AWS Lambda supports Customer Managed Key (CMK) encryption for Zip function code artifacts

The article discusses the new support for Customer Managed Key (CMK) encryption for Lambda function code Zip artifacts in AWS Lambda.

Specifically, the article covers:

• AWS Lambda now supports encryption of Lambda function code Zip artifacts using customer-managed AWS Key Management Service (KMS) keys instead of default AWS-owned keys.
• This allows customers to satisfy organizational security and governance requirements by using their own keys to encrypt function code.
• Customers can encrypt new or existing function Zip code artifacts by providing a KMS key when creating or updating a function.
• When the KMS key is disabled, Lambda and users cannot access the Zip artifacts, providing revocation control.
• If no key is provided, Lambda still secures the Zip code artifacts with AWS-managed encryption.
• The feature is available in all AWS Regions where Lambda is available, except the China Regions.