(lambda): ParamsAndSecretsVersions should return the latest, or new versions should be made available
- Dominant language
- TypeScript
- Stars
- 12.9k
- Forks
- 4.6k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 83
Description
### Describe the feature
calling
```ts
cdk.aws_lambda.ParamsAndSecretsLayerVersion.fromVersion(cdk.aws_lambda.ParamsAndSecretsVersions.V1_0_103)
```
will always return the [lambda layer with a version of 4 for us-east-1](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/region-info/build-tools/fact-tables.ts#L1143). the [CDK documentation states that this is the latest version](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-lambda/lib/params-and-secrets-layers.ts#L28), while the [documentation in lambda](https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-integration-lambda-extensions.html#ps-integration-lambda-extensions-add) shows that 14 is the latest in this region.
Can new parameter versions be added to track the latest deployed versions in all regions?
### Use Case
we want to stay current with the latest code, ensuring there are no vulnerabilities in old code that is known not to be latest
### Proposed Solution
add an additional versions or potentially a `LATEST` that tracks the lambda latest release per region
### Other Information
_No response_
### Acknowledgements
- [X] I may be able to implement this feature request
- [ ] This feature might incur a breaking change
### CDK version used
2.151.0
### Environment details (OS name and version, etc.)
Ubuntu 22.04.3 LTS x86
Contributor guide
Research direction
Start with packages/aws-cdk-lib/aws-lambda/lib/params-and-secrets-layers.ts and the us-east-1 entry in packages/aws-cdk-lib/region-info/build-tools/fact-tables.ts. Compare the documented regional layer versions with the current mappings and determine whether additional versions or a latest marker can be represented. Done means the CDK data and public API track the latest deployed version per region without relying on the outdated version 4 mapping.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, typescript
- Domain
- cloud
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100