@@ -128,15 +128,25 @@ final class UpdateFunctionConfigurationRequest extends Input
128
128
private $ deadLetterConfig ;
129
129
130
130
/**
131
- * The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt your function's environment
132
- * variables [^1]. When Lambda SnapStart [^2] is activated, Lambda also uses this key is to encrypt your function's
133
- * snapshot. If you deploy your function using a container image, Lambda also uses this key to encrypt your function
134
- * when it's deployed. Note that this is not the same key that's used to protect your container image in the Amazon
135
- * Elastic Container Registry (Amazon ECR). If you don't provide a customer managed key, Lambda uses a default service
136
- * key.
131
+ * The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt the following resources:
132
+ *
133
+ * - The function's environment variables [^1].
134
+ * - The function's Lambda SnapStart [^2] snapshots.
135
+ * - When used with `SourceKMSKeyArn`, the unzipped version of the .zip deployment package that's used for function
136
+ * invocations. For more information, see Specifying a customer managed key for Lambda [^3].
137
+ * - The optimized version of the container image that's used for function invocations. Note that this is not the same
138
+ * key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more
139
+ * information, see Function lifecycle [^4].
140
+ *
141
+ * If you don't provide a customer managed key, Lambda uses an Amazon Web Services owned key [^5] or an Amazon Web
142
+ * Services managed key [^6].
137
143
*
138
144
* [^1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
139
145
* [^2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
146
+ * [^3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
147
+ * [^4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
148
+ * [^5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
149
+ * [^6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
140
150
*
141
151
* @var string|null
142
152
*/
0 commit comments