
Security News
OpenGrep Restores Fingerprinting in JSON and SARIF Outputs
OpenGrep has restored fingerprint and metavariable support in JSON and SARIF outputs, making static analysis more effective for CI/CD security automation.
@serverless/aws-lambda-layer
Advanced tools
Easily provision Layers for AWS Lambda using [Serverless Components](https://github.com/serverless/components).
Easily provision Layers for AWS Lambda using Serverless Components.
$ npm install -g @serverless/components
$ mkdir my-layer && cd my-layer
in the case of a nodejs layer, the directory should look something like this:
|- code
|- index.js # the root of your library
|- package.json # the main property should point to index.js in this example
|- serverless.yml
|- .env # your development AWS api keys
|- .env.prod # your production AWS api keys
the .env
files are not required if you have the aws keys set globally and you want to use a single stage, but they should look like this.
AWS_ACCESS_KEY_ID=XXX
AWS_SECRET_ACCESS_KEY=XXX
# serverless.yml
name: my-layer
stage: dev
myLayer:
component: "@serverless/aws-lambda-layer"
inputs:
name: my-layer
description: My Serverless Layer
code: ./code
regoin: us-east-1
runtimes: [ 'nodejs8.10' ] # the default is undefined (aka. all runtimes supported)
# a path prefix to all the files that would be included in the package
# this example would package a valid node dependency
# since this is the path expected by aws
prefix: nodejs/node_modules
# if you'd like to include any files outside the codebase
include:
- ../external/file.js
# specifying an existing deployment bucket would optimise deployment speed
# by using accelerated multipart uploads
bucket: my-deployment-bucket
layer (master)$ components
myLayer › outputs:
name: 'my-layer'
description: 'My Serverless Layer'
arn: 'arn:aws:lambda:us-east-1:552760238299:layer:my-layer:1'
29s › dev › my-layer › done
layer (master)$
For a real world example of how this component could be used, take a look at how the aws-lambda component is using it.
Checkout the Serverless Components repo for more information.
FAQs
Easily provision Layers for AWS Lambda using [Serverless Components](https://github.com/serverless/components).
We found that @serverless/aws-lambda-layer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
OpenGrep has restored fingerprint and metavariable support in JSON and SARIF outputs, making static analysis more effective for CI/CD security automation.
Security News
Security experts warn that recent classification changes obscure the true scope of the NVD backlog as CVE volume hits all-time highs.
Security Fundamentals
Attackers use obfuscation to hide malware in open source packages. Learn how to spot these techniques across npm, PyPI, Maven, and more.