aws / aws/aws-cdk

(lambda): ParamsAndSecretsVersions should return the latest, or new versions should be made available

Open
#31,772 5 comments 1 reaction 0 assignees View on GitHub
@aws-cdk/aws-lambda effort/small feature-request p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

### Describe the feature

calling
```ts
cdk.aws_lambda.ParamsAndSecretsLayerVersion.fromVersion(cdk.aws_lambda.ParamsAndSecretsVersions.V1_0_103)
```

will always return the [lambda layer with a version of 4 for us-east-1](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/region-info/build-tools/fact-tables.ts#L1143). the [CDK documentation states that this is the latest version](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-lambda/lib/params-and-secrets-layers.ts#L28), while the [documentation in lambda](https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-integration-lambda-extensions.html#ps-integration-lambda-extensions-add) shows that 14 is the latest in this region.

Can new parameter versions be added to track the latest deployed versions in all regions?

### Use Case

we want to stay current with the latest code, ensuring there are no vulnerabilities in old code that is known not to be latest

### Proposed Solution

add an additional versions or potentially a `LATEST` that tracks the lambda latest release per region

### Other Information

_No response_

### Acknowledgements

- [X] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.151.0

### Environment details (OS name and version, etc.)

Ubuntu 22.04.3 LTS x86

Contributor guide

Open the contributing guide

Research direction

Start with packages/aws-cdk-lib/aws-lambda/lib/params-and-secrets-layers.ts and the us-east-1 entry in packages/aws-cdk-lib/region-info/build-tools/fact-tables.ts. Compare the documented regional layer versions with the current mappings and determine whether additional versions or a latest marker can be represented. Done means the CDK data and public API track the latest deployed version per region without relying on the outdated version 4 mapping.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.