aws-cdk-lib 2.128.0__py3-none-any.whl → 2.129.0__py3-none-any.whl

aws_cdk/aws_lambda/__init__.py

@@ -1169,6 +1169,47 @@ fn = lambda_.Function(self, "MyLambda",
 )
 ```
 
+## IPv6 support
+
+You can configure IPv6 connectivity for lambda function by setting `Ipv6AllowedForDualStack` to true.
+It allows Lambda functions to specify whether the IPv6 traffic should be allowed when using dual-stack VPCs.
+To access IPv6 network using Lambda, Dual-stack VPC is required. Using dual-stack VPC a function communicates with subnet over either of IPv4 or IPv6.
+
+```python
+import aws_cdk.aws_ec2 as ec2
+
+
+nat_provider = ec2.NatProvider.gateway()
+
+# create dual-stack VPC
+vpc = ec2.Vpc(self, "DualStackVpc",
+    ip_protocol=ec2.IpProtocol.DUAL_STACK,
+    subnet_configuration=[ec2.SubnetConfiguration(
+        name="Ipv6Public1",
+        subnet_type=ec2.SubnetType.PUBLIC
+    ), ec2.SubnetConfiguration(
+        name="Ipv6Public2",
+        subnet_type=ec2.SubnetType.PUBLIC
+    ), ec2.SubnetConfiguration(
+        name="Ipv6Private1",
+        subnet_type=ec2.SubnetType.PRIVATE_WITH_EGRESS
+    )
+    ],
+    nat_gateway_provider=nat_provider
+)
+
+nat_gateway_id = nat_provider.configured_gateways[0].gateway_id
+(vpc.private_subnets[0]).add_ipv6_nat64_route(nat_gateway_id)
+
+fn = lambda_.Function(self, "Lambda_with_IPv6_VPC",
+    code=lambda_.InlineCode("def main(event, context): pass"),
+    handler="index.main",
+    runtime=lambda_.Runtime.PYTHON_3_9,
+    vpc=vpc,
+    ipv6_allowed_for_dual_stack=True
+)
+```
+
 ## Ephemeral Storage
 
 You can configure ephemeral storage on a function to control the amount of storage it gets for reading
@@ -1372,6 +1413,7 @@ from .. import (
     Size as _Size_7b441c34,
     SymlinkFollowMode as _SymlinkFollowMode_047ec1f6,
     TagManager as _TagManager_0a598cb3,
+    TimeZone as _TimeZone_cdd72ac9,
     TreeInspector as _TreeInspector_488e0dd5,
 )
 from ..aws_applicationautoscaling import (
@@ -9070,8 +9112,7 @@ class CfnPermission(
     @builtins.property
     @jsii.member(jsii_name="attrId")
     def attr_id(self) -> builtins.str:
-        '''A statement identifier that differentiates the statement from others in the same policy.
-
+        '''
         :cloudformationAttribute: Id
         '''
         return typing.cast(builtins.str, jsii.get(self, "attrId"))
@@ -13598,6 +13639,7 @@ class FunctionAttributes:
         "function_name": "functionName",
         "initial_policy": "initialPolicy",
         "insights_version": "insightsVersion",
+        "ipv6_allowed_for_dual_stack": "ipv6AllowedForDualStack",
         "layers": "layers",
         "log_format": "logFormat",
         "logging_format": "loggingFormat",
@@ -13648,6 +13690,7 @@ class FunctionOptions(EventInvokeConfigOptions):
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional["LambdaInsightsVersion"] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence["ILayerVersion"]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional["LoggingFormat"] = None,
@@ -13695,6 +13738,7 @@ class FunctionOptions(EventInvokeConfigOptions):
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -13791,6 +13835,7 @@ class FunctionOptions(EventInvokeConfigOptions):
                 function_name="functionName",
                 initial_policy=[policy_statement],
                 insights_version=lambda_insights_version,
+                ipv6_allowed_for_dual_stack=False,
                 layers=[layer_version],
                 log_format="logFormat",
                 logging_format=lambda_.LoggingFormat.TEXT,
@@ -13861,6 +13906,7 @@ class FunctionOptions(EventInvokeConfigOptions):
             check_type(argname="argument function_name", value=function_name, expected_type=type_hints["function_name"])
             check_type(argname="argument initial_policy", value=initial_policy, expected_type=type_hints["initial_policy"])
             check_type(argname="argument insights_version", value=insights_version, expected_type=type_hints["insights_version"])
+            check_type(argname="argument ipv6_allowed_for_dual_stack", value=ipv6_allowed_for_dual_stack, expected_type=type_hints["ipv6_allowed_for_dual_stack"])
             check_type(argname="argument layers", value=layers, expected_type=type_hints["layers"])
             check_type(argname="argument log_format", value=log_format, expected_type=type_hints["log_format"])
             check_type(argname="argument logging_format", value=logging_format, expected_type=type_hints["logging_format"])
@@ -13929,6 +13975,8 @@ class FunctionOptions(EventInvokeConfigOptions):
             self._values["initial_policy"] = initial_policy
         if insights_version is not None:
             self._values["insights_version"] = insights_version
+        if ipv6_allowed_for_dual_stack is not None:
+            self._values["ipv6_allowed_for_dual_stack"] = ipv6_allowed_for_dual_stack
         if layers is not None:
             self._values["layers"] = layers
         if log_format is not None:
@@ -14220,6 +14268,17 @@ class FunctionOptions(EventInvokeConfigOptions):
         result = self._values.get("insights_version")
         return typing.cast(typing.Optional["LambdaInsightsVersion"], result)
 
+    @builtins.property
+    def ipv6_allowed_for_dual_stack(self) -> typing.Optional[builtins.bool]:
+        '''Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
+
+        Only used if 'vpc' is supplied.
+
+        :default: false
+        '''
+        result = self._values.get("ipv6_allowed_for_dual_stack")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def layers(self) -> typing.Optional[typing.List["ILayerVersion"]]:
         '''A list of layers to add to the function's execution environment.
@@ -14533,6 +14592,7 @@ class FunctionOptions(EventInvokeConfigOptions):
         "function_name": "functionName",
         "initial_policy": "initialPolicy",
         "insights_version": "insightsVersion",
+        "ipv6_allowed_for_dual_stack": "ipv6AllowedForDualStack",
         "layers": "layers",
         "log_format": "logFormat",
         "logging_format": "loggingFormat",
@@ -14586,6 +14646,7 @@ class FunctionProps(FunctionOptions):
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional["LambdaInsightsVersion"] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence["ILayerVersion"]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional["LoggingFormat"] = None,
@@ -14635,6 +14696,7 @@ class FunctionProps(FunctionOptions):
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -14720,6 +14782,7 @@ class FunctionProps(FunctionOptions):
             check_type(argname="argument function_name", value=function_name, expected_type=type_hints["function_name"])
             check_type(argname="argument initial_policy", value=initial_policy, expected_type=type_hints["initial_policy"])
             check_type(argname="argument insights_version", value=insights_version, expected_type=type_hints["insights_version"])
+            check_type(argname="argument ipv6_allowed_for_dual_stack", value=ipv6_allowed_for_dual_stack, expected_type=type_hints["ipv6_allowed_for_dual_stack"])
             check_type(argname="argument layers", value=layers, expected_type=type_hints["layers"])
             check_type(argname="argument log_format", value=log_format, expected_type=type_hints["log_format"])
             check_type(argname="argument logging_format", value=logging_format, expected_type=type_hints["logging_format"])
@@ -14795,6 +14858,8 @@ class FunctionProps(FunctionOptions):
             self._values["initial_policy"] = initial_policy
         if insights_version is not None:
             self._values["insights_version"] = insights_version
+        if ipv6_allowed_for_dual_stack is not None:
+            self._values["ipv6_allowed_for_dual_stack"] = ipv6_allowed_for_dual_stack
         if layers is not None:
             self._values["layers"] = layers
         if log_format is not None:
@@ -15086,6 +15151,17 @@ class FunctionProps(FunctionOptions):
         result = self._values.get("insights_version")
         return typing.cast(typing.Optional["LambdaInsightsVersion"], result)
 
+    @builtins.property
+    def ipv6_allowed_for_dual_stack(self) -> typing.Optional[builtins.bool]:
+        '''Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
+
+        Only used if 'vpc' is supplied.
+
+        :default: false
+        '''
+        result = self._values.get("ipv6_allowed_for_dual_stack")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def layers(self) -> typing.Optional[typing.List["ILayerVersion"]]:
         '''A list of layers to add to the function's execution environment.
@@ -15423,12 +15499,16 @@ class FunctionUrlAuthType(enum.Enum):
 
     Example::
 
+        # Can be a Function or an Alias
         # fn: lambda.Function
         
         
-        fn.add_function_url(
-            auth_type=lambda_.FunctionUrlAuthType.NONE,
-            invoke_mode=lambda_.InvokeMode.RESPONSE_STREAM
+        fn_url = fn.add_function_url(
+            auth_type=lambda_.FunctionUrlAuthType.NONE
+        )
+        
+        CfnOutput(self, "TheUrl",
+            value=fn_url.url
         )
     '''
 
@@ -15601,12 +15681,16 @@ class FunctionUrlOptions:
 
         Example::
 
+            # Can be a Function or an Alias
             # fn: lambda.Function
             
             
-            fn.add_function_url(
-                auth_type=lambda_.FunctionUrlAuthType.NONE,
-                invoke_mode=lambda_.InvokeMode.RESPONSE_STREAM
+            fn_url = fn.add_function_url(
+                auth_type=lambda_.FunctionUrlAuthType.NONE
+            )
+            
+            CfnOutput(self, "TheUrl",
+                value=fn_url.url
             )
         '''
         if isinstance(cors, dict):
@@ -17189,6 +17273,7 @@ class IScalableFunctionAttribute(
         max_capacity: typing.Optional[jsii.Number] = None,
         min_capacity: typing.Optional[jsii.Number] = None,
         start_time: typing.Optional[datetime.datetime] = None,
+        time_zone: typing.Optional[_TimeZone_cdd72ac9] = None,
     ) -> None:
         '''Scale out or in based on schedule.
 
@@ -17198,6 +17283,7 @@ class IScalableFunctionAttribute(
         :param max_capacity: The new maximum capacity. During the scheduled time, the current capacity is above the maximum capacity, Application Auto Scaling scales in to the maximum capacity. At least one of maxCapacity and minCapacity must be supplied. Default: No new maximum capacity
         :param min_capacity: The new minimum capacity. During the scheduled time, if the current capacity is below the minimum capacity, Application Auto Scaling scales out to the minimum capacity. At least one of maxCapacity and minCapacity must be supplied. Default: No new minimum capacity
         :param start_time: When this scheduled action becomes active. Default: The rule is activate immediately
+        :param time_zone: The time zone used when referring to the date and time of a scheduled action, when the scheduled action uses an at or cron expression. Default: - UTC
         '''
         ...
 
@@ -17243,6 +17329,7 @@ class _IScalableFunctionAttributeProxy(
         max_capacity: typing.Optional[jsii.Number] = None,
         min_capacity: typing.Optional[jsii.Number] = None,
         start_time: typing.Optional[datetime.datetime] = None,
+        time_zone: typing.Optional[_TimeZone_cdd72ac9] = None,
     ) -> None:
         '''Scale out or in based on schedule.
 
@@ -17252,6 +17339,7 @@ class _IScalableFunctionAttributeProxy(
         :param max_capacity: The new maximum capacity. During the scheduled time, the current capacity is above the maximum capacity, Application Auto Scaling scales in to the maximum capacity. At least one of maxCapacity and minCapacity must be supplied. Default: No new maximum capacity
         :param min_capacity: The new minimum capacity. During the scheduled time, if the current capacity is below the minimum capacity, Application Auto Scaling scales out to the minimum capacity. At least one of maxCapacity and minCapacity must be supplied. Default: No new minimum capacity
         :param start_time: When this scheduled action becomes active. Default: The rule is activate immediately
+        :param time_zone: The time zone used when referring to the date and time of a scheduled action, when the scheduled action uses an at or cron expression. Default: - UTC
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__6400e52bafb7e00e3113dbb1e115c4dea946b786b17eee75a6aa6706a941170c)
@@ -17262,6 +17350,7 @@ class _IScalableFunctionAttributeProxy(
             max_capacity=max_capacity,
             min_capacity=min_capacity,
             start_time=start_time,
+            time_zone=time_zone,
         )
 
         return typing.cast(None, jsii.invoke(self, "scaleOnSchedule", [id, actions]))
@@ -19240,6 +19329,12 @@ class Runtime(metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.Runtime
         '''The .NET 6 runtime (dotnet6).'''
         return typing.cast("Runtime", jsii.sget(cls, "DOTNET_6"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="DOTNET_8")
+    def DOTNET_8(cls) -> "Runtime":
+        '''The .NET 8 runtime (dotnet8).'''
+        return typing.cast("Runtime", jsii.sget(cls, "DOTNET_8"))
+
     @jsii.python.classproperty
     @jsii.member(jsii_name="DOTNET_CORE_1")
     def DOTNET_CORE_1(cls) -> "Runtime":
@@ -19774,6 +19869,7 @@ class S3Code(Code, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.S3
         "function_name": "functionName",
         "initial_policy": "initialPolicy",
         "insights_version": "insightsVersion",
+        "ipv6_allowed_for_dual_stack": "ipv6AllowedForDualStack",
         "layers": "layers",
         "log_format": "logFormat",
         "logging_format": "loggingFormat",
@@ -19829,6 +19925,7 @@ class SingletonFunctionProps(FunctionProps):
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional[LambdaInsightsVersion] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional[LoggingFormat] = None,
@@ -19881,6 +19978,7 @@ class SingletonFunctionProps(FunctionProps):
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -19951,6 +20049,7 @@ class SingletonFunctionProps(FunctionProps):
             check_type(argname="argument function_name", value=function_name, expected_type=type_hints["function_name"])
             check_type(argname="argument initial_policy", value=initial_policy, expected_type=type_hints["initial_policy"])
             check_type(argname="argument insights_version", value=insights_version, expected_type=type_hints["insights_version"])
+            check_type(argname="argument ipv6_allowed_for_dual_stack", value=ipv6_allowed_for_dual_stack, expected_type=type_hints["ipv6_allowed_for_dual_stack"])
             check_type(argname="argument layers", value=layers, expected_type=type_hints["layers"])
             check_type(argname="argument log_format", value=log_format, expected_type=type_hints["log_format"])
             check_type(argname="argument logging_format", value=logging_format, expected_type=type_hints["logging_format"])
@@ -20029,6 +20128,8 @@ class SingletonFunctionProps(FunctionProps):
             self._values["initial_policy"] = initial_policy
         if insights_version is not None:
             self._values["insights_version"] = insights_version
+        if ipv6_allowed_for_dual_stack is not None:
+            self._values["ipv6_allowed_for_dual_stack"] = ipv6_allowed_for_dual_stack
         if layers is not None:
             self._values["layers"] = layers
         if log_format is not None:
@@ -20322,6 +20423,17 @@ class SingletonFunctionProps(FunctionProps):
         result = self._values.get("insights_version")
         return typing.cast(typing.Optional[LambdaInsightsVersion], result)
 
+    @builtins.property
+    def ipv6_allowed_for_dual_stack(self) -> typing.Optional[builtins.bool]:
+        '''Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
+
+        Only used if 'vpc' is supplied.
+
+        :default: false
+        '''
+        result = self._values.get("ipv6_allowed_for_dual_stack")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def layers(self) -> typing.Optional[typing.List[ILayerVersion]]:
         '''A list of layers to add to the function's execution environment.
@@ -22635,6 +22747,7 @@ class CodeSigningConfig(
         "function_name": "functionName",
         "initial_policy": "initialPolicy",
         "insights_version": "insightsVersion",
+        "ipv6_allowed_for_dual_stack": "ipv6AllowedForDualStack",
         "layers": "layers",
         "log_format": "logFormat",
         "logging_format": "loggingFormat",
@@ -22686,6 +22799,7 @@ class DockerImageFunctionProps(FunctionOptions):
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional[LambdaInsightsVersion] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional[LoggingFormat] = None,
@@ -22734,6 +22848,7 @@ class DockerImageFunctionProps(FunctionOptions):
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -22798,6 +22913,7 @@ class DockerImageFunctionProps(FunctionOptions):
             check_type(argname="argument function_name", value=function_name, expected_type=type_hints["function_name"])
             check_type(argname="argument initial_policy", value=initial_policy, expected_type=type_hints["initial_policy"])
             check_type(argname="argument insights_version", value=insights_version, expected_type=type_hints["insights_version"])
+            check_type(argname="argument ipv6_allowed_for_dual_stack", value=ipv6_allowed_for_dual_stack, expected_type=type_hints["ipv6_allowed_for_dual_stack"])
             check_type(argname="argument layers", value=layers, expected_type=type_hints["layers"])
             check_type(argname="argument log_format", value=log_format, expected_type=type_hints["log_format"])
             check_type(argname="argument logging_format", value=logging_format, expected_type=type_hints["logging_format"])
@@ -22869,6 +22985,8 @@ class DockerImageFunctionProps(FunctionOptions):
             self._values["initial_policy"] = initial_policy
         if insights_version is not None:
             self._values["insights_version"] = insights_version
+        if ipv6_allowed_for_dual_stack is not None:
+            self._values["ipv6_allowed_for_dual_stack"] = ipv6_allowed_for_dual_stack
         if layers is not None:
             self._values["layers"] = layers
         if log_format is not None:
@@ -23160,6 +23278,17 @@ class DockerImageFunctionProps(FunctionOptions):
         result = self._values.get("insights_version")
         return typing.cast(typing.Optional[LambdaInsightsVersion], result)
 
+    @builtins.property
+    def ipv6_allowed_for_dual_stack(self) -> typing.Optional[builtins.bool]:
+        '''Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
+
+        Only used if 'vpc' is supplied.
+
+        :default: false
+        '''
+        result = self._values.get("ipv6_allowed_for_dual_stack")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def layers(self) -> typing.Optional[typing.List[ILayerVersion]]:
         '''A list of layers to add to the function's execution environment.
@@ -24311,14 +24440,13 @@ class FunctionUrl(
 
         # Can be a Function or an Alias
         # fn: lambda.Function
-        # my_role: iam.Role
         
         
-        fn_url = fn.add_function_url()
-        fn_url.grant_invoke_url(my_role)
+        fn_url = fn.add_function_url(
+            auth_type=lambda_.FunctionUrlAuthType.NONE
+        )
         
         CfnOutput(self, "TheUrl",
-            # The .url attributes will return the unique Function URL
             value=fn_url.url
         )
     '''
@@ -24624,6 +24752,7 @@ class SingletonFunction(
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional[LambdaInsightsVersion] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional[LoggingFormat] = None,
@@ -24677,6 +24806,7 @@ class SingletonFunction(
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -24732,6 +24862,7 @@ class SingletonFunction(
             function_name=function_name,
             initial_policy=initial_policy,
             insights_version=insights_version,
+            ipv6_allowed_for_dual_stack=ipv6_allowed_for_dual_stack,
             layers=layers,
             log_format=log_format,
             logging_format=logging_format,
@@ -25573,6 +25704,7 @@ class Function(
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional[LambdaInsightsVersion] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional[LoggingFormat] = None,
@@ -25624,6 +25756,7 @@ class Function(
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -25677,6 +25810,7 @@ class Function(
             function_name=function_name,
             initial_policy=initial_policy,
             insights_version=insights_version,
+            ipv6_allowed_for_dual_stack=ipv6_allowed_for_dual_stack,
             layers=layers,
             log_format=log_format,
             logging_format=logging_format,
@@ -26356,6 +26490,7 @@ class DockerImageFunction(
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional[LambdaInsightsVersion] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional[LoggingFormat] = None,
@@ -26405,6 +26540,7 @@ class DockerImageFunction(
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -26456,6 +26592,7 @@ class DockerImageFunction(
             function_name=function_name,
             initial_policy=initial_policy,
             insights_version=insights_version,
+            ipv6_allowed_for_dual_stack=ipv6_allowed_for_dual_stack,
             layers=layers,
             log_format=log_format,
             logging_format=logging_format,
@@ -28419,6 +28556,7 @@ def _typecheckingstub__59918bb957d892739733c7a5849db990615fe5329709ad7ba703e0ee4
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[LambdaInsightsVersion] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[LoggingFormat] = None,
@@ -28469,6 +28607,7 @@ def _typecheckingstub__94e70d11aa3c53737d418dbb9983973dfc06dbdef5c8cc30613cc3c6d
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[LambdaInsightsVersion] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[LoggingFormat] = None,
@@ -28673,6 +28812,7 @@ def _typecheckingstub__6400e52bafb7e00e3113dbb1e115c4dea946b786b17eee75a6aa6706a
     max_capacity: typing.Optional[jsii.Number] = None,
     min_capacity: typing.Optional[jsii.Number] = None,
     start_time: typing.Optional[datetime.datetime] = None,
+    time_zone: typing.Optional[_TimeZone_cdd72ac9] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -28948,6 +29088,7 @@ def _typecheckingstub__68a03ec9f866a29c77aabcf8328c63a49511790fa9714874f255b3292
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[LambdaInsightsVersion] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[LoggingFormat] = None,
@@ -29196,6 +29337,7 @@ def _typecheckingstub__04dd97f4b18c00e7ee0981f2428664401ae0b75dbda6102ea3ef53d08
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[LambdaInsightsVersion] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[LoggingFormat] = None,
@@ -29436,6 +29578,7 @@ def _typecheckingstub__e7b766bff13bb7266787cec9bebb600187e19c1672e530bb9cfa31649
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[LambdaInsightsVersion] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[LoggingFormat] = None,
@@ -29639,6 +29782,7 @@ def _typecheckingstub__724895b6b59aaf2b678ef25f2beca19fb114fc04ff6b37edef28e12b3
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[LambdaInsightsVersion] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[LoggingFormat] = None,
@@ -29779,6 +29923,7 @@ def _typecheckingstub__368a49fe1f866c7ea7986c57b6f8488d0fddea8f62bf05ec1ed7eb09b
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[LambdaInsightsVersion] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[ILayerVersion]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[LoggingFormat] = None,

aws_cdk/aws_lambda_nodejs/__init__.py

@@ -1472,6 +1472,7 @@ class NodejsFunction(
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional[_LambdaInsightsVersion_9dfbfef9] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence[_ILayerVersion_5ac127c8]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional[_LoggingFormat_30be8e01] = None,
@@ -1527,6 +1528,7 @@ class NodejsFunction(
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -1584,6 +1586,7 @@ class NodejsFunction(
             function_name=function_name,
             initial_policy=initial_policy,
             insights_version=insights_version,
+            ipv6_allowed_for_dual_stack=ipv6_allowed_for_dual_stack,
             layers=layers,
             log_format=log_format,
             logging_format=logging_format,
@@ -1641,6 +1644,7 @@ class NodejsFunction(
         "function_name": "functionName",
         "initial_policy": "initialPolicy",
         "insights_version": "insightsVersion",
+        "ipv6_allowed_for_dual_stack": "ipv6AllowedForDualStack",
         "layers": "layers",
         "log_format": "logFormat",
         "logging_format": "loggingFormat",
@@ -1698,6 +1702,7 @@ class NodejsFunctionProps(_FunctionOptions_328f4d39):
         function_name: typing.Optional[builtins.str] = None,
         initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
         insights_version: typing.Optional[_LambdaInsightsVersion_9dfbfef9] = None,
+        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
         layers: typing.Optional[typing.Sequence[_ILayerVersion_5ac127c8]] = None,
         log_format: typing.Optional[builtins.str] = None,
         logging_format: typing.Optional[_LoggingFormat_30be8e01] = None,
@@ -1752,6 +1757,7 @@ class NodejsFunctionProps(_FunctionOptions_328f4d39):
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
+        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
         :param log_format: Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
@@ -1830,6 +1836,7 @@ class NodejsFunctionProps(_FunctionOptions_328f4d39):
             check_type(argname="argument function_name", value=function_name, expected_type=type_hints["function_name"])
             check_type(argname="argument initial_policy", value=initial_policy, expected_type=type_hints["initial_policy"])
             check_type(argname="argument insights_version", value=insights_version, expected_type=type_hints["insights_version"])
+            check_type(argname="argument ipv6_allowed_for_dual_stack", value=ipv6_allowed_for_dual_stack, expected_type=type_hints["ipv6_allowed_for_dual_stack"])
             check_type(argname="argument layers", value=layers, expected_type=type_hints["layers"])
             check_type(argname="argument log_format", value=log_format, expected_type=type_hints["log_format"])
             check_type(argname="argument logging_format", value=logging_format, expected_type=type_hints["logging_format"])
@@ -1905,6 +1912,8 @@ class NodejsFunctionProps(_FunctionOptions_328f4d39):
             self._values["initial_policy"] = initial_policy
         if insights_version is not None:
             self._values["insights_version"] = insights_version
+        if ipv6_allowed_for_dual_stack is not None:
+            self._values["ipv6_allowed_for_dual_stack"] = ipv6_allowed_for_dual_stack
         if layers is not None:
             self._values["layers"] = layers
         if log_format is not None:
@@ -2212,6 +2221,17 @@ class NodejsFunctionProps(_FunctionOptions_328f4d39):
         result = self._values.get("insights_version")
         return typing.cast(typing.Optional[_LambdaInsightsVersion_9dfbfef9], result)
 
+    @builtins.property
+    def ipv6_allowed_for_dual_stack(self) -> typing.Optional[builtins.bool]:
+        '''Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
+
+        Only used if 'vpc' is supplied.
+
+        :default: false
+        '''
+        result = self._values.get("ipv6_allowed_for_dual_stack")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def layers(self) -> typing.Optional[typing.List[_ILayerVersion_5ac127c8]]:
         '''A list of layers to add to the function's execution environment.
@@ -2797,6 +2817,7 @@ def _typecheckingstub__ece177829b26ef102d4080d730f168e29d7d310d1518738839cd3fc82
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[_LambdaInsightsVersion_9dfbfef9] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[_ILayerVersion_5ac127c8]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[_LoggingFormat_30be8e01] = None,
@@ -2851,6 +2872,7 @@ def _typecheckingstub__2da45b394f0332be0f6d6b7468d9fb54961953d56265da69955d36ffa
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_PolicyStatement_0fe33853]] = None,
     insights_version: typing.Optional[_LambdaInsightsVersion_9dfbfef9] = None,
+    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[_ILayerVersion_5ac127c8]] = None,
     log_format: typing.Optional[builtins.str] = None,
     logging_format: typing.Optional[_LoggingFormat_30be8e01] = None,