | ``Manual``
+            :param runtime_version_arn: The ARN of the runtime version you want the function to use. .. epigraph:: This is only required if you're using the *Manual* runtime update mode.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-runtimemanagementconfig.html
             :exampleMetadata: fixture=_generated
@@ -7239,7 +7242,13 @@ class CfnFunction(
 
         @builtins.property
         def update_runtime_on(self) -> builtins.str:
-            '''Trigger for runtime update.
+            '''Specify the runtime update mode.
+
+            - *Auto (default)* - Automatically update to the most recent and secure runtime version using a `Two-phase runtime version rollout <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-two-phase>`_ . This is the best choice for most customers to ensure they always benefit from runtime updates.
+            - *FunctionUpdate* - Lambda updates the runtime of you function to the most recent and secure runtime version when you update your function. This approach synchronizes runtime updates with function deployments, giving you control over when runtime updates are applied and allowing you to detect and mitigate rare runtime update incompatibilities early. When using this setting, you need to regularly update your functions to keep their runtime up-to-date.
+            - *Manual* - You specify a runtime version in your function configuration. The function will use this runtime version indefinitely. In the rare case where a new runtime version is incompatible with an existing function, this allows you to roll back your function to an earlier runtime version. For more information, see `Roll back a runtime version <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-rollback>`_ .
+
+            *Valid Values* : ``Auto`` | ``FunctionUpdate`` | ``Manual``
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-runtimemanagementconfig.html#cfn-lambda-function-runtimemanagementconfig-updateruntimeon
             '''
@@ -7249,7 +7258,11 @@ class CfnFunction(
 
         @builtins.property
         def runtime_version_arn(self) -> typing.Optional[builtins.str]:
-            '''Unique identifier for a runtime version arn.
+            '''The ARN of the runtime version you want the function to use.
+
+            .. epigraph::
+
+               This is only required if you're using the *Manual* runtime update mode.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-runtimemanagementconfig.html#cfn-lambda-function-runtimemanagementconfig-runtimeversionarn
             '''
@@ -7274,11 +7287,9 @@ class CfnFunction(
     )
     class SnapStartProperty:
         def __init__(self, *, apply_on: builtins.str) -> None:
-            '''The function's SnapStart setting.
-
-            When set to PublishedVersions, Lambda creates a snapshot of the execution environment when you publish a function version.
+            '''The function's `AWS Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html>`_ setting.
 
-            :param apply_on: Applying SnapStart setting on function resource type.
+            :param apply_on: Set ``ApplyOn`` to ``PublishedVersions`` to create a snapshot of the initialized execution environment when you publish a function version.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-snapstart.html
             :exampleMetadata: fixture=_generated
@@ -7302,7 +7313,7 @@ class CfnFunction(
 
         @builtins.property
         def apply_on(self) -> builtins.str:
-            '''Applying SnapStart setting on function resource type.
+            '''Set ``ApplyOn`` to ``PublishedVersions`` to create a snapshot of the initialized execution environment when you publish a function version.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-snapstart.html#cfn-lambda-function-snapstart-applyon
             '''
@@ -7336,12 +7347,10 @@ class CfnFunction(
             apply_on: typing.Optional[builtins.str] = None,
             optimization_status: typing.Optional[builtins.str] = None,
         ) -> None:
-            '''The function's SnapStart Response.
+            '''The function's `SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html>`_ setting.
 
-            When set to PublishedVersions, Lambda creates a snapshot of the execution environment when you publish a function version.
-
-            :param apply_on: Applying SnapStart setting on function resource type.
-            :param optimization_status: Indicates whether SnapStart is activated for the specified function version.
+            :param apply_on: When set to ``PublishedVersions`` , Lambda creates a snapshot of the execution environment when you publish a function version.
+            :param optimization_status: When you provide a `qualified Amazon Resource Name (ARN) <https://docs.aws.amazon.com/lambda/latest/dg/configuration-versions.html#versioning-versions-using>`_ , this response element indicates whether SnapStart is activated for the specified function version.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-snapstartresponse.html
             :exampleMetadata: fixture=_generated
@@ -7369,7 +7378,7 @@ class CfnFunction(
 
         @builtins.property
         def apply_on(self) -> typing.Optional[builtins.str]:
-            '''Applying SnapStart setting on function resource type.
+            '''When set to ``PublishedVersions`` , Lambda creates a snapshot of the execution environment when you publish a function version.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-snapstartresponse.html#cfn-lambda-function-snapstartresponse-applyon
             '''
@@ -7378,7 +7387,7 @@ class CfnFunction(
 
         @builtins.property
         def optimization_status(self) -> typing.Optional[builtins.str]:
-            '''Indicates whether SnapStart is activated for the specified function version.
+            '''When you provide a `qualified Amazon Resource Name (ARN) <https://docs.aws.amazon.com/lambda/latest/dg/configuration-versions.html#versioning-versions-using>`_ , this response element indicates whether SnapStart is activated for the specified function version.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-snapstartresponse.html#cfn-lambda-function-snapstartresponse-optimizationstatus
             '''
@@ -7403,9 +7412,7 @@ class CfnFunction(
     )
     class TracingConfigProperty:
         def __init__(self, *, mode: typing.Optional[builtins.str] = None) -> None:
-            '''The function's AWS X-Ray tracing configuration.
-
-            To sample and record incoming requests, set Mode to Active.
+            '''The function's `AWS X-Ray <https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html>`_ tracing configuration. To sample and record incoming requests, set ``Mode`` to ``Active`` .
 
             :param mode: The tracing mode.
 
@@ -7468,10 +7475,15 @@ class CfnFunction(
         ) -> None:
             '''The VPC security groups and subnets that are attached to a Lambda function.
 
-            When you connect a function to a VPC, Lambda creates an elastic network interface for each combination of security group and subnet in the function's VPC configuration. The function can only access resources and the internet through that VPC.
+            When you connect a function to a VPC, Lambda creates an elastic network interface for each combination of security group and subnet in the function's VPC configuration. The function can only access resources and the internet through that VPC. For more information, see `VPC Settings <https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html>`_ .
+            .. epigraph::
+
+               When you delete a function, AWS CloudFormation monitors the state of its network interfaces and waits for Lambda to delete them before proceeding. If the VPC is defined in the same stack, the network interfaces need to be deleted by Lambda before AWS CloudFormation can delete the VPC's resources.
 
-            :param ipv6_allowed_for_dual_stack: A boolean indicating whether IPv6 protocols will be allowed for dual stack subnets.
-            :param security_group_ids: A list of VPC security groups IDs.
+               To monitor network interfaces, AWS CloudFormation needs the ``ec2:DescribeNetworkInterfaces`` permission. It obtains this from the user or role that modifies the stack. If you don't provide this permission, AWS CloudFormation does not wait for network interfaces to be deleted.
+
+            :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
+            :param security_group_ids: A list of VPC security group IDs.
             :param subnet_ids: A list of VPC subnet IDs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-vpcconfig.html
@@ -7506,7 +7518,7 @@ class CfnFunction(
         def ipv6_allowed_for_dual_stack(
             self,
         ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-            '''A boolean indicating whether IPv6 protocols will be allowed for dual stack subnets.
+            '''Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-vpcconfig.html#cfn-lambda-function-vpcconfig-ipv6allowedfordualstack
             '''
@@ -7515,7 +7527,7 @@ class CfnFunction(
 
         @builtins.property
         def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''A list of VPC security groups IDs.
+            '''A list of VPC security group IDs.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-vpcconfig.html#cfn-lambda-function-vpcconfig-securitygroupids
             '''
@@ -7564,7 +7576,6 @@ class CfnFunction(
         "logging_config": "loggingConfig",
         "memory_size": "memorySize",
         "package_type": "packageType",
-        "policy": "policy",
         "reserved_concurrent_executions": "reservedConcurrentExecutions",
         "runtime": "runtime",
         "runtime_management_config": "runtimeManagementConfig",
@@ -7596,7 +7607,6 @@ class CfnFunctionProps:
         logging_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFunction.LoggingConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         memory_size: typing.Optional[jsii.Number] = None,
         package_type: typing.Optional[builtins.str] = None,
-        policy: typing.Any = None,
         reserved_concurrent_executions: typing.Optional[jsii.Number] = None,
         runtime: typing.Optional[builtins.str] = None,
         runtime_management_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFunction.RuntimeManagementConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -7611,29 +7621,28 @@ class CfnFunctionProps:
         :param code: The code for the function.
         :param role: The Amazon Resource Name (ARN) of the function's execution role.
         :param architectures: The instruction set architecture that the function supports. Enter a string array with one of the valid values (arm64 or x86_64). The default value is ``x86_64`` .
-        :param code_signing_config_arn: A unique Arn for CodeSigningConfig resource.
-        :param dead_letter_config: The dead-letter queue for failed asynchronous invocations.
+        :param code_signing_config_arn: To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function.
+        :param dead_letter_config: A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see `Dead-letter queues <https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-dlq>`_ .
         :param description: A description of the function.
-        :param environment: A function's environment variable settings.
-        :param ephemeral_storage: A function's ephemeral storage settings.
-        :param file_system_configs: Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an AWS::EFS::MountTarget resource, you must also specify a DependsOn attribute to ensure that the mount target is created or updated before the function.
-        :param function_name: The name of the Lambda function, up to 64 characters in length. If you don't specify a name, AWS CloudFormation generates one.
-        :param handler: The name of the method within your code that Lambda calls to execute your function. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime
+        :param environment: Environment variables that are accessible from function code during execution.
+        :param ephemeral_storage: The size of the function's ``/tmp`` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB.
+        :param file_system_configs: Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an `AWS::EFS::MountTarget <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html>`_ resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function. For more information about using the ``DependsOn`` attribute, see `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ .
+        :param function_name: The name of the Lambda function, up to 64 characters in length. If you don't specify a name, AWS CloudFormation generates one. If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
+        :param handler: The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see `Lambda programming model <https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html>`_ .
         :param image_config: Configuration values that override the container image Dockerfile settings. For more information, see `Container image settings <https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms>`_ .
-        :param kms_key_arn: The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables. If it's not provided, AWS Lambda uses a default service key.
-        :param layers: A list of function layers to add to the function's execution environment. Specify each layer by its ARN, including the version.
-        :param logging_config: LoggingConfig for the function.
-        :param memory_size: The amount of memory that your function has access to. Increasing the function's memory also increases its CPU allocation. The default value is 128 MB. The value must be a multiple of 64 MB.
-        :param package_type: PackageType.
-        :param policy: The resource policy of your function.
+        :param kms_key_arn: The ARN of the AWS Key Management Service ( AWS KMS ) customer managed key that's used to encrypt your function's `environment variables <https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption>`_ . When `Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html>`_ is activated, Lambda also uses this key is to encrypt your function's snapshot. If you deploy your function using a container image, Lambda also uses this key to encrypt your function when it's deployed. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). If you don't provide a customer managed key, Lambda uses a default service key.
+        :param layers: A list of `function layers <https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html>`_ to add to the function's execution environment. Specify each layer by its ARN, including the version.
+        :param logging_config: The function's Amazon CloudWatch Logs configuration settings.
+        :param memory_size: The amount of `memory available to the function <https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-common.html#configuration-memory-console>`_ at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB. Note that new AWS accounts have reduced concurrency and memory quotas. AWS raises these quotas automatically based on your usage. You can also request a quota increase.
+        :param package_type: The type of deployment package. Set to ``Image`` for container image and set ``Zip`` for .zip file archive.
         :param reserved_concurrent_executions: The number of simultaneous executions to reserve for the function.
-        :param runtime: The identifier of the function's runtime.
+        :param runtime: The identifier of the function's `runtime <https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html>`_ . Runtime is required if the deployment package is a .zip file archive. The following list includes deprecated runtimes. For more information, see `Runtime deprecation policy <https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy>`_ .
         :param runtime_management_config: Sets the runtime management configuration for a function's version. For more information, see `Runtime updates <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html>`_ .
-        :param snap_start: The function's SnapStart setting. When set to PublishedVersions, Lambda creates a snapshot of the execution environment when you publish a function version.
-        :param tags: A list of tags to apply to the function.
-        :param timeout: The amount of time that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds.
-        :param tracing_config: The function's AWS X-Ray tracing configuration. To sample and record incoming requests, set Mode to Active.
-        :param vpc_config: The VPC security groups and subnets that are attached to a Lambda function. When you connect a function to a VPC, Lambda creates an elastic network interface for each combination of security group and subnet in the function's VPC configuration. The function can only access resources and the internet through that VPC.
+        :param snap_start: The function's `AWS Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html>`_ setting.
+        :param tags: A list of `tags <https://docs.aws.amazon.com/lambda/latest/dg/tagging.html>`_ to apply to the function.
+        :param timeout: The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see `Lambda execution environment <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html>`_ .
+        :param tracing_config: Set ``Mode`` to ``Active`` to sample and trace a subset of incoming requests with `X-Ray <https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html>`_ .
+        :param vpc_config: For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see `Configuring a Lambda function to access resources in a VPC <https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html
         :exampleMetadata: fixture=_generated
@@ -7644,8 +7653,6 @@ class CfnFunctionProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_lambda as lambda_
             
-            # policy: Any
-            
             cfn_function_props = lambda.CfnFunctionProps(
                 code=lambda.CfnFunction.CodeProperty(
                     image_uri="imageUri",
@@ -7692,7 +7699,6 @@ class CfnFunctionProps:
                 ),
                 memory_size=123,
                 package_type="packageType",
-                policy=policy,
                 reserved_concurrent_executions=123,
                 runtime="runtime",
                 runtime_management_config=lambda.CfnFunction.RuntimeManagementConfigProperty(
@@ -7738,7 +7744,6 @@ class CfnFunctionProps:
             check_type(argname="argument logging_config", value=logging_config, expected_type=type_hints["logging_config"])
             check_type(argname="argument memory_size", value=memory_size, expected_type=type_hints["memory_size"])
             check_type(argname="argument package_type", value=package_type, expected_type=type_hints["package_type"])
-            check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
             check_type(argname="argument reserved_concurrent_executions", value=reserved_concurrent_executions, expected_type=type_hints["reserved_concurrent_executions"])
             check_type(argname="argument runtime", value=runtime, expected_type=type_hints["runtime"])
             check_type(argname="argument runtime_management_config", value=runtime_management_config, expected_type=type_hints["runtime_management_config"])
@@ -7781,8 +7786,6 @@ class CfnFunctionProps:
             self._values["memory_size"] = memory_size
         if package_type is not None:
             self._values["package_type"] = package_type
-        if policy is not None:
-            self._values["policy"] = policy
         if reserved_concurrent_executions is not None:
             self._values["reserved_concurrent_executions"] = reserved_concurrent_executions
         if runtime is not None:
@@ -7833,7 +7836,10 @@ class CfnFunctionProps:
 
     @builtins.property
     def code_signing_config_arn(self) -> typing.Optional[builtins.str]:
-        '''A unique Arn for CodeSigningConfig resource.
+        '''To enable code signing for this function, specify the ARN of a code-signing configuration.
+
+        A code-signing configuration
+        includes a set of signing profiles, which define the trusted publishers for this function.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-codesigningconfigarn
         '''
@@ -7844,7 +7850,9 @@ class CfnFunctionProps:
     def dead_letter_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFunction.DeadLetterConfigProperty]]:
-        '''The dead-letter queue for failed asynchronous invocations.
+        '''A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing.
+
+        For more information, see `Dead-letter queues <https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-dlq>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-deadletterconfig
         '''
@@ -7864,7 +7872,7 @@ class CfnFunctionProps:
     def environment(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFunction.EnvironmentProperty]]:
-        '''A function's environment variable settings.
+        '''Environment variables that are accessible from function code during execution.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-environment
         '''
@@ -7875,7 +7883,9 @@ class CfnFunctionProps:
     def ephemeral_storage(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFunction.EphemeralStorageProperty]]:
-        '''A function's ephemeral storage settings.
+        '''The size of the function's ``/tmp`` directory in MB.
+
+        The default value is 512, but it can be any whole number between 512 and 10,240 MB.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-ephemeralstorage
         '''
@@ -7888,7 +7898,9 @@ class CfnFunctionProps:
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnFunction.FileSystemConfigProperty]]]]:
         '''Connection settings for an Amazon EFS file system.
 
-        To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an AWS::EFS::MountTarget resource, you must also specify a DependsOn attribute to ensure that the mount target is created or updated before the function.
+        To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an `AWS::EFS::MountTarget <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html>`_ resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function.
+
+        For more information about using the ``DependsOn`` attribute, see `DependsOn Attribute <https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-filesystemconfigs
         '''
@@ -7901,6 +7913,8 @@ class CfnFunctionProps:
 
         If you don't specify a name, AWS CloudFormation generates one.
 
+        If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-functionname
         '''
         result = self._values.get("function_name")
@@ -7908,9 +7922,9 @@ class CfnFunctionProps:
 
     @builtins.property
     def handler(self) -> typing.Optional[builtins.str]:
-        '''The name of the method within your code that Lambda calls to execute your function.
+        '''The name of the method within your code that Lambda calls to run your function.
 
-        The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime
+        Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see `Lambda programming model <https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-handler
         '''
@@ -7932,9 +7946,7 @@ class CfnFunctionProps:
 
     @builtins.property
     def kms_key_arn(self) -> typing.Optional[builtins.str]:
-        '''The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables.
-
-        If it's not provided, AWS Lambda uses a default service key.
+        '''The ARN of the AWS Key Management Service ( AWS KMS ) customer managed key that's used to encrypt your function's `environment variables <https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption>`_ . When `Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html>`_ is activated, Lambda also uses this key is to encrypt your function's snapshot. If you deploy your function using a container image, Lambda also uses this key to encrypt your function when it's deployed. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). If you don't provide a customer managed key, Lambda uses a default service key.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-kmskeyarn
         '''
@@ -7943,9 +7955,7 @@ class CfnFunctionProps:
 
     @builtins.property
     def layers(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''A list of function layers to add to the function's execution environment.
-
-        Specify each layer by its ARN, including the version.
+        '''A list of `function layers <https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html>`_ to add to the function's execution environment. Specify each layer by its ARN, including the version.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-layers
         '''
@@ -7956,7 +7966,7 @@ class CfnFunctionProps:
     def logging_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFunction.LoggingConfigProperty]]:
-        '''LoggingConfig for the function.
+        '''The function's Amazon CloudWatch Logs configuration settings.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-loggingconfig
         '''
@@ -7965,9 +7975,7 @@ class CfnFunctionProps:
 
     @builtins.property
     def memory_size(self) -> typing.Optional[jsii.Number]:
-        '''The amount of memory that your function has access to.
-
-        Increasing the function's memory also increases its CPU allocation. The default value is 128 MB. The value must be a multiple of 64 MB.
+        '''The amount of `memory available to the function <https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-common.html#configuration-memory-console>`_ at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB. Note that new AWS accounts have reduced concurrency and memory quotas. AWS raises these quotas automatically based on your usage. You can also request a quota increase.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-memorysize
         '''
@@ -7976,22 +7984,15 @@ class CfnFunctionProps:
 
     @builtins.property
     def package_type(self) -> typing.Optional[builtins.str]:
-        '''PackageType.
+        '''The type of deployment package.
+
+        Set to ``Image`` for container image and set ``Zip`` for .zip file archive.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-packagetype
         '''
         result = self._values.get("package_type")
         return typing.cast(typing.Optional[builtins.str], result)
 
-    @builtins.property
-    def policy(self) -> typing.Any:
-        '''The resource policy of your function.
-
-        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-policy
-        '''
-        result = self._values.get("policy")
-        return typing.cast(typing.Any, result)
-
     @builtins.property
     def reserved_concurrent_executions(self) -> typing.Optional[jsii.Number]:
         '''The number of simultaneous executions to reserve for the function.
@@ -8003,7 +8004,9 @@ class CfnFunctionProps:
 
     @builtins.property
     def runtime(self) -> typing.Optional[builtins.str]:
-        '''The identifier of the function's runtime.
+        '''The identifier of the function's `runtime <https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html>`_ . Runtime is required if the deployment package is a .zip file archive.
+
+        The following list includes deprecated runtimes. For more information, see `Runtime deprecation policy <https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-support-policy>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-runtime
         '''
@@ -8027,9 +8030,7 @@ class CfnFunctionProps:
     def snap_start(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFunction.SnapStartProperty]]:
-        '''The function's SnapStart setting.
-
-        When set to PublishedVersions, Lambda creates a snapshot of the execution environment when you publish a function version.
+        '''The function's `AWS Lambda SnapStart <https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html>`_ setting.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-snapstart
         '''
@@ -8038,7 +8039,7 @@ class CfnFunctionProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
-        '''A list of tags to apply to the function.
+        '''A list of `tags <https://docs.aws.amazon.com/lambda/latest/dg/tagging.html>`_ to apply to the function.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-tags
         '''
@@ -8047,9 +8048,9 @@ class CfnFunctionProps:
 
     @builtins.property
     def timeout(self) -> typing.Optional[jsii.Number]:
-        '''The amount of time that Lambda allows a function to run before stopping it.
+        '''The amount of time (in seconds) that Lambda allows a function to run before stopping it.
 
-        The default is 3 seconds. The maximum allowed value is 900 seconds.
+        The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see `Lambda execution environment <https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-timeout
         '''
@@ -8060,9 +8061,7 @@ class CfnFunctionProps:
     def tracing_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFunction.TracingConfigProperty]]:
-        '''The function's AWS X-Ray tracing configuration.
-
-        To sample and record incoming requests, set Mode to Active.
+        '''Set ``Mode`` to ``Active`` to sample and trace a subset of incoming requests with `X-Ray <https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-tracingconfig
         '''
@@ -8073,9 +8072,9 @@ class CfnFunctionProps:
     def vpc_config(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnFunction.VpcConfigProperty]]:
-        '''The VPC security groups and subnets that are attached to a Lambda function.
+        '''For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC.
 
-        When you connect a function to a VPC, Lambda creates an elastic network interface for each combination of security group and subnet in the function's VPC configuration. The function can only access resources and the internet through that VPC.
+        When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see `Configuring a Lambda function to access resources in a VPC <https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html>`_ .
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-vpcconfig
         '''
@@ -19734,123 +19733,14 @@ class SingletonFunctionProps(FunctionProps):
         :param uuid: A unique identifier to identify this lambda. The identifier should be unique across all custom resource providers. We recommend generating a UUID per provider.
         :param lambda_purpose: A descriptive name for the purpose of this Lambda. If the Lambda does not have a physical name, this string will be reflected its generated name. The combination of lambdaPurpose and uuid must be unique. Default: SingletonLambda
 
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            import aws_cdk as cdk
-            from aws_cdk import aws_codeguruprofiler as codeguruprofiler
-            from aws_cdk import aws_ec2 as ec2
-            from aws_cdk import aws_iam as iam
-            from aws_cdk import aws_kms as kms
-            from aws_cdk import aws_lambda as lambda_
-            from aws_cdk import aws_logs as logs
-            from aws_cdk import aws_sns as sns
-            from aws_cdk import aws_sqs as sqs
-            
-            # adot_layer_version: lambda.AdotLayerVersion
-            # architecture: lambda.Architecture
-            # code: lambda.Code
-            # code_signing_config: lambda.CodeSigningConfig
-            # destination: lambda.IDestination
-            # event_source: lambda.IEventSource
-            # file_system: lambda.FileSystem
-            # key: kms.Key
-            # lambda_insights_version: lambda.LambdaInsightsVersion
-            # layer_version: lambda.LayerVersion
-            # log_group: logs.LogGroup
-            # params_and_secrets_layer_version: lambda.ParamsAndSecretsLayerVersion
-            # policy_statement: iam.PolicyStatement
-            # profiling_group: codeguruprofiler.ProfilingGroup
-            # queue: sqs.Queue
-            # role: iam.Role
-            # runtime: lambda.Runtime
-            # runtime_management_mode: lambda.RuntimeManagementMode
-            # security_group: ec2.SecurityGroup
-            # size: cdk.Size
-            # snap_start_conf: lambda.SnapStartConf
-            # subnet: ec2.Subnet
-            # subnet_filter: ec2.SubnetFilter
-            # topic: sns.Topic
-            # vpc: ec2.Vpc
-            
-            singleton_function_props = lambda.SingletonFunctionProps(
-                code=code,
-                handler="handler",
-                runtime=runtime,
-                uuid="uuid",
+            fn = lambda_.SingletonFunction(self, "MyProvider", function_props)
             
-                # the properties below are optional
-                adot_instrumentation=lambda.AdotInstrumentationConfig(
-                    exec_wrapper=lambda_.AdotLambdaExecWrapper.REGULAR_HANDLER,
-                    layer_version=adot_layer_version
-                ),
-                allow_all_outbound=False,
-                allow_public_subnet=False,
-                application_log_level="applicationLogLevel",
-                architecture=architecture,
-                code_signing_config=code_signing_config,
-                current_version_options=lambda.VersionOptions(
-                    code_sha256="codeSha256",
-                    description="description",
-                    max_event_age=cdk.Duration.minutes(30),
-                    on_failure=destination,
-                    on_success=destination,
-                    provisioned_concurrent_executions=123,
-                    removal_policy=cdk.RemovalPolicy.DESTROY,
-                    retry_attempts=123
-                ),
-                dead_letter_queue=queue,
-                dead_letter_queue_enabled=False,
-                dead_letter_topic=topic,
-                description="description",
-                environment={
-                    "environment_key": "environment"
-                },
-                environment_encryption=key,
-                ephemeral_storage_size=size,
-                events=[event_source],
-                filesystem=file_system,
-                function_name="functionName",
-                initial_policy=[policy_statement],
-                insights_version=lambda_insights_version,
-                lambda_purpose="lambdaPurpose",
-                layers=[layer_version],
-                log_format="logFormat",
-                log_group=log_group,
-                log_retention=logs.RetentionDays.ONE_DAY,
-                log_retention_retry_options=lambda.LogRetentionRetryOptions(
-                    base=cdk.Duration.minutes(30),
-                    max_retries=123
-                ),
-                log_retention_role=role,
-                max_event_age=cdk.Duration.minutes(30),
-                memory_size=123,
-                on_failure=destination,
-                on_success=destination,
-                params_and_secrets=params_and_secrets_layer_version,
-                profiling=False,
-                profiling_group=profiling_group,
-                reserved_concurrent_executions=123,
-                retry_attempts=123,
-                role=role,
-                runtime_management_mode=runtime_management_mode,
-                security_groups=[security_group],
-                snap_start=snap_start_conf,
-                system_log_level="systemLogLevel",
-                timeout=cdk.Duration.minutes(30),
-                tracing=lambda_.Tracing.ACTIVE,
-                vpc=vpc,
-                vpc_subnets=ec2.SubnetSelection(
-                    availability_zones=["availabilityZones"],
-                    one_per_az=False,
-                    subnet_filters=[subnet_filter],
-                    subnet_group_name="subnetGroupName",
-                    subnets=[subnet],
-                    subnet_type=ec2.SubnetType.PRIVATE_ISOLATED
-                )
+            CustomResource(self, "MyResource",
+                service_token=fn.function_arn
             )
         '''
         if isinstance(adot_instrumentation, dict):
@@ -24434,123 +24324,14 @@ class SingletonFunction(
     whenever they're declared into the stack.
 
     :resource: AWS::Lambda::Function
-    :exampleMetadata: fixture=_generated
+    :exampleMetadata: infused
 
     Example::
 
-        # The code below shows an example of how to instantiate this type.
-        # The values are placeholders you should change.
-        import aws_cdk as cdk
-        from aws_cdk import aws_codeguruprofiler as codeguruprofiler
-        from aws_cdk import aws_ec2 as ec2
-        from aws_cdk import aws_iam as iam
-        from aws_cdk import aws_kms as kms
-        from aws_cdk import aws_lambda as lambda_
-        from aws_cdk import aws_logs as logs
-        from aws_cdk import aws_sns as sns
-        from aws_cdk import aws_sqs as sqs
-        
-        # adot_layer_version: lambda.AdotLayerVersion
-        # architecture: lambda.Architecture
-        # code: lambda.Code
-        # code_signing_config: lambda.CodeSigningConfig
-        # destination: lambda.IDestination
-        # event_source: lambda.IEventSource
-        # file_system: lambda.FileSystem
-        # key: kms.Key
-        # lambda_insights_version: lambda.LambdaInsightsVersion
-        # layer_version: lambda.LayerVersion
-        # log_group: logs.LogGroup
-        # params_and_secrets_layer_version: lambda.ParamsAndSecretsLayerVersion
-        # policy_statement: iam.PolicyStatement
-        # profiling_group: codeguruprofiler.ProfilingGroup
-        # queue: sqs.Queue
-        # role: iam.Role
-        # runtime: lambda.Runtime
-        # runtime_management_mode: lambda.RuntimeManagementMode
-        # security_group: ec2.SecurityGroup
-        # size: cdk.Size
-        # snap_start_conf: lambda.SnapStartConf
-        # subnet: ec2.Subnet
-        # subnet_filter: ec2.SubnetFilter
-        # topic: sns.Topic
-        # vpc: ec2.Vpc
+        fn = lambda_.SingletonFunction(self, "MyProvider", function_props)
         
-        singleton_function = lambda_.SingletonFunction(self, "MySingletonFunction",
-            code=code,
-            handler="handler",
-            runtime=runtime,
-            uuid="uuid",
-        
-            # the properties below are optional
-            adot_instrumentation=lambda.AdotInstrumentationConfig(
-                exec_wrapper=lambda_.AdotLambdaExecWrapper.REGULAR_HANDLER,
-                layer_version=adot_layer_version
-            ),
-            allow_all_outbound=False,
-            allow_public_subnet=False,
-            application_log_level="applicationLogLevel",
-            architecture=architecture,
-            code_signing_config=code_signing_config,
-            current_version_options=lambda.VersionOptions(
-                code_sha256="codeSha256",
-                description="description",
-                max_event_age=cdk.Duration.minutes(30),
-                on_failure=destination,
-                on_success=destination,
-                provisioned_concurrent_executions=123,
-                removal_policy=cdk.RemovalPolicy.DESTROY,
-                retry_attempts=123
-            ),
-            dead_letter_queue=queue,
-            dead_letter_queue_enabled=False,
-            dead_letter_topic=topic,
-            description="description",
-            environment={
-                "environment_key": "environment"
-            },
-            environment_encryption=key,
-            ephemeral_storage_size=size,
-            events=[event_source],
-            filesystem=file_system,
-            function_name="functionName",
-            initial_policy=[policy_statement],
-            insights_version=lambda_insights_version,
-            lambda_purpose="lambdaPurpose",
-            layers=[layer_version],
-            log_format="logFormat",
-            log_group=log_group,
-            log_retention=logs.RetentionDays.ONE_DAY,
-            log_retention_retry_options=lambda.LogRetentionRetryOptions(
-                base=cdk.Duration.minutes(30),
-                max_retries=123
-            ),
-            log_retention_role=role,
-            max_event_age=cdk.Duration.minutes(30),
-            memory_size=123,
-            on_failure=destination,
-            on_success=destination,
-            params_and_secrets=params_and_secrets_layer_version,
-            profiling=False,
-            profiling_group=profiling_group,
-            reserved_concurrent_executions=123,
-            retry_attempts=123,
-            role=role,
-            runtime_management_mode=runtime_management_mode,
-            security_groups=[security_group],
-            snap_start=snap_start_conf,
-            system_log_level="systemLogLevel",
-            timeout=cdk.Duration.minutes(30),
-            tracing=lambda_.Tracing.ACTIVE,
-            vpc=vpc,
-            vpc_subnets=ec2.SubnetSelection(
-                availability_zones=["availabilityZones"],
-                one_per_az=False,
-                subnet_filters=[subnet_filter],
-                subnet_group_name="subnetGroupName",
-                subnets=[subnet],
-                subnet_type=ec2.SubnetType.PRIVATE_ISOLATED
-            )
+        CustomResource(self, "MyResource",
+            service_token=fn.function_arn
         )
     '''
 
@@ -27249,7 +27030,6 @@ def _typecheckingstub__d971f3872acf20816e6da364ff9e6bec83fe2e68bbb9a7debc845b400
     logging_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFunction.LoggingConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     memory_size: typing.Optional[jsii.Number] = None,
     package_type: typing.Optional[builtins.str] = None,
-    policy: typing.Any = None,
     reserved_concurrent_executions: typing.Optional[jsii.Number] = None,
     runtime: typing.Optional[builtins.str] = None,
     runtime_management_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFunction.RuntimeManagementConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -27376,12 +27156,6 @@ def _typecheckingstub__7f9bb5c748b58d456d8f996b07509c9991044629122c76de58eaabc34
     """Type checking stubs"""
     pass
 
-def _typecheckingstub__4a54210e26bffc8d85473b7ef012a678281a822dad29846097f8060e1a584fd8(
-    value: typing.Any,
-) -> None:
-    """Type checking stubs"""
-    pass
-
 def _typecheckingstub__776a8ed6e24e90be835cb39b621ff66305005b357a6debbf3a62f69d83289278(
     value: typing.Optional[jsii.Number],
 ) -> None:
@@ -27547,7 +27321,6 @@ def _typecheckingstub__06b7f494e25475a49ebed0d7ed6d0fca9653b5fa5e00ded0cba4fc40a
     logging_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFunction.LoggingConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     memory_size: typing.Optional[jsii.Number] = None,
     package_type: typing.Optional[builtins.str] = None,
-    policy: typing.Any = None,
     reserved_concurrent_executions: typing.Optional[jsii.Number] = None,
     runtime: typing.Optional[builtins.str] = None,
     runtime_management_config: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnFunction.RuntimeManagementConfigProperty, typing.Dict[builtins.str, typing.Any]]]] = None,