# Lambda (/integrations/lambda)

Use cases and templates: [Lambda integration for AI agents](https://www.sim.ai/integrations/lambda)





<BlockInfoCard type="lambda" color="linear-gradient(45deg, #C8511B 0%, #FF9900 100%)" />

{/* MANUAL-CONTENT-START:intro */}

[AWS Lambda](https://aws.amazon.com/lambda/) is a serverless compute service that runs your code in response to events and scales automatically, with no servers to manage. You package code as a .zip archive or a container image, give it an execution role, and Lambda handles provisioning, scaling, and logging.

With the Lambda integration, you can:

* **Invoke Function**: Run a function synchronously and read back its parsed response payload, queue it asynchronously, or dry-run it to verify permissions — with the decoded execution log tail when something fails
* **Manage functions**: Create, read, update, and delete functions, including runtime, handler, memory, timeout, ephemeral storage, environment variables, VPC attachment, layers, X-Ray tracing, SnapStart, and CloudWatch log settings
* **Version and alias**: Publish immutable versions, then point aliases such as `prod` at them — including weighted routing to shift a percentage of traffic to a new version for canary releases
* **Wire up event sources**: Create and tune event source mappings for SQS, Kinesis, DynamoDB Streams, Amazon MQ, DocumentDB, Amazon MSK, and self-managed Kafka — with batch size, batching window, filter patterns, retry limits, success/failure destinations, broker authentication, and consumer group IDs
* **Control concurrency**: Reserve a share of account concurrency for a function, allocate provisioned concurrency to a version or alias to eliminate cold starts, and read account-level limits and usage
* **Expose function URLs**: Create dedicated HTTPS endpoints with `AWS_IAM` or public auth, buffered or streamed responses, and full CORS configuration
* **Configure async behavior**: Set retry attempts, maximum event age, and on-success/on-failure destinations for asynchronous invocations
* **Audit access**: Read a function's resource-based policy, add and remove permission statements for AWS services or accounts, and list function URL configurations to find publicly reachable endpoints
* **Work with layers and tags**: List layers and their versions, fetch a layer version's download location, and list, add, or remove function tags

## Credentials and permissions [#credentials-and-permissions]

The block authenticates with an AWS access key ID and secret access key scoped to a region. Grant the IAM principal only the Lambda actions the operations you use require — for example `lambda:InvokeFunction` for invocation, `lambda:GetFunction` and `lambda:ListFunctions` for read-only inventory, or `lambda:UpdateFunctionCode` and `lambda:PublishVersion` for deployments.

## Deployment packages [#deployment-packages]

Function code is supplied from Amazon S3 (bucket, key, and optional object version) or from a container image URI in Amazon ECR. Uploading a .zip archive inline is not supported — publish the archive to S3 first, in the same region as the function, then point **Create Function** or **Update Function Code** at it.

Use CloudWatch for function logs and metrics, S3 for deployment archives, and SQS for queue-backed event sources.

{/* MANUAL-CONTENT-END */}

## Use the block [#usage-instructions]

Invoke functions and read their response payload, create and update functions from Amazon S3 packages or container images, publish versions and aliases, wire up event source mappings, manage concurrency, function URLs, layers, permissions, and tags. Requires an AWS access key and secret access key.

## Actions [#actions]

### Lambda Invoke Function [#lambda-invoke-function]

Invoke a Lambda function synchronously for its response payload, asynchronously to queue execution, or as a dry run to check permissions.

#### Input [#input]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `payload` | json | No | JSON event payload passed to the function handler |
| `invocationType` | string | No | RequestResponse waits for the result, Event queues the invocation, DryRun only validates permissions |
| `logType` | string | No | Set to Tail to return the last 4 KB of the execution log |
| `clientContext` | string | No | Base64-encoded JSON passed to the function in the client context object (max 3,583 bytes) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output]

| Parameter | Type | Description |
| - | - | - |
| `statusCode` | number | HTTP status of the invocation (200 for RequestResponse, 202 for Event, 204 for DryRun) |
| `payload` | json | The response returned by the function, parsed as JSON when possible |
| `functionError` | string | Set to Handled or Unhandled when the function itself returned an error |
| `logResult` | string | Decoded execution log tail, present only when logType is Tail |
| `executedVersion` | string | The function version that was executed |

### Lambda List Functions [#lambda-list-functions]

List Lambda functions with the version-specific configuration of each

#### Input [#input-1]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionVersion` | string | No | Set to ALL to include every published version of each function |
| `masterRegion` | string | No | For Lambda\@Edge functions, the region of the master function. Requires functionVersion ALL |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-10000) |

#### Output [#output-1]

| Parameter | Type | Description |
| - | - | - |
| `functions` | array | Lambda functions with their runtime, handler, memory, and state |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda Get Function [#lambda-get-function]

Get a function's configuration, code location, tags, and reserved concurrency

#### Input [#input-2]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-2]

| Parameter | Type | Description |
| - | - | - |
| `configuration` | json | The function's configuration (ARN, runtime, handler, memory, state, layers, VPC, and logging settings) |
| `tagsError` | json | Why the tags could not be read, when a partial tag-read failure occurred |
| `code` | json | Presigned download URL for the deployment package, or the container image URI |
| `tags` | json | The function's tags |
| `reservedConcurrentExecutions` | number | Concurrency reserved for this function, if any |

### Lambda Get Function Configuration [#lambda-get-function-configuration]

Get a function's version-specific configuration

#### Input [#input-3]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-3]

| Parameter | Type | Description |
| - | - | - |
| `configuration` | json | The function's configuration (ARN, runtime, handler, memory, state, layers, VPC, and logging settings) |

### Lambda Create Function [#lambda-create-function]

Create a Lambda function from a deployment package in Amazon S3 or a container image

#### Input [#input-4]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `role` | string | Yes | ARN of the function's execution role |
| `runtime` | string | No | Runtime identifier such as nodejs22.x or python3.13. Required for .zip packages, omit for container images |
| `handler` | string | No | Entry point in your code, such as index.handler. Required for .zip packages |
| `packageType` | string | No | Zip for a .zip file archive (default) or Image for a container image |
| `s3Bucket` | string | No | Amazon S3 bucket holding the deployment package, in the same region as the function |
| `s3Key` | string | No | Amazon S3 key of the .zip package |
| `s3ObjectVersion` | string | No | Version of the Amazon S3 object to use |
| `imageUri` | string | No | Amazon ECR URI of the container image to deploy |
| `sourceKmsKeyArn` | string | No | ARN of the KMS customer managed key that encrypts the function's .zip deployment package |
| `description` | string | No | Description of the function |
| `functionTimeout` | number | No | Seconds Lambda allows the function to run before stopping it (1-900). Named functionTimeout because the shared tool executor reserves `timeout` for its own request deadline |
| `memorySize` | number | No | Memory available to the function at runtime in MB (128-32768) |
| `ephemeralStorageSize` | number | No | Size of the /tmp directory in MB (512-10240) |
| `publish` | boolean | No | Publish the first version of the function atomically with creation |
| `environment` | json | No | Environment variables as a flat key/value JSON object |
| `tags` | json | No | Tags to apply to the function, as a flat key/value JSON object |
| `architectures` | array | No | Instruction set architecture: exactly one of x86\_64 or arm64 |
| `layers` | array | No | ARNs of layer versions to add to the function execution environment Pass \[] to remove all of them on an update. |
| `vpcSubnetIds` | array | No | VPC subnet IDs the function should attach to Pass \[] to remove all of them on an update. |
| `vpcSecurityGroupIds` | array | No | VPC security group IDs the function should use Pass \[] to remove all of them on an update. |
| `tracingMode` | string | No | X-Ray tracing mode: Active samples and traces requests, PassThrough only traces sampled requests |
| `deadLetterTargetArn` | string | No | ARN of an SQS queue or SNS topic that receives failed asynchronous invocations |
| `kmsKeyArn` | string | No | ARN of the KMS customer managed key used to encrypt environment variables and snapshots |
| `snapStartApplyOn` | string | No | Set to PublishedVersions to snapshot the initialized environment when a version is published |
| `logFormat` | string | No | Format the function sends CloudWatch logs in |
| `logGroup` | string | No | CloudWatch log group the function sends logs to |

#### Output [#output-4]

| Parameter | Type | Description |
| - | - | - |
| `configuration` | json | The function's configuration (ARN, runtime, handler, memory, state, layers, VPC, and logging settings) |

### Lambda Update Function Code [#lambda-update-function-code]

Update a function's deployment package from Amazon S3 or a container image

#### Input [#input-5]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `s3Bucket` | string | No | Amazon S3 bucket holding the new deployment package, in the same region as the function |
| `s3Key` | string | No | Amazon S3 key of the .zip package |
| `s3ObjectVersion` | string | No | Version of the Amazon S3 object to use |
| `imageUri` | string | No | Amazon ECR URI of the container image to deploy |
| `sourceKmsKeyArn` | string | No | ARN of the KMS customer managed key that encrypts the function's .zip deployment package |
| `architectures` | array | No | Instruction set architecture: exactly one of x86\_64 or arm64 |
| `publish` | boolean | No | Publish a new version after updating the code |
| `dryRun` | boolean | No | Validate the request without updating the function |
| `revisionId` | string | No | Update the resource only if its current revision ID matches this value |

#### Output [#output-5]

| Parameter | Type | Description |
| - | - | - |
| `configuration` | json | The function's configuration (ARN, runtime, handler, memory, state, layers, VPC, and logging settings) |

### Lambda Update Function Configuration [#lambda-update-function-configuration]

Update a function's settings such as memory, timeout, role, and environment variables

#### Input [#input-6]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `role` | string | No | ARN of the function's execution role |
| `runtime` | string | No | Runtime identifier such as nodejs22.x or python3.13 |
| `handler` | string | No | Entry point in your code, such as index.handler |
| `description` | string | No | Description of the function |
| `functionTimeout` | number | No | Seconds Lambda allows the function to run before stopping it (1-900). Named functionTimeout because the shared tool executor reserves `timeout` for its own request deadline |
| `memorySize` | number | No | Memory available to the function at runtime in MB (128-32768) |
| `ephemeralStorageSize` | number | No | Size of the /tmp directory in MB (512-10240) |
| `environment` | json | No | Environment variables as a flat key/value JSON object. Replaces the existing set |
| `layers` | array | No | ARNs of layer versions to add to the function execution environment Pass \[] to remove all of them on an update. |
| `vpcSubnetIds` | array | No | VPC subnet IDs the function should attach to Pass \[] to remove all of them on an update. |
| `vpcSecurityGroupIds` | array | No | VPC security group IDs the function should use Pass \[] to remove all of them on an update. |
| `tracingMode` | string | No | X-Ray tracing mode: Active samples and traces requests, PassThrough only traces sampled requests |
| `deadLetterTargetArn` | string | No | ARN of an SQS queue or SNS topic that receives failed asynchronous invocations |
| `kmsKeyArn` | string | No | ARN of the KMS customer managed key used to encrypt environment variables and snapshots |
| `snapStartApplyOn` | string | No | Set to PublishedVersions to snapshot the initialized environment when a version is published |
| `logFormat` | string | No | Format the function sends CloudWatch logs in |
| `logGroup` | string | No | CloudWatch log group the function sends logs to |
| `revisionId` | string | No | Update the resource only if its current revision ID matches this value |

#### Output [#output-6]

| Parameter | Type | Description |
| - | - | - |
| `configuration` | json | The function's configuration (ARN, runtime, handler, memory, state, layers, VPC, and logging settings) |

### Lambda Delete Function [#lambda-delete-function]

Delete a Lambda function, or a single published version of it

#### Input [#input-7]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number to delete. Omit to delete the whole function including all versions and aliases |

#### Output [#output-7]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda Publish Version [#lambda-publish-version]

Publish an immutable version from the current code and configuration of a function

#### Input [#input-8]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `codeSha256` | string | No | Publish only if the SHA256 hash of the deployment package matches this value |
| `description` | string | No | Description of the version |
| `revisionId` | string | No | Update the resource only if its current revision ID matches this value |

#### Output [#output-8]

| Parameter | Type | Description |
| - | - | - |
| `configuration` | json | The function's configuration (ARN, runtime, handler, memory, state, layers, VPC, and logging settings) |

### Lambda List Function Versions [#lambda-list-function-versions]

List the published versions of a Lambda function, plus $LATEST

#### Input [#input-9]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-10000) |

#### Output [#output-9]

| Parameter | Type | Description |
| - | - | - |
| `versions` | array | Published versions of the function, plus the unpublished $LATEST version |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda Create Alias [#lambda-create-alias]

Create an alias that points to a published function version

#### Input [#input-10]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `aliasName` | string | Yes | Name of the alias, such as prod or staging |
| `aliasFunctionVersion` | string | Yes | Function version the alias points to |
| `description` | string | No | Description of the alias |
| `additionalVersionWeights` | json | No | Weighted routing as a JSON object mapping a second version to the fraction of traffic it receives, e.g. \{"2": 0.1} |

#### Output [#output-10]

| Parameter | Type | Description |
| - | - | - |
| `alias` | json | The alias with its ARN, target version, and routing configuration |

### Lambda Get Alias [#lambda-get-alias]

Get details about a Lambda function alias

#### Input [#input-11]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `aliasName` | string | Yes | Name of the alias |

#### Output [#output-11]

| Parameter | Type | Description |
| - | - | - |
| `alias` | json | The alias with its ARN, target version, and routing configuration |

### Lambda Update Alias [#lambda-update-alias]

Update the target version, description, or traffic weights of an alias

#### Input [#input-12]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `aliasName` | string | Yes | Name of the alias |
| `aliasFunctionVersion` | string | No | Function version the alias should point to |
| `description` | string | No | Description of the alias |
| `additionalVersionWeights` | json | No | Weighted routing as a JSON object mapping a second version to the fraction of traffic it receives, e.g. \{"2": 0.1} |
| `revisionId` | string | No | Update the resource only if its current revision ID matches this value |

#### Output [#output-12]

| Parameter | Type | Description |
| - | - | - |
| `alias` | json | The alias with its ARN, target version, and routing configuration |

### Lambda Delete Alias [#lambda-delete-alias]

Delete a Lambda function alias

#### Input [#input-13]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `aliasName` | string | Yes | Name of the alias |

#### Output [#output-13]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda List Aliases [#lambda-list-aliases]

List the aliases of a Lambda function

#### Input [#input-14]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `aliasFunctionVersion` | string | No | Return only aliases that point to this function version |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-10000) |

#### Output [#output-14]

| Parameter | Type | Description |
| - | - | - |
| `aliases` | array | Aliases with their ARNs, target versions, and routing configuration |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda Add Permission [#lambda-add-permission]

Grant an AWS service, account, or organization permission to use a function

#### Input [#input-15]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `statementId` | string | Yes | Unique identifier for the policy statement (letters, numbers, hyphens, and underscores) |
| `action` | string | Yes | Action the principal is granted, such as lambda:InvokeFunction |
| `principal` | string | Yes | AWS service principal or account ID granted the permission, such as s3.amazonaws.com |
| `sourceArn` | string | No | ARN of the AWS resource allowed to invoke the function |
| `sourceAccount` | string | No | ID of the AWS account that owns the source resource |
| `principalOrgId` | string | No | AWS Organizations ID to grant permission to every account in the organization |
| `eventSourceToken` | string | No | Token that must be supplied by the invoker (Alexa Smart Home functions only) |
| `functionUrlAuthType` | string | No | Auth type of the function URL this permission applies to |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |
| `revisionId` | string | No | Update the resource only if its current revision ID matches this value |

#### Output [#output-15]

| Parameter | Type | Description |
| - | - | - |
| `statement` | string | The permission statement that was added, as a JSON document string |

### Lambda Remove Permission [#lambda-remove-permission]

Remove a statement from a function's resource-based policy

#### Input [#input-16]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `statementId` | string | Yes | Identifier of the policy statement to remove |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |
| `revisionId` | string | No | Update the resource only if its current revision ID matches this value |

#### Output [#output-16]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda Get Policy [#lambda-get-policy]

Get the resource-based IAM policy attached to a function, version, or alias

#### Input [#input-17]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-17]

| Parameter | Type | Description |
| - | - | - |
| `policy` | string | The resource-based policy, as a JSON document string |
| `revisionId` | string | Current revision ID of the policy |

### Lambda Create Event Source Mapping [#lambda-create-event-source-mapping]

Map an event source such as SQS, Kinesis, DynamoDB Streams, or Kafka to a function

#### Input [#input-18]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `eventSourceArn` | string | No | ARN of the event source. Omit only for self-managed Kafka |
| `enabled` | boolean | No | Whether the mapping is active |
| `batchSize` | number | No | Maximum records sent to the function in a single batch |
| `maximumBatchingWindowInSeconds` | number | No | Seconds to gather records before invoking the function (0-300) |
| `startingPosition` | string | No | Position in the stream to start reading from. Required for Kinesis, DynamoDB Streams, and Kafka |
| `startingPositionTimestamp` | string | No | ISO 8601 timestamp to start reading from, when startingPosition is AT\_TIMESTAMP |
| `parallelizationFactor` | number | No | Number of concurrent batches to process from each shard (1-10) |
| `maximumRecordAgeInSeconds` | number | No | Discard records older than this. Use -1 for infinite |
| `maximumRetryAttempts` | number | No | Retries before a record is discarded. Use -1 for infinite |
| `bisectBatchOnFunctionError` | boolean | No | Split a failing batch in two and retry each half |
| `tumblingWindowInSeconds` | number | No | Duration of a processing window for stream aggregation (0-900) |
| `maximumConcurrency` | number | No | Maximum concurrent function invocations from an SQS event source (2-1000) |
| `topics` | array | No | Kafka topic names to consume |
| `queues` | array | No | Amazon MQ broker destination queue names |
| `functionResponseTypes` | array | No | Set to ReportBatchItemFailures to enable partial batch reporting Pass \[] to remove all of them on an update. |
| `filterPatterns` | array | No | Event filter patterns, each a JSON string, that decide which records reach the function. Pass \[] to remove all filters on an update. |
| `onSuccessDestination` | string | No | ARN of the destination that receives successfully processed records |
| `onFailureDestination` | string | No | ARN of the destination that receives discarded records |
| `kmsKeyArn` | string | No | ARN of the KMS customer managed key used to encrypt filter criteria |
| `tags` | json | No | Tags to apply to the event source mapping, as a flat key/value JSON object |
| `sourceAccessConfigurations` | json | No | Authentication for an Amazon MQ or self-managed Kafka source, as a JSON array of objects with "type" (e.g. BASIC\_AUTH, SASL\_SCRAM\_512\_AUTH, VPC\_SUBNET) and "uri" (the Secrets Manager or VPC resource ARN). Pass \[] to remove all of them on an update. |
| `documentDbDatabaseName` | string | No | DocumentDB database to consume the change stream from |
| `documentDbCollectionName` | string | No | DocumentDB collection to consume. Omit to consume the whole database |
| `documentDbFullDocument` | string | No | UpdateLookup sends the full document on update, Default sends only the change delta |
| `amazonManagedKafkaConsumerGroupId` | string | No | Consumer group ID to join on an Amazon MSK cluster |
| `selfManagedKafkaConsumerGroupId` | string | No | Consumer group ID to join on a self-managed Kafka cluster |
| `selfManagedKafkaBootstrapServers` | array | No | Bootstrap servers of a self-managed Kafka cluster (host:port). Required instead of eventSourceArn for self-managed Kafka |

#### Output [#output-18]

| Parameter | Type | Description |
| - | - | - |
| `eventSourceMapping` | json | The event source mapping with its UUID, state, batching, and filter settings |

### Lambda Get Event Source Mapping [#lambda-get-event-source-mapping]

Get details about an event source mapping

#### Input [#input-19]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `uuid` | string | Yes | Identifier of the event source mapping |

#### Output [#output-19]

| Parameter | Type | Description |
| - | - | - |
| `eventSourceMapping` | json | The event source mapping with its UUID, state, batching, and filter settings |

### Lambda Update Event Source Mapping [#lambda-update-event-source-mapping]

Update the batching, retry, filtering, or enabled state of an event source mapping

#### Input [#input-20]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `uuid` | string | Yes | Identifier of the event source mapping |
| `functionName` | string | No | Function the mapping should invoke |
| `enabled` | boolean | No | Whether the mapping is active |
| `batchSize` | number | No | Maximum records sent to the function in a single batch |
| `maximumBatchingWindowInSeconds` | number | No | Seconds to gather records before invoking the function (0-300) |
| `parallelizationFactor` | number | No | Number of concurrent batches to process from each shard (1-10) |
| `maximumRecordAgeInSeconds` | number | No | Discard records older than this. Use -1 for infinite |
| `maximumRetryAttempts` | number | No | Retries before a record is discarded. Use -1 for infinite |
| `bisectBatchOnFunctionError` | boolean | No | Split a failing batch in two and retry each half |
| `tumblingWindowInSeconds` | number | No | Duration of a processing window for stream aggregation (0-900) |
| `maximumConcurrency` | number | No | Maximum concurrent function invocations from an SQS event source (2-1000) |
| `functionResponseTypes` | array | No | Set to ReportBatchItemFailures to enable partial batch reporting Pass \[] to remove all of them on an update. |
| `filterPatterns` | array | No | Event filter patterns, each a JSON string, that decide which records reach the function. Pass \[] to remove all filters on an update. |
| `onSuccessDestination` | string | No | ARN of the destination that receives successfully processed records |
| `onFailureDestination` | string | No | ARN of the destination that receives discarded records |
| `kmsKeyArn` | string | No | ARN of the KMS customer managed key used to encrypt filter criteria |
| `sourceAccessConfigurations` | json | No | Authentication for an Amazon MQ or self-managed Kafka source, as a JSON array of objects with "type" (e.g. BASIC\_AUTH, SASL\_SCRAM\_512\_AUTH, VPC\_SUBNET) and "uri" (the Secrets Manager or VPC resource ARN). Pass \[] to remove all of them on an update. |
| `documentDbDatabaseName` | string | No | DocumentDB database to consume the change stream from |
| `documentDbCollectionName` | string | No | DocumentDB collection to consume. Omit to consume the whole database |
| `documentDbFullDocument` | string | No | UpdateLookup sends the full document on update, Default sends only the change delta |
| `amazonManagedKafkaConsumerGroupId` | string | No | Consumer group ID to join on an Amazon MSK cluster |
| `selfManagedKafkaConsumerGroupId` | string | No | Consumer group ID to join on a self-managed Kafka cluster |

#### Output [#output-20]

| Parameter | Type | Description |
| - | - | - |
| `eventSourceMapping` | json | The event source mapping with its UUID, state, batching, and filter settings |

### Lambda Delete Event Source Mapping [#lambda-delete-event-source-mapping]

Delete an event source mapping

#### Input [#input-21]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `uuid` | string | Yes | Identifier of the event source mapping |

#### Output [#output-21]

| Parameter | Type | Description |
| - | - | - |
| `eventSourceMapping` | json | The deleted event source mapping, whose state transitions to Deleting |

### Lambda List Event Source Mappings [#lambda-list-event-source-mappings]

List event source mappings, optionally filtered by function or event source

#### Input [#input-22]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | No | Return only mappings that invoke this function |
| `eventSourceArn` | string | No | Return only mappings for this event source ARN |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-10000) |

#### Output [#output-22]

| Parameter | Type | Description |
| - | - | - |
| `eventSourceMappings` | array | Event source mappings with their UUIDs, state, and batching settings |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda Get Function Concurrency [#lambda-get-function-concurrency]

Get the reserved concurrency configured for a function

#### Input [#input-23]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |

#### Output [#output-23]

| Parameter | Type | Description |
| - | - | - |
| `reservedConcurrentExecutions` | number | Concurrency reserved for this function, or null when none is reserved |

### Lambda Set Function Concurrency [#lambda-set-function-concurrency]

Reserve a share of the account concurrency limit for a function

#### Input [#input-24]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `reservedConcurrentExecutions` | number | Yes | Number of simultaneous executions to reserve for this function |

#### Output [#output-24]

| Parameter | Type | Description |
| - | - | - |
| `reservedConcurrentExecutions` | number | Concurrency now reserved for this function |

### Lambda Delete Function Concurrency [#lambda-delete-function-concurrency]

Remove the reserved concurrency configuration from a function

#### Input [#input-25]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |

#### Output [#output-25]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda Get Provisioned Concurrency [#lambda-get-provisioned-concurrency]

Get the provisioned concurrency configuration of a function version or alias

#### Input [#input-26]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | Yes | Version number or alias name the configuration applies to |

#### Output [#output-26]

| Parameter | Type | Description |
| - | - | - |
| `provisionedConcurrency` | json | Requested, available, and allocated provisioned concurrency with its status |

### Lambda Set Provisioned Concurrency [#lambda-set-provisioned-concurrency]

Allocate provisioned concurrency to a function version or alias

#### Input [#input-27]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | Yes | Version number or alias name the configuration applies to |
| `provisionedConcurrentExecutions` | number | Yes | Number of pre-initialized execution environments to allocate |

#### Output [#output-27]

| Parameter | Type | Description |
| - | - | - |
| `provisionedConcurrency` | json | Requested, available, and allocated provisioned concurrency with its status |

### Lambda Delete Provisioned Concurrency [#lambda-delete-provisioned-concurrency]

Remove the provisioned concurrency configuration from a function version or alias

#### Input [#input-28]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | Yes | Version number or alias name the configuration applies to |

#### Output [#output-28]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda List Provisioned Concurrency [#lambda-list-provisioned-concurrency]

List the provisioned concurrency configurations of a function

#### Input [#input-29]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-50) |

#### Output [#output-29]

| Parameter | Type | Description |
| - | - | - |
| `provisionedConcurrencyConfigs` | array | Provisioned concurrency configurations with their allocation status |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda Create Function URL [#lambda-create-function-url]

Create a dedicated HTTPS endpoint for a function

#### Input [#input-30]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `authType` | string | Yes | AWS\_IAM requires signed requests, NONE allows public unauthenticated access |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |
| `invokeMode` | string | No | BUFFERED returns the whole response at once, RESPONSE\_STREAM streams it |
| `corsAllowCredentials` | boolean | No | Whether the function URL sends the Access-Control-Allow-Credentials header |
| `corsAllowOrigins` | array | No | Origins allowed to call the function URL, or \* for any |
| `corsAllowMethods` | array | No | HTTP methods allowed when calling the function URL, or \* for any |
| `corsAllowHeaders` | array | No | Headers browsers may send in a cross-origin request |
| `corsExposeHeaders` | array | No | Response headers browsers may access from the response |
| `corsMaxAge` | number | No | Seconds a browser may cache the CORS preflight result (0-86400) |

#### Output [#output-30]

| Parameter | Type | Description |
| - | - | - |
| `functionUrlConfig` | json | The function URL with its auth type, invoke mode, and CORS settings |

### Lambda Get Function URL [#lambda-get-function-url]

Get details about a function URL

#### Input [#input-31]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-31]

| Parameter | Type | Description |
| - | - | - |
| `functionUrlConfig` | json | The function URL with its auth type, invoke mode, and CORS settings |

### Lambda Update Function URL [#lambda-update-function-url]

Update the auth type, invoke mode, or CORS settings of a function URL

#### Input [#input-32]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `authType` | string | No | AWS\_IAM requires signed requests, NONE allows public unauthenticated access |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |
| `invokeMode` | string | No | BUFFERED returns the whole response at once, RESPONSE\_STREAM streams it |
| `corsAllowCredentials` | boolean | No | Whether the function URL sends the Access-Control-Allow-Credentials header |
| `corsAllowOrigins` | array | No | Origins allowed to call the function URL, or \* for any |
| `corsAllowMethods` | array | No | HTTP methods allowed when calling the function URL, or \* for any |
| `corsAllowHeaders` | array | No | Headers browsers may send in a cross-origin request |
| `corsExposeHeaders` | array | No | Response headers browsers may access from the response |
| `corsMaxAge` | number | No | Seconds a browser may cache the CORS preflight result (0-86400) |

#### Output [#output-32]

| Parameter | Type | Description |
| - | - | - |
| `functionUrlConfig` | json | The function URL with its auth type, invoke mode, and CORS settings |

### Lambda Delete Function URL [#lambda-delete-function-url]

Delete the URL configuration of a function

#### Input [#input-33]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-33]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda List Function URLs [#lambda-list-function-urls]

List the URL configurations of a function

#### Input [#input-34]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-50) |

#### Output [#output-34]

| Parameter | Type | Description |
| - | - | - |
| `functionUrlConfigs` | array | Function URLs with their auth types, invoke modes, and CORS settings |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda Get Async Invoke Config [#lambda-get-async-invoke-config]

Get the asynchronous invocation retry and destination settings of a function

#### Input [#input-35]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-35]

| Parameter | Type | Description |
| - | - | - |
| `eventInvokeConfig` | json | Asynchronous invocation retry limits and success/failure destinations |

### Lambda Set Async Invoke Config [#lambda-set-async-invoke-config]

Configure retry limits and destinations for asynchronous invocations of a function

#### Input [#input-36]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |
| `maximumRetryAttempts` | number | No | Times Lambda retries a failed asynchronous invocation (0-2) |
| `maximumEventAgeInSeconds` | number | No | Maximum age of an event Lambda will still process (60-21600) |
| `onSuccessDestination` | string | No | ARN of the destination that receives successful invocation records |
| `onFailureDestination` | string | No | ARN of the destination that receives failed invocation records |

#### Output [#output-36]

| Parameter | Type | Description |
| - | - | - |
| `eventInvokeConfig` | json | Asynchronous invocation retry limits and success/failure destinations |

### Lambda Delete Async Invoke Config [#lambda-delete-async-invoke-config]

Remove the asynchronous invocation configuration of a function

#### Input [#input-37]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-37]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda List Async Invoke Configs [#lambda-list-async-invoke-configs]

List the asynchronous invocation configurations of a function

#### Input [#input-38]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-50) |

#### Output [#output-38]

| Parameter | Type | Description |
| - | - | - |
| `eventInvokeConfigs` | array | Asynchronous invocation configurations for the function versions and aliases |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda List Layers [#lambda-list-layers]

List Lambda layers and the latest version of each

#### Input [#input-39]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `compatibleRuntime` | string | No | Return only layers compatible with this runtime, such as python3.13 |
| `compatibleArchitecture` | string | No | Return only layers compatible with this instruction set architecture |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-50) |

#### Output [#output-39]

| Parameter | Type | Description |
| - | - | - |
| `layers` | array | Layers with their ARNs and latest matching version |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda List Layer Versions [#lambda-list-layer-versions]

List the versions of a Lambda layer

#### Input [#input-40]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `layerName` | string | Yes | The name or ARN of the layer |
| `compatibleRuntime` | string | No | Return only versions compatible with this runtime, such as python3.13 |
| `compatibleArchitecture` | string | No | Return only versions compatible with this instruction set architecture |
| `marker` | string | No | Pagination token returned by a previous request |
| `maxItems` | number | No | Maximum number of items to return (1-50) |

#### Output [#output-40]

| Parameter | Type | Description |
| - | - | - |
| `layerVersions` | array | Layer versions with their ARNs, compatible runtimes, and license info |
| `nextMarker` | string | Pagination token to pass as marker on the next request |

### Lambda Get Layer Version [#lambda-get-layer-version]

Get details and a download link for a specific layer version

#### Input [#input-41]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `layerName` | string | Yes | The name or ARN of the layer |
| `versionNumber` | number | Yes | Version number of the layer |

#### Output [#output-41]

| Parameter | Type | Description |
| - | - | - |
| `layerVersion` | json | The layer version with its ARN, compatible runtimes, and a presigned content download URL |

### Lambda List Tags [#lambda-list-tags]

List the tags applied to a Lambda function

#### Input [#input-42]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `resourceArn` | string | Yes | The function's Amazon Resource Name (ARN) |

#### Output [#output-42]

| Parameter | Type | Description |
| - | - | - |
| `tags` | json | The resource's tags as a key/value object |

### Lambda Tag Resource [#lambda-tag-resource]

Add tags to a Lambda function

#### Input [#input-43]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `resourceArn` | string | Yes | The function's Amazon Resource Name (ARN) |
| `tags` | json | Yes | Tags to apply, as a flat key/value JSON object |

#### Output [#output-43]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda Untag Resource [#lambda-untag-resource]

Remove tags from a Lambda function

#### Input [#input-44]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `resourceArn` | string | Yes | The function's Amazon Resource Name (ARN) |
| `tagKeys` | array | Yes | Tag keys to remove |

#### Output [#output-44]

| Parameter | Type | Description |
| - | - | - |
| `message` | string | Operation status message |

### Lambda Get Account Settings [#lambda-get-account-settings]

Get the Lambda limits and usage of the current AWS account and region

#### Input [#input-45]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |

#### Output [#output-45]

| Parameter | Type | Description |
| - | - | - |
| `accountLimit` | json | Account-level storage and concurrency limits |
| `accountUsage` | json | Current code storage used and number of functions deployed |

### Lambda Get Recursion Config [#lambda-get-recursion-config]

Get the recursive loop detection setting of a function

#### Input [#input-46]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |

#### Output [#output-46]

| Parameter | Type | Description |
| - | - | - |
| `recursiveLoop` | string | Terminate stops the function after 16 recursive invocations, Allow permits recursion |

### Lambda Set Recursion Config [#lambda-set-recursion-config]

Set whether Lambda stops a function that invokes itself recursively

#### Input [#input-47]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `recursiveLoop` | string | Yes | Terminate stops the function after 16 recursive invocations, Allow permits recursion |

#### Output [#output-47]

| Parameter | Type | Description |
| - | - | - |
| `recursiveLoop` | string | The recursion setting now in effect for the function |

### Lambda Get Runtime Management Config [#lambda-get-runtime-management-config]

Get the runtime update policy of a function version

#### Input [#input-48]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-48]

| Parameter | Type | Description |
| - | - | - |
| `updateRuntimeOn` | string | Auto, FunctionUpdate, or Manual runtime update policy |
| `runtimeVersionArn` | string | ARN of the pinned runtime version, when the policy is Manual |
| `functionArn` | string | ARN of the function the policy applies to |

### Lambda Set Runtime Management Config [#lambda-set-runtime-management-config]

Set how and when Lambda applies runtime updates to a function version

#### Input [#input-49]

| Parameter | Type | Required | Description |
| - | - | - | - |
| `awsRegion` | string | Yes | AWS region (e.g., us-east-1) |
| `awsAccessKeyId` | string | Yes | AWS access key ID |
| `awsSecretAccessKey` | string | Yes | AWS secret access key |
| `functionName` | string | Yes | Function name, ARN, or partial ARN (e.g. my-function, or arn:aws:lambda:us-east-1:123456789012:function:my-function) |
| `updateRuntimeOn` | string | Yes | Auto applies updates automatically, FunctionUpdate applies them on the next function update, Manual pins a runtime version |
| `runtimeVersionArn` | string | No | ARN of the runtime version to pin to. Required when updateRuntimeOn is Manual |
| `qualifier` | string | No | Version number or alias name to act on. Omit to target the function itself |

#### Output [#output-49]

| Parameter | Type | Description |
| - | - | - |
| `updateRuntimeOn` | string | The runtime update policy now in effect |
| `runtimeVersionArn` | string | ARN of the pinned runtime version, when the policy is Manual |
| `functionArn` | string | ARN of the function the policy applies to |