Create Function
lambda_create_function | R Documentation |
Creates a Lambda function¶
Description¶
Creates a Lambda function. To create a function, you need a deployment package and an execution role. The deployment package is a .zip file archive or container image that contains your function code. The execution role grants the function permission to use Amazon Web Servicesservices, such as Amazon CloudWatch Logs for log streaming and X-Ray for request tracing.
If the deployment package is a container
image,
then you set the package type to Image
. For a container image, the
code property must include the URI of a container image in the Amazon
ECR registry. You do not need to specify the handler and runtime
properties.
If the deployment package is a .zip file
archive,
then you set the package type to Zip
. For a .zip file archive, the
code property specifies the location of the .zip file. You must also
specify the handler and runtime properties. The code in the deployment
package must be compatible with the target instruction set architecture
of the function (x86-64
or arm64
). If you do not specify the
architecture, then the default value is x86-64
.
When you create a function, Lambda provisions an instance of the
function and its supporting resources. If your function connects to a
VPC, this process can take a minute or so. During this time, you can't
invoke or modify the function. The State
, StateReason
, and
StateReasonCode
fields in the response from
get_function_configuration
indicate when the function is ready to
invoke. For more information, see Lambda function
states.
A function has an unpublished version, and can have published versions
and aliases. The unpublished version changes when you update your
function's code and configuration. A published version is a snapshot of
your function code and configuration that can't be changed. An alias is
a named resource that maps to a version, and can be changed to map to a
different version. Use the Publish
parameter to create version 1
of
your function from its initial configuration.
The other parameters let you configure version-specific and
function-level settings. You can modify version-specific settings later
with update_function_configuration
. Function-level settings apply to
both the unpublished and published versions of the function, and include
tags (tag_resource
) and per-function concurrency limits
(put_function_concurrency
).
You can use code signing if your deployment package is a .zip file
archive. To enable code signing for this function, specify the ARN of a
code-signing configuration. When a user attempts to deploy a code
package with update_function_code
, Lambda checks that the code package
has a valid signature from a trusted publisher. The code-signing
configuration includes set of signing profiles, which define the trusted
publishers for this function.
If another Amazon Web Services account or an Amazon Web Servicesservice
invokes your function, use add_permission
to grant permission by
creating a resource-based Identity and Access Management (IAM) policy.
You can grant permissions at the function level, on a version, or on an
alias.
To invoke your function directly, use invoke
. To invoke your function
in response to events in other Amazon Web Servicesservices, create an
event source mapping (create_event_source_mapping
), or configure a
function trigger in the other service. For more information, see
Invoking Lambda
functions.
Usage¶
lambda_create_function(FunctionName, Runtime, Role, Handler, Code,
Description, Timeout, MemorySize, Publish, VpcConfig, PackageType,
DeadLetterConfig, Environment, KMSKeyArn, TracingConfig, Tags, Layers,
FileSystemConfigs, ImageConfig, CodeSigningConfigArn, Architectures,
EphemeralStorage, SnapStart, LoggingConfig)
Arguments¶
FunctionName
[required] The name or ARN of the Lambda function.
Name formats
Function name –
my-function
.Function ARN –
arn:aws:lambda:us-west-2:123456789012:function:my-function
.Partial ARN –
123456789012:function:my-function
.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
Runtime
The identifier of the function's runtime. Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.
The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see Runtime use after deprecation.
For a list of all currently supported runtimes, see Supported runtimes.
Role
[required] The Amazon Resource Name (ARN) of the function's execution role.
Handler
The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see Lambda programming model.
Code
[required] The code for the function.
Description
A description of the function.
Timeout
The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see Lambda execution environment.
MemorySize
The amount of memory available to the function at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB.
Publish
Set to true to publish the first version of the function during creation.
VpcConfig
For network connectivity to Amazon Web Services resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see Configuring a Lambda function to access resources in a VPC.
PackageType
The type of deployment package. Set to
Image
for container image and set toZip
for .zip file archive.DeadLetterConfig
A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see Dead-letter queues.
Environment
Environment variables that are accessible from function code during execution.
KMSKeyArn
The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt your function's environment variables. When Lambda SnapStart is activated, Lambda also uses this key is to encrypt your function's snapshot. If you deploy your function using a container image, Lambda also uses this key to encrypt your function when it's deployed. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). If you don't provide a customer managed key, Lambda uses a default service key.
TracingConfig
Set
Mode
toActive
to sample and trace a subset of incoming requests with X-Ray.Tags
A list of tags to apply to the function.
Layers
A list of function layers to add to the function's execution environment. Specify each layer by its ARN, including the version.
FileSystemConfigs
Connection settings for an Amazon EFS file system.
ImageConfig
Container image configuration values that override the values in the container image Dockerfile.
CodeSigningConfigArn
To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function.
Architectures
The instruction set architecture that the function supports. Enter a string array with one of the valid values (arm64 or x86_64). The default value is
x86_64
.EphemeralStorage
The size of the function's
/tmp
directory in MB. The default value is 512, but can be any whole number between 512 and 10,240 MB. For more information, see Configuring ephemeral storage (console).SnapStart
The function's SnapStart setting.
LoggingConfig
The function's Amazon CloudWatch Logs configuration settings.
Value¶
A list with the following syntax:
list(
FunctionName = "string",
FunctionArn = "string",
Runtime = "nodejs"|"nodejs4.3"|"nodejs6.10"|"nodejs8.10"|"nodejs10.x"|"nodejs12.x"|"nodejs14.x"|"nodejs16.x"|"java8"|"java8.al2"|"java11"|"python2.7"|"python3.6"|"python3.7"|"python3.8"|"python3.9"|"dotnetcore1.0"|"dotnetcore2.0"|"dotnetcore2.1"|"dotnetcore3.1"|"dotnet6"|"dotnet8"|"nodejs4.3-edge"|"go1.x"|"ruby2.5"|"ruby2.7"|"provided"|"provided.al2"|"nodejs18.x"|"python3.10"|"java17"|"ruby3.2"|"ruby3.3"|"python3.11"|"nodejs20.x"|"provided.al2023"|"python3.12"|"java21",
Role = "string",
Handler = "string",
CodeSize = 123,
Description = "string",
Timeout = 123,
MemorySize = 123,
LastModified = "string",
CodeSha256 = "string",
Version = "string",
VpcConfig = list(
SubnetIds = list(
"string"
),
SecurityGroupIds = list(
"string"
),
VpcId = "string",
Ipv6AllowedForDualStack = TRUE|FALSE
),
DeadLetterConfig = list(
TargetArn = "string"
),
Environment = list(
Variables = list(
"string"
),
Error = list(
ErrorCode = "string",
Message = "string"
)
),
KMSKeyArn = "string",
TracingConfig = list(
Mode = "Active"|"PassThrough"
),
MasterArn = "string",
RevisionId = "string",
Layers = list(
list(
Arn = "string",
CodeSize = 123,
SigningProfileVersionArn = "string",
SigningJobArn = "string"
)
),
State = "Pending"|"Active"|"Inactive"|"Failed",
StateReason = "string",
StateReasonCode = "Idle"|"Creating"|"Restoring"|"EniLimitExceeded"|"InsufficientRolePermissions"|"InvalidConfiguration"|"InternalError"|"SubnetOutOfIPAddresses"|"InvalidSubnet"|"InvalidSecurityGroup"|"ImageDeleted"|"ImageAccessDenied"|"InvalidImage"|"KMSKeyAccessDenied"|"KMSKeyNotFound"|"InvalidStateKMSKey"|"DisabledKMSKey"|"EFSIOError"|"EFSMountConnectivityError"|"EFSMountFailure"|"EFSMountTimeout"|"InvalidRuntime"|"InvalidZipFileException"|"FunctionError",
LastUpdateStatus = "Successful"|"Failed"|"InProgress",
LastUpdateStatusReason = "string",
LastUpdateStatusReasonCode = "EniLimitExceeded"|"InsufficientRolePermissions"|"InvalidConfiguration"|"InternalError"|"SubnetOutOfIPAddresses"|"InvalidSubnet"|"InvalidSecurityGroup"|"ImageDeleted"|"ImageAccessDenied"|"InvalidImage"|"KMSKeyAccessDenied"|"KMSKeyNotFound"|"InvalidStateKMSKey"|"DisabledKMSKey"|"EFSIOError"|"EFSMountConnectivityError"|"EFSMountFailure"|"EFSMountTimeout"|"InvalidRuntime"|"InvalidZipFileException"|"FunctionError",
FileSystemConfigs = list(
list(
Arn = "string",
LocalMountPath = "string"
)
),
PackageType = "Zip"|"Image",
ImageConfigResponse = list(
ImageConfig = list(
EntryPoint = list(
"string"
),
Command = list(
"string"
),
WorkingDirectory = "string"
),
Error = list(
ErrorCode = "string",
Message = "string"
)
),
SigningProfileVersionArn = "string",
SigningJobArn = "string",
Architectures = list(
"x86_64"|"arm64"
),
EphemeralStorage = list(
Size = 123
),
SnapStart = list(
ApplyOn = "PublishedVersions"|"None",
OptimizationStatus = "On"|"Off"
),
RuntimeVersionConfig = list(
RuntimeVersionArn = "string",
Error = list(
ErrorCode = "string",
Message = "string"
)
),
LoggingConfig = list(
LogFormat = "JSON"|"Text",
ApplicationLogLevel = "TRACE"|"DEBUG"|"INFO"|"WARN"|"ERROR"|"FATAL",
SystemLogLevel = "DEBUG"|"INFO"|"WARN",
LogGroup = "string"
)
)
Request syntax¶
svc$create_function(
FunctionName = "string",
Runtime = "nodejs"|"nodejs4.3"|"nodejs6.10"|"nodejs8.10"|"nodejs10.x"|"nodejs12.x"|"nodejs14.x"|"nodejs16.x"|"java8"|"java8.al2"|"java11"|"python2.7"|"python3.6"|"python3.7"|"python3.8"|"python3.9"|"dotnetcore1.0"|"dotnetcore2.0"|"dotnetcore2.1"|"dotnetcore3.1"|"dotnet6"|"dotnet8"|"nodejs4.3-edge"|"go1.x"|"ruby2.5"|"ruby2.7"|"provided"|"provided.al2"|"nodejs18.x"|"python3.10"|"java17"|"ruby3.2"|"ruby3.3"|"python3.11"|"nodejs20.x"|"provided.al2023"|"python3.12"|"java21",
Role = "string",
Handler = "string",
Code = list(
ZipFile = raw,
S3Bucket = "string",
S3Key = "string",
S3ObjectVersion = "string",
ImageUri = "string"
),
Description = "string",
Timeout = 123,
MemorySize = 123,
Publish = TRUE|FALSE,
VpcConfig = list(
SubnetIds = list(
"string"
),
SecurityGroupIds = list(
"string"
),
Ipv6AllowedForDualStack = TRUE|FALSE
),
PackageType = "Zip"|"Image",
DeadLetterConfig = list(
TargetArn = "string"
),
Environment = list(
Variables = list(
"string"
)
),
KMSKeyArn = "string",
TracingConfig = list(
Mode = "Active"|"PassThrough"
),
Tags = list(
"string"
),
Layers = list(
"string"
),
FileSystemConfigs = list(
list(
Arn = "string",
LocalMountPath = "string"
)
),
ImageConfig = list(
EntryPoint = list(
"string"
),
Command = list(
"string"
),
WorkingDirectory = "string"
),
CodeSigningConfigArn = "string",
Architectures = list(
"x86_64"|"arm64"
),
EphemeralStorage = list(
Size = 123
),
SnapStart = list(
ApplyOn = "PublishedVersions"|"None"
),
LoggingConfig = list(
LogFormat = "JSON"|"Text",
ApplicationLogLevel = "TRACE"|"DEBUG"|"INFO"|"WARN"|"ERROR"|"FATAL",
SystemLogLevel = "DEBUG"|"INFO"|"WARN",
LogGroup = "string"
)
)