Class: Aws::Greengrass::Types::FunctionDefaultExecutionConfig

Inherits:

Struct

Object
Struct
Aws::Greengrass::Types::FunctionDefaultExecutionConfig

show all

Defined in:: gems/aws-sdk-greengrass/lib/aws-sdk-greengrass/types.rb

Overview

Note:

When making an API call, you may pass FunctionDefaultExecutionConfig data as a hash:

{
  isolation_mode: "GreengrassContainer", # accepts GreengrassContainer, NoContainer
  run_as: {
    gid: 1,
    uid: 1,
  },
}

Configuration information that specifies how a Lambda function runs.

Constant Summary collapse

SENSITIVE =

[]

Instance Attribute Summary collapse

#isolation_mode ⇒ String
Specifies whether the Lambda function runs in a Greengrass container (default) or without containerization.
#run_as ⇒ Types::FunctionRunAsConfig
Specifies the user and group whose permissions are used when running the Lambda function.

Instance Attribute Details

#isolation_mode ⇒ `String`

Specifies whether the Lambda function runs in a Greengrass container (default) or without containerization. Unless your scenario requires that you run without containerization, we recommend that you run in a Greengrass container. Omit this value to run the Lambda function with the default containerization for the group.

Returns:

(String)

# File 'gems/aws-sdk-greengrass/lib/aws-sdk-greengrass/types.rb', line 2519

class FunctionDefaultExecutionConfig < Struct.new(
  :isolation_mode,
  :run_as)
  SENSITIVE = []
  include Aws::Structure
end

#run_as ⇒ `Types::FunctionRunAsConfig`

Specifies the user and group whose permissions are used when running the Lambda function. You can specify one or both values to override the default values. We recommend that you avoid running as root unless absolutely necessary to minimize the risk of unintended changes or malicious attacks. To run as root, you must set ''IsolationMode'' to ''NoContainer'' and update config.json in ''greengrass-root/config'' to set ''allowFunctionsToRunAsRoot'' to ''yes''.