Regenerating amazonka-lambda from latest service definition

amazonka-lambda/gen/Network/AWS/Lambda.hs

@@ -25,6 +25,9 @@ module Network.AWS.Lambda
     -- * Errors
     -- $errors
 
+    -- ** KMSInvalidStateException
+    , _KMSInvalidStateException
+
     -- ** EC2ThrottledException
     , _EC2ThrottledException
 
@@ -43,6 +46,9 @@ module Network.AWS.Lambda
     -- ** InvalidRequestContentException
     , _InvalidRequestContentException
 
+    -- ** KMSNotFoundException
+    , _KMSNotFoundException
+
     -- ** ENILimitReachedException
     , _ENILimitReachedException
 
@@ -58,6 +64,9 @@ module Network.AWS.Lambda
     -- ** InvalidSecurityGroupIdException
     , _InvalidSecurityGroupIdException
 
+    -- ** KMSDisabledException
+    , _KMSDisabledException
+
     -- ** SubnetIPAddressLimitReachedException
     , _SubnetIPAddressLimitReachedException
 
@@ -79,6 +88,9 @@ module Network.AWS.Lambda
     -- ** ResourceNotFoundException
     , _ResourceNotFoundException
 
+    -- ** KMSAccessDeniedException
+    , _KMSAccessDeniedException
+
     -- * Waiters
     -- $waiters
 
@@ -176,6 +188,23 @@ module Network.AWS.Lambda
     , acAliasARN
     , acDescription
 
+    -- ** Environment
+    , Environment
+    , environment
+    , eVariables
+
+    -- ** EnvironmentError
+    , EnvironmentError
+    , environmentError
+    , eeErrorCode
+    , eeMessage
+
+    -- ** EnvironmentResponse
+    , EnvironmentResponse
+    , environmentResponse
+    , envVariables
+    , envError
+
     -- ** EventSourceMappingConfiguration
     , EventSourceMappingConfiguration
     , eventSourceMappingConfiguration
@@ -208,6 +237,8 @@ module Network.AWS.Lambda
     , fcMemorySize
     , fcRuntime
     , fcFunctionARN
+    , fcKMSKeyARN
+    , fcEnvironment
     , fcRole
     , fcVPCConfig
     , fcVersion

amazonka-lambda/gen/Network/AWS/Lambda/AddPermission.hs

@@ -77,7 +77,7 @@ data AddPermission = AddPermission'
 --
 -- Use one of the following lenses to modify other fields as desired:
 --
--- * 'apSourceAccount' - This parameter is used for S3 and SES only. The AWS account ID (without a hyphen) of the source owner. For example, if the @SourceArn@ identifies a bucket, then this is the bucket owner's account ID. You can use this additional condition to ensure the bucket you specify is owned by a specific account (it is possible the bucket owner deleted the bucket and some other AWS account created the bucket). You can also use this condition to specify all sources (that is, you don't specify the @SourceArn@ ) owned by a specific account.
+-- * 'apSourceAccount' - This parameter is used for S3, SES, CloudWatch Logs and CloudWatch Rules only. The AWS account ID (without a hyphen) of the source owner. For example, if the @SourceArn@ identifies a bucket, then this is the bucket owner's account ID. You can use this additional condition to ensure the bucket you specify is owned by a specific account (it is possible the bucket owner deleted the bucket and some other AWS account created the bucket). You can also use this condition to specify all sources (that is, you don't specify the @SourceArn@ ) owned by a specific account.
 --
 -- * 'apEventSourceToken' - A unique token that must be supplied by the principal invoking the function. This is currently only used for Alexa Smart Home functions.
 --
@@ -110,7 +110,7 @@ addPermission pFunctionName_ pStatementId_ pAction_ pPrincipal_ =
     , _apPrincipal = pPrincipal_
     }
 
--- | This parameter is used for S3 and SES only. The AWS account ID (without a hyphen) of the source owner. For example, if the @SourceArn@ identifies a bucket, then this is the bucket owner's account ID. You can use this additional condition to ensure the bucket you specify is owned by a specific account (it is possible the bucket owner deleted the bucket and some other AWS account created the bucket). You can also use this condition to specify all sources (that is, you don't specify the @SourceArn@ ) owned by a specific account.
+-- | This parameter is used for S3, SES, CloudWatch Logs and CloudWatch Rules only. The AWS account ID (without a hyphen) of the source owner. For example, if the @SourceArn@ identifies a bucket, then this is the bucket owner's account ID. You can use this additional condition to ensure the bucket you specify is owned by a specific account (it is possible the bucket owner deleted the bucket and some other AWS account created the bucket). You can also use this condition to specify all sources (that is, you don't specify the @SourceArn@ ) owned by a specific account.
 apSourceAccount :: Lens' AddPermission (Maybe Text)
 apSourceAccount = lens _apSourceAccount (\ s a -> s{_apSourceAccount = a});
 

amazonka-lambda/gen/Network/AWS/Lambda/CreateFunction.hs

@@ -32,6 +32,8 @@ module Network.AWS.Lambda.CreateFunction
     , CreateFunction
     -- * Request Lenses
     , cfMemorySize
+    , cfKMSKeyARN
+    , cfEnvironment
     , cfVPCConfig
     , cfTimeout
     , cfDescription
@@ -49,6 +51,8 @@ module Network.AWS.Lambda.CreateFunction
     , fcMemorySize
     , fcRuntime
     , fcFunctionARN
+    , fcKMSKeyARN
+    , fcEnvironment
     , fcRole
     , fcVPCConfig
     , fcVersion
@@ -75,6 +79,8 @@ import           Network.AWS.Response
 -- /See:/ 'createFunction' smart constructor.
 data CreateFunction = CreateFunction'
     { _cfMemorySize   :: !(Maybe Nat)
+    , _cfKMSKeyARN    :: !(Maybe Text)
+    , _cfEnvironment  :: !(Maybe Environment)
     , _cfVPCConfig    :: !(Maybe VPCConfig)
     , _cfTimeout      :: !(Maybe Nat)
     , _cfDescription  :: !(Maybe Text)
@@ -92,6 +98,10 @@ data CreateFunction = CreateFunction'
 --
 -- * 'cfMemorySize' - The amount of memory, in MB, your Lambda function is given. Lambda uses this memory size to infer the amount of CPU and memory allocated to your function. Your function use-case determines your CPU and memory requirements. For example, a database operation might need less memory compared to an image processing function. The default value is 128 MB. The value must be a multiple of 64 MB.
 --
+-- * 'cfKMSKeyARN' - The Amazon Resource Name (ARN) of the KMS key used to encrypt your function's environment variables. If not provided, AWS Lambda will use a default service key.
+--
+-- * 'cfEnvironment' - Undocumented member.
+--
 -- * 'cfVPCConfig' - If your Lambda function accesses resources in a VPC, you provide this parameter identifying the list of security group IDs and subnet IDs. These must belong to the same VPC. You must provide at least one security group and one subnet ID.
 --
 -- * 'cfTimeout' - The function execution time at which Lambda should terminate the function. Because the execution time has cost implications, we recommend you set this value based on your expected execution time. The default is 3 seconds.
@@ -119,6 +129,8 @@ createFunction
 createFunction pFunctionName_ pRuntime_ pRole_ pHandler_ pCode_ =
     CreateFunction'
     { _cfMemorySize = Nothing
+    , _cfKMSKeyARN = Nothing
+    , _cfEnvironment = Nothing
     , _cfVPCConfig = Nothing
     , _cfTimeout = Nothing
     , _cfDescription = Nothing
@@ -134,6 +146,14 @@ createFunction pFunctionName_ pRuntime_ pRole_ pHandler_ pCode_ =
 cfMemorySize :: Lens' CreateFunction (Maybe Natural)
 cfMemorySize = lens _cfMemorySize (\ s a -> s{_cfMemorySize = a}) . mapping _Nat;
 
+-- | The Amazon Resource Name (ARN) of the KMS key used to encrypt your function's environment variables. If not provided, AWS Lambda will use a default service key.
+cfKMSKeyARN :: Lens' CreateFunction (Maybe Text)
+cfKMSKeyARN = lens _cfKMSKeyARN (\ s a -> s{_cfKMSKeyARN = a});
+
+-- | Undocumented member.
+cfEnvironment :: Lens' CreateFunction (Maybe Environment)
+cfEnvironment = lens _cfEnvironment (\ s a -> s{_cfEnvironment = a});
+
 -- | If your Lambda function accesses resources in a VPC, you provide this parameter identifying the list of security group IDs and subnet IDs. These must belong to the same VPC. You must provide at least one security group and one subnet ID.
 cfVPCConfig :: Lens' CreateFunction (Maybe VPCConfig)
 cfVPCConfig = lens _cfVPCConfig (\ s a -> s{_cfVPCConfig = a});
@@ -187,6 +207,8 @@ instance ToJSON CreateFunction where
           = object
               (catMaybes
                  [("MemorySize" .=) <$> _cfMemorySize,
+                  ("KMSKeyArn" .=) <$> _cfKMSKeyARN,
+                  ("Environment" .=) <$> _cfEnvironment,
                   ("VpcConfig" .=) <$> _cfVPCConfig,
                   ("Timeout" .=) <$> _cfTimeout,
                   ("Description" .=) <$> _cfDescription,

amazonka-lambda/gen/Network/AWS/Lambda/GetFunction.hs

@@ -110,7 +110,7 @@ instance ToQuery GetFunction where
         toQuery GetFunction'{..}
           = mconcat ["Qualifier" =: _gfQualifier]
 
--- | This response contains the object for the Lambda function location (see .
+-- | This response contains the object for the Lambda function location (see 'FunctionCodeLocation' .
 --
 --
 --

amazonka-lambda/gen/Network/AWS/Lambda/GetFunctionConfiguration.hs

@@ -41,6 +41,8 @@ module Network.AWS.Lambda.GetFunctionConfiguration
     , fcMemorySize
     , fcRuntime
     , fcFunctionARN
+    , fcKMSKeyARN
+    , fcEnvironment
     , fcRole
     , fcVPCConfig
     , fcVersion

amazonka-lambda/gen/Network/AWS/Lambda/Invoke.hs

@@ -18,7 +18,7 @@
 -- Stability   : auto-generated
 -- Portability : non-portable (GHC extensions)
 --
--- Invokes a specific Lambda function.
+-- Invokes a specific Lambda function. For an example, see <http://docs.aws.amazon.com/lambda/latest/dg/with-dynamodb-create-function.html#with-dbb-invoke-manually Create the Lambda Function and Test It Manually> .
 --
 --
 -- If you are using the versioning feature, you can invoke the specific function version by providing function version or alias name that is pointing to the function version using the @Qualifier@ parameter in the request. If you don't provide the @Qualifier@ parameter, the @> LATEST@ version of the Lambda function is invoked. Invocations occur at least once in response to an event and functions must be idempotent to handle this. For information about the versioning feature, see <http://docs.aws.amazon.com/lambda/latest/dg/versioning-aliases.html AWS Lambda Function Versioning and Aliases> .
@@ -178,7 +178,7 @@ data InvokeResponse = InvokeResponse'
 --
 -- * 'irsLogResult' - It is the base64-encoded logs for the Lambda function invocation. This is present only if the invocation type is @RequestResponse@ and the logs were requested.
 --
--- * 'irsPayload' - It is the JSON representation of the object returned by the Lambda function. In This is present only if the invocation type is @RequestResponse@ .  In the event of a function error this field contains a message describing the error. For the @Handled@ errors the Lambda function will report this message. For @Unhandled@ errors AWS Lambda reports the message.
+-- * 'irsPayload' - It is the JSON representation of the object returned by the Lambda function. This is present only if the invocation type is @RequestResponse@ .  In the event of a function error this field contains a message describing the error. For the @Handled@ errors the Lambda function will report this message. For @Unhandled@ errors AWS Lambda reports the message.
 --
 -- * 'irsStatusCode' - The HTTP status code will be in the 200 range for successful request. For the @RequestResonse@ invocation type this status code will be 200. For the @Event@ invocation type this status code will be 202. For the @DryRun@ invocation type the status code will be 204.
 invokeResponse
@@ -200,7 +200,7 @@ irsFunctionError = lens _irsFunctionError (\ s a -> s{_irsFunctionError = a});
 irsLogResult :: Lens' InvokeResponse (Maybe Text)
 irsLogResult = lens _irsLogResult (\ s a -> s{_irsLogResult = a});
 
--- | It is the JSON representation of the object returned by the Lambda function. In This is present only if the invocation type is @RequestResponse@ .  In the event of a function error this field contains a message describing the error. For the @Handled@ errors the Lambda function will report this message. For @Unhandled@ errors AWS Lambda reports the message.
+-- | It is the JSON representation of the object returned by the Lambda function. This is present only if the invocation type is @RequestResponse@ .  In the event of a function error this field contains a message describing the error. For the @Handled@ errors the Lambda function will report this message. For @Unhandled@ errors AWS Lambda reports the message.
 irsPayload :: Lens' InvokeResponse (Maybe (HashMap Text Value))
 irsPayload = lens _irsPayload (\ s a -> s{_irsPayload = a});
 

amazonka-lambda/gen/Network/AWS/Lambda/ListEventSourceMappings.hs

@@ -142,7 +142,7 @@ instance ToQuery ListEventSourceMappings where
                "Marker" =: _lesmMarker, "MaxItems" =: _lesmMaxItems,
                "FunctionName" =: _lesmFunctionName]
 
--- | Contains a list of event sources (see )
+-- | Contains a list of event sources (see 'EventSourceMappingConfiguration' )
 --
 --
 --

amazonka-lambda/gen/Network/AWS/Lambda/PublishVersion.hs

@@ -38,6 +38,8 @@ module Network.AWS.Lambda.PublishVersion
     , fcMemorySize
     , fcRuntime
     , fcFunctionARN
+    , fcKMSKeyARN
+    , fcEnvironment
     , fcRole
     , fcVPCConfig
     , fcVersion

amazonka-lambda/gen/Network/AWS/Lambda/Types.hs

@@ -16,24 +16,28 @@ module Network.AWS.Lambda.Types
       lambda
 
     -- * Errors
+    , _KMSInvalidStateException
     , _EC2ThrottledException
     , _PolicyLengthExceededException
     , _EC2AccessDeniedException
     , _InvalidSubnetIdException
     , _UnsupportedMediaTypeException
     , _InvalidRequestContentException
+    , _KMSNotFoundException
     , _ENILimitReachedException
     , _InvalidParameterValueException
     , _RequestTooLargeException
     , _TooManyRequestsException
     , _InvalidSecurityGroupIdException
+    , _KMSDisabledException
     , _SubnetIPAddressLimitReachedException
     , _ServiceException
     , _CodeStorageExceededException
     , _InvalidZipFileException
     , _ResourceConflictException
     , _EC2UnexpectedException
     , _ResourceNotFoundException
+    , _KMSAccessDeniedException
 
     -- * EventSourcePosition
     , EventSourcePosition (..)
@@ -55,6 +59,23 @@ module Network.AWS.Lambda.Types
     , acAliasARN
     , acDescription
 
+    -- * Environment
+    , Environment
+    , environment
+    , eVariables
+
+    -- * EnvironmentError
+    , EnvironmentError
+    , environmentError
+    , eeErrorCode
+    , eeMessage
+
+    -- * EnvironmentResponse
+    , EnvironmentResponse
+    , environmentResponse
+    , envVariables
+    , envError
+
     -- * EventSourceMappingConfiguration
     , EventSourceMappingConfiguration
     , eventSourceMappingConfiguration
@@ -87,6 +108,8 @@ module Network.AWS.Lambda.Types
     , fcMemorySize
     , fcRuntime
     , fcFunctionARN
+    , fcKMSKeyARN
+    , fcEnvironment
     , fcRole
     , fcVPCConfig
     , fcVersion
@@ -152,6 +175,13 @@ lambda =
       | has (hasStatus 509) e = Just "limit_exceeded"
       | otherwise = Nothing
 
+-- | Lambda was unable to decrypt the environment variables because the KMS key used is in an invalid state for Decrypt. Please check the function's KMS key settings.
+--
+--
+_KMSInvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError
+_KMSInvalidStateException =
+    _ServiceError . hasStatus 502 . hasCode "KMSInvalidStateException"
+
 -- | AWS Lambda was throttled by Amazon EC2 during Lambda function initialization using the execution role provided for the Lambda function.
 --
 --
@@ -194,6 +224,13 @@ _InvalidRequestContentException :: AsError a => Getting (First ServiceError) a S
 _InvalidRequestContentException =
     _ServiceError . hasStatus 400 . hasCode "InvalidRequestContentException"
 
+-- | Lambda was unable to decrypt the environment variables because the KMS key was not found. Please check the function's KMS key settings.
+--
+--
+_KMSNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
+_KMSNotFoundException =
+    _ServiceError . hasStatus 502 . hasCode "KMSNotFoundException"
+
 -- | AWS Lambda was not able to create an Elastic Network Interface (ENI) in the VPC, specified as part of Lambda function configuration, because the limit for network interfaces has been reached.
 --
 --
@@ -229,6 +266,13 @@ _InvalidSecurityGroupIdException :: AsError a => Getting (First ServiceError) a
 _InvalidSecurityGroupIdException =
     _ServiceError . hasStatus 502 . hasCode "InvalidSecurityGroupIDException"
 
+-- | Lambda was unable to decrypt the environment variables because the KMS key used is disabled. Please check the Lambda function's KMS key settings.
+--
+--
+_KMSDisabledException :: AsError a => Getting (First ServiceError) a ServiceError
+_KMSDisabledException =
+    _ServiceError . hasStatus 502 . hasCode "KMSDisabledException"
+
 -- | AWS Lambda was not able to set up VPC access for the Lambda function because one or more configured subnets has no available IP addresses.
 --
 --
@@ -277,3 +321,10 @@ _EC2UnexpectedException =
 _ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError
 _ResourceNotFoundException =
     _ServiceError . hasStatus 404 . hasCode "ResourceNotFoundException"
+
+-- | Lambda was unable to decrypt the environment variables becauses KMS access was denied. Please check the Lambda function's KMS permissions.
+--
+--
+_KMSAccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError
+_KMSAccessDeniedException =
+    _ServiceError . hasStatus 502 . hasCode "KMSAccessDeniedException"