AWS Lambda durable functions now supports customer managed key encryption
News
AWS Lambda durable functions now support encryption of durable execution data with customer-managed AWS KMS keys, enabling organizations to control encryption and key management.
- Encrypt execution state with customer-managed AWS KMS keys instead of AWS-owned keys
- Manage key rotation and control access to execution history and state independently
- Durable execution key operates separately from function-level encryption for environment variables
- Available in all AWS Regions where Lambda durable functions is supported
- Standard AWS KMS charges apply; no additional Lambda charges for this feature
This enhancement enables regulated industries like financial services and healthcare to meet data governance requirements with customer-controlled encryption keys.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Jul 20
2026
2026
Amazon CloudWatch Synthetics now supports customer managed encryption keys
Jun 23
2026
2026
Amazon Cognito now supports customer managed key for encryption at rest
Nov 11
2024
2024
AWS Lambda supports Customer Managed Key (CMK) encryption for Zip function code artifacts
Dec 2
2025
2025
AWS Lambda announces durable functions for multi-step applications and AI workflows
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.