aws-cdk-lib.aws_lambda.ParamsAndSecretsOptions

ParamsAndSecretsOptions Struct

Parameters and Secrets Extension configuration options.

Source

aws-lambda/lib/params-and-secrets-layers.ts

Type last changed

v2.84.0 · 14 Jun 2023

Example

import * as sm from 'aws-cdk-lib/aws-secretsmanager';
import * as ssm from 'aws-cdk-lib/aws-ssm';

const secret = new sm.Secret(this, 'Secret');
const parameter = new ssm.StringParameter(this, 'Parameter', {
  parameterName: 'mySsmParameterName',
  stringValue: 'mySsmParameterValue',
});

const paramsAndSecrets = lambda.ParamsAndSecretsLayerVersion.fromVersion(lambda.ParamsAndSecretsVersions.V1_0_103, {
  cacheSize: 500,
  logLevel: lambda.ParamsAndSecretsLogLevel.DEBUG,
});

const lambdaFunction = new lambda.Function(this, 'MyFunction', {
  runtime: lambda.Runtime.NODEJS_LATEST,
  handler: 'index.handler',
  architecture: lambda.Architecture.ARM_64,
  code: lambda.Code.fromAsset(path.join(__dirname, 'lambda-handler')),
  paramsAndSecrets,
});

secret.grantRead(lambdaFunction);
parameter.grantRead(lambdaFunction);

Properties

cacheEnabled?optionalbooleancache_enabled?optionalboolcacheEnabled?optionalBooleanCacheEnabled?optionalboolCacheEnabled?optional*bool= true#

Whether the Parameters and Secrets Extension will cache parameters and secrets.

cacheSize?optionalnumbercache_size?optionalint | floatcacheSize?optionalNumberCacheSize?optionaldoubleCacheSize?optional*float64= 1000#

The maximum number of secrets and parameters to cache.

Must be a value from 0 to 1000. A value of 0 means there is no caching.

Note: This variable is ignored if parameterStoreTtl and secretsManagerTtl are 0.

httpPort?optionalnumberhttp_port?optionalint | floathttpPort?optionalNumberHttpPort?optionaldoubleHttpPort?optional*float64= 2773#

The port for the local HTTP server.

Valid port numbers are 1 - 65535.

logLevel?optionalParamsAndSecretsLogLevellog_level?optionalParamsAndSecretsLogLevellogLevel?optionalParamsAndSecretsLogLevelLogLevel?optionalParamsAndSecretsLogLevelLogLevel?optionalParamsAndSecretsLogLevel#

The level of logging provided by the Parameters and Secrets Extension.

Default: Logging level will be info

Note: Set to debug to see the cache configuration.

maxConnections?optionalnumbermax_connections?optionalint | floatmaxConnections?optionalNumberMaxConnections?optionaldoubleMaxConnections?optional*float64= 3#

The maximum number of connection for HTTP clients that the Parameters and Secrets Extension uses to make requests to Parameter Store or Secrets Manager.

There is no maximum limit. Minimum is 1.

Note: Every running copy of this Lambda function may open the number of connections specified by this property. Thus, the total number of connections may exceed this number.

parameterStoreTimeout?optionalDurationparameter_store_timeout?optionalDurationparameterStoreTimeout?optionalDurationParameterStoreTimeout?optionalDurationParameterStoreTimeout?optionalDuration= 0#

The timeout for requests to Parameter Store.

A value of 0 means that there is no timeout.

parameterStoreTtl?optionalDurationparameter_store_ttl?optionalDurationparameterStoreTtl?optionalDurationParameterStoreTtl?optionalDurationParameterStoreTtl?optionalDuration#

The time-to-live of a parameter in the cache.

Default: 300 seconds

A value of 0 means there is no caching. The maximum time-to-live is 300 seconds.

Note: This variable is ignored if cacheSize is 0.

secretsManagerTimeout?optionalDurationsecrets_manager_timeout?optionalDurationsecretsManagerTimeout?optionalDurationSecretsManagerTimeout?optionalDurationSecretsManagerTimeout?optionalDuration= 0#

The timeout for requests to Secrets Manager.

A value of 0 means that there is no timeout.

secretsManagerTtl?optionalDurationsecrets_manager_ttl?optionalDurationsecretsManagerTtl?optionalDurationSecretsManagerTtl?optionalDurationSecretsManagerTtl?optionalDuration#

The time-to-live of a secret in the cache.

Default: 300 seconds

A value of 0 means there is no caching. The maximum time-to-live is 300 seconds.

Note: This variable is ignored if cacheSize is 0.