aws / aws/chalice

Support kms-key-arn config in lambda functions.

Open
#1,197 1 comment 0 reactions 0 assignees View on GitHub
feature-request
Dominant language
Python
Stars
11.1k
Forks
1k
Avg merge
1d 22h
Merged PRs (30d)
2

Description

In the lambda deploy aws cli you can do:

[--kms-key-arn ]
The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables. If it's not provided, AWS Lambda uses a default service key.

I would expect the code here to take the variable from the config.json:

https://github.com/aws/chalice/blob/master/chalice/deploy/deployer.py#L694

But it isn't there. Is there another way?

Contributor guide

Open the contributing guide

Research direction

Read chalice/deploy/deployer.py around line 694 and compare the Lambda deployment options with the config.json handling described in the issue. Trace how function configuration reaches the AWS CLI, then verify that a configured KMS key ARN is reflected in the deployment request; the issue names no test file, so locate the relevant deployment tests before confirming the change.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
backend, cloud
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.