
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
@sentry/aws-serverless
Advanced tools
This package is a wrapper around @sentry/node, with added functionality related to AWS Lambda. All
methods available in @sentry/node can be imported from @sentry/aws-serverless.
To use this SDK with an automatic setup, set the following environment variables in your Lambda function configuration:
NODE_OPTIONS="--import @sentry/aws-serverless/awslambda-auto"
SENTRY_DSN="__DSN__"
# Add Tracing by setting tracesSampleRate and adding integration
# Set tracesSampleRate to 1.0 to capture 100% of transactions
# We recommend adjusting this value in production
# Learn more at
# https://docs.sentry.io/platforms/javascript/configuration/options/#traces-sample-rate
SENTRY_TRACES_SAMPLE_RATE="1.0"
Alternatively, to further customize the SDK setup, you can also manually initialize the SDK in your lambda function. The benefit of this installation method is that you can fully customize your Sentry SDK setup in a Sentry.init call.
Create a new file, for example instrument.js to initialize the SDK:
import * as Sentry from '@sentry/aws-serverless';
Sentry.init({
dsn: '__DSN__',
// Adds request headers and IP for users, for more info visit:
// https://docs.sentry.io/platforms/javascript/guides/aws-lambda/configuration/options/#sendDefaultPii
sendDefaultPii: true,
// Add Tracing by setting tracesSampleRate and adding integration
// Set tracesSampleRate to 1.0 to capture 100% of transactions
// We recommend adjusting this value in production
// Learn more at
// https://docs.sentry.io/platforms/javascript/configuration/options/#traces-sample-rate
tracesSampleRate: 1.0,
});
And then load the SDK before your function starts by importing the instrument.js file via a NODE_OPTIONS environment variable:
NODE_OPTIONS="--import ./instrument.js"
// async (recommended)
export const handler = async (event, context) => {
throw new Error('oh, hello there!');
};
// sync
export const handler = (event, context, callback) => {
throw new Error('oh, hello there!');
};
Another much simpler way to integrate Sentry to your AWS Lambda function is to add the official layer.
arn:aws:lambda:us-west-1:943013980633:layer:SentryNodeServerlessSDKv10:19. Get the latest ARN from the docs.NODE_OPTIONS: --import @sentry/aws-serverless/awslambda-auto.SENTRY_DSN: your dsn.SENTRY_TRACES_SAMPLE_RATE: a number between 0 and 1 representing the chance a transaction is sent to Sentry. For
more information, see
docs.FAQs
Official Sentry SDK for AWS Lambda and AWS Serverless Environments
The npm package @sentry/aws-serverless receives a total of 146,834 weekly downloads. As such, @sentry/aws-serverless popularity was classified as popular.
We found that @sentry/aws-serverless demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.