AwsLambdaFunctionEncryptionArgs

interface AwsLambdaFunctionEncryptionArgs {
deploymentPackage?: { kmsKey: AwsKmsKeyInput };
environmentVariables?: { kmsKey: AwsKmsKeyInput };
}

Lambda encryption settings using canonical KMS key references.

Example

CODE

const encryption: AwsLambdaFunctionEncryptionArgs = {
  environmentVariables: {
    kmsKey: { keyArn: 'arn:aws:kms:eu-west-1:000000000000:key/lambda-environment' },
  },
  deploymentPackage: {
    kmsKey: { keyArn: 'arn:aws:kms:eu-west-1:000000000000:key/lambda-package' },
  },
};

Properties

`deploymentPackage: { kmsKey: AwsKmsKeyInput }`

KMS key used to encrypt a ZIP deployment package. Invalid for image functions.

Properties

kmsKey (AwsKmsKeyInput)

`environmentVariables: { kmsKey: AwsKmsKeyInput }`

KMS key used to encrypt environment variables and related function data.

Properties

kmsKey (AwsKmsKeyInput)