AWS Lambda Changelog - Plugin

Changelog

Fixed an issue that occurred when is_proxy_integration was enabled, where Kong Gateway’s response could behave incorrectly when the response was changed after the execution of the AWS Lambda plugin. The Content-Length header in the lambda function response is now ignored by the AWS Lambda plugin.

Fixed an issue in proxy integration mode that caused an internal server error when the multiValueHeaders was null.

Added support for a configurable STS endpoint with the new configuration field aws_sts_endpoint_url. #13388
Added the configuration field empty_arrays_mode to control whether Kong should send [] empty arrays (returned by Lambda function) as [] empty arrays or {} empty objects in JSON responses. #13084
Fixed an issue where the plugin didn’t work with multiValueHeaders defined in proxy integration and legacy empty_arrays_mode. #13381
Fixed an issue where the version field wasn’t set in the request payload when awsgateway_compatible was enabled. #13018

Fixed an issue where the latency attributed to AWS Lambda API requests was counted as part of the latency in Kong Gateway. #12835

The AWS-Lambda plugin has been refactored by using lua-resty-aws as an underlying AWS library. The refactor simplifies the AWS Lambda plugin code base and adds support for multiple IAM authenticating scenarios. #11350
Plugin-level proxy configuration now takes effect when fetching IAM credentials in an EKS environment with IRSA. This improvement allows the EKS IRSA credential provider (TokenFileWebIdentityCredentials) to correctly route requests through the plugin-level proxy configuration when obtaining credentials from the AWS STS service. #11551
The plugin now caches the AWS Lambda service by lambda service related fields. #11821

Added the disable_https configuration field to support HTTP connections to a lambda service. #9799

Added the configuration parameter aws_imds_protocol_version, which lets you select the IMDS protocol version. This option defaults to v1 and can be set to v2 to enable IMDSv2. #9962

The proxy_scheme configuration parameter is deprecated and planned to be removed in 3.x.x.
Kong Gateway 2.8.1.3: Added support for cross-account invocation through the aws_assume_role_arn and aws_role_session_name configuration parameters. #8900
Kong Gateway 2.8.4.0: Backported the parameter aws_imds_protocol_version into 2.8.x.
Kong Gateway 2.8.4.3: The AWS Lambda plugin has been refactored by using lua-resty-aws as an underlying AWS library. The refactor simplifies the AWS Lambda plugin codebase and adds support for multiple IAM authenticating scenarios.

Starting with Kong Gateway 2.7.0.0, if keyring encryption is enabled, the config.aws_key and config.aws_secret parameter values will be encrypted.

The AWS region can now be set with the environment variables: AWS_REGION or AWS_DEFAULT_REGION.
Added support for configurable body base64 encoding via the base64_encode_body parameter, which is true by default.