amazonaws.com – lambda
Lambda
Overview
Lambda is a compute service that lets you run code without provisioning or managing servers. Lambda runs your code on a high-availability compute infrastructure and performs all of the administration of the compute resources, including server and operating system maintenance, capacity provisioning and automatic scaling, code monitoring and logging. With Lambda, you can run code for virtually any type of application or backend service. For more information about the Lambda service, see in the Lambda Developer Guide.
The Lambda API Reference provides information about each of the API methods, including details about the parameters in each API request and response.
You can use Software Development Kits (SDKs), Integrated Development Environment (IDE) Toolkits, and command line tools to access the API. For installation instructions, see .
For a list of Region-specific endpoints that Lambda supports, see in the Amazon Web Services General Reference..
When making the API calls, you will need to authenticate your request by providing a signature. Lambda supports signature version 4. For more information, see in the Amazon Web Services General Reference..
CA certificates
Because Amazon Web Services SDKs use the CA certificates from your computer, changes to the certificates on the Amazon Web Services servers can cause connection failures when you attempt to use an SDK. You can prevent these failures by keeping your computer's CA certificates and operating system up-to-date. If you encounter this issue in a corporate environment and do not manage your own computer, you might need to ask an administrator to assist with the update process. The following list shows minimum operating system and Java versions:
-
Microsoft Windows versions that have updates from January 2005 or later installed contain at least one of the required CAs in their trust list.
-
Mac OS X 10.4 with Java for Mac OS X 10.4 Release 5 (February 2007), Mac OS X 10.5 (October 2007), and later versions contain at least one of the required CAs in their trust list.
-
Red Hat Enterprise Linux 5 (March 2007), 6, and 7 and CentOS 5, 6, and 7 all contain at least one of the required CAs in their default trusted CA list.
-
Java 1.4.2_12 (May 2006), 5 Update 2 (March 2005), and all later versions, including Java 6 (December 2006), 7, and 8, contain at least one of the required CAs in their default trusted CA list.
When accessing the Lambda management console or Lambda API endpoints, whether through browsers or programmatically, you will need to ensure your client machines support any of the following CAs:
-
Amazon Root CA 1
-
Starfield Services Root Certificate Authority - G2
-
Starfield Class 2 Certification Authority
Root certificates from the first two authorities are available from , but keeping your computer up-to-date is the more straightforward solution. To learn more about ACM-provided certificates, see
- Homepage
- https://api.apis.guru/v2/specs/amazonaws.com:lambda/2015-03-31.json
- Provider
- amazonaws.com:lambda / lambda
- OpenAPI version
- 3.0.0
- Spec (JSON)
- https://api.apis.guru/v2/specs/amazonaws.com/lambda/2015-03-31/openapi.json
- Spec (YAML)
- https://api.apis.guru/v2/specs/amazonaws.com/lambda/2015-03-31/openapi.yaml
Tools (68)
Extracted live via the executor SDK.
-
20141113.invokeAsyncFor asynchronous function invocation, use Invoke [blocked].
Invokes a function asynchronously.
-
20150331.addPermissionGrants an Amazon Web Service, Amazon Web Services account, or Amazon Web Services organization permission to use a function. You can apply the policy at the function level, or specify a qualifier to restrict access to a single version or alias. If you use a qualifier, the invoker must use the full Amazon Resource Name (ARN) of that version or alias to invoke the function. Note: Lambda does not support adding policies to version $LATEST.
To grant permission to another account, specify the account ID as the
Principal. To grant permission to an organization defined in Organizations, specify the organization ID as thePrincipalOrgID. For Amazon Web Services, the principal is a domain-style identifier that the service defines, such ass3.amazonaws.comorsns.amazonaws.com. For Amazon Web Services, you can also specify the ARN of the associated resource as theSourceArn. If you grant permission to a service principal without specifying the source, other accounts could potentially configure resources in their account to invoke your Lambda function.This operation adds a statement to a resource-based permissions policy for the function. For more information about function policies, see .
-
20150331.createAliasCreates an for a Lambda function version. Use aliases to provide clients with a function identifier that you can update to invoke a different version.
You can also map an alias to split invocation requests between two versions. Use the
RoutingConfigparameter to specify a second version and the percentage of invocation requests that it receives. -
20150331.createEventSourceMappingCreates a mapping between an event source and an Lambda function. Lambda reads items from the event source and invokes the function.
For details about how to configure different event sources, see the following topics.
The following error handling options are available only for stream sources (DynamoDB and Kinesis):
-
BisectBatchOnFunctionError– If the function returns an error, split the batch in two and retry. -
DestinationConfig– Send discarded records to an Amazon SQS queue or Amazon SNS topic. -
MaximumRecordAgeInSeconds– Discard records older than the specified age. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires -
MaximumRetryAttempts– Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires. -
ParallelizationFactor– Process multiple batches from each shard concurrently.
For information about which configuration parameters apply to each event source, see the following topics.
-
-
20150331.createFunctionCreates a Lambda function. To create a function, you need a and an . The deployment package is a .zip file archive or container image that contains your function code. The execution role grants the function permission to use Amazon Web Services, such as Amazon CloudWatch Logs for log streaming and X-Ray for request tracing.
If the deployment package is a , then you set the package type to
Image. For a container image, the code property must include the URI of a container image in the Amazon ECR registry. You do not need to specify the handler and runtime properties.If the deployment package is a , then you set the package type to
Zip. For a .zip file archive, the code property specifies the location of the .zip file. You must also specify the handler and runtime properties. The code in the deployment package must be compatible with the target instruction set architecture of the function (x86-64orarm64). If you do not specify the architecture, then the default value isx86-64.When you create a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute or so. During this time, you can't invoke or modify the function. The
State,StateReason, andStateReasonCodefields in the response from GetFunctionConfiguration [blocked] indicate when the function is ready to invoke. For more information, see .A function has an unpublished version, and can have published versions and aliases. The unpublished version changes when you update your function's code and configuration. A published version is a snapshot of your function code and configuration that can't be changed. An alias is a named resource that maps to a version, and can be changed to map to a different version. Use the
Publishparameter to create version1of your function from its initial configuration.The other parameters let you configure version-specific and function-level settings. You can modify version-specific settings later with UpdateFunctionConfiguration [blocked]. Function-level settings apply to both the unpublished and published versions of the function, and include tags (TagResource [blocked]) and per-function concurrency limits (PutFunctionConcurrency [blocked]).
You can use code signing if your deployment package is a .zip file archive. To enable code signing for this function, specify the ARN of a code-signing configuration. When a user attempts to deploy a code package with UpdateFunctionCode [blocked], Lambda checks that the code package has a valid signature from a trusted publisher. The code-signing configuration includes set of signing profiles, which define the trusted publishers for this function.
If another Amazon Web Services account or an Amazon Web Service invokes your function, use AddPermission [blocked] to grant permission by creating a resource-based Identity and Access Management (IAM) policy. You can grant permissions at the function level, on a version, or on an alias.
To invoke your function directly, use Invoke [blocked]. To invoke your function in response to events in other Amazon Web Services, create an event source mapping (CreateEventSourceMapping [blocked]), or configure a function trigger in the other service. For more information, see .
-
20150331.deleteAliasDeletes a Lambda function .
-
20150331.deleteEventSourceMappingDeletes an . You can get the identifier of a mapping from the output of ListEventSourceMappings [blocked].
When you delete an event source mapping, it enters a
Deletingstate and might not be completely deleted for several seconds. -
20150331.deleteFunctionDeletes a Lambda function. To delete a specific function version, use the
Qualifierparameter. Otherwise, all versions and aliases are deleted.To delete Lambda event source mappings that invoke a function, use DeleteEventSourceMapping [blocked]. For Amazon Web Services and resources that invoke your function directly, delete the trigger in the service where you originally configured it.
-
20150331.getAliasReturns details about a Lambda function .
-
20150331.getEventSourceMappingReturns details about an event source mapping. You can get the identifier of a mapping from the output of ListEventSourceMappings [blocked].
-
20150331.getFunctionReturns information about the function or function version, with a link to download the deployment package that's valid for 10 minutes. If you specify a function version, only details that are specific to that version are returned.
-
20150331.getFunctionConfigurationReturns the version-specific settings of a Lambda function or version. The output includes only options that can vary between versions of a function. To modify these settings, use UpdateFunctionConfiguration [blocked].
To get all of a function's details, including function-level settings, use GetFunction [blocked].
-
20150331.getPolicyReturns the for a function, version, or alias.
-
20150331.invokeInvokes a Lambda function. You can invoke a function synchronously (and wait for the response), or asynchronously. To invoke a function asynchronously, set
InvocationTypetoEvent.For , details about the function response, including errors, are included in the response body and headers. For either invocation type, you can find more information in the and .
When an error occurs, your function may be invoked multiple times. Retry behavior varies by error type, client, event source, and invocation type. For example, if you invoke a function asynchronously and it returns an error, Lambda executes the function up to two more times. For more information, see .
For , Lambda adds events to a queue before sending them to your function. If your function does not have enough capacity to keep up with the queue, events may be lost. Occasionally, your function may receive the same event multiple times, even if no error occurs. To retain events that were not processed, configure your function with a .
The status code in the API response doesn't reflect function errors. Error codes are reserved for errors that prevent your function from executing, such as permissions errors, errors, or issues with your function's code and configuration. For example, Lambda returns
TooManyRequestsExceptionif running the function would cause you to exceed a concurrency limit at either the account level (ConcurrentInvocationLimitExceeded) or function level (ReservedFunctionConcurrentInvocationLimitExceeded).For functions with a long timeout, your client might disconnect during synchronous invocation while it waits for a response. Configure your HTTP client, SDK, firewall, proxy, or operating system to allow for long connections with timeout or keep-alive settings.
This operation requires permission for the action. For details on how to set up permissions for cross-account invocations, see .
-
20150331.listAliasesReturns a list of for a Lambda function.
-
20150331.listEventSourceMappingsLists event source mappings. Specify an
EventSourceArnto show only event source mappings for a single event source. -
20150331.listFunctionsReturns a list of Lambda functions, with the version-specific configuration of each. Lambda returns up to 50 functions per call.
Set
FunctionVersiontoALLto include all published versions of each function in addition to the unpublished version.The
ListFunctionsoperation returns a subset of the FunctionConfiguration [blocked] fields. To get the additional fields (State, StateReasonCode, StateReason, LastUpdateStatus, LastUpdateStatusReason, LastUpdateStatusReasonCode, RuntimeVersionConfig) for a function or version, use GetFunction [blocked]. -
20150331.listVersionsByFunctionReturns a list of , with the version-specific configuration of each. Lambda returns up to 50 versions per call.
-
20150331.publishVersionCreates a from the current code and configuration of a function. Use versions to create a snapshot of your function code and configuration that doesn't change.
Lambda doesn't publish a version if the function's configuration and code haven't changed since the last version. Use UpdateFunctionCode [blocked] or UpdateFunctionConfiguration [blocked] to update the function before publishing a version.
Clients can invoke versions directly or with an alias. To create an alias, use CreateAlias [blocked].
-
20150331.removePermissionRevokes function-use permission from an Amazon Web Service or another Amazon Web Services account. You can get the ID of the statement from the output of GetPolicy [blocked].
-
20150331.updateAliasUpdates the configuration of a Lambda function .
-
20150331.updateEventSourceMappingUpdates an event source mapping. You can change the function that Lambda invokes, or pause invocation and resume later from the same location.
For details about how to configure different event sources, see the following topics.
The following error handling options are available only for stream sources (DynamoDB and Kinesis):
-
BisectBatchOnFunctionError– If the function returns an error, split the batch in two and retry. -
DestinationConfig– Send discarded records to an Amazon SQS queue or Amazon SNS topic. -
MaximumRecordAgeInSeconds– Discard records older than the specified age. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires -
MaximumRetryAttempts– Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires. -
ParallelizationFactor– Process multiple batches from each shard concurrently.
For information about which configuration parameters apply to each event source, see the following topics.
-
-
20150331.updateFunctionCodeUpdates a Lambda function's code. If code signing is enabled for the function, the code package must be signed by a trusted publisher. For more information, see .
If the function's package type is
Image, then you must specify the code package inImageUrias the URI of a in the Amazon ECR registry.If the function's package type is
Zip, then you must specify the deployment package as a . Enter the Amazon S3 bucket and key of the code .zip file location. You can also provide the function code inline using theZipFilefield.The code in the deployment package must be compatible with the target instruction set architecture of the function (
x86-64orarm64).The function's code is locked when you publish a version. You can't modify the code of a published version, only the unpublished version.
For a function defined as a container image, Lambda resolves the image tag to an image digest. In Amazon ECR, if you update the image tag to a new image, Lambda does not automatically update the function.
-
20150331.updateFunctionConfigurationModify the version-specific settings of a Lambda function.
When you update a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute. During this time, you can't modify the function, but you can still invoke it. The
LastUpdateStatus,LastUpdateStatusReason, andLastUpdateStatusReasonCodefields in the response from GetFunctionConfiguration [blocked] indicate when the update is complete and the function is processing events with the new configuration. For more information, see .These settings can vary between versions of a function and are locked when you publish a version. You can't modify the configuration of a published version, only the unpublished version.
To configure function concurrency, use PutFunctionConcurrency [blocked]. To grant invoke permissions to an Amazon Web Services account or Amazon Web Service, use AddPermission [blocked].
-
20160819.getAccountSettingsRetrieves details about your account's and usage in an Amazon Web Services Region.
-
20170331.listTagsReturns a function's . You can also view tags with GetFunction [blocked].
-
20170331.tagResourceAdds to a function.
-
20170331.untagResourceRemoves from a function.
-
20171031.deleteFunctionConcurrencyRemoves a concurrent execution limit from a function.
-
20171031.putFunctionConcurrencySets the maximum number of simultaneous executions for a function, and reserves capacity for that concurrency level.
Concurrency settings apply to the function as a whole, including all published versions and the unpublished version. Reserving concurrency both ensures that your function has capacity to process the specified number of events simultaneously, and prevents it from scaling beyond that level. Use GetFunction [blocked] to see the current setting for a function.
Use GetAccountSettings [blocked] to see your Regional concurrency limit. You can reserve concurrency for as many functions as you like, as long as you leave at least 100 simultaneous executions unreserved for functions that aren't configured with a per-function limit. For more information, see .
-
20181031.addLayerVersionPermissionAdds permissions to the resource-based policy of a version of an . Use this action to grant layer usage permission to other accounts. You can grant permission to a single account, all accounts in an organization, or all Amazon Web Services accounts.
To revoke permission, call RemoveLayerVersionPermission [blocked] with the statement ID that you specified when you added it.
-
20181031.deleteLayerVersionDeletes a version of an . Deleted versions can no longer be viewed or added to functions. To avoid breaking functions, a copy of the version remains in Lambda until no functions refer to it.
-
20181031.getLayerVersionReturns information about a version of an , with a link to download the layer archive that's valid for 10 minutes.
-
20181031.getLayerVersionByArnReturns information about a version of an , with a link to download the layer archive that's valid for 10 minutes.
-
20181031.getLayerVersionPolicyReturns the permission policy for a version of an . For more information, see AddLayerVersionPermission [blocked].
-
20181031.listLayersLists and shows information about the latest version of each. Specify a to list only layers that indicate that they're compatible with that runtime. Specify a compatible architecture to include only layers that are compatible with that .
-
20181031.listLayerVersionsLists the versions of an . Versions that have been deleted aren't listed. Specify a to list only versions that indicate that they're compatible with that runtime. Specify a compatible architecture to include only layer versions that are compatible with that architecture.
-
20181031.publishLayerVersionCreates an from a ZIP archive. Each time you call
PublishLayerVersionwith the same layer name, a new version is created.Add layers to your function with CreateFunction [blocked] or UpdateFunctionConfiguration [blocked].
-
20181031.removeLayerVersionPermissionRemoves a statement from the permissions policy for a version of an . For more information, see AddLayerVersionPermission [blocked].
-
20190925.deleteFunctionEventInvokeConfigDeletes the configuration for asynchronous invocation for a function, version, or alias.
To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig [blocked].
-
20190925.getFunctionEventInvokeConfigRetrieves the configuration for asynchronous invocation for a function, version, or alias.
To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig [blocked].
-
20190925.listFunctionEventInvokeConfigsRetrieves a list of configurations for asynchronous invocation for a function.
To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig [blocked].
-
20190925.putFunctionEventInvokeConfigConfigures options for on a function, version, or alias. If a configuration already exists for a function, version, or alias, this operation overwrites it. If you exclude any settings, they are removed. To set one option without affecting existing settings for other options, use UpdateFunctionEventInvokeConfig [blocked].
By default, Lambda retries an asynchronous invocation twice if the function returns an error. It retains events in a queue for up to six hours. When an event fails all processing attempts or stays in the asynchronous invocation queue for too long, Lambda discards it. To retain discarded events, configure a dead-letter queue with UpdateFunctionConfiguration [blocked].
To send an invocation record to a queue, topic, function, or event bus, specify a . You can configure separate destinations for successful invocations (on-success) and events that fail all processing attempts (on-failure). You can configure destinations in addition to or instead of a dead-letter queue.
-
20190925.updateFunctionEventInvokeConfigUpdates the configuration for asynchronous invocation for a function, version, or alias.
To configure options for asynchronous invocation, use PutFunctionEventInvokeConfig [blocked].
-
20190930.deleteProvisionedConcurrencyConfigDeletes the provisioned concurrency configuration for a function.
-
20190930.getFunctionConcurrencyReturns details about the reserved concurrency configuration for a function. To set a concurrency limit for a function, use PutFunctionConcurrency [blocked].
-
20190930.getProvisionedConcurrencyConfigRetrieves the provisioned concurrency configuration for a function's alias or version.
-
20190930.listProvisionedConcurrencyConfigsRetrieves a list of provisioned concurrency configurations for a function.
-
20190930.putProvisionedConcurrencyConfigAdds a provisioned concurrency configuration to a function's alias or version.
-
20200422.createCodeSigningConfigCreates a code signing configuration. A defines a list of allowed signing profiles and defines the code-signing validation policy (action to be taken if deployment validation checks fail).
-
20200422.deleteCodeSigningConfigDeletes the code signing configuration. You can delete the code signing configuration only if no function is using it.
-
20200422.getCodeSigningConfigReturns information about the specified code signing configuration.
-
20200422.listCodeSigningConfigsReturns a list of . A request returns up to 10,000 configurations per call. You can use the
MaxItemsparameter to return fewer configurations per call. -
20200422.listFunctionsByCodeSigningConfigList the functions that use the specified code signing configuration. You can use this method prior to deleting a code signing configuration, to verify that no functions are using it.
-
20200422.updateCodeSigningConfigUpdate the code signing configuration. Changes to the code signing configuration take effect the next time a user tries to deploy a code package to the function.
-
20200630.deleteFunctionCodeSigningConfigRemoves the code signing configuration from the function.
-
20200630.getFunctionCodeSigningConfigReturns the code signing configuration for the specified function.
-
20200630.putFunctionCodeSigningConfigUpdate the code signing configuration for the function. Changes to the code signing configuration take effect the next time a user tries to deploy a code package to the function.
-
20210720.getRuntimeManagementConfigRetrieves the runtime management configuration for a function's version. If the runtime update mode is Manual, this includes the ARN of the runtime version and the runtime update mode. If the runtime update mode is Auto or Function update, this includes the runtime update mode and
nullis returned for the ARN. For more information, see . -
20210720.putRuntimeManagementConfigSets the runtime management configuration for a function's version. For more information, see .
-
20211031.createFunctionUrlConfigCreates a Lambda function URL with the specified configuration parameters. A function URL is a dedicated HTTP(S) endpoint that you can use to invoke your function.
-
20211031.deleteFunctionUrlConfigDeletes a Lambda function URL. When you delete a function URL, you can't recover it. Creating a new function URL results in a different URL address.
-
20211031.getFunctionUrlConfigReturns details about a Lambda function URL.
-
20211031.listFunctionUrlConfigsReturns a list of Lambda function URLs for the specified function.
-
20211031.updateFunctionUrlConfigUpdates the configuration for a Lambda function URL.
-
20211115.invokeWithResponseStreamConfigure your Lambda functions to stream response payloads back to clients. For more information, see .
This operation requires permission for the action. For details on how to set up permissions for cross-account invocations, see .
-
openapi.previewSpecPreview an OpenAPI document before adding it as a source
-
openapi.addSourceAdd an OpenAPI source and register its operations as tools