aws-lambda-powertools 3.34.0__tar.gz → 3.36.0__tar.gz

aws_lambda_powertools-3.36.0/.gitignore

@@ -0,0 +1,326 @@
+# Created by https://www.gitignore.io/api/osx,linux,python,windows,pycharm,visualstudiocode
+# Edit at https://www.gitignore.io/?templates=osx,linux,python,windows,pycharm,visualstudiocode
+
+### Linux ###
+*~
+
+# temporary files which can be created if a process still has a handle open of a deleted file
+.fuse_hidden*
+
+# KDE directory preferences
+.directory
+
+# Linux trash folder which might appear on any partition or disk
+.Trash-*
+
+# .nfs files are created when an open file is removed but is still being accessed
+.nfs*
+
+### OSX ###
+# General
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# Icon must end with two \r
+Icon
+
+# Thumbnails
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.com.apple.timemachine.donotpresent
+
+# Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
+### PyCharm ###
+# Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio and WebStorm
+# Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
+
+# User-specific stuff
+.idea/**/workspace.xml
+.idea/**/tasks.xml
+.idea/**/usage.statistics.xml
+.idea/**/dictionaries
+.idea/**/shelf
+
+# Generated files
+.idea/**/contentModel.xml
+
+# Sensitive or high-churn files
+.idea/**/dataSources/
+.idea/**/dataSources.ids
+.idea/**/dataSources.local.xml
+.idea/**/sqlDataSources.xml
+.idea/**/dynamic.xml
+.idea/**/uiDesigner.xml
+.idea/**/dbnavigator.xml
+
+# Gradle
+.idea/**/gradle.xml
+.idea/**/libraries
+
+# Gradle and Maven with auto-import
+# When using Gradle or Maven with auto-import, you should exclude module files,
+# since they will be recreated, and may cause churn.  Uncomment if using
+# auto-import.
+# .idea/modules.xml
+# .idea/*.iml
+# .idea/modules
+# *.iml
+# *.ipr
+
+# CMake
+cmake-build-*/
+
+# Mongo Explorer plugin
+.idea/**/mongoSettings.xml
+
+# File-based project format
+*.iws
+
+# IntelliJ
+out/
+
+# mpeltonen/sbt-idea plugin
+.idea_modules/
+
+# JIRA plugin
+atlassian-ide-plugin.xml
+
+# Cursive Clojure plugin
+.idea/replstate.xml
+
+# Crashlytics plugin (for Android Studio and IntelliJ)
+com_crashlytics_export_strings.xml
+crashlytics.properties
+crashlytics-build.properties
+fabric.properties
+
+# Editor-based Rest Client
+.idea/httpRequests
+
+# Android studio 3.1+ serialized cache file
+.idea/caches/build_file_checksums.ser
+
+### PyCharm Patch ###
+# Comment Reason: https://github.com/joeblau/gitignore.io/issues/186#issuecomment-215987721
+
+# *.iml
+# modules.xml
+# .idea/misc.xml
+# *.ipr
+
+# Sonarlint plugin
+.idea/sonarlint
+
+### Python ###
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+pip-wheel-metadata/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+.hypothesis/
+.pytest_cache/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+.python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+#Pipfile.lock
+
+# celery beat schedule file
+celerybeat-schedule
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+### VisualStudioCode ###
+.vscode
+.vscode/*
+!.vscode/tasks.json
+!.vscode/launch.json
+!.vscode/extensions.json
+
+### VisualStudioCode Patch ###
+# Ignore all local history of files
+.history
+
+### Windows ###
+# Windows thumbnail cache files
+Thumbs.db
+Thumbs.db:encryptable
+ehthumbs.db
+ehthumbs_vista.db
+
+# Dump file
+*.stackdump
+
+# Folder config file
+[Dd]esktop.ini
+
+# Recycle Bin used on file shares
+$RECYCLE.BIN/
+
+# Windows Installer files
+*.cab
+*.msi
+*.msix
+*.msm
+*.msp
+
+# Windows shortcuts
+*.lnk
+
+# End of https://www.gitignore.io/api/osx,linux,python,windows,pycharm,visualstudiocode
+
+# Misc
+test_report
+wheelhouse
+/.idea/*
+*.html
+TMP_CHANGELOG.md
+
+# Docs files
+docs/.cache/
+docs/public
+node_modules
+api/
+site/
+!404.html
+!docs/overrides/*.html
+
+# CDK
+.cdk
+
+!.github/workflows/lib
+examples/**/sam/.aws-sam
+
+cdk.out
+# NOTE: different accounts will be used for E2E thus creating unnecessary git clutter
+cdk.context.json
+
+# vim
+*.swp
+
+# LLMs
+.claude
+.amazonq
+.kiro
+.github/instructions

{aws_lambda_powertools-3.34.0 → aws_lambda_powertools-3.36.0}/PKG-INFO

@@ -1,11 +1,15 @@
-Metadata-Version: 2.3
+Metadata-Version: 2.5
 Name: aws_lambda_powertools
-Version: 3.34.0
+Version: 3.36.0
 Summary: Powertools for AWS Lambda (Python) is a developer toolkit to implement Serverless best practices and increase developer velocity.
-License: MIT
-Keywords: aws_lambda_powertools,aws,tracing,logging,lambda,powertools,feature_flags,idempotency,middleware
+Project-URL: Repository, https://github.com/aws-powertools/powertools-lambda-python
+Project-URL: Documentation, https://docs.powertools.aws.dev/lambda/python/
+Project-URL: Issue tracker, https://github.com/aws-powertools/powertools-lambda-python/issues
+Project-URL: Releases, https://github.com/aws-powertools/powertools-lambda-python/releases
 Author: Amazon Web Services
-Requires-Python: >=3.10,<4.0.0
+License: MIT
+License-File: LICENSE
+Keywords: aws,aws_lambda_powertools,feature_flags,idempotency,lambda,logging,middleware,powertools,tracing
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -17,35 +21,46 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Requires-Python: <4.0.0,>=3.10
+Requires-Dist: jmespath<2.0.0,>=1.0.1
+Requires-Dist: typing-extensions<5.0.0,>=4.11.0
 Provides-Extra: all
+Requires-Dist: aws-encryption-sdk<5.0.0,>=4.0.5; extra == 'all'
+Requires-Dist: aws-xray-sdk<3.0.0,>=2.8.0; extra == 'all'
+Requires-Dist: cryptography<51.0.0,>=50.0.1; extra == 'all'
+Requires-Dist: fastjsonschema<3.0.0,>=2.14.5; extra == 'all'
+Requires-Dist: jsonpath-ng<2.0.0,>=1.6.0; extra == 'all'
+Requires-Dist: pydantic-settings<3.0.0,>=2.6.1; extra == 'all'
+Requires-Dist: pydantic<3.0.0,>=2.4.0; extra == 'all'
+Requires-Dist: pyjwt<3.0.0,>=2.14.0; extra == 'all'
+Requires-Dist: urllib3<3.0.0,>=2.7.0; extra == 'all'
 Provides-Extra: aws-sdk
+Requires-Dist: boto3<2.0.0,>=1.34.32; extra == 'aws-sdk'
 Provides-Extra: datadog
+Requires-Dist: datadog-lambda<9.0.0,>=8.114.0; extra == 'datadog'
 Provides-Extra: datamasking
+Requires-Dist: aws-encryption-sdk<5.0.0,>=4.0.5; extra == 'datamasking'
+Requires-Dist: jsonpath-ng<2.0.0,>=1.6.0; extra == 'datamasking'
+Provides-Extra: jwt
+Requires-Dist: cryptography<51.0.0,>=50.0.1; extra == 'jwt'
+Requires-Dist: pyjwt<3.0.0,>=2.14.0; extra == 'jwt'
+Requires-Dist: urllib3<3.0.0,>=2.7.0; extra == 'jwt'
 Provides-Extra: kafka-consumer-avro
+Requires-Dist: avro<2.0.0,>=1.12.0; extra == 'kafka-consumer-avro'
 Provides-Extra: kafka-consumer-protobuf
+Requires-Dist: protobuf<8.0.0,>=6.30.2; extra == 'kafka-consumer-protobuf'
+Provides-Extra: oauth2
+Requires-Dist: urllib3<3.0.0,>=2.7.0; extra == 'oauth2'
 Provides-Extra: parser
+Requires-Dist: pydantic<3.0.0,>=2.4.0; extra == 'parser'
 Provides-Extra: redis
+Requires-Dist: redis<9.0,>=4.4; extra == 'redis'
 Provides-Extra: tracer
+Requires-Dist: aws-xray-sdk<3.0.0,>=2.8.0; extra == 'tracer'
 Provides-Extra: validation
+Requires-Dist: fastjsonschema<3.0.0,>=2.14.5; extra == 'validation'
 Provides-Extra: valkey
-Requires-Dist: avro (>=1.12.0,<2.0.0) ; extra == "kafka-consumer-avro"
-Requires-Dist: aws-encryption-sdk (>=4.0.5,<5.0.0) ; extra == "all" or extra == "datamasking"
-Requires-Dist: aws-xray-sdk (>=2.8.0,<3.0.0) ; extra == "tracer" or extra == "all"
-Requires-Dist: boto3 (>=1.34.32,<2.0.0) ; extra == "aws-sdk"
-Requires-Dist: datadog-lambda (>=8.114.0,<9.0.0) ; extra == "datadog"
-Requires-Dist: fastjsonschema (>=2.14.5,<3.0.0) ; extra == "validation" or extra == "all"
-Requires-Dist: jmespath (>=1.0.1,<2.0.0)
-Requires-Dist: jsonpath-ng (>=1.6.0,<2.0.0) ; extra == "all" or extra == "datamasking"
-Requires-Dist: protobuf (>=6.30.2,<8.0.0) ; extra == "kafka-consumer-protobuf"
-Requires-Dist: pydantic (>=2.4.0,<3.0.0) ; extra == "parser" or extra == "all"
-Requires-Dist: pydantic-settings (>=2.6.1,<3.0.0) ; extra == "all"
-Requires-Dist: redis (>=4.4,<9.0) ; extra == "redis"
-Requires-Dist: typing-extensions (>=4.11.0,<5.0.0)
-Requires-Dist: valkey-glide (>=1.3.5,<3.0) ; extra == "valkey"
-Project-URL: Documentation, https://docs.powertools.aws.dev/lambda/python/
-Project-URL: Issue tracker, https://github.com/aws-powertools/powertools-lambda-python/issues
-Project-URL: Repository, https://github.com/aws-powertools/powertools-lambda-python
-Project-URL: Releases, https://github.com/aws-powertools/powertools-lambda-python/releases
+Requires-Dist: valkey-glide<3.0,>=1.3.5; extra == 'valkey'
 Description-Content-Type: text/markdown
 
 <!-- markdownlint-disable MD013 MD041 MD043  -->
@@ -161,4 +176,3 @@ If you think you’ve found a potential security issue, please do not post it in
 ## License
 
 This library is licensed under the MIT-0 License. See the LICENSE file.
-

{aws_lambda_powertools-3.34.0 → aws_lambda_powertools-3.36.0}/aws_lambda_powertools/event_handler/api_gateway.py

@@ -3,6 +3,7 @@ from __future__ import annotations
 import base64
 import json
 import logging
+import os
 import re
 import traceback
 import warnings
@@ -18,7 +19,7 @@ from typing_extensions import override
 
 from aws_lambda_powertools.event_handler import content_types
 from aws_lambda_powertools.event_handler.exception_handling import ExceptionHandlerManager
-from aws_lambda_powertools.event_handler.exceptions import NotFoundError, ServiceError
+from aws_lambda_powertools.event_handler.exceptions import NotFoundError, ResponseSizeExceededError, ServiceError
 from aws_lambda_powertools.event_handler.openapi.config import OpenAPIConfig
 from aws_lambda_powertools.event_handler.openapi.constants import (
     DEFAULT_API_VERSION,
@@ -72,6 +73,7 @@ _UNSAFE_URI = r"%<> \[\]{}|^"
 _NAMED_GROUP_BOUNDARY_PATTERN = rf"(?P\1[{_SAFE_URI}{_UNSAFE_URI}\\w]+)"
 _ROUTE_REGEX = "^{}$"
 _JSON_DUMP_CALL = partial(json.dumps, separators=(",", ":"), cls=Encoder)
+_ALB_MAX_RESPONSE_SIZE = 1024 * 1024
 
 ResponseEventT = TypeVar("ResponseEventT", bound=BaseProxyEvent)
 ResponseT = TypeVar("ResponseT")
@@ -810,6 +812,11 @@ class ResponseBuilder(Generic[ResponseEventT]):
 
     def _compress(self):
         """Compress the response body, but only if `Accept-Encoding` headers includes gzip."""
+        # A response without a body, such as 204 No Content or 304 Not Modified, has nothing to compress
+        if self.response.body is None:
+            logger.debug("Response has no body; skipping compression")
+            return
+
         self.response.headers["Content-Encoding"] = "gzip"
         if isinstance(self.response.body, str):
             logger.debug("Converting string response to bytes before compressing it")
@@ -2553,7 +2560,7 @@ class ApiGatewayResolver(BaseRouter):
         BaseRouter.current_event = self._to_proxy_event(cast(dict, event))
         BaseRouter.lambda_context = context
 
-        response = self._resolve().build(self.current_event, self._cors)
+        response = self._build_response(self._resolve())
 
         # Debug print Processed Middlewares
         if self._debug:
@@ -2614,7 +2621,7 @@ class ApiGatewayResolver(BaseRouter):
         BaseRouter.current_event = self._to_proxy_event(cast(dict, event))
         BaseRouter.lambda_context = context
 
-        response = (await self._resolve_async()).build(self.current_event, self._cors)
+        response = self._build_response(await self._resolve_async())
 
         if self._debug:
             print("\nProcessed Middlewares:")
@@ -2626,6 +2633,10 @@ class ApiGatewayResolver(BaseRouter):
 
         return response
 
+    def _build_response(self, response_builder: ResponseBuilder) -> dict[str, Any]:
+        """Build the final integration response after route and middleware processing."""
+        return response_builder.build(self.current_event, self._cors)
+
     async def _resolve_async(self) -> ResponseBuilder:
         method = self.current_event.http_method.upper()
         path = self._remove_prefix(self.current_event.path)
@@ -3035,21 +3046,18 @@ class ApiGatewayResolver(BaseRouter):
             An optional prefix to be added to the originally defined rule
         """
 
-        # Add reference to parent ApiGatewayResolver to support use cases where people subclass it to add custom logic
-        router.api_resolver = self
-
         logger.debug("Merging App context with Router context")
         self.context.update(**router.context)
 
+        # Delegate request state to the resolver after preserving the router context.
+        router.api_resolver = self
+
         logger.debug("Appending Router middlewares into App middlewares.")
         self._router_middlewares = self._router_middlewares + router._router_middlewares
 
         logger.debug("Appending Router exception_handler into App exception_handler.")
         self.exception_handler_manager.update_exception_handlers(router._exception_handlers)
 
-        # use pointer to allow context clearance after event is processed e.g., resolve(evt, ctx)
-        router.context = self.context
-
         # Iterate through the routes defined in the router to configure and apply middlewares for each route
         for route, func in router._routes.items():
             new_route = route
@@ -3112,9 +3120,48 @@ class Router(BaseRouter):
         self._routes: dict[tuple, Callable] = {}
         self._routes_with_middleware: dict[tuple, list[Callable]] = {}
         self.api_resolver: BaseRouter | None = None
-        self.context = {}  # early init as customers might add context before event resolution
+        self._context: dict = {}  # early init as customers might add context before event resolution
         self._exception_handlers: dict[type, Callable] = {}
 
+    @property
+    def current_event(self) -> BaseProxyEvent:
+        if self.api_resolver is not None:
+            return self.api_resolver.current_event
+        return BaseRouter.current_event
+
+    @current_event.setter
+    def current_event(self, value: BaseProxyEvent) -> None:
+        if self.api_resolver is not None:
+            self.api_resolver.current_event = value
+        else:
+            BaseRouter.current_event = value
+
+    @property
+    def lambda_context(self) -> LambdaContext:
+        if self.api_resolver is not None:
+            return self.api_resolver.lambda_context
+        return BaseRouter.lambda_context
+
+    @lambda_context.setter
+    def lambda_context(self, value: LambdaContext) -> None:
+        if self.api_resolver is not None:
+            self.api_resolver.lambda_context = value
+        else:
+            BaseRouter.lambda_context = value
+
+    @property
+    def context(self) -> dict:
+        if self.api_resolver is not None:
+            return self.api_resolver.context
+        return self._context
+
+    @context.setter
+    def context(self, value: dict) -> None:
+        if self.api_resolver is not None:
+            self.api_resolver.context = value
+        else:
+            self._context = value
+
     def route(
         self,
         rule: str,
@@ -3301,6 +3348,7 @@ class ALBResolver(ApiGatewayResolver):
         response_validation_error_http_code: HTTPStatus | int | None = None,
         json_body_deserializer: Callable[[str], dict] | None = None,
         decode_query_parameters: bool = False,
+        enable_response_size_validation: bool = False,
     ):
         """Amazon Application Load Balancer (ALB) resolver
 
@@ -3327,6 +3375,10 @@ class ALBResolver(ApiGatewayResolver):
             by default json.loads when integrating with EventSource data class
         decode_query_parameters: bool | None
             Enables URL-decoding of query parameters (both keys and values), by default False.
+        enable_response_size_validation: bool
+            Validate the complete serialized response against ALB's 1 MB limit, by default False.
+            Raises ResponseSizeExceededError when the limit is exceeded. Registered exception handlers
+            can return a smaller response, which is also validated.
         """
         super().__init__(
             cors=cors,
@@ -3338,6 +3390,42 @@ class ALBResolver(ApiGatewayResolver):
             json_body_deserializer=json_body_deserializer,
         )
         self.decode_query_parameters = decode_query_parameters
+        self._enable_response_size_validation = enable_response_size_validation
+
+    @override
+    def _build_response(self, response_builder: ResponseBuilder) -> dict[str, Any]:
+        response = super()._build_response(response_builder)
+        if not self._enable_response_size_validation:
+            return response
+
+        try:
+            self._validate_response_size(response)
+        except ResponseSizeExceededError as exc:
+            try:
+                # Resolved responses retain their route, including not-found and preflight responses.
+                handled_response = self._call_exception_handler(exc, cast(Route, response_builder.route))
+                if handled_response is None:
+                    raise
+
+                handled_response.response = cast(Response, self._to_response(handled_response.response))
+                response = super()._build_response(handled_response)
+                # Validate once more without invoking an exception handler recursively.
+                self._validate_response_size(response)
+            except Exception:
+                self.clear_context()
+                raise
+
+        return response
+
+    @staticmethod
+    def _validate_response_size(response: dict[str, Any]) -> None:
+        # Match the Lambda Python runtime's outer JSON encoding, including its default separators.
+        # Managed Python 3.12+ runtimes return Unicode directly; older/custom runtimes escape it.
+        runtime = re.fullmatch(r"AWS_Lambda_python3\.(\d+)", os.getenv("AWS_EXECUTION_ENV", ""))
+        ensure_ascii = runtime is None or int(runtime[1]) < 12
+        actual_size = len(json.dumps(response, ensure_ascii=ensure_ascii).encode("utf-8"))
+        if actual_size > _ALB_MAX_RESPONSE_SIZE:
+            raise ResponseSizeExceededError(actual_size=actual_size, max_size=_ALB_MAX_RESPONSE_SIZE)
 
     def _get_base_path(self) -> str:
         # ALB doesn't have a stage variable, so we just return an empty string

{aws_lambda_powertools-3.34.0 → aws_lambda_powertools-3.36.0}/aws_lambda_powertools/event_handler/exceptions.py

@@ -3,6 +3,25 @@ from __future__ import annotations
 from http import HTTPStatus
 
 
+class ResponseSizeExceededError(Exception):
+    """The serialized Lambda response exceeds the integration's size limit."""
+
+    def __init__(self, *, actual_size: int, max_size: int):
+        """
+        Parameters
+        ----------
+        actual_size: int
+            Size of the complete serialized response in bytes.
+        max_size: int
+            Maximum allowed serialized response size in bytes.
+        """
+        self.actual_size = actual_size
+        self.max_size = max_size
+        super().__init__(
+            f"Serialized response size ({actual_size} bytes) exceeds the maximum allowed size ({max_size} bytes)",
+        )
+
+
 class ServiceError(Exception):
     """Powertools class HTTP Service Error"""