aws-cdk-lib 2.143.1__py3-none-any.whl → 2.145.0__py3-none-any.whl

aws_cdk/aws_lambda/__init__.py

@@ -26,6 +26,10 @@ runtime code.
 * `lambda.Code.fromDockerBuild(path, options)` - use the result of a Docker
   build as code. The runtime code is expected to be located at `/asset` in the
   image and will be zipped and uploaded to S3 as an asset.
+* `lambda.Code.fromCustomCommand(output, command, customCommandOptions)` -
+  supply a command that is invoked during cdk synth. That command is meant to direct
+  the generated code to output (a zip file or a directory), which is then used as the
+  code for the created AWS Lambda.
 
 The following example shows how to define a Python function and deploy the code
 from the local directory `my-lambda-handler` to it:
@@ -175,13 +179,13 @@ lambda_.Function(self, "Lambda",
     handler="index.handler",
     runtime=lambda_.Runtime.NODEJS_18_X,
     logging_format=lambda_.LoggingFormat.JSON,
-    system_log_level=lambda_.SystemLogLevel.INFO,
-    application_log_level=lambda_.ApplicationLogLevel.INFO,
+    system_log_level_v2=lambda_.SystemLogLevel.INFO,
+    application_log_level_v2=lambda_.ApplicationLogLevel.INFO,
     log_group=log_group
 )
 ```
 
-To use `applicationLogLevel` and/or `systemLogLevel` you must set `loggingFormat` to `LoggingFormat.JSON`.
+To use `applicationLogLevelV2` and/or `systemLogLevelV2` you must set `loggingFormat` to `LoggingFormat.JSON`.
 
 ## Resource-based Policies
 
@@ -1643,6 +1647,12 @@ class AdotLambdaLayerGenericVersion(
         '''Version 0.90.1.'''
         return typing.cast("AdotLambdaLayerGenericVersion", jsii.sget(cls, "V0_90_1"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="V0_98_0")
+    def V0_98_0(cls) -> "AdotLambdaLayerGenericVersion":
+        '''Version 0.98.0.'''
+        return typing.cast("AdotLambdaLayerGenericVersion", jsii.sget(cls, "V0_98_0"))
+
     @builtins.property
     @jsii.member(jsii_name="layerVersion")
     def _layer_version(self) -> builtins.str:
@@ -1998,6 +2008,12 @@ class AdotLambdaLayerPythonSdkVersion(
         '''Version 1.21.0.'''
         return typing.cast("AdotLambdaLayerPythonSdkVersion", jsii.sget(cls, "V1_21_0"))
 
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="V1_24_0")
+    def V1_24_0(cls) -> "AdotLambdaLayerPythonSdkVersion":
+        '''Version 1.24.0.'''
+        return typing.cast("AdotLambdaLayerPythonSdkVersion", jsii.sget(cls, "V1_24_0"))
+
     @builtins.property
     @jsii.member(jsii_name="layerVersion")
     def _layer_version(self) -> builtins.str:
@@ -2191,8 +2207,8 @@ class ApplicationLogLevel(enum.Enum):
             handler="index.handler",
             runtime=lambda_.Runtime.NODEJS_18_X,
             logging_format=lambda_.LoggingFormat.JSON,
-            system_log_level=lambda_.SystemLogLevel.INFO,
-            application_log_level=lambda_.ApplicationLogLevel.INFO,
+            system_log_level_v2=lambda_.SystemLogLevel.INFO,
+            application_log_level_v2=lambda_.ApplicationLogLevel.INFO,
             log_group=log_group
         )
     '''
@@ -10627,6 +10643,55 @@ class Code(metaclass=jsii.JSIIAbstractClass, jsii_type="aws-cdk-lib.aws_lambda.C
 
         return typing.cast("CfnParametersCode", jsii.sinvoke(cls, "fromCfnParameters", [props]))
 
+    @jsii.member(jsii_name="fromCustomCommand")
+    @builtins.classmethod
+    def from_custom_command(
+        cls,
+        output: builtins.str,
+        command: typing.Sequence[builtins.str],
+        *,
+        command_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
+        deploy_time: typing.Optional[builtins.bool] = None,
+        readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+        asset_hash: typing.Optional[builtins.str] = None,
+        asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
+        bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
+        exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+        follow_symlinks: typing.Optional[_SymlinkFollowMode_047ec1f6] = None,
+        ignore_mode: typing.Optional[_IgnoreMode_655a98e8] = None,
+    ) -> "AssetCode":
+        '''Runs a command to build the code asset that will be used.
+
+        :param output: Where the output of the command will be directed, either a directory or a .zip file with the output Lambda code bundle * For example, if you use the command to run a build script (e.g., [ 'node', 'bundle_code.js' ]), and the build script generates a directory ``/my/lambda/code`` containing code that should be ran in a Lambda function, then output should be set to ``/my/lambda/code``.
+        :param command: The command which will be executed to generate the output, for example, [ 'node', 'bundle_code.js' ].
+        :param command_options: options that are passed to the spawned process, which determine the characteristics of the spawned process. Default: : see ``child_process.SpawnSyncOptions`` (https://nodejs.org/api/child_process.html#child_processspawnsynccommand-args-options).
+        :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
+        :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
+        :param asset_hash: Specify a custom hash for this asset. If ``assetHashType`` is set it must be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will be SHA256 hashed and encoded as hex. The resulting hash will be the asset hash. NOTE: the hash is used in order to identify a specific revision of the asset, and used for optimizing and caching deployment activities related to this asset such as packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will need to make sure it is updated every time the asset changes, or otherwise it is possible that some deployments will not be invalidated. Default: - based on ``assetHashType``
+        :param asset_hash_type: Specifies the type of hash to calculate for this asset. If ``assetHash`` is configured, this option must be ``undefined`` or ``AssetHashType.CUSTOM``. Default: - the default is ``AssetHashType.SOURCE``, but if ``assetHash`` is explicitly specified this value defaults to ``AssetHashType.CUSTOM``.
+        :param bundling: Bundle the asset by executing a command in a Docker container or a custom bundling provider. The asset path will be mounted at ``/asset-input``. The Docker container is responsible for putting content at ``/asset-output``. The content at ``/asset-output`` will be zipped and used as the final asset. Default: - uploaded as-is to S3 if the asset is a regular file or a .zip file, archived into a .zip file and uploaded to S3 otherwise
+        :param exclude: File paths matching the patterns will be excluded. See ``ignoreMode`` to set the matching behavior. Has no effect on Assets bundled using the ``bundling`` property. Default: - nothing is excluded
+        :param follow_symlinks: A strategy for how to handle symlinks. Default: SymlinkFollowMode.NEVER
+        :param ignore_mode: The ignore behavior to use for ``exclude`` patterns. Default: IgnoreMode.GLOB
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f107aedaa96b9385600e34088d5cda9d8035f15776c846b0f0b4fbbe35d118df)
+            check_type(argname="argument output", value=output, expected_type=type_hints["output"])
+            check_type(argname="argument command", value=command, expected_type=type_hints["command"])
+        options = CustomCommandOptions(
+            command_options=command_options,
+            deploy_time=deploy_time,
+            readers=readers,
+            asset_hash=asset_hash,
+            asset_hash_type=asset_hash_type,
+            bundling=bundling,
+            exclude=exclude,
+            follow_symlinks=follow_symlinks,
+            ignore_mode=ignore_mode,
+        )
+
+        return typing.cast("AssetCode", jsii.sinvoke(cls, "fromCustomCommand", [output, command, options]))
+
     @jsii.member(jsii_name="fromDockerBuild")
     @builtins.classmethod
     def from_docker_build(
@@ -11098,6 +11163,269 @@ class CodeSigningConfigProps:
         )
 
 
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_lambda.CustomCommandOptions",
+    jsii_struct_bases=[_AssetOptions_2aa69621],
+    name_mapping={
+        "asset_hash": "assetHash",
+        "asset_hash_type": "assetHashType",
+        "bundling": "bundling",
+        "exclude": "exclude",
+        "follow_symlinks": "followSymlinks",
+        "ignore_mode": "ignoreMode",
+        "deploy_time": "deployTime",
+        "readers": "readers",
+        "command_options": "commandOptions",
+    },
+)
+class CustomCommandOptions(_AssetOptions_2aa69621):
+    def __init__(
+        self,
+        *,
+        asset_hash: typing.Optional[builtins.str] = None,
+        asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
+        bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
+        exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+        follow_symlinks: typing.Optional[_SymlinkFollowMode_047ec1f6] = None,
+        ignore_mode: typing.Optional[_IgnoreMode_655a98e8] = None,
+        deploy_time: typing.Optional[builtins.bool] = None,
+        readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+        command_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
+    ) -> None:
+        '''Options for creating ``AssetCode`` with a custom command, such as running a buildfile.
+
+        :param asset_hash: Specify a custom hash for this asset. If ``assetHashType`` is set it must be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will be SHA256 hashed and encoded as hex. The resulting hash will be the asset hash. NOTE: the hash is used in order to identify a specific revision of the asset, and used for optimizing and caching deployment activities related to this asset such as packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will need to make sure it is updated every time the asset changes, or otherwise it is possible that some deployments will not be invalidated. Default: - based on ``assetHashType``
+        :param asset_hash_type: Specifies the type of hash to calculate for this asset. If ``assetHash`` is configured, this option must be ``undefined`` or ``AssetHashType.CUSTOM``. Default: - the default is ``AssetHashType.SOURCE``, but if ``assetHash`` is explicitly specified this value defaults to ``AssetHashType.CUSTOM``.
+        :param bundling: Bundle the asset by executing a command in a Docker container or a custom bundling provider. The asset path will be mounted at ``/asset-input``. The Docker container is responsible for putting content at ``/asset-output``. The content at ``/asset-output`` will be zipped and used as the final asset. Default: - uploaded as-is to S3 if the asset is a regular file or a .zip file, archived into a .zip file and uploaded to S3 otherwise
+        :param exclude: File paths matching the patterns will be excluded. See ``ignoreMode`` to set the matching behavior. Has no effect on Assets bundled using the ``bundling`` property. Default: - nothing is excluded
+        :param follow_symlinks: A strategy for how to handle symlinks. Default: SymlinkFollowMode.NEVER
+        :param ignore_mode: The ignore behavior to use for ``exclude`` patterns. Default: IgnoreMode.GLOB
+        :param deploy_time: Whether or not the asset needs to exist beyond deployment time; i.e. are copied over to a different location and not needed afterwards. Setting this property to true has an impact on the lifecycle of the asset, because we will assume that it is safe to delete after the CloudFormation deployment succeeds. For example, Lambda Function assets are copied over to Lambda during deployment. Therefore, it is not necessary to store the asset in S3, so we consider those deployTime assets. Default: false
+        :param readers: A list of principals that should be able to read this asset from S3. You can use ``asset.grantRead(principal)`` to grant read permissions later. Default: - No principals that can read file asset.
+        :param command_options: options that are passed to the spawned process, which determine the characteristics of the spawned process. Default: : see ``child_process.SpawnSyncOptions`` (https://nodejs.org/api/child_process.html#child_processspawnsynccommand-args-options).
+
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            import aws_cdk as cdk
+            from aws_cdk import aws_iam as iam
+            from aws_cdk import aws_lambda as lambda_
+            
+            # command_options: Any
+            # docker_image: cdk.DockerImage
+            # grantable: iam.IGrantable
+            # local_bundling: cdk.ILocalBundling
+            
+            custom_command_options = lambda.CustomCommandOptions(
+                asset_hash="assetHash",
+                asset_hash_type=cdk.AssetHashType.SOURCE,
+                bundling=cdk.BundlingOptions(
+                    image=docker_image,
+            
+                    # the properties below are optional
+                    bundling_file_access=cdk.BundlingFileAccess.VOLUME_COPY,
+                    command=["command"],
+                    entrypoint=["entrypoint"],
+                    environment={
+                        "environment_key": "environment"
+                    },
+                    local=local_bundling,
+                    network="network",
+                    output_type=cdk.BundlingOutput.ARCHIVED,
+                    platform="platform",
+                    security_opt="securityOpt",
+                    user="user",
+                    volumes=[cdk.DockerVolume(
+                        container_path="containerPath",
+                        host_path="hostPath",
+            
+                        # the properties below are optional
+                        consistency=cdk.DockerVolumeConsistency.CONSISTENT
+                    )],
+                    volumes_from=["volumesFrom"],
+                    working_directory="workingDirectory"
+                ),
+                command_options={
+                    "command_options_key": command_options
+                },
+                deploy_time=False,
+                exclude=["exclude"],
+                follow_symlinks=cdk.SymlinkFollowMode.NEVER,
+                ignore_mode=cdk.IgnoreMode.GLOB,
+                readers=[grantable]
+            )
+        '''
+        if isinstance(bundling, dict):
+            bundling = _BundlingOptions_588cc936(**bundling)
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__69255a578358e8a47662200dda7ce2e0b1f2ee573c1469268f14060b00a7863a)
+            check_type(argname="argument asset_hash", value=asset_hash, expected_type=type_hints["asset_hash"])
+            check_type(argname="argument asset_hash_type", value=asset_hash_type, expected_type=type_hints["asset_hash_type"])
+            check_type(argname="argument bundling", value=bundling, expected_type=type_hints["bundling"])
+            check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
+            check_type(argname="argument follow_symlinks", value=follow_symlinks, expected_type=type_hints["follow_symlinks"])
+            check_type(argname="argument ignore_mode", value=ignore_mode, expected_type=type_hints["ignore_mode"])
+            check_type(argname="argument deploy_time", value=deploy_time, expected_type=type_hints["deploy_time"])
+            check_type(argname="argument readers", value=readers, expected_type=type_hints["readers"])
+            check_type(argname="argument command_options", value=command_options, expected_type=type_hints["command_options"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if asset_hash is not None:
+            self._values["asset_hash"] = asset_hash
+        if asset_hash_type is not None:
+            self._values["asset_hash_type"] = asset_hash_type
+        if bundling is not None:
+            self._values["bundling"] = bundling
+        if exclude is not None:
+            self._values["exclude"] = exclude
+        if follow_symlinks is not None:
+            self._values["follow_symlinks"] = follow_symlinks
+        if ignore_mode is not None:
+            self._values["ignore_mode"] = ignore_mode
+        if deploy_time is not None:
+            self._values["deploy_time"] = deploy_time
+        if readers is not None:
+            self._values["readers"] = readers
+        if command_options is not None:
+            self._values["command_options"] = command_options
+
+    @builtins.property
+    def asset_hash(self) -> typing.Optional[builtins.str]:
+        '''Specify a custom hash for this asset.
+
+        If ``assetHashType`` is set it must
+        be set to ``AssetHashType.CUSTOM``. For consistency, this custom hash will
+        be SHA256 hashed and encoded as hex. The resulting hash will be the asset
+        hash.
+
+        NOTE: the hash is used in order to identify a specific revision of the asset, and
+        used for optimizing and caching deployment activities related to this asset such as
+        packaging, uploading to Amazon S3, etc. If you chose to customize the hash, you will
+        need to make sure it is updated every time the asset changes, or otherwise it is
+        possible that some deployments will not be invalidated.
+
+        :default: - based on ``assetHashType``
+        '''
+        result = self._values.get("asset_hash")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def asset_hash_type(self) -> typing.Optional[_AssetHashType_05b67f2d]:
+        '''Specifies the type of hash to calculate for this asset.
+
+        If ``assetHash`` is configured, this option must be ``undefined`` or
+        ``AssetHashType.CUSTOM``.
+
+        :default:
+
+        - the default is ``AssetHashType.SOURCE``, but if ``assetHash`` is
+        explicitly specified this value defaults to ``AssetHashType.CUSTOM``.
+        '''
+        result = self._values.get("asset_hash_type")
+        return typing.cast(typing.Optional[_AssetHashType_05b67f2d], result)
+
+    @builtins.property
+    def bundling(self) -> typing.Optional[_BundlingOptions_588cc936]:
+        '''Bundle the asset by executing a command in a Docker container or a custom bundling provider.
+
+        The asset path will be mounted at ``/asset-input``. The Docker
+        container is responsible for putting content at ``/asset-output``.
+        The content at ``/asset-output`` will be zipped and used as the
+        final asset.
+
+        :default:
+
+        - uploaded as-is to S3 if the asset is a regular file or a .zip file,
+        archived into a .zip file and uploaded to S3 otherwise
+        '''
+        result = self._values.get("bundling")
+        return typing.cast(typing.Optional[_BundlingOptions_588cc936], result)
+
+    @builtins.property
+    def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''File paths matching the patterns will be excluded.
+
+        See ``ignoreMode`` to set the matching behavior.
+        Has no effect on Assets bundled using the ``bundling`` property.
+
+        :default: - nothing is excluded
+        '''
+        result = self._values.get("exclude")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def follow_symlinks(self) -> typing.Optional[_SymlinkFollowMode_047ec1f6]:
+        '''A strategy for how to handle symlinks.
+
+        :default: SymlinkFollowMode.NEVER
+        '''
+        result = self._values.get("follow_symlinks")
+        return typing.cast(typing.Optional[_SymlinkFollowMode_047ec1f6], result)
+
+    @builtins.property
+    def ignore_mode(self) -> typing.Optional[_IgnoreMode_655a98e8]:
+        '''The ignore behavior to use for ``exclude`` patterns.
+
+        :default: IgnoreMode.GLOB
+        '''
+        result = self._values.get("ignore_mode")
+        return typing.cast(typing.Optional[_IgnoreMode_655a98e8], result)
+
+    @builtins.property
+    def deploy_time(self) -> typing.Optional[builtins.bool]:
+        '''Whether or not the asset needs to exist beyond deployment time;
+
+        i.e.
+        are copied over to a different location and not needed afterwards.
+        Setting this property to true has an impact on the lifecycle of the asset,
+        because we will assume that it is safe to delete after the CloudFormation
+        deployment succeeds.
+
+        For example, Lambda Function assets are copied over to Lambda during
+        deployment. Therefore, it is not necessary to store the asset in S3, so
+        we consider those deployTime assets.
+
+        :default: false
+        '''
+        result = self._values.get("deploy_time")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def readers(self) -> typing.Optional[typing.List[_IGrantable_71c4f5de]]:
+        '''A list of principals that should be able to read this asset from S3.
+
+        You can use ``asset.grantRead(principal)`` to grant read permissions later.
+
+        :default: - No principals that can read file asset.
+        '''
+        result = self._values.get("readers")
+        return typing.cast(typing.Optional[typing.List[_IGrantable_71c4f5de]], result)
+
+    @builtins.property
+    def command_options(
+        self,
+    ) -> typing.Optional[typing.Mapping[builtins.str, typing.Any]]:
+        '''options that are passed to the spawned process, which determine the characteristics of the spawned process.
+
+        :default: : see ``child_process.SpawnSyncOptions`` (https://nodejs.org/api/child_process.html#child_processspawnsynccommand-args-options).
+        '''
+        result = self._values.get("command_options")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, typing.Any]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CustomCommandOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="aws-cdk-lib.aws_lambda.DestinationConfig",
     jsii_struct_bases=[],
@@ -13662,6 +13990,7 @@ class FunctionAttributes:
         "allow_all_outbound": "allowAllOutbound",
         "allow_public_subnet": "allowPublicSubnet",
         "application_log_level": "applicationLogLevel",
+        "application_log_level_v2": "applicationLogLevelV2",
         "architecture": "architecture",
         "code_signing_config": "codeSigningConfig",
         "current_version_options": "currentVersionOptions",
@@ -13695,6 +14024,7 @@ class FunctionAttributes:
         "security_groups": "securityGroups",
         "snap_start": "snapStart",
         "system_log_level": "systemLogLevel",
+        "system_log_level_v2": "systemLogLevelV2",
         "timeout": "timeout",
         "tracing": "tracing",
         "vpc": "vpc",
@@ -13713,6 +14043,7 @@ class FunctionOptions(EventInvokeConfigOptions):
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
+        application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
         architecture: typing.Optional[Architecture] = None,
         code_signing_config: typing.Optional["ICodeSigningConfig"] = None,
         current_version_options: typing.Optional[typing.Union["VersionOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -13746,6 +14077,7 @@ class FunctionOptions(EventInvokeConfigOptions):
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         snap_start: typing.Optional["SnapStartConf"] = None,
         system_log_level: typing.Optional[builtins.str] = None,
+        system_log_level_v2: typing.Optional["SystemLogLevel"] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
         tracing: typing.Optional["Tracing"] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -13760,7 +14092,8 @@ class FunctionOptions(EventInvokeConfigOptions):
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
         :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: Sets the application log level for the function. Default: "INFO"
+        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
+        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -13778,7 +14111,7 @@ class FunctionOptions(EventInvokeConfigOptions):
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
@@ -13793,7 +14126,8 @@ class FunctionOptions(EventInvokeConfigOptions):
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
         :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: Sets the system log level for the function. Default: "INFO"
+        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
+        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -13847,6 +14181,7 @@ class FunctionOptions(EventInvokeConfigOptions):
                 allow_all_outbound=False,
                 allow_public_subnet=False,
                 application_log_level="applicationLogLevel",
+                application_log_level_v2=lambda_.ApplicationLogLevel.INFO,
                 architecture=architecture,
                 code_signing_config=code_signing_config,
                 current_version_options=lambda.VersionOptions(
@@ -13898,6 +14233,7 @@ class FunctionOptions(EventInvokeConfigOptions):
                 security_groups=[security_group],
                 snap_start=snap_start_conf,
                 system_log_level="systemLogLevel",
+                system_log_level_v2=lambda_.SystemLogLevel.INFO,
                 timeout=cdk.Duration.minutes(30),
                 tracing=lambda_.Tracing.ACTIVE,
                 vpc=vpc,
@@ -13929,6 +14265,7 @@ class FunctionOptions(EventInvokeConfigOptions):
             check_type(argname="argument allow_all_outbound", value=allow_all_outbound, expected_type=type_hints["allow_all_outbound"])
             check_type(argname="argument allow_public_subnet", value=allow_public_subnet, expected_type=type_hints["allow_public_subnet"])
             check_type(argname="argument application_log_level", value=application_log_level, expected_type=type_hints["application_log_level"])
+            check_type(argname="argument application_log_level_v2", value=application_log_level_v2, expected_type=type_hints["application_log_level_v2"])
             check_type(argname="argument architecture", value=architecture, expected_type=type_hints["architecture"])
             check_type(argname="argument code_signing_config", value=code_signing_config, expected_type=type_hints["code_signing_config"])
             check_type(argname="argument current_version_options", value=current_version_options, expected_type=type_hints["current_version_options"])
@@ -13962,6 +14299,7 @@ class FunctionOptions(EventInvokeConfigOptions):
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
             check_type(argname="argument snap_start", value=snap_start, expected_type=type_hints["snap_start"])
             check_type(argname="argument system_log_level", value=system_log_level, expected_type=type_hints["system_log_level"])
+            check_type(argname="argument system_log_level_v2", value=system_log_level_v2, expected_type=type_hints["system_log_level_v2"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
             check_type(argname="argument tracing", value=tracing, expected_type=type_hints["tracing"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
@@ -13983,6 +14321,8 @@ class FunctionOptions(EventInvokeConfigOptions):
             self._values["allow_public_subnet"] = allow_public_subnet
         if application_log_level is not None:
             self._values["application_log_level"] = application_log_level
+        if application_log_level_v2 is not None:
+            self._values["application_log_level_v2"] = application_log_level_v2
         if architecture is not None:
             self._values["architecture"] = architecture
         if code_signing_config is not None:
@@ -14049,6 +14389,8 @@ class FunctionOptions(EventInvokeConfigOptions):
             self._values["snap_start"] = snap_start
         if system_log_level is not None:
             self._values["system_log_level"] = system_log_level
+        if system_log_level_v2 is not None:
+            self._values["system_log_level_v2"] = system_log_level_v2
         if timeout is not None:
             self._values["timeout"] = timeout
         if tracing is not None:
@@ -14141,13 +14483,26 @@ class FunctionOptions(EventInvokeConfigOptions):
 
     @builtins.property
     def application_log_level(self) -> typing.Optional[builtins.str]:
-        '''Sets the application log level for the function.
+        '''(deprecated) Sets the application log level for the function.
 
         :default: "INFO"
+
+        :deprecated: Use ``applicationLogLevelV2`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("application_log_level")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def application_log_level_v2(self) -> typing.Optional[ApplicationLogLevel]:
+        '''Sets the application log level for the function.
+
+        :default: ApplicationLogLevel.INFO
+        '''
+        result = self._values.get("application_log_level_v2")
+        return typing.cast(typing.Optional[ApplicationLogLevel], result)
+
     @builtins.property
     def architecture(self) -> typing.Optional[Architecture]:
         '''The system architectures compatible with this lambda function.
@@ -14332,9 +14687,13 @@ class FunctionOptions(EventInvokeConfigOptions):
 
     @builtins.property
     def log_format(self) -> typing.Optional[builtins.str]:
-        '''Sets the logFormat for the function.
+        '''(deprecated) Sets the logFormat for the function.
 
         :default: "Text"
+
+        :deprecated: Use ``loggingFormat`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("log_format")
         return typing.cast(typing.Optional[builtins.str], result)
@@ -14536,13 +14895,26 @@ class FunctionOptions(EventInvokeConfigOptions):
 
     @builtins.property
     def system_log_level(self) -> typing.Optional[builtins.str]:
-        '''Sets the system log level for the function.
+        '''(deprecated) Sets the system log level for the function.
 
         :default: "INFO"
+
+        :deprecated: Use ``systemLogLevelV2`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("system_log_level")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def system_log_level_v2(self) -> typing.Optional["SystemLogLevel"]:
+        '''Sets the system log level for the function.
+
+        :default: SystemLogLevel.INFO
+        '''
+        result = self._values.get("system_log_level_v2")
+        return typing.cast(typing.Optional["SystemLogLevel"], result)
+
     @builtins.property
     def timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''The function execution time (in seconds) after which Lambda terminates the function.
@@ -14615,6 +14987,7 @@ class FunctionOptions(EventInvokeConfigOptions):
         "allow_all_outbound": "allowAllOutbound",
         "allow_public_subnet": "allowPublicSubnet",
         "application_log_level": "applicationLogLevel",
+        "application_log_level_v2": "applicationLogLevelV2",
         "architecture": "architecture",
         "code_signing_config": "codeSigningConfig",
         "current_version_options": "currentVersionOptions",
@@ -14648,6 +15021,7 @@ class FunctionOptions(EventInvokeConfigOptions):
         "security_groups": "securityGroups",
         "snap_start": "snapStart",
         "system_log_level": "systemLogLevel",
+        "system_log_level_v2": "systemLogLevelV2",
         "timeout": "timeout",
         "tracing": "tracing",
         "vpc": "vpc",
@@ -14669,6 +15043,7 @@ class FunctionProps(FunctionOptions):
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
+        application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
         architecture: typing.Optional[Architecture] = None,
         code_signing_config: typing.Optional["ICodeSigningConfig"] = None,
         current_version_options: typing.Optional[typing.Union["VersionOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -14702,6 +15077,7 @@ class FunctionProps(FunctionOptions):
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         snap_start: typing.Optional["SnapStartConf"] = None,
         system_log_level: typing.Optional[builtins.str] = None,
+        system_log_level_v2: typing.Optional["SystemLogLevel"] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
         tracing: typing.Optional["Tracing"] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -14718,7 +15094,8 @@ class FunctionProps(FunctionOptions):
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
         :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: Sets the application log level for the function. Default: "INFO"
+        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
+        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -14736,7 +15113,7 @@ class FunctionProps(FunctionOptions):
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
@@ -14751,7 +15128,8 @@ class FunctionProps(FunctionOptions):
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
         :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: Sets the system log level for the function. Default: "INFO"
+        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
+        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -14805,6 +15183,7 @@ class FunctionProps(FunctionOptions):
             check_type(argname="argument allow_all_outbound", value=allow_all_outbound, expected_type=type_hints["allow_all_outbound"])
             check_type(argname="argument allow_public_subnet", value=allow_public_subnet, expected_type=type_hints["allow_public_subnet"])
             check_type(argname="argument application_log_level", value=application_log_level, expected_type=type_hints["application_log_level"])
+            check_type(argname="argument application_log_level_v2", value=application_log_level_v2, expected_type=type_hints["application_log_level_v2"])
             check_type(argname="argument architecture", value=architecture, expected_type=type_hints["architecture"])
             check_type(argname="argument code_signing_config", value=code_signing_config, expected_type=type_hints["code_signing_config"])
             check_type(argname="argument current_version_options", value=current_version_options, expected_type=type_hints["current_version_options"])
@@ -14838,6 +15217,7 @@ class FunctionProps(FunctionOptions):
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
             check_type(argname="argument snap_start", value=snap_start, expected_type=type_hints["snap_start"])
             check_type(argname="argument system_log_level", value=system_log_level, expected_type=type_hints["system_log_level"])
+            check_type(argname="argument system_log_level_v2", value=system_log_level_v2, expected_type=type_hints["system_log_level_v2"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
             check_type(argname="argument tracing", value=tracing, expected_type=type_hints["tracing"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
@@ -14866,6 +15246,8 @@ class FunctionProps(FunctionOptions):
             self._values["allow_public_subnet"] = allow_public_subnet
         if application_log_level is not None:
             self._values["application_log_level"] = application_log_level
+        if application_log_level_v2 is not None:
+            self._values["application_log_level_v2"] = application_log_level_v2
         if architecture is not None:
             self._values["architecture"] = architecture
         if code_signing_config is not None:
@@ -14932,6 +15314,8 @@ class FunctionProps(FunctionOptions):
             self._values["snap_start"] = snap_start
         if system_log_level is not None:
             self._values["system_log_level"] = system_log_level
+        if system_log_level_v2 is not None:
+            self._values["system_log_level_v2"] = system_log_level_v2
         if timeout is not None:
             self._values["timeout"] = timeout
         if tracing is not None:
@@ -15024,13 +15408,26 @@ class FunctionProps(FunctionOptions):
 
     @builtins.property
     def application_log_level(self) -> typing.Optional[builtins.str]:
-        '''Sets the application log level for the function.
+        '''(deprecated) Sets the application log level for the function.
 
         :default: "INFO"
+
+        :deprecated: Use ``applicationLogLevelV2`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("application_log_level")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def application_log_level_v2(self) -> typing.Optional[ApplicationLogLevel]:
+        '''Sets the application log level for the function.
+
+        :default: ApplicationLogLevel.INFO
+        '''
+        result = self._values.get("application_log_level_v2")
+        return typing.cast(typing.Optional[ApplicationLogLevel], result)
+
     @builtins.property
     def architecture(self) -> typing.Optional[Architecture]:
         '''The system architectures compatible with this lambda function.
@@ -15215,9 +15612,13 @@ class FunctionProps(FunctionOptions):
 
     @builtins.property
     def log_format(self) -> typing.Optional[builtins.str]:
-        '''Sets the logFormat for the function.
+        '''(deprecated) Sets the logFormat for the function.
 
         :default: "Text"
+
+        :deprecated: Use ``loggingFormat`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("log_format")
         return typing.cast(typing.Optional[builtins.str], result)
@@ -15419,13 +15820,26 @@ class FunctionProps(FunctionOptions):
 
     @builtins.property
     def system_log_level(self) -> typing.Optional[builtins.str]:
-        '''Sets the system log level for the function.
+        '''(deprecated) Sets the system log level for the function.
 
         :default: "INFO"
+
+        :deprecated: Use ``systemLogLevelV2`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("system_log_level")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def system_log_level_v2(self) -> typing.Optional["SystemLogLevel"]:
+        '''Sets the system log level for the function.
+
+        :default: SystemLogLevel.INFO
+        '''
+        result = self._values.get("system_log_level_v2")
+        return typing.cast(typing.Optional["SystemLogLevel"], result)
+
     @builtins.property
     def timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''The function execution time (in seconds) after which Lambda terminates the function.
@@ -18549,8 +18963,8 @@ class LoggingFormat(enum.Enum):
             handler="index.handler",
             runtime=lambda_.Runtime.NODEJS_18_X,
             logging_format=lambda_.LoggingFormat.JSON,
-            system_log_level=lambda_.SystemLogLevel.INFO,
-            application_log_level=lambda_.ApplicationLogLevel.INFO,
+            system_log_level_v2=lambda_.SystemLogLevel.INFO,
+            application_log_level_v2=lambda_.ApplicationLogLevel.INFO,
             log_group=log_group
         )
     '''
@@ -19898,6 +20312,7 @@ class S3Code(Code, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.S3
         "allow_all_outbound": "allowAllOutbound",
         "allow_public_subnet": "allowPublicSubnet",
         "application_log_level": "applicationLogLevel",
+        "application_log_level_v2": "applicationLogLevelV2",
         "architecture": "architecture",
         "code_signing_config": "codeSigningConfig",
         "current_version_options": "currentVersionOptions",
@@ -19931,6 +20346,7 @@ class S3Code(Code, metaclass=jsii.JSIIMeta, jsii_type="aws-cdk-lib.aws_lambda.S3
         "security_groups": "securityGroups",
         "snap_start": "snapStart",
         "system_log_level": "systemLogLevel",
+        "system_log_level_v2": "systemLogLevelV2",
         "timeout": "timeout",
         "tracing": "tracing",
         "vpc": "vpc",
@@ -19954,6 +20370,7 @@ class SingletonFunctionProps(FunctionProps):
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
+        application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
         architecture: typing.Optional[Architecture] = None,
         code_signing_config: typing.Optional[ICodeSigningConfig] = None,
         current_version_options: typing.Optional[typing.Union["VersionOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -19987,6 +20404,7 @@ class SingletonFunctionProps(FunctionProps):
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         snap_start: typing.Optional["SnapStartConf"] = None,
         system_log_level: typing.Optional[builtins.str] = None,
+        system_log_level_v2: typing.Optional["SystemLogLevel"] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
         tracing: typing.Optional["Tracing"] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -20006,7 +20424,8 @@ class SingletonFunctionProps(FunctionProps):
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
         :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: Sets the application log level for the function. Default: "INFO"
+        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
+        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -20024,7 +20443,7 @@ class SingletonFunctionProps(FunctionProps):
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
@@ -20039,7 +20458,8 @@ class SingletonFunctionProps(FunctionProps):
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
         :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: Sets the system log level for the function. Default: "INFO"
+        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
+        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -20078,6 +20498,7 @@ class SingletonFunctionProps(FunctionProps):
             check_type(argname="argument allow_all_outbound", value=allow_all_outbound, expected_type=type_hints["allow_all_outbound"])
             check_type(argname="argument allow_public_subnet", value=allow_public_subnet, expected_type=type_hints["allow_public_subnet"])
             check_type(argname="argument application_log_level", value=application_log_level, expected_type=type_hints["application_log_level"])
+            check_type(argname="argument application_log_level_v2", value=application_log_level_v2, expected_type=type_hints["application_log_level_v2"])
             check_type(argname="argument architecture", value=architecture, expected_type=type_hints["architecture"])
             check_type(argname="argument code_signing_config", value=code_signing_config, expected_type=type_hints["code_signing_config"])
             check_type(argname="argument current_version_options", value=current_version_options, expected_type=type_hints["current_version_options"])
@@ -20111,6 +20532,7 @@ class SingletonFunctionProps(FunctionProps):
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
             check_type(argname="argument snap_start", value=snap_start, expected_type=type_hints["snap_start"])
             check_type(argname="argument system_log_level", value=system_log_level, expected_type=type_hints["system_log_level"])
+            check_type(argname="argument system_log_level_v2", value=system_log_level_v2, expected_type=type_hints["system_log_level_v2"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
             check_type(argname="argument tracing", value=tracing, expected_type=type_hints["tracing"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
@@ -20142,6 +20564,8 @@ class SingletonFunctionProps(FunctionProps):
             self._values["allow_public_subnet"] = allow_public_subnet
         if application_log_level is not None:
             self._values["application_log_level"] = application_log_level
+        if application_log_level_v2 is not None:
+            self._values["application_log_level_v2"] = application_log_level_v2
         if architecture is not None:
             self._values["architecture"] = architecture
         if code_signing_config is not None:
@@ -20208,6 +20632,8 @@ class SingletonFunctionProps(FunctionProps):
             self._values["snap_start"] = snap_start
         if system_log_level is not None:
             self._values["system_log_level"] = system_log_level
+        if system_log_level_v2 is not None:
+            self._values["system_log_level_v2"] = system_log_level_v2
         if timeout is not None:
             self._values["timeout"] = timeout
         if tracing is not None:
@@ -20302,13 +20728,26 @@ class SingletonFunctionProps(FunctionProps):
 
     @builtins.property
     def application_log_level(self) -> typing.Optional[builtins.str]:
-        '''Sets the application log level for the function.
+        '''(deprecated) Sets the application log level for the function.
 
         :default: "INFO"
+
+        :deprecated: Use ``applicationLogLevelV2`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("application_log_level")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def application_log_level_v2(self) -> typing.Optional[ApplicationLogLevel]:
+        '''Sets the application log level for the function.
+
+        :default: ApplicationLogLevel.INFO
+        '''
+        result = self._values.get("application_log_level_v2")
+        return typing.cast(typing.Optional[ApplicationLogLevel], result)
+
     @builtins.property
     def architecture(self) -> typing.Optional[Architecture]:
         '''The system architectures compatible with this lambda function.
@@ -20493,9 +20932,13 @@ class SingletonFunctionProps(FunctionProps):
 
     @builtins.property
     def log_format(self) -> typing.Optional[builtins.str]:
-        '''Sets the logFormat for the function.
+        '''(deprecated) Sets the logFormat for the function.
 
         :default: "Text"
+
+        :deprecated: Use ``loggingFormat`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("log_format")
         return typing.cast(typing.Optional[builtins.str], result)
@@ -20695,13 +21138,26 @@ class SingletonFunctionProps(FunctionProps):
 
     @builtins.property
     def system_log_level(self) -> typing.Optional[builtins.str]:
-        '''Sets the system log level for the function.
+        '''(deprecated) Sets the system log level for the function.
 
         :default: "INFO"
+
+        :deprecated: Use ``systemLogLevelV2`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("system_log_level")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def system_log_level_v2(self) -> typing.Optional["SystemLogLevel"]:
+        '''Sets the system log level for the function.
+
+        :default: SystemLogLevel.INFO
+        '''
+        result = self._values.get("system_log_level_v2")
+        return typing.cast(typing.Optional["SystemLogLevel"], result)
+
     @builtins.property
     def timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''The function execution time (in seconds) after which Lambda terminates the function.
@@ -21087,8 +21543,8 @@ class SystemLogLevel(enum.Enum):
             handler="index.handler",
             runtime=lambda_.Runtime.NODEJS_18_X,
             logging_format=lambda_.LoggingFormat.JSON,
-            system_log_level=lambda_.SystemLogLevel.INFO,
-            application_log_level=lambda_.ApplicationLogLevel.INFO,
+            system_log_level_v2=lambda_.SystemLogLevel.INFO,
+            application_log_level_v2=lambda_.ApplicationLogLevel.INFO,
             log_group=log_group
         )
     '''
@@ -22776,6 +23232,7 @@ class CodeSigningConfig(
         "allow_all_outbound": "allowAllOutbound",
         "allow_public_subnet": "allowPublicSubnet",
         "application_log_level": "applicationLogLevel",
+        "application_log_level_v2": "applicationLogLevelV2",
         "architecture": "architecture",
         "code_signing_config": "codeSigningConfig",
         "current_version_options": "currentVersionOptions",
@@ -22809,6 +23266,7 @@ class CodeSigningConfig(
         "security_groups": "securityGroups",
         "snap_start": "snapStart",
         "system_log_level": "systemLogLevel",
+        "system_log_level_v2": "systemLogLevelV2",
         "timeout": "timeout",
         "tracing": "tracing",
         "vpc": "vpc",
@@ -22828,6 +23286,7 @@ class DockerImageFunctionProps(FunctionOptions):
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
+        application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
         architecture: typing.Optional[Architecture] = None,
         code_signing_config: typing.Optional[ICodeSigningConfig] = None,
         current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -22861,6 +23320,7 @@ class DockerImageFunctionProps(FunctionOptions):
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         snap_start: typing.Optional[SnapStartConf] = None,
         system_log_level: typing.Optional[builtins.str] = None,
+        system_log_level_v2: typing.Optional[SystemLogLevel] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
         tracing: typing.Optional[Tracing] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -22876,7 +23336,8 @@ class DockerImageFunctionProps(FunctionOptions):
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
         :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: Sets the application log level for the function. Default: "INFO"
+        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
+        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -22894,7 +23355,7 @@ class DockerImageFunctionProps(FunctionOptions):
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
@@ -22909,7 +23370,8 @@ class DockerImageFunctionProps(FunctionOptions):
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
         :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: Sets the system log level for the function. Default: "INFO"
+        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
+        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -22942,6 +23404,7 @@ class DockerImageFunctionProps(FunctionOptions):
             check_type(argname="argument allow_all_outbound", value=allow_all_outbound, expected_type=type_hints["allow_all_outbound"])
             check_type(argname="argument allow_public_subnet", value=allow_public_subnet, expected_type=type_hints["allow_public_subnet"])
             check_type(argname="argument application_log_level", value=application_log_level, expected_type=type_hints["application_log_level"])
+            check_type(argname="argument application_log_level_v2", value=application_log_level_v2, expected_type=type_hints["application_log_level_v2"])
             check_type(argname="argument architecture", value=architecture, expected_type=type_hints["architecture"])
             check_type(argname="argument code_signing_config", value=code_signing_config, expected_type=type_hints["code_signing_config"])
             check_type(argname="argument current_version_options", value=current_version_options, expected_type=type_hints["current_version_options"])
@@ -22975,6 +23438,7 @@ class DockerImageFunctionProps(FunctionOptions):
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
             check_type(argname="argument snap_start", value=snap_start, expected_type=type_hints["snap_start"])
             check_type(argname="argument system_log_level", value=system_log_level, expected_type=type_hints["system_log_level"])
+            check_type(argname="argument system_log_level_v2", value=system_log_level_v2, expected_type=type_hints["system_log_level_v2"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
             check_type(argname="argument tracing", value=tracing, expected_type=type_hints["tracing"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
@@ -22999,6 +23463,8 @@ class DockerImageFunctionProps(FunctionOptions):
             self._values["allow_public_subnet"] = allow_public_subnet
         if application_log_level is not None:
             self._values["application_log_level"] = application_log_level
+        if application_log_level_v2 is not None:
+            self._values["application_log_level_v2"] = application_log_level_v2
         if architecture is not None:
             self._values["architecture"] = architecture
         if code_signing_config is not None:
@@ -23065,6 +23531,8 @@ class DockerImageFunctionProps(FunctionOptions):
             self._values["snap_start"] = snap_start
         if system_log_level is not None:
             self._values["system_log_level"] = system_log_level
+        if system_log_level_v2 is not None:
+            self._values["system_log_level_v2"] = system_log_level_v2
         if timeout is not None:
             self._values["timeout"] = timeout
         if tracing is not None:
@@ -23157,13 +23625,26 @@ class DockerImageFunctionProps(FunctionOptions):
 
     @builtins.property
     def application_log_level(self) -> typing.Optional[builtins.str]:
-        '''Sets the application log level for the function.
+        '''(deprecated) Sets the application log level for the function.
 
         :default: "INFO"
+
+        :deprecated: Use ``applicationLogLevelV2`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("application_log_level")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def application_log_level_v2(self) -> typing.Optional[ApplicationLogLevel]:
+        '''Sets the application log level for the function.
+
+        :default: ApplicationLogLevel.INFO
+        '''
+        result = self._values.get("application_log_level_v2")
+        return typing.cast(typing.Optional[ApplicationLogLevel], result)
+
     @builtins.property
     def architecture(self) -> typing.Optional[Architecture]:
         '''The system architectures compatible with this lambda function.
@@ -23348,9 +23829,13 @@ class DockerImageFunctionProps(FunctionOptions):
 
     @builtins.property
     def log_format(self) -> typing.Optional[builtins.str]:
-        '''Sets the logFormat for the function.
+        '''(deprecated) Sets the logFormat for the function.
 
         :default: "Text"
+
+        :deprecated: Use ``loggingFormat`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("log_format")
         return typing.cast(typing.Optional[builtins.str], result)
@@ -23550,13 +24035,26 @@ class DockerImageFunctionProps(FunctionOptions):
 
     @builtins.property
     def system_log_level(self) -> typing.Optional[builtins.str]:
-        '''Sets the system log level for the function.
+        '''(deprecated) Sets the system log level for the function.
 
         :default: "INFO"
+
+        :deprecated: Use ``systemLogLevelV2`` as a property instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("system_log_level")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def system_log_level_v2(self) -> typing.Optional[SystemLogLevel]:
+        '''Sets the system log level for the function.
+
+        :default: SystemLogLevel.INFO
+        '''
+        result = self._values.get("system_log_level_v2")
+        return typing.cast(typing.Optional[SystemLogLevel], result)
+
     @builtins.property
     def timeout(self) -> typing.Optional[_Duration_4839e8c3]:
         '''The function execution time (in seconds) after which Lambda terminates the function.
@@ -24787,6 +25285,7 @@ class SingletonFunction(
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
+        application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
         architecture: typing.Optional[Architecture] = None,
         code_signing_config: typing.Optional[ICodeSigningConfig] = None,
         current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -24820,6 +25319,7 @@ class SingletonFunction(
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         snap_start: typing.Optional[SnapStartConf] = None,
         system_log_level: typing.Optional[builtins.str] = None,
+        system_log_level_v2: typing.Optional[SystemLogLevel] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
         tracing: typing.Optional[Tracing] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -24840,7 +25340,8 @@ class SingletonFunction(
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
         :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: Sets the application log level for the function. Default: "INFO"
+        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
+        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -24858,7 +25359,7 @@ class SingletonFunction(
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
@@ -24873,7 +25374,8 @@ class SingletonFunction(
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
         :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: Sets the system log level for the function. Default: "INFO"
+        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
+        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -24897,6 +25399,7 @@ class SingletonFunction(
             allow_all_outbound=allow_all_outbound,
             allow_public_subnet=allow_public_subnet,
             application_log_level=application_log_level,
+            application_log_level_v2=application_log_level_v2,
             architecture=architecture,
             code_signing_config=code_signing_config,
             current_version_options=current_version_options,
@@ -24930,6 +25433,7 @@ class SingletonFunction(
             security_groups=security_groups,
             snap_start=snap_start,
             system_log_level=system_log_level,
+            system_log_level_v2=system_log_level_v2,
             timeout=timeout,
             tracing=tracing,
             vpc=vpc,
@@ -25739,6 +26243,7 @@ class Function(
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
+        application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
         architecture: typing.Optional[Architecture] = None,
         code_signing_config: typing.Optional[ICodeSigningConfig] = None,
         current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -25772,6 +26277,7 @@ class Function(
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         snap_start: typing.Optional[SnapStartConf] = None,
         system_log_level: typing.Optional[builtins.str] = None,
+        system_log_level_v2: typing.Optional[SystemLogLevel] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
         tracing: typing.Optional[Tracing] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -25790,7 +26296,8 @@ class Function(
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
         :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: Sets the application log level for the function. Default: "INFO"
+        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
+        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -25808,7 +26315,7 @@ class Function(
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
@@ -25823,7 +26330,8 @@ class Function(
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
         :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: Sets the system log level for the function. Default: "INFO"
+        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
+        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -25845,6 +26353,7 @@ class Function(
             allow_all_outbound=allow_all_outbound,
             allow_public_subnet=allow_public_subnet,
             application_log_level=application_log_level,
+            application_log_level_v2=application_log_level_v2,
             architecture=architecture,
             code_signing_config=code_signing_config,
             current_version_options=current_version_options,
@@ -25878,6 +26387,7 @@ class Function(
             security_groups=security_groups,
             snap_start=snap_start,
             system_log_level=system_log_level,
+            system_log_level_v2=system_log_level_v2,
             timeout=timeout,
             tracing=tracing,
             vpc=vpc,
@@ -26525,6 +27035,7 @@ class DockerImageFunction(
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
         application_log_level: typing.Optional[builtins.str] = None,
+        application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
         architecture: typing.Optional[Architecture] = None,
         code_signing_config: typing.Optional[ICodeSigningConfig] = None,
         current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -26558,6 +27069,7 @@ class DockerImageFunction(
         security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
         snap_start: typing.Optional[SnapStartConf] = None,
         system_log_level: typing.Optional[builtins.str] = None,
+        system_log_level_v2: typing.Optional[SystemLogLevel] = None,
         timeout: typing.Optional[_Duration_4839e8c3] = None,
         tracing: typing.Optional[Tracing] = None,
         vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -26574,7 +27086,8 @@ class DockerImageFunction(
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
         :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: Sets the application log level for the function. Default: "INFO"
+        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
+        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -26592,7 +27105,7 @@ class DockerImageFunction(
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
         :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: Sets the logFormat for the function. Default: "Text"
+        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
         :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
         :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
         :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
@@ -26607,7 +27120,8 @@ class DockerImageFunction(
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
         :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: Sets the system log level for the function. Default: "INFO"
+        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
+        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -26627,6 +27141,7 @@ class DockerImageFunction(
             allow_all_outbound=allow_all_outbound,
             allow_public_subnet=allow_public_subnet,
             application_log_level=application_log_level,
+            application_log_level_v2=application_log_level_v2,
             architecture=architecture,
             code_signing_config=code_signing_config,
             current_version_options=current_version_options,
@@ -26660,6 +27175,7 @@ class DockerImageFunction(
             security_groups=security_groups,
             snap_start=snap_start,
             system_log_level=system_log_level,
+            system_log_level_v2=system_log_level_v2,
             timeout=timeout,
             tracing=tracing,
             vpc=vpc,
@@ -26719,6 +27235,7 @@ __all__ = [
     "CodeImageConfig",
     "CodeSigningConfig",
     "CodeSigningConfigProps",
+    "CustomCommandOptions",
     "DestinationConfig",
     "DestinationOptions",
     "DestinationType",
@@ -28246,6 +28763,23 @@ def _typecheckingstub__cf2f362d90d470e1ea550c48af2d201151dbe9e28567f1f024ec091a2
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__f107aedaa96b9385600e34088d5cda9d8035f15776c846b0f0b4fbbe35d118df(
+    output: builtins.str,
+    command: typing.Sequence[builtins.str],
+    *,
+    command_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
+    deploy_time: typing.Optional[builtins.bool] = None,
+    readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+    asset_hash: typing.Optional[builtins.str] = None,
+    asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
+    bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    follow_symlinks: typing.Optional[_SymlinkFollowMode_047ec1f6] = None,
+    ignore_mode: typing.Optional[_IgnoreMode_655a98e8] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__5d398ddff6fb1e58c2dafd59b4cd46de157e95f7c1faf544bd0e4cee3a6c9765(
     path: builtins.str,
     *,
@@ -28322,6 +28856,21 @@ def _typecheckingstub__aefe636ff4357a418ff1336047558f42e531611ca56525b6b5997177b
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__69255a578358e8a47662200dda7ce2e0b1f2ee573c1469268f14060b00a7863a(
+    *,
+    asset_hash: typing.Optional[builtins.str] = None,
+    asset_hash_type: typing.Optional[_AssetHashType_05b67f2d] = None,
+    bundling: typing.Optional[typing.Union[_BundlingOptions_588cc936, typing.Dict[builtins.str, typing.Any]]] = None,
+    exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
+    follow_symlinks: typing.Optional[_SymlinkFollowMode_047ec1f6] = None,
+    ignore_mode: typing.Optional[_IgnoreMode_655a98e8] = None,
+    deploy_time: typing.Optional[builtins.bool] = None,
+    readers: typing.Optional[typing.Sequence[_IGrantable_71c4f5de]] = None,
+    command_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7b17dd9a780787e4acd806a7d2f2738f8873c3cee8af497862be683cbad3bd8a(
     *,
     destination: builtins.str,
@@ -28599,6 +29148,7 @@ def _typecheckingstub__59918bb957d892739733c7a5849db990615fe5329709ad7ba703e0ee4
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,
+    application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
     architecture: typing.Optional[Architecture] = None,
     code_signing_config: typing.Optional[ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -28632,6 +29182,7 @@ def _typecheckingstub__59918bb957d892739733c7a5849db990615fe5329709ad7ba703e0ee4
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     snap_start: typing.Optional[SnapStartConf] = None,
     system_log_level: typing.Optional[builtins.str] = None,
+    system_log_level_v2: typing.Optional[SystemLogLevel] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
     tracing: typing.Optional[Tracing] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -28650,6 +29201,7 @@ def _typecheckingstub__94e70d11aa3c53737d418dbb9983973dfc06dbdef5c8cc30613cc3c6d
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,
+    application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
     architecture: typing.Optional[Architecture] = None,
     code_signing_config: typing.Optional[ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -28683,6 +29235,7 @@ def _typecheckingstub__94e70d11aa3c53737d418dbb9983973dfc06dbdef5c8cc30613cc3c6d
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     snap_start: typing.Optional[SnapStartConf] = None,
     system_log_level: typing.Optional[builtins.str] = None,
+    system_log_level_v2: typing.Optional[SystemLogLevel] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
     tracing: typing.Optional[Tracing] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -29131,6 +29684,7 @@ def _typecheckingstub__68a03ec9f866a29c77aabcf8328c63a49511790fa9714874f255b3292
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,
+    application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
     architecture: typing.Optional[Architecture] = None,
     code_signing_config: typing.Optional[ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -29164,6 +29718,7 @@ def _typecheckingstub__68a03ec9f866a29c77aabcf8328c63a49511790fa9714874f255b3292
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     snap_start: typing.Optional[SnapStartConf] = None,
     system_log_level: typing.Optional[builtins.str] = None,
+    system_log_level_v2: typing.Optional[SystemLogLevel] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
     tracing: typing.Optional[Tracing] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -29380,6 +29935,7 @@ def _typecheckingstub__04dd97f4b18c00e7ee0981f2428664401ae0b75dbda6102ea3ef53d08
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,
+    application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
     architecture: typing.Optional[Architecture] = None,
     code_signing_config: typing.Optional[ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -29413,6 +29969,7 @@ def _typecheckingstub__04dd97f4b18c00e7ee0981f2428664401ae0b75dbda6102ea3ef53d08
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     snap_start: typing.Optional[SnapStartConf] = None,
     system_log_level: typing.Optional[builtins.str] = None,
+    system_log_level_v2: typing.Optional[SystemLogLevel] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
     tracing: typing.Optional[Tracing] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -29621,6 +30178,7 @@ def _typecheckingstub__e7b766bff13bb7266787cec9bebb600187e19c1672e530bb9cfa31649
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,
+    application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
     architecture: typing.Optional[Architecture] = None,
     code_signing_config: typing.Optional[ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -29654,6 +30212,7 @@ def _typecheckingstub__e7b766bff13bb7266787cec9bebb600187e19c1672e530bb9cfa31649
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     snap_start: typing.Optional[SnapStartConf] = None,
     system_log_level: typing.Optional[builtins.str] = None,
+    system_log_level_v2: typing.Optional[SystemLogLevel] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
     tracing: typing.Optional[Tracing] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -29825,6 +30384,7 @@ def _typecheckingstub__724895b6b59aaf2b678ef25f2beca19fb114fc04ff6b37edef28e12b3
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,
+    application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
     architecture: typing.Optional[Architecture] = None,
     code_signing_config: typing.Optional[ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -29858,6 +30418,7 @@ def _typecheckingstub__724895b6b59aaf2b678ef25f2beca19fb114fc04ff6b37edef28e12b3
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     snap_start: typing.Optional[SnapStartConf] = None,
     system_log_level: typing.Optional[builtins.str] = None,
+    system_log_level_v2: typing.Optional[SystemLogLevel] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
     tracing: typing.Optional[Tracing] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,
@@ -29966,6 +30527,7 @@ def _typecheckingstub__368a49fe1f866c7ea7986c57b6f8488d0fddea8f62bf05ec1ed7eb09b
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
     application_log_level: typing.Optional[builtins.str] = None,
+    application_log_level_v2: typing.Optional[ApplicationLogLevel] = None,
     architecture: typing.Optional[Architecture] = None,
     code_signing_config: typing.Optional[ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -29999,6 +30561,7 @@ def _typecheckingstub__368a49fe1f866c7ea7986c57b6f8488d0fddea8f62bf05ec1ed7eb09b
     security_groups: typing.Optional[typing.Sequence[_ISecurityGroup_acf8a799]] = None,
     snap_start: typing.Optional[SnapStartConf] = None,
     system_log_level: typing.Optional[builtins.str] = None,
+    system_log_level_v2: typing.Optional[SystemLogLevel] = None,
     timeout: typing.Optional[_Duration_4839e8c3] = None,
     tracing: typing.Optional[Tracing] = None,
     vpc: typing.Optional[_IVpc_f30d5663] = None,