Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@opentelemetry/instrumentation-aws-lambda
Advanced tools
OpenTelemetry instrumentation for AWS Lambda function invocations
@opentelemetry/instrumentation-aws-lambda is an npm package that provides automatic instrumentation for AWS Lambda functions using OpenTelemetry. It helps in collecting and exporting telemetry data such as traces and metrics, which can be used for monitoring and observability of serverless applications.
Automatic Tracing
This feature allows you to automatically trace AWS Lambda function invocations. The code sample demonstrates how to set up the NodeTracerProvider and register the AWS Lambda instrumentation.
const { NodeTracerProvider } = require('@opentelemetry/node');
const { AwsLambdaInstrumentation } = require('@opentelemetry/instrumentation-aws-lambda');
const { registerInstrumentations } = require('@opentelemetry/instrumentation');
const provider = new NodeTracerProvider();
provider.register();
registerInstrumentations({
instrumentations: [
new AwsLambdaInstrumentation(),
],
});
exports.handler = async (event) => {
// Your Lambda function code
};
Custom Span Attributes
This feature allows you to add custom attributes to spans within your AWS Lambda function. The code sample shows how to retrieve the current span and set a custom attribute.
const { context, trace } = require('@opentelemetry/api');
exports.handler = async (event) => {
const span = trace.getSpan(context.active());
if (span) {
span.setAttribute('custom.attribute', 'value');
}
// Your Lambda function code
};
Error Handling
This feature allows you to record exceptions and set the status of spans when errors occur in your AWS Lambda function. The code sample demonstrates how to catch errors, record them, and set the span status.
const { context, trace } = require('@opentelemetry/api');
exports.handler = async (event) => {
const span = trace.getSpan(context.active());
try {
// Your Lambda function code
} catch (error) {
if (span) {
span.recordException(error);
span.setStatus({ code: 2, message: error.message });
}
throw error;
}
};
This package provides automatic instrumentation for HTTP and HTTPS modules in Node.js. It is similar to @opentelemetry/instrumentation-aws-lambda in that it helps in collecting telemetry data, but it is specifically designed for HTTP/HTTPS requests rather than AWS Lambda functions.
This package provides automatic instrumentation for Express.js applications. It is similar to @opentelemetry/instrumentation-aws-lambda in terms of providing observability, but it focuses on Express.js middleware and routes instead of AWS Lambda functions.
This package provides automatic instrumentation and monitoring for AWS Lambda functions using Datadog. It is similar to @opentelemetry/instrumentation-aws-lambda in that it helps in collecting telemetry data for Lambda functions, but it is specifically designed to work with Datadog's monitoring platform.
component owners: @jj22ee
This module provides automatic instrumentation for the AWS Lambda
module, which may be loaded using the @opentelemetry/sdk-trace-node
package and is included in the @opentelemetry/auto-instrumentations-node
bundle.
If total installation size is not constrained, it is recommended to use the @opentelemetry/auto-instrumentations-node
bundle with @opentelemetry/sdk-node for the most seamless instrumentation experience.
Compatible with OpenTelemetry JS API and SDK 1.0+
.
This module is currently under active development and not ready for general use.
npm install --save @opentelemetry/instrumentation-aws-lambda
Create a file to initialize the instrumentation, such as lambda-wrapper.js
.
const { NodeTracerProvider } = require('@opentelemetry/sdk-trace-node');
const { AwsLambdaInstrumentation } = require('@opentelemetry/instrumentation-aws-lambda');
const { registerInstrumentations } = require('@opentelemetry/instrumentation');
const provider = new NodeTracerProvider();
provider.register();
registerInstrumentations({
instrumentations: [
new AwsLambdaInstrumentation({
// see under for available configuration
})
],
});
In your Lambda function configuration, add or update the NODE_OPTIONS
environment variable to require the wrapper, e.g.,
NODE_OPTIONS=--require lambda-wrapper
Options | Type | Description |
---|---|---|
requestHook | RequestHook (function) | Hook for adding custom attributes before lambda starts handling the request. Receives params: span, { event, context } |
responseHook | ResponseHook (function) | Hook for adding custom attributes before lambda returns the response. Receives params: span, { err?, res? } |
eventContextExtractor | EventContextExtractor (function) | Function for providing custom context extractor in order to support different event types that are handled by AWS Lambda (e.g., SQS, CloudWatch, Kinesis, API Gateway). |
lambdaHandler | string | By default, this instrumentation automatically determines the Lambda handler function to instrument. This option is used to override that behavior by explicitly specifying the Lambda handler to instrument. See Specifying the Lambda Handler for additional information. |
const { AwsLambdaInstrumentation } = require('@opentelemetry/instrumentation-aws-lambda');
new AwsLambdaInstrumentation({
requestHook: (span, { event, context }) => {
span.setAttribute('faas.name', context.functionName);
},
responseHook: (span, { err, res }) => {
if (err instanceof Error) span.setAttribute('faas.error', err.message);
if (res) span.setAttribute('faas.res', res);
}
})
The instrumentation will attempt to automatically determine the Lambda handler function to instrument. To do this, it relies on the _HANDLER
environment variable which is set by the Lambda runtime. For most use cases, this will accurately represent the handler that should be targeted by this instrumentation.
There exist use cases where the _HANDLER
environment variable does not accurately represent the module that should be targeted by this instrumentation. For these use cases, the lambdaHandler
option can be used to explicitly specify the Lambda handler that should be instrumented.
To better explain when lambdaHandler
should be specified, consider how some telemetry tools, such as Datadog, are instrumented into the Lambda runtime. Datadog does this by overriding the handler function with a wrapper function that is loaded via a Lambda Layer. In these examples, the Lambda's handler will point to the Datadog wrapper and not to the actual handler that should be instrumented. In cases like this, lambdaHandler
should be used to explicitly specify the handler that should be instrumented.
The lambdaHandler
should be specified as a string in the format <file>.<handler>
, where <file>
is the name of the file that contains the handler and <handler>
is the name of the handler function. For example, if the handler is defined in the file index.js
and the handler function is named handler
, the lambdaHandler
should be specified as index.handler
.
One way to determine if the lambdaHandler
option should be used is to check the handler defined on your Lambda. This can be done by determining the value of the _HANDLER
environment variable or by viewing the Runtime Settings of your Lambda in AWS Console. If the handler is what you expect, then the instrumentation should work without the lambdaHandler
option. If the handler points to something else, then the lambdaHandler
option should be used to explicitly specify the handler that should be instrumented.
AWS Active Tracing can provide a parent context for the span generated by this instrumentation. Note that the span generated by Active Tracing is always reported only to AWS X-Ray. Therefore, if the OpenTelemetry SDK is configured to export traces to a backend other than AWS X-Ray, this will result in a broken trace.
If you use version <=0.46.0
of this package, then the Active Tracing context is used as the parent context by default if present. In this case, in order to prevent broken traces, set the disableAwsContextPropagation
option to false
.
Additional propagators can be added in the TracerProvider configuration.
If you use version >0.46.0
, the Active Tracing context is no longer used by default. In order to enable it, include the AWSXRayLambdaPropagator propagator in the list of propagators provided to the TracerProvider via its configuration, or by including xray-lambda
in the OTEL_PROPAGATORS environment variable (see the example below on using the env variable).
Note that there are two AWS-related propagators: AWSXRayPropagator and AWSXRayLambdaPropagator. Here is a guideline for when to use one or the other:
AWSXRayLambdaPropagator
or the xray-lambda
value in the OTEL_PROPAGATORS environment variable. This will handle the active tracing lambda context as well as X-Ray HTTP headers.AWSXrayPropagator
or xray
in the environment variable. This propagator only handles the X-Ray HTTP headers.Examples:
AWSXRayLambdaPropagator
.const { NodeTracerProvider } = require('@opentelemetry/sdk-trace-node');
const { AWSXRayLambdaPropagator } = require('@opentelemetry/propagator-aws-xray-lambda');
const provider = new NodeTracerProvider();
provider.register({
propagator: new AWSXRayLambdaPropagator()
});
Alternatively, use the getPropagators()
function from the auto-configuration-propagators package, and set the OTEL_PROPAGATORS environment variable to xray-lambda
.
const { NodeTracerProvider } = require('@opentelemetry/sdk-trace-node');
const { getPropagator } = require('@opentelemetry/auto-configuration-propagators');
const provider = new NodeTracerProvider();
provider.register({
propagator: getPropagator()
});
AWSXRayPropagator
, which extracts context from the HTTP header but not the Lambda Active Tracing context.const { NodeTracerProvider } = require('@opentelemetry/sdk-trace-node');
const { AWSXRayLambdaPropagator } = require('@opentelemetry/propagator-aws-xray-lambda');
const provider = new NodeTracerProvider();
provider.register({
propagator: new AWSXRayPropagator()
});
Alternatively, use the auto-configuration-package
as in example #1 and set the OTEL_PROPAGATORS environment variable to xray
.
For additional information, see the documentation for lambda semantic conventions.
This package uses @opentelemetry/semantic-conventions
version 1.22+
, which implements Semantic Convention Version 1.7.0
Attributes collected:
Attribute | Short Description |
---|---|
cloud.account.id | The cloud account ID the resource is assigned to. |
faas.execution | The execution ID of the current function execution. |
faas.id | The unique ID of the single function that this runtime instance executes. |
Apache 2.0 - See LICENSE for more information.
FAQs
OpenTelemetry instrumentation for AWS Lambda function invocations
We found that @opentelemetry/instrumentation-aws-lambda demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.