Skip to content
AWS for Query.Farm

aws.lambda.list_functions

Example SQL Queries

SELECT * FROM
aws.lambda.list_functions;

Description

Returns a list of Lambda functions, with the version-specific configuration of each. Lambda returns up to 50 functions per call.

Set FunctionVersion to ALL to include all published versions of each function in addition to the unpublished version.

The ListFunctions operation returns a subset of the FunctionConfiguration fields. To get the additional fields (State, StateReasonCode, StateReason, LastUpdateStatus, LastUpdateStatusReason, LastUpdateStatusReasonCode, RuntimeVersionConfig) for a function or version, use GetFunction.

Table Definition

Column NameColumn Data Type
function_version Input Column

Set to ALL to include entries for all published versions of each function.

VARCHAR
master_region Input Column

For Lambda@Edge functions, the Amazon Web Services Region of the master function. For example, us-east-1 filters the list of functions to include only Lambda@Edge functions replicated from a master function in US East (N. Virginia). If specified, you must set FunctionVersion to ALL.

VARCHAR
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
    "type" VARCHAR,
    "name" VARCHAR,
    "account_id" VARCHAR,
    "via_profile_name" VARCHAR,
    "assumed_role_arn" VARCHAR,
    "organization" STRUCT(
        "account_name" VARCHAR,
        "id" VARCHAR,
        "tags" STRUCT(
            "key" VARCHAR,
            "value" VARCHAR
        )[],
        "master_account" STRUCT(
            "id" VARCHAR,
            "email" VARCHAR
        ),
        "parents" STRUCT(
            "type" VARCHAR,
            "id" VARCHAR,
            "name" VARCHAR,
            "tags" STRUCT(
                "key" VARCHAR,
                "value" VARCHAR
            )[]
        )[]
    )
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
architectures

The instruction set architecture that the function supports. Architecture is a string array with one of the valid values. The default architecture value is x86_64.

VARCHAR[]
Show child fields
architectures[]
code_sha256

The SHA256 hash of the function's deployment package.

VARCHAR
code_size

The size of the function's deployment package, in bytes.

BIGINT
dead_letter_config

The function's dead letter queue.

STRUCT(
    "target_arn" VARCHAR
)
Show child fields
dead_letter_config.target_arn

The Amazon Resource Name (ARN) of an Amazon SQS queue or Amazon SNS topic.

description

The function's description.

VARCHAR
environment

The function's environment variables. Omitted from CloudTrail logs.

STRUCT(
    "variables" MAP(VARCHAR, VARCHAR),
    "error" STRUCT(
        "error_code" VARCHAR,
        "message" VARCHAR
    )
)
Show child fields
environment.error

Error messages for environment variables that couldn't be applied.

Show child fields
environment.error.error_code

The error code.

environment.error.message

The error message.

environment.variables

Environment variable key-value pairs. Omitted from CloudTrail logs.

ephemeral_storage

The size of the function's /tmp directory in MB. The default value is 512, but can be any whole number between 512 and 10,240 MB. For more information, see Configuring ephemeral storage (console).

STRUCT(
    "size" BIGINT
)
Show child fields
ephemeral_storage.size

The size of the function's /tmp directory.

file_system_configs

Connection settings for an Amazon EFS file system.

STRUCT(
    "arn" VARCHAR,
    "local_mount_path" VARCHAR
)[]
Show child fields
file_system_configs[]
Show child fields
file_system_configs[].arn

The Amazon Resource Name (ARN) of the Amazon EFS access point that provides access to the file system.

file_system_configs[].local_mount_path

The path where the function can access the file system, starting with /mnt/.

function_arn

The function's Amazon Resource Name (ARN).

VARCHAR
function_name

The name of the function.

VARCHAR
handler

The function that Lambda calls to begin running your function.

VARCHAR
image_config_response

The function's image configuration values.

STRUCT(
    "image_config" STRUCT(
        "entry_point" VARCHAR[],
        "command" VARCHAR[],
        "working_directory" VARCHAR
    ),
    "error" STRUCT(
        "error_code" VARCHAR,
        "message" VARCHAR
    )
)
Show child fields
image_config_response.error

Error response to GetFunctionConfiguration.

Show child fields
image_config_response.error.error_code

Error code.

image_config_response.error.message

Error message.

image_config_response.image_config

Configuration values that override the container image Dockerfile.

Show child fields
image_config_response.image_config.command[]
image_config_response.image_config.entry_point[]
image_config_response.image_config.working_directory

Specifies the working directory.

kms_key_arn

The KMS key that's used to encrypt the function's environment variables. When Lambda SnapStart is activated, this key is also used to encrypt the function's snapshot. This key is returned only if you've configured a customer managed key.

VARCHAR
last_modified

The date and time that the function was last updated, in ISO-8601 format (YYYY-MM-DDThh:mm:ss.sTZD).

VARCHAR
last_update_status

The status of the last update that was performed on the function. This is first set to Successful after function creation completes.

VARCHAR
last_update_status_reason

The reason for the last update that was performed on the function.

VARCHAR
last_update_status_reason_code

The reason code for the last update that was performed on the function.

VARCHAR
layers

The function's layers.

STRUCT(
    "arn" VARCHAR,
    "code_size" BIGINT,
    "signing_profile_version_arn" VARCHAR,
    "signing_job_arn" VARCHAR
)[]
Show child fields
layers[]
Show child fields
layers[].arn

The Amazon Resource Name (ARN) of the function layer.

layers[].code_size

The size of the layer archive in bytes.

layers[].signing_job_arn

The Amazon Resource Name (ARN) of a signing job.

layers[].signing_profile_version_arn

The Amazon Resource Name (ARN) for a signing profile version.

logging_config

The function's Amazon CloudWatch Logs configuration settings.

STRUCT(
    "log_format" VARCHAR,
    "application_log_level" VARCHAR,
    "system_log_level" VARCHAR,
    "log_group" VARCHAR
)
Show child fields
logging_config.application_log_level

Set this property to filter the application logs for your function that Lambda sends to CloudWatch. Lambda only sends application logs at the selected level of detail and lower, where TRACE is the highest level and FATAL is the lowest.

logging_config.log_format

The format in which Lambda sends your function's application and system logs to CloudWatch. Select between plain text and structured JSON.

logging_config.log_group

The name of the Amazon CloudWatch log group the function sends logs to. By default, Lambda functions send logs to a default log group named /aws/lambda/<function name>. To use a different log group, enter an existing log group or enter a new log group name.

logging_config.system_log_level

Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where DEBUG is the highest level and WARN is the lowest.

master_arn

For Lambda@Edge functions, the ARN of the main function.

VARCHAR
memory_size

The amount of memory available to the function at runtime.

BIGINT
package_type

The type of deployment package. Set to Image for container image and set Zip for .zip file archive.

VARCHAR
revision_id

The latest updated revision of the function or alias.

VARCHAR
role

The function's execution role.

VARCHAR
runtime

The identifier of the function's runtime. Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.

The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see Runtime use after deprecation.

For a list of all currently supported runtimes, see Supported runtimes.

VARCHAR
runtime_version_config

The ARN of the runtime and any errors that occured.

STRUCT(
    "runtime_version_arn" VARCHAR,
    "error" STRUCT(
        "error_code" VARCHAR,
        "message" VARCHAR
    )
)
Show child fields
runtime_version_config.error

Error response when Lambda is unable to retrieve the runtime version for a function.

Show child fields
runtime_version_config.error.error_code

The error code.

runtime_version_config.error.message

The error message.

runtime_version_config.runtime_version_arn

The ARN of the runtime version you want the function to use.

signing_job_arn

The ARN of the signing job.

VARCHAR
signing_profile_version_arn

The ARN of the signing profile version.

VARCHAR
snap_start

Set ApplyOn to PublishedVersions to create a snapshot of the initialized execution environment when you publish a function version. For more information, see Improving startup performance with Lambda SnapStart.

STRUCT(
    "apply_on" VARCHAR,
    "optimization_status" VARCHAR
)
Show child fields
snap_start.apply_on

When set to PublishedVersions, Lambda creates a snapshot of the execution environment when you publish a function version.

snap_start.optimization_status

When you provide a qualified Amazon Resource Name (ARN), this response element indicates whether SnapStart is activated for the specified function version.

state

The current state of the function. When the state is Inactive, you can reactivate the function by invoking it.

VARCHAR
state_reason

The reason for the function's current state.

VARCHAR
state_reason_code

The reason code for the function's current state. When the code is Creating, you can't invoke or modify the function.

VARCHAR
timeout

The amount of time in seconds that Lambda allows a function to run before stopping it.

BIGINT
tracing_config

The function's X-Ray tracing configuration.

STRUCT(
    "mode" VARCHAR
)
Show child fields
tracing_config.mode

The tracing mode.

version

The version of the Lambda function.

VARCHAR
vpc_config

The function's networking configuration.

STRUCT(
    "subnet_ids" VARCHAR[],
    "security_group_ids" VARCHAR[],
    "vpc_id" VARCHAR,
    "ipv6_allowed_for_dual_stack" BOOLEAN
)
Show child fields
vpc_config.ipv6_allowed_for_dual_stack

Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.

vpc_config.security_group_ids[]
vpc_config.subnet_ids[]
vpc_config.vpc_id

The ID of the VPC.