pulumi-aws 7.14.0__py3-none-any.whl → 7.15.0__py3-none-any.whl

pulumi_aws/datazone/domain.py

@@ -208,6 +208,7 @@ class _DomainState:
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  portal_url: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
+                 root_domain_unit_id: Optional[pulumi.Input[_builtins.str]] = None,
                  service_role: Optional[pulumi.Input[_builtins.str]] = None,
                  single_sign_on: Optional[pulumi.Input['DomainSingleSignOnArgs']] = None,
                  skip_deletion_check: Optional[pulumi.Input[_builtins.bool]] = None,
@@ -226,6 +227,7 @@ class _DomainState:
         :param pulumi.Input[_builtins.str] name: Name of the Domain.
         :param pulumi.Input[_builtins.str] portal_url: URL of the data portal for the Domain.
         :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+        :param pulumi.Input[_builtins.str] root_domain_unit_id: ID of the root domain unit.
         :param pulumi.Input[_builtins.str] service_role: ARN of the service role used by DataZone. Required when `domain_version` is set to `V2`.
         :param pulumi.Input['DomainSingleSignOnArgs'] single_sign_on: Single sign on options, used to [enable AWS IAM Identity Center](https://docs.aws.amazon.com/datazone/latest/userguide/enable-IAM-identity-center-for-datazone.html) for DataZone.
         :param pulumi.Input[_builtins.bool] skip_deletion_check: Whether to skip the deletion check for the Domain.
@@ -247,6 +249,8 @@ class _DomainState:
             pulumi.set(__self__, "portal_url", portal_url)
         if region is not None:
             pulumi.set(__self__, "region", region)
+        if root_domain_unit_id is not None:
+            pulumi.set(__self__, "root_domain_unit_id", root_domain_unit_id)
         if service_role is not None:
             pulumi.set(__self__, "service_role", service_role)
         if single_sign_on is not None:
@@ -358,6 +362,18 @@ class _DomainState:
     def region(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "region", value)
 
+    @_builtins.property
+    @pulumi.getter(name="rootDomainUnitId")
+    def root_domain_unit_id(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        ID of the root domain unit.
+        """
+        return pulumi.get(self, "root_domain_unit_id")
+
+    @root_domain_unit_id.setter
+    def root_domain_unit_id(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "root_domain_unit_id", value)
+
     @_builtins.property
     @pulumi.getter(name="serviceRole")
     def service_role(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -779,6 +795,7 @@ class Domain(pulumi.CustomResource):
             __props__.__dict__["timeouts"] = timeouts
             __props__.__dict__["arn"] = None
             __props__.__dict__["portal_url"] = None
+            __props__.__dict__["root_domain_unit_id"] = None
             __props__.__dict__["tags_all"] = None
         super(Domain, __self__).__init__(
             'aws:datazone/domain:Domain',
@@ -798,6 +815,7 @@ class Domain(pulumi.CustomResource):
             name: Optional[pulumi.Input[_builtins.str]] = None,
             portal_url: Optional[pulumi.Input[_builtins.str]] = None,
             region: Optional[pulumi.Input[_builtins.str]] = None,
+            root_domain_unit_id: Optional[pulumi.Input[_builtins.str]] = None,
             service_role: Optional[pulumi.Input[_builtins.str]] = None,
             single_sign_on: Optional[pulumi.Input[Union['DomainSingleSignOnArgs', 'DomainSingleSignOnArgsDict']]] = None,
             skip_deletion_check: Optional[pulumi.Input[_builtins.bool]] = None,
@@ -821,6 +839,7 @@ class Domain(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] name: Name of the Domain.
         :param pulumi.Input[_builtins.str] portal_url: URL of the data portal for the Domain.
         :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+        :param pulumi.Input[_builtins.str] root_domain_unit_id: ID of the root domain unit.
         :param pulumi.Input[_builtins.str] service_role: ARN of the service role used by DataZone. Required when `domain_version` is set to `V2`.
         :param pulumi.Input[Union['DomainSingleSignOnArgs', 'DomainSingleSignOnArgsDict']] single_sign_on: Single sign on options, used to [enable AWS IAM Identity Center](https://docs.aws.amazon.com/datazone/latest/userguide/enable-IAM-identity-center-for-datazone.html) for DataZone.
         :param pulumi.Input[_builtins.bool] skip_deletion_check: Whether to skip the deletion check for the Domain.
@@ -838,6 +857,7 @@ class Domain(pulumi.CustomResource):
         __props__.__dict__["name"] = name
         __props__.__dict__["portal_url"] = portal_url
         __props__.__dict__["region"] = region
+        __props__.__dict__["root_domain_unit_id"] = root_domain_unit_id
         __props__.__dict__["service_role"] = service_role
         __props__.__dict__["single_sign_on"] = single_sign_on
         __props__.__dict__["skip_deletion_check"] = skip_deletion_check
@@ -912,6 +932,14 @@ class Domain(pulumi.CustomResource):
         """
         return pulumi.get(self, "region")
 
+    @_builtins.property
+    @pulumi.getter(name="rootDomainUnitId")
+    def root_domain_unit_id(self) -> pulumi.Output[_builtins.str]:
+        """
+        ID of the root domain unit.
+        """
+        return pulumi.get(self, "root_domain_unit_id")
+
     @_builtins.property
     @pulumi.getter(name="serviceRole")
     def service_role(self) -> pulumi.Output[Optional[_builtins.str]]:

pulumi_aws/datazone/get_domain.py

@@ -26,7 +26,7 @@ class GetDomainResult:
     """
     A collection of values returned by getDomain.
     """
-    def __init__(__self__, arn=None, created_at=None, description=None, domain_version=None, id=None, last_updated_at=None, managed_account_id=None, name=None, portal_url=None, region=None, status=None):
+    def __init__(__self__, arn=None, created_at=None, description=None, domain_version=None, id=None, last_updated_at=None, managed_account_id=None, name=None, portal_url=None, region=None, root_domain_unit_id=None, status=None):
         if arn and not isinstance(arn, str):
             raise TypeError("Expected argument 'arn' to be a str")
         pulumi.set(__self__, "arn", arn)
@@ -57,6 +57,9 @@ class GetDomainResult:
         if region and not isinstance(region, str):
             raise TypeError("Expected argument 'region' to be a str")
         pulumi.set(__self__, "region", region)
+        if root_domain_unit_id and not isinstance(root_domain_unit_id, str):
+            raise TypeError("Expected argument 'root_domain_unit_id' to be a str")
+        pulumi.set(__self__, "root_domain_unit_id", root_domain_unit_id)
         if status and not isinstance(status, str):
             raise TypeError("Expected argument 'status' to be a str")
         pulumi.set(__self__, "status", status)
@@ -132,6 +135,14 @@ class GetDomainResult:
     def region(self) -> _builtins.str:
         return pulumi.get(self, "region")
 
+    @_builtins.property
+    @pulumi.getter(name="rootDomainUnitId")
+    def root_domain_unit_id(self) -> _builtins.str:
+        """
+        ID of the root domain unit.
+        """
+        return pulumi.get(self, "root_domain_unit_id")
+
     @_builtins.property
     @pulumi.getter
     def status(self) -> _builtins.str:
@@ -157,6 +168,7 @@ class AwaitableGetDomainResult(GetDomainResult):
             name=self.name,
             portal_url=self.portal_url,
             region=self.region,
+            root_domain_unit_id=self.root_domain_unit_id,
             status=self.status)
 
 
@@ -201,6 +213,7 @@ def get_domain(id: Optional[_builtins.str] = None,
         name=pulumi.get(__ret__, 'name'),
         portal_url=pulumi.get(__ret__, 'portal_url'),
         region=pulumi.get(__ret__, 'region'),
+        root_domain_unit_id=pulumi.get(__ret__, 'root_domain_unit_id'),
         status=pulumi.get(__ret__, 'status'))
 def get_domain_output(id: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
                       name: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
@@ -242,4 +255,5 @@ def get_domain_output(id: Optional[pulumi.Input[Optional[_builtins.str]]] = None
         name=pulumi.get(__response__, 'name'),
         portal_url=pulumi.get(__response__, 'portal_url'),
         region=pulumi.get(__response__, 'region'),
+        root_domain_unit_id=pulumi.get(__response__, 'root_domain_unit_id'),
         status=pulumi.get(__response__, 'status')))

pulumi_aws/ecs/_inputs.py

@@ -1841,11 +1841,11 @@ if not MYPY:
     class ClusterConfigurationManagedStorageConfigurationArgsDict(TypedDict):
         fargate_ephemeral_storage_kms_key_id: NotRequired[pulumi.Input[_builtins.str]]
         """
-        AWS Key Management Service key ID for the Fargate ephemeral storage.
+        AWS Key Management Service key ARN for the Fargate ephemeral storage.
         """
         kms_key_id: NotRequired[pulumi.Input[_builtins.str]]
         """
-        AWS Key Management Service key ID to encrypt the managed storage.
+        AWS Key Management Service key ARN to encrypt the managed storage.
         """
 elif False:
     ClusterConfigurationManagedStorageConfigurationArgsDict: TypeAlias = Mapping[str, Any]
@@ -1856,8 +1856,8 @@ class ClusterConfigurationManagedStorageConfigurationArgs:
                  fargate_ephemeral_storage_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None):
         """
-        :param pulumi.Input[_builtins.str] fargate_ephemeral_storage_kms_key_id: AWS Key Management Service key ID for the Fargate ephemeral storage.
-        :param pulumi.Input[_builtins.str] kms_key_id: AWS Key Management Service key ID to encrypt the managed storage.
+        :param pulumi.Input[_builtins.str] fargate_ephemeral_storage_kms_key_id: AWS Key Management Service key ARN for the Fargate ephemeral storage.
+        :param pulumi.Input[_builtins.str] kms_key_id: AWS Key Management Service key ARN to encrypt the managed storage.
         """
         if fargate_ephemeral_storage_kms_key_id is not None:
             pulumi.set(__self__, "fargate_ephemeral_storage_kms_key_id", fargate_ephemeral_storage_kms_key_id)
@@ -1868,7 +1868,7 @@ class ClusterConfigurationManagedStorageConfigurationArgs:
     @pulumi.getter(name="fargateEphemeralStorageKmsKeyId")
     def fargate_ephemeral_storage_kms_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        AWS Key Management Service key ID for the Fargate ephemeral storage.
+        AWS Key Management Service key ARN for the Fargate ephemeral storage.
         """
         return pulumi.get(self, "fargate_ephemeral_storage_kms_key_id")
 
@@ -1880,7 +1880,7 @@ class ClusterConfigurationManagedStorageConfigurationArgs:
     @pulumi.getter(name="kmsKeyId")
     def kms_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        AWS Key Management Service key ID to encrypt the managed storage.
+        AWS Key Management Service key ARN to encrypt the managed storage.
         """
         return pulumi.get(self, "kms_key_id")
 

pulumi_aws/ecs/cluster.py

@@ -385,7 +385,7 @@ class Cluster(pulumi.CustomResource):
             name="example",
             configuration={
                 "managed_storage_configuration": {
-                    "fargate_ephemeral_storage_kms_key_id": example.id,
+                    "fargate_ephemeral_storage_kms_key_id": example.arn,
                 },
             },
             opts = pulumi.ResourceOptions(depends_on=[example_key_policy]))
@@ -522,7 +522,7 @@ class Cluster(pulumi.CustomResource):
             name="example",
             configuration={
                 "managed_storage_configuration": {
-                    "fargate_ephemeral_storage_kms_key_id": example.id,
+                    "fargate_ephemeral_storage_kms_key_id": example.arn,
                 },
             },
             opts = pulumi.ResourceOptions(depends_on=[example_key_policy]))

pulumi_aws/ecs/outputs.py

@@ -1420,8 +1420,8 @@ class ClusterConfigurationManagedStorageConfiguration(dict):
                  fargate_ephemeral_storage_kms_key_id: Optional[_builtins.str] = None,
                  kms_key_id: Optional[_builtins.str] = None):
         """
-        :param _builtins.str fargate_ephemeral_storage_kms_key_id: AWS Key Management Service key ID for the Fargate ephemeral storage.
-        :param _builtins.str kms_key_id: AWS Key Management Service key ID to encrypt the managed storage.
+        :param _builtins.str fargate_ephemeral_storage_kms_key_id: AWS Key Management Service key ARN for the Fargate ephemeral storage.
+        :param _builtins.str kms_key_id: AWS Key Management Service key ARN to encrypt the managed storage.
         """
         if fargate_ephemeral_storage_kms_key_id is not None:
             pulumi.set(__self__, "fargate_ephemeral_storage_kms_key_id", fargate_ephemeral_storage_kms_key_id)
@@ -1432,7 +1432,7 @@ class ClusterConfigurationManagedStorageConfiguration(dict):
     @pulumi.getter(name="fargateEphemeralStorageKmsKeyId")
     def fargate_ephemeral_storage_kms_key_id(self) -> Optional[_builtins.str]:
         """
-        AWS Key Management Service key ID for the Fargate ephemeral storage.
+        AWS Key Management Service key ARN for the Fargate ephemeral storage.
         """
         return pulumi.get(self, "fargate_ephemeral_storage_kms_key_id")
 
@@ -1440,7 +1440,7 @@ class ClusterConfigurationManagedStorageConfiguration(dict):
     @pulumi.getter(name="kmsKeyId")
     def kms_key_id(self) -> Optional[_builtins.str]:
         """
-        AWS Key Management Service key ID to encrypt the managed storage.
+        AWS Key Management Service key ARN to encrypt the managed storage.
         """
         return pulumi.get(self, "kms_key_id")
 

pulumi_aws/elasticache/serverless_cache.py

@@ -54,7 +54,7 @@ class ServerlessCacheArgs:
         :param pulumi.Input[_builtins.int] snapshot_retention_limit: The number of snapshots that will be retained for the serverless cache that is being created. As new snapshots beyond this limit are added, the oldest snapshots will be deleted on a rolling basis. Available for Redis only.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] subnet_ids: A list of the identifiers of the subnets where the VPC endpoint for the serverless cache will be deployed. All the subnetIds must belong to the same VPC.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Map of tags to assign to the resource. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
-        :param pulumi.Input[_builtins.str] user_group_id: The identifier of the UserGroup to be associated with the serverless cache. Available for Redis only. Default is NULL.
+        :param pulumi.Input[_builtins.str] user_group_id: The identifier of the UserGroup to be associated with the serverless cache. Available for Redis and Valkey. Default is NULL.
         """
         pulumi.set(__self__, "engine", engine)
         if cache_usage_limits is not None:
@@ -258,7 +258,7 @@ class ServerlessCacheArgs:
     @pulumi.getter(name="userGroupId")
     def user_group_id(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The identifier of the UserGroup to be associated with the serverless cache. Available for Redis only. Default is NULL.
+        The identifier of the UserGroup to be associated with the serverless cache. Available for Redis and Valkey. Default is NULL.
         """
         return pulumi.get(self, "user_group_id")
 
@@ -316,7 +316,7 @@ class _ServerlessCacheState:
         :param pulumi.Input[_builtins.str] status: The current status of the serverless cache. The allowed values are CREATING, AVAILABLE, DELETING, CREATE-FAILED and MODIFYING.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] subnet_ids: A list of the identifiers of the subnets where the VPC endpoint for the serverless cache will be deployed. All the subnetIds must belong to the same VPC.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Map of tags to assign to the resource. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
-        :param pulumi.Input[_builtins.str] user_group_id: The identifier of the UserGroup to be associated with the serverless cache. Available for Redis only. Default is NULL.
+        :param pulumi.Input[_builtins.str] user_group_id: The identifier of the UserGroup to be associated with the serverless cache. Available for Redis and Valkey. Default is NULL.
         """
         if arn is not None:
             pulumi.set(__self__, "arn", arn)
@@ -616,7 +616,7 @@ class _ServerlessCacheState:
     @pulumi.getter(name="userGroupId")
     def user_group_id(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The identifier of the UserGroup to be associated with the serverless cache. Available for Redis only. Default is NULL.
+        The identifier of the UserGroup to be associated with the serverless cache. Available for Redis and Valkey. Default is NULL.
         """
         return pulumi.get(self, "user_group_id")
 
@@ -757,7 +757,7 @@ class ServerlessCache(pulumi.CustomResource):
         :param pulumi.Input[_builtins.int] snapshot_retention_limit: The number of snapshots that will be retained for the serverless cache that is being created. As new snapshots beyond this limit are added, the oldest snapshots will be deleted on a rolling basis. Available for Redis only.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] subnet_ids: A list of the identifiers of the subnets where the VPC endpoint for the serverless cache will be deployed. All the subnetIds must belong to the same VPC.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Map of tags to assign to the resource. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
-        :param pulumi.Input[_builtins.str] user_group_id: The identifier of the UserGroup to be associated with the serverless cache. Available for Redis only. Default is NULL.
+        :param pulumi.Input[_builtins.str] user_group_id: The identifier of the UserGroup to be associated with the serverless cache. Available for Redis and Valkey. Default is NULL.
         """
         ...
     @overload
@@ -981,7 +981,7 @@ class ServerlessCache(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] status: The current status of the serverless cache. The allowed values are CREATING, AVAILABLE, DELETING, CREATE-FAILED and MODIFYING.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] subnet_ids: A list of the identifiers of the subnets where the VPC endpoint for the serverless cache will be deployed. All the subnetIds must belong to the same VPC.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Map of tags to assign to the resource. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
-        :param pulumi.Input[_builtins.str] user_group_id: The identifier of the UserGroup to be associated with the serverless cache. Available for Redis only. Default is NULL.
+        :param pulumi.Input[_builtins.str] user_group_id: The identifier of the UserGroup to be associated with the serverless cache. Available for Redis and Valkey. Default is NULL.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -1180,7 +1180,7 @@ class ServerlessCache(pulumi.CustomResource):
     @pulumi.getter(name="userGroupId")
     def user_group_id(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
-        The identifier of the UserGroup to be associated with the serverless cache. Available for Redis only. Default is NULL.
+        The identifier of the UserGroup to be associated with the serverless cache. Available for Redis and Valkey. Default is NULL.
         """
         return pulumi.get(self, "user_group_id")
 

pulumi_aws/lambda_/function.py

@@ -26,6 +26,7 @@ class FunctionArgs:
                  architectures: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  capacity_provider_config: Optional[pulumi.Input['FunctionCapacityProviderConfigArgs']] = None,
                  code: Optional[pulumi.Input[pulumi.Archive]] = None,
+                 code_sha256: Optional[pulumi.Input[_builtins.str]] = None,
                  code_signing_config_arn: Optional[pulumi.Input[_builtins.str]] = None,
                  dead_letter_config: Optional[pulumi.Input['FunctionDeadLetterConfigArgs']] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
@@ -69,6 +70,7 @@ class FunctionArgs:
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] architectures: Instruction set architecture for your Lambda function. Valid values are `["x86_64"]` and `["arm64"]`. Default is `["x86_64"]`. Removing this attribute, function's architecture stays the same.
         :param pulumi.Input['FunctionCapacityProviderConfigArgs'] capacity_provider_config: Configuration block for Lambda Capacity Provider. See below.
         :param pulumi.Input[pulumi.Archive] code: Path to the function's deployment package within the local filesystem. Conflicts with `image_uri` and `s3_bucket`. One of `filename`, `image_uri`, or `s3_bucket` must be specified.
+        :param pulumi.Input[_builtins.str] code_sha256: Base64-encoded representation the source code package file. Use this argument to trigger updates when the function source code changes. For OCI, this value is relayed directly from the image digest. For zip files, this value is the Base64 encoded SHA-256 hash of the `.zip` file. Layers are not included in the calculation. To trigger updates using a non-standard hashing algorithm, use the `source_code_hash` argument instead.
         :param pulumi.Input[_builtins.str] code_signing_config_arn: ARN of a code-signing configuration to enable code signing for this function.
         :param pulumi.Input['FunctionDeadLetterConfigArgs'] dead_letter_config: Configuration block for dead letter queue. See below.
         :param pulumi.Input[_builtins.str] description: Description of what your Lambda Function does.
@@ -97,7 +99,7 @@ class FunctionArgs:
         :param pulumi.Input[_builtins.str] s3_object_version: Object version containing the function's deployment package. Conflicts with `filename` and `image_uri`.
         :param pulumi.Input[_builtins.bool] skip_destroy: Whether to retain the old version of a previously deployed Lambda Layer. Default is `false`.
         :param pulumi.Input['FunctionSnapStartArgs'] snap_start: Configuration block for snap start settings. See below.
-        :param pulumi.Input[_builtins.str] source_code_hash: Base64-encoded SHA256 hash of the package file. Used to trigger updates when source code changes.
+        :param pulumi.Input[_builtins.str] source_code_hash: User-defined hash of the source code package file. Use this argument to trigger updates when the local function source code changes. This is a synthetic argument tracked only by the AWS provider and does not need to match the hashing algorithm used by Lambda to compute the `CodeSha256` response value. Out-of-band changes to the source code _will not_ be captured by this argument. To include out-of-band source code changes as an update trigger, use the `code_sha256` argument instead.
         :param pulumi.Input[_builtins.str] source_kms_key_arn: ARN of the AWS Key Management Service key used to encrypt the function's `.zip` deployment package. Conflicts with `image_uri`.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Key-value map of tags for the Lambda function. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
         :param pulumi.Input['FunctionTenancyConfigArgs'] tenancy_config: Configuration block for Tenancy. See below.
@@ -112,6 +114,8 @@ class FunctionArgs:
             pulumi.set(__self__, "capacity_provider_config", capacity_provider_config)
         if code is not None:
             pulumi.set(__self__, "code", code)
+        if code_sha256 is not None:
+            pulumi.set(__self__, "code_sha256", code_sha256)
         if code_signing_config_arn is not None:
             pulumi.set(__self__, "code_signing_config_arn", code_signing_config_arn)
         if dead_letter_config is not None:
@@ -233,6 +237,18 @@ class FunctionArgs:
     def code(self, value: Optional[pulumi.Input[pulumi.Archive]]):
         pulumi.set(self, "code", value)
 
+    @_builtins.property
+    @pulumi.getter(name="codeSha256")
+    def code_sha256(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Base64-encoded representation the source code package file. Use this argument to trigger updates when the function source code changes. For OCI, this value is relayed directly from the image digest. For zip files, this value is the Base64 encoded SHA-256 hash of the `.zip` file. Layers are not included in the calculation. To trigger updates using a non-standard hashing algorithm, use the `source_code_hash` argument instead.
+        """
+        return pulumi.get(self, "code_sha256")
+
+    @code_sha256.setter
+    def code_sha256(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "code_sha256", value)
+
     @_builtins.property
     @pulumi.getter(name="codeSigningConfigArn")
     def code_signing_config_arn(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -573,7 +589,7 @@ class FunctionArgs:
     @pulumi.getter(name="sourceCodeHash")
     def source_code_hash(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Base64-encoded SHA256 hash of the package file. Used to trigger updates when source code changes.
+        User-defined hash of the source code package file. Use this argument to trigger updates when the local function source code changes. This is a synthetic argument tracked only by the AWS provider and does not need to match the hashing algorithm used by Lambda to compute the `CodeSha256` response value. Out-of-band changes to the source code _will not_ be captured by this argument. To include out-of-band source code changes as an update trigger, use the `code_sha256` argument instead.
         """
         return pulumi.get(self, "source_code_hash")
 
@@ -713,7 +729,7 @@ class _FunctionState:
         :param pulumi.Input[_builtins.str] arn: ARN identifying your Lambda Function.
         :param pulumi.Input['FunctionCapacityProviderConfigArgs'] capacity_provider_config: Configuration block for Lambda Capacity Provider. See below.
         :param pulumi.Input[pulumi.Archive] code: Path to the function's deployment package within the local filesystem. Conflicts with `image_uri` and `s3_bucket`. One of `filename`, `image_uri`, or `s3_bucket` must be specified.
-        :param pulumi.Input[_builtins.str] code_sha256: Base64-encoded representation of raw SHA-256 sum of the zip file.
+        :param pulumi.Input[_builtins.str] code_sha256: Base64-encoded representation the source code package file. Use this argument to trigger updates when the function source code changes. For OCI, this value is relayed directly from the image digest. For zip files, this value is the Base64 encoded SHA-256 hash of the `.zip` file. Layers are not included in the calculation. To trigger updates using a non-standard hashing algorithm, use the `source_code_hash` argument instead.
         :param pulumi.Input[_builtins.str] code_signing_config_arn: ARN of a code-signing configuration to enable code signing for this function.
         :param pulumi.Input['FunctionDeadLetterConfigArgs'] dead_letter_config: Configuration block for dead letter queue. See below.
         :param pulumi.Input[_builtins.str] description: Description of what your Lambda Function does.
@@ -751,7 +767,7 @@ class _FunctionState:
         :param pulumi.Input[_builtins.str] signing_profile_version_arn: ARN of the signing profile version.
         :param pulumi.Input[_builtins.bool] skip_destroy: Whether to retain the old version of a previously deployed Lambda Layer. Default is `false`.
         :param pulumi.Input['FunctionSnapStartArgs'] snap_start: Configuration block for snap start settings. See below.
-        :param pulumi.Input[_builtins.str] source_code_hash: Base64-encoded SHA256 hash of the package file. Used to trigger updates when source code changes.
+        :param pulumi.Input[_builtins.str] source_code_hash: User-defined hash of the source code package file. Use this argument to trigger updates when the local function source code changes. This is a synthetic argument tracked only by the AWS provider and does not need to match the hashing algorithm used by Lambda to compute the `CodeSha256` response value. Out-of-band changes to the source code _will not_ be captured by this argument. To include out-of-band source code changes as an update trigger, use the `code_sha256` argument instead.
         :param pulumi.Input[_builtins.int] source_code_size: Size in bytes of the function .zip file.
         :param pulumi.Input[_builtins.str] source_kms_key_arn: ARN of the AWS Key Management Service key used to encrypt the function's `.zip` deployment package. Conflicts with `image_uri`.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Key-value map of tags for the Lambda function. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
@@ -915,7 +931,7 @@ class _FunctionState:
     @pulumi.getter(name="codeSha256")
     def code_sha256(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Base64-encoded representation of raw SHA-256 sum of the zip file.
+        Base64-encoded representation the source code package file. Use this argument to trigger updates when the function source code changes. For OCI, this value is relayed directly from the image digest. For zip files, this value is the Base64 encoded SHA-256 hash of the `.zip` file. Layers are not included in the calculation. To trigger updates using a non-standard hashing algorithm, use the `source_code_hash` argument instead.
         """
         return pulumi.get(self, "code_sha256")
 
@@ -1349,7 +1365,7 @@ class _FunctionState:
     @pulumi.getter(name="sourceCodeHash")
     def source_code_hash(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Base64-encoded SHA256 hash of the package file. Used to trigger updates when source code changes.
+        User-defined hash of the source code package file. Use this argument to trigger updates when the local function source code changes. This is a synthetic argument tracked only by the AWS provider and does not need to match the hashing algorithm used by Lambda to compute the `CodeSha256` response value. Out-of-band changes to the source code _will not_ be captured by this argument. To include out-of-band source code changes as an update trigger, use the `code_sha256` argument instead.
         """
         return pulumi.get(self, "source_code_hash")
 
@@ -1475,6 +1491,7 @@ class Function(pulumi.CustomResource):
                  architectures: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  capacity_provider_config: Optional[pulumi.Input[Union['FunctionCapacityProviderConfigArgs', 'FunctionCapacityProviderConfigArgsDict']]] = None,
                  code: Optional[pulumi.Input[pulumi.Archive]] = None,
+                 code_sha256: Optional[pulumi.Input[_builtins.str]] = None,
                  code_signing_config_arn: Optional[pulumi.Input[_builtins.str]] = None,
                  dead_letter_config: Optional[pulumi.Input[Union['FunctionDeadLetterConfigArgs', 'FunctionDeadLetterConfigArgsDict']]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1962,6 +1979,7 @@ class Function(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] architectures: Instruction set architecture for your Lambda function. Valid values are `["x86_64"]` and `["arm64"]`. Default is `["x86_64"]`. Removing this attribute, function's architecture stays the same.
         :param pulumi.Input[Union['FunctionCapacityProviderConfigArgs', 'FunctionCapacityProviderConfigArgsDict']] capacity_provider_config: Configuration block for Lambda Capacity Provider. See below.
         :param pulumi.Input[pulumi.Archive] code: Path to the function's deployment package within the local filesystem. Conflicts with `image_uri` and `s3_bucket`. One of `filename`, `image_uri`, or `s3_bucket` must be specified.
+        :param pulumi.Input[_builtins.str] code_sha256: Base64-encoded representation the source code package file. Use this argument to trigger updates when the function source code changes. For OCI, this value is relayed directly from the image digest. For zip files, this value is the Base64 encoded SHA-256 hash of the `.zip` file. Layers are not included in the calculation. To trigger updates using a non-standard hashing algorithm, use the `source_code_hash` argument instead.
         :param pulumi.Input[_builtins.str] code_signing_config_arn: ARN of a code-signing configuration to enable code signing for this function.
         :param pulumi.Input[Union['FunctionDeadLetterConfigArgs', 'FunctionDeadLetterConfigArgsDict']] dead_letter_config: Configuration block for dead letter queue. See below.
         :param pulumi.Input[_builtins.str] description: Description of what your Lambda Function does.
@@ -1993,7 +2011,7 @@ class Function(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] s3_object_version: Object version containing the function's deployment package. Conflicts with `filename` and `image_uri`.
         :param pulumi.Input[_builtins.bool] skip_destroy: Whether to retain the old version of a previously deployed Lambda Layer. Default is `false`.
         :param pulumi.Input[Union['FunctionSnapStartArgs', 'FunctionSnapStartArgsDict']] snap_start: Configuration block for snap start settings. See below.
-        :param pulumi.Input[_builtins.str] source_code_hash: Base64-encoded SHA256 hash of the package file. Used to trigger updates when source code changes.
+        :param pulumi.Input[_builtins.str] source_code_hash: User-defined hash of the source code package file. Use this argument to trigger updates when the local function source code changes. This is a synthetic argument tracked only by the AWS provider and does not need to match the hashing algorithm used by Lambda to compute the `CodeSha256` response value. Out-of-band changes to the source code _will not_ be captured by this argument. To include out-of-band source code changes as an update trigger, use the `code_sha256` argument instead.
         :param pulumi.Input[_builtins.str] source_kms_key_arn: ARN of the AWS Key Management Service key used to encrypt the function's `.zip` deployment package. Conflicts with `image_uri`.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Key-value map of tags for the Lambda function. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
         :param pulumi.Input[Union['FunctionTenancyConfigArgs', 'FunctionTenancyConfigArgsDict']] tenancy_config: Configuration block for Tenancy. See below.
@@ -2470,6 +2488,7 @@ class Function(pulumi.CustomResource):
                  architectures: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  capacity_provider_config: Optional[pulumi.Input[Union['FunctionCapacityProviderConfigArgs', 'FunctionCapacityProviderConfigArgsDict']]] = None,
                  code: Optional[pulumi.Input[pulumi.Archive]] = None,
+                 code_sha256: Optional[pulumi.Input[_builtins.str]] = None,
                  code_signing_config_arn: Optional[pulumi.Input[_builtins.str]] = None,
                  dead_letter_config: Optional[pulumi.Input[Union['FunctionDeadLetterConfigArgs', 'FunctionDeadLetterConfigArgsDict']]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
@@ -2518,6 +2537,7 @@ class Function(pulumi.CustomResource):
             __props__.__dict__["architectures"] = architectures
             __props__.__dict__["capacity_provider_config"] = capacity_provider_config
             __props__.__dict__["code"] = code
+            __props__.__dict__["code_sha256"] = code_sha256
             __props__.__dict__["code_signing_config_arn"] = code_signing_config_arn
             __props__.__dict__["dead_letter_config"] = dead_letter_config
             __props__.__dict__["description"] = description
@@ -2557,7 +2577,6 @@ class Function(pulumi.CustomResource):
             __props__.__dict__["tracing_config"] = tracing_config
             __props__.__dict__["vpc_config"] = vpc_config
             __props__.__dict__["arn"] = None
-            __props__.__dict__["code_sha256"] = None
             __props__.__dict__["invoke_arn"] = None
             __props__.__dict__["last_modified"] = None
             __props__.__dict__["qualified_arn"] = None
@@ -2638,7 +2657,7 @@ class Function(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] arn: ARN identifying your Lambda Function.
         :param pulumi.Input[Union['FunctionCapacityProviderConfigArgs', 'FunctionCapacityProviderConfigArgsDict']] capacity_provider_config: Configuration block for Lambda Capacity Provider. See below.
         :param pulumi.Input[pulumi.Archive] code: Path to the function's deployment package within the local filesystem. Conflicts with `image_uri` and `s3_bucket`. One of `filename`, `image_uri`, or `s3_bucket` must be specified.
-        :param pulumi.Input[_builtins.str] code_sha256: Base64-encoded representation of raw SHA-256 sum of the zip file.
+        :param pulumi.Input[_builtins.str] code_sha256: Base64-encoded representation the source code package file. Use this argument to trigger updates when the function source code changes. For OCI, this value is relayed directly from the image digest. For zip files, this value is the Base64 encoded SHA-256 hash of the `.zip` file. Layers are not included in the calculation. To trigger updates using a non-standard hashing algorithm, use the `source_code_hash` argument instead.
         :param pulumi.Input[_builtins.str] code_signing_config_arn: ARN of a code-signing configuration to enable code signing for this function.
         :param pulumi.Input[Union['FunctionDeadLetterConfigArgs', 'FunctionDeadLetterConfigArgsDict']] dead_letter_config: Configuration block for dead letter queue. See below.
         :param pulumi.Input[_builtins.str] description: Description of what your Lambda Function does.
@@ -2676,7 +2695,7 @@ class Function(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] signing_profile_version_arn: ARN of the signing profile version.
         :param pulumi.Input[_builtins.bool] skip_destroy: Whether to retain the old version of a previously deployed Lambda Layer. Default is `false`.
         :param pulumi.Input[Union['FunctionSnapStartArgs', 'FunctionSnapStartArgsDict']] snap_start: Configuration block for snap start settings. See below.
-        :param pulumi.Input[_builtins.str] source_code_hash: Base64-encoded SHA256 hash of the package file. Used to trigger updates when source code changes.
+        :param pulumi.Input[_builtins.str] source_code_hash: User-defined hash of the source code package file. Use this argument to trigger updates when the local function source code changes. This is a synthetic argument tracked only by the AWS provider and does not need to match the hashing algorithm used by Lambda to compute the `CodeSha256` response value. Out-of-band changes to the source code _will not_ be captured by this argument. To include out-of-band source code changes as an update trigger, use the `code_sha256` argument instead.
         :param pulumi.Input[_builtins.int] source_code_size: Size in bytes of the function .zip file.
         :param pulumi.Input[_builtins.str] source_kms_key_arn: ARN of the AWS Key Management Service key used to encrypt the function's `.zip` deployment package. Conflicts with `image_uri`.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: Key-value map of tags for the Lambda function. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
@@ -2779,7 +2798,7 @@ class Function(pulumi.CustomResource):
     @pulumi.getter(name="codeSha256")
     def code_sha256(self) -> pulumi.Output[_builtins.str]:
         """
-        Base64-encoded representation of raw SHA-256 sum of the zip file.
+        Base64-encoded representation the source code package file. Use this argument to trigger updates when the function source code changes. For OCI, this value is relayed directly from the image digest. For zip files, this value is the Base64 encoded SHA-256 hash of the `.zip` file. Layers are not included in the calculation. To trigger updates using a non-standard hashing algorithm, use the `source_code_hash` argument instead.
         """
         return pulumi.get(self, "code_sha256")
 
@@ -3069,7 +3088,7 @@ class Function(pulumi.CustomResource):
     @pulumi.getter(name="sourceCodeHash")
     def source_code_hash(self) -> pulumi.Output[_builtins.str]:
         """
-        Base64-encoded SHA256 hash of the package file. Used to trigger updates when source code changes.
+        User-defined hash of the source code package file. Use this argument to trigger updates when the local function source code changes. This is a synthetic argument tracked only by the AWS provider and does not need to match the hashing algorithm used by Lambda to compute the `CodeSha256` response value. Out-of-band changes to the source code _will not_ be captured by this argument. To include out-of-band source code changes as an update trigger, use the `code_sha256` argument instead.
         """
         return pulumi.get(self, "source_code_hash")