AWS Lambda actions

preview

We're still working on this feature, but we'd love for you to try it out!

This feature is currently provided as part of a preview program pursuant to our pre-release policies.

This page provides a comprehensive reference for AWS Lambda actions available in the workflow automation actions catalog. These actions enable you to manage and invoke Lambda functions as part of your workflow definitions.

Prerequisites

Before using AWS Lambda actions in workflow automation, ensure you have:

An AWS account with appropriate permissions.
AWS credentials configured (IAM user credentials, IAM role ARN, or session credentials).
The necessary IAM permissions for Lambda operations.

See Set up AWS credentials for information on how to create IAM users and IAM roles, and set up static and session AWS credentials for integration with workflow automation AWS actions.

Lambda actions

Invokes a Lambda function synchronously or asynchronously with an optional payload.

Input Field	Optionality	Type	Example
awsRoleArn	Optional	String	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	Optional	String	`${{ :secrets:<awsAccessKeyId> }}`
awsSecretAccessKey	Optional	String	`${{ :secrets:<awsSecretAccessKey> }}`
awsSessionToken	Optional	String	`${{ :secrets:<awsSessionToken> }}`
region	Required	String	`"us-east-2"`
functionName	Required	String	`functionName: "hello-you"`
payload	Optional	Map	`payload:user: R2-D2`
selectors	Optional	List	`[{\"name\": \"payload\", \"expression\": \".payload\"}]`

Output Field	Type	Example
payload	Map	`{ statusCode=200.0, body=\"Hello R2-D2!\" }`
statusCode	Int	`statusCode: 200`
executedVersion	String	`executedVersion: "$LATEST"`
functionError	String	`functionError: "Unhandled::Error occurred"`
success	Boolean	`Status of the request`
errorMessage	String	`Failure reason as message`

重要

In action input at least one of the AWS Credentials (short, long, role) should be provided, where role take precedence over the others.
In action input, if awsAccessKeyId and awsSecretAccessKey are to be provided make sure they are static credentials of an IAM user.
If session credentials are to be used, awsAccessKeyId, awsSecretAccessKey and awsSessionToken must be passed to action input.
The credential owner must have the lambda:InvokeFunction IAM permission to invoke the lambda function passed in the action input.
The selectors to get the only specified parameters as output.

Workflow definition	Inputs	Outputs	Outputs when selectors are provided
name: LambdaTest workflowInputs: region: type: String functionName: type: String payload: type: Map defaultValue: {} steps: - name: awsLambda type: action action: aws.lambda.invoke version: 1 inputs: region: ${{ .workflowInputs.region }} functionName: ${{ .workflowInputs.functionName }} awsAccessKeyId: ${{ :secrets:awsAccessKeyId }} awsSecretAccessKey: ${{ :secrets:awsSecretAccessKey }} awsSessionToken: ${{ :secrets:awsSessionToken }} payload: ${{ .workflowInputs.payload }} selectors: ${{ .workflowInputs.selectors }} - name: logOutput type: action action: newrelic.instrumentation.log version: 1 inputs: message: 'The lambda function message output is:${{ .steps.awsLambda.outputs.payload.body }}' licenseKey: '${{ :secrets:STAGING_NEW_RELIC_LICENSE_KEY }}'	`{ "inputs": [ { "key": "region" "value": "\"us-east-2\"" }, { "key": "functionName" "value": "\"hello-you\"" }, { "key": "payload" "value": "{\"user\":\"R2-D2\"}" }, { "key": "selectors" "value": "[{\"name\": \"payload\", \"expression\": \".payload\"}]" } ] }`	`Success case: { success: true executedVersion=$LATEST, statusCode=200, payload={ statusCode=200.0, body=\"Hello R2-D2\" } } Failure case: { "errorMessage": "Invalid format", "success": false }`	`{ payload={ statusCode=200.0, body=\"Hello R2-D2\" } }`

Workflow definition

Inputs

Outputs

Outputs when selectors are provided

name: LambdaTest

  workflowInputs:
    region:
      type: String
    functionName:
      type: String
    payload:
      type: Map
      defaultValue: {}

  steps:
    - name: awsLambda
      type: action
      action: aws.lambda.invoke
      version: 1
      inputs:
        region: ${{ .workflowInputs.region }}
        functionName: ${{ .workflowInputs.functionName }}
        awsAccessKeyId: ${{ :secrets:awsAccessKeyId }}
        awsSecretAccessKey: ${{ :secrets:awsSecretAccessKey }}
        awsSessionToken: ${{ :secrets:awsSessionToken }}
        payload: ${{ .workflowInputs.payload }}
        selectors: ${{ .workflowInputs.selectors }}
    
    - name: logOutput
      type: action
      action: newrelic.instrumentation.log
      version: 1
      inputs:
        message: 'The lambda function message output is:${{ .steps.awsLambda.outputs.payload.body }}'
        licenseKey: '${{ :secrets:STAGING_NEW_RELIC_LICENSE_KEY }}'

{
    "inputs": [
          {
              "key": "region"
              "value": "\"us-east-2\""
          },
          {
              "key": "functionName"
              "value": "\"hello-you\""
          },
          {
              "key": "payload"
              "value": "{\"user\":\"R2-D2\"}"
          },
          {
              "key": "selectors"
              "value": "[{\"name\": \"payload\", \"expression\": \".payload\"}]"
          }
    ]
  }

Success case:
  {
    success: true
    executedVersion=$LATEST, 
    statusCode=200, 
    payload={
      statusCode=200.0, 
      body=\"Hello R2-D2\"
    }
  }

Failure case:
  {
    "errorMessage": "Invalid format",
    "success": false
  }

{
    payload={
      statusCode=200.0, 
      body=\"Hello R2-D2\"
    }
  }

Modifies the configuration of a specific AWS Lambda function. Provide only the parameters you want to change.

Input Field	Optionality	Type	Example
awsRoleArn	Optional	String	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	Optional	String	`${{ :secrets:<awsAccessKeyId> }}`
awsSecretAccessKey	Optional	String	`${{ :secrets:<awsSecretAccessKey> }}`
awsSessionToken	Optional	String	`${{ :secrets:<awsSessionToken> }}`
region	Required	String	`"us-east-2"`
functionName	Required	String	`"my-lambda-function-to-update"`
role	Optional	String	`arn:aws:iam::123456789012:role/new-lambda-role`
handler	Optional	String	`"main.new_handler"`
description	Optional	String	`Updated function description`
parameters	Optional	Map	`{ "Timeout": "60", "MemorySize": 123, },`
selectors	Optional	List	`[{\"name\": \"response\", \"expression\": \".response\"}, {\"name\": \"success\", \"expression\": \".success\"}, {\"name\": \"errorMessage\", \"expression\": \".errorMessage\"}]`

重要

To support a wide range of inputs, the parameters map accepts any optional argument available. This allows you to dynamically construct requests by adding multiple fields.

Output Field	Type	Example
response	object	[{"success":true,"response":{"FunctionName":"hello-you","FunctionArn":"arn:aws:lambda:us-east-2:----:function:hello-you","Runtime":"nodejs20.x","Role":"arn:aws:iam::----:role/TF-hello-you-role","Handler":"hello-you.handler","CodeSize":334,"Description":"This is hello you description from action","Timeout":30,"MemorySize":128,"LastModified":"2025-09-23T13:57:03.000+0000","CodeSha256":"CU03aDDg+34=","Version":"$LATEST","TracingConfig":{"Mode":"PassThrough"},"RevisionId":"0f1e4d9b-c45a-4896-a32d-7cd78e77a273","State":"Active","LastUpdateStatus":"InProgress","LastUpdateStatusReason":"The function is being created.","LastUpdateStatusReasonCode":"Creating","PackageType":"Zip","Architectures":["x86_64"],"EphemeralStorage":{"Size":512},"SnapStart":{"ApplyOn":"None","OptimizationStatus":"Off"},"RuntimeVersionConfig":{"RuntimeVersionArn":"arn:aws:lambda:us-east-2::runtime:01eab27397bfdbdc243d363698d4bc355e3c8176d34a51cd47dfe58cf977f508"},"LoggingConfig":{"LogFormat":"Text","LogGroup":"/aws/lambda/hello-you"}}}] Response syntax can be referred to update_function_configuration - Boto3 documentation
success	Boolean	`success: true \| false`
errorMessage	String	`[ { "errorMessage": "An error occurred (ResourceNotFoundException) when calling the UpdateFunctionConfiguration operation: Function not found: arn:aws:lambda:us-east-2:661945836867:function:my-lambda-function-to-update", "success": false, "response": null } ]`

Output Field

Type

Example

response

object

[{"success":true,"response":{"FunctionName":"hello-you","FunctionArn":"arn:aws:lambda:us-east-2:----:function:hello-you","Runtime":"nodejs20.x","Role":"arn:aws:iam::----:role/TF-hello-you-role","Handler":"hello-you.handler","CodeSize":334,"Description":"This is hello you description from action","Timeout":30,"MemorySize":128,"LastModified":"2025-09-23T13:57:03.000+0000","CodeSha256":"CU03aDDg+34=","Version":"$LATEST","TracingConfig":{"Mode":"PassThrough"},"RevisionId":"0f1e4d9b-c45a-4896-a32d-7cd78e77a273","State":"Active","LastUpdateStatus":"InProgress","LastUpdateStatusReason":"The function is being created.","LastUpdateStatusReasonCode":"Creating","PackageType":"Zip","Architectures":["x86_64"],"EphemeralStorage":{"Size":512},"SnapStart":{"ApplyOn":"None","OptimizationStatus":"Off"},"RuntimeVersionConfig":{"RuntimeVersionArn":"arn:aws:lambda:us-east-2::runtime:01eab27397bfdbdc243d363698d4bc355e3c8176d34a51cd47dfe58cf977f508"},"LoggingConfig":{"LogFormat":"Text","LogGroup":"/aws/lambda/hello-you"}}}]

Response syntax can be referred to update_function_configuration - Boto3 documentation

success

Boolean

success: true | false

errorMessage

String

[ { "errorMessage": "An error occurred (ResourceNotFoundException) when calling the UpdateFunctionConfiguration operation: Function not found: arn:aws:lambda:us-east-2:661945836867:function:my-lambda-function-to-update", "success": false, "response": null } ]

Workflow example
`name: lambda-update-config-test description: 'Updates the timeout and memory of a Lambda function' workflowInputs: arnRole: type: String steps: - name: aws_lambda_update_function_configuration_1 type: action action: aws.lambda.updateFunctionConfiguration version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-west-2 functionName: my-lambda-function-to-update parameters: Timeout:60 MemorySize:123 next: end`

Workflow example

name: lambda-update-config-test
  description: 'Updates the timeout and memory of a Lambda function'
  workflowInputs:
    arnRole:
      type: String
  steps:
    - name: aws_lambda_update_function_configuration_1
      type: action
      action: aws.lambda.updateFunctionConfiguration
      version: '1'
      inputs:
        awsRoleArn: ${{ .workflowInputs.arnRole }}
        region: us-west-2
        functionName: my-lambda-function-to-update
        parameters:
        Timeout:60
        MemorySize:123

      next: end

Retrieves the configuration details, code location, and other metadata for a specific AWS Lambda function.

Input Field	Optionality	Type	Example
awsRoleArn	Optional	String	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	Optional	String	`${{ :secrets:<awsAccessKeyId> }}`
awsSecretAccessKey	Optional	String	`${{ :secrets:<awsSecretAccessKey> }}`
awsSessionToken	Optional	String	`${{ :secrets:<awsSessionToken> }}`
region	Required	String	`"us-east-2"`
functionName	Required	String	`"my-lambda-function"`
parameters	Optional	Map	`{ "Qualifier": "1" },`
selectors	Optional	List	`[[{"name": "response", "expression": ".response"}]`

重要

To support a wide range of inputs, the parameters map accepts any optional argument available. This allows you to dynamically construct requests by adding multiple fields.

Output Field	Type	Example
response	object	`{"response":<aws api response> }` Response syntax can be referred to update_function_configuration - Boto3 documentation
success	Boolean	`success: true \| false`
errorMessage	String	`"errorMessage": "ResourceNotFoundException: Function not found"`

Output Field

Type

Example

response

object

{"response":<aws api response> }

Response syntax can be referred to update_function_configuration - Boto3 documentation

success

Boolean

success: true | false

errorMessage

String

"errorMessage": "ResourceNotFoundException: Function not found"

Workflow example
`name: lambda-get-function-test description: 'Retrieves the configuration of a specific Lambda function' workflowInputs: arnRole: type: String steps: - name: aws_lambda_getFunction_1 type: action action: aws.lambda.getFunction version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 FunctionName: hello-you parameters: Qualifier: 1 next: end`

Workflow example

name: lambda-get-function-test
  description: 'Retrieves the configuration of a specific Lambda function'
  workflowInputs:
    arnRole:
      type: String
  steps:
    - name: aws_lambda_getFunction_1
      type: action
      action: aws.lambda.getFunction
      version: '1'
      inputs:
        awsRoleArn: ${{ .workflowInputs.arnRole }}
        region: us-east-1
        FunctionName: hello-you
        parameters:
          Qualifier: 1
      next: end

Returns a list of aliases for a specific AWS Lambda function. Aliases are pointers to function versions.

Input Field	Optionality	Type	Example
awsRoleArn	Optional	String	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	Optional	String	`${{ :secrets:<awsAccessKeyId> }}`
awsSecretAccessKey	Optional	String	`${{ :secrets:<awsSecretAccessKey> }}`
awsSessionToken	Optional	String	`${{ :secrets:<awsSessionToken> }}`
region	Required	String	`"us-east-2"`
functionName	Required	String	`"my-lambda-function"`
marker	Optional	String	Pass the `NextMarker` token from a previous response for pagination. e.g., `"abcd....."`
maxItems	Optional	Int	Limit the number of aliases returned e.g., `123`
parameters	Optional	Map	For additional optional API parameters. e.g., `{"AnotherOptionalParam": "value"}`
selectors	Optional	List	`[{"name": "response", "expression": ".response"}]`

重要

Pagination: Use the Marker and MaxItems inputs to paginate through a large number of aliases.
To support a wide range of inputs, the parameters map accepts any optional argument available. This allows you to dynamically construct requests by adding multiple fields.

Output Field	Type	Example
response	object	`{"response":<aws api response> }` Response syntax can be referred to update_function_configuration - Boto3 documentation
success	Boolean	`success: true \| false`
errorMessage	String	`"errorMessage": "ResourceNotFoundException: Function not found"`

Output Field

Type

Example

response

object

{"response":<aws api response> }

Response syntax can be referred to update_function_configuration - Boto3 documentation

success

Boolean

success: true | false

errorMessage

String

"errorMessage": "ResourceNotFoundException: Function not found"

Workflow example
`name: lambda-list-aliases-test description: 'Lists all aliases for a Lambda function' workflowInputs: arnRole: type: String steps: - name: aws_lambda_list_aliases_1 type: action action: aws.lambda.listAliases version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 functionName: hello-you parameters: FunctionVersion: 1 next: end`

Workflow example

name: lambda-list-aliases-test
  description: 'Lists all aliases for a Lambda function'
  workflowInputs:
    arnRole:
      type: String
  steps:
    - name: aws_lambda_list_aliases_1
      type: action
      action: aws.lambda.listAliases
      version: '1'
      inputs:
        awsRoleArn: ${{ .workflowInputs.arnRole }}
        region: us-east-1
        functionName: hello-you
        parameters:
          FunctionVersion: 1
      next: end

preview

Prerequisites

Lambda actions

Invoke Lambda function

重要

Update the configuration of a specific Lambda function.

重要

Describe a specific Lambda function in an AWS account

重要

List the aliases for a specific Lambda function.

重要

AWS Lambda actions

preview

Prerequisites.css-21sua1{background:none;border:none;width:0;padding:0;}

Lambda actions

Update the configuration of a specific Lambda function.

Describe a specific Lambda function in an AWS account

List the aliases for a specific Lambda function.

Prerequisites