AWS Lambda Functions Should Not Have Too Many Versions
More Info:
AWS Lambda Functions should not have too many versions. This may led to security lapses and performance degradation.Risk Level
InformationalAddress
SecurityCompliance Standards
AWSWAFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “AWS Lambda Functions Should Not Have Too Many Versions” in AWS using AWS console, follow these steps:
- Open the AWS Lambda console and select the function that has too many versions.
- Click on the “Versions” tab to view all the versions of the function.
- Identify the versions that are no longer needed or are outdated.
- Click on the checkbox next to the version(s) that you want to delete.
- Click on the “Actions” menu and select “Delete” to delete the selected version(s).
- Confirm the deletion by clicking on the “Delete” button.
- Repeat steps 4-6 for all the unnecessary versions of the function.
- Once you have deleted all the unnecessary versions, click on the “Aliases” tab.
- Review the aliases and ensure that they are pointing to the correct version of the function.
- If any alias is pointing to an outdated version, click on the alias and update it to point to the latest version of the function.
- Finally, click on the “Save” button to save the changes.
Using CLI
Using CLI
To remediate the misconfiguration of having too many versions of AWS Lambda functions using AWS CLI, follow the below steps:
- Open the AWS CLI on your local machine.
-
Run the following command to list all the AWS Lambda functions in your account:
- Identify the function(s) that have too many versions.
-
Run the following command to delete the older versions of the function(s):
Replace
<function-name>with the name of the function and<version>with the version number of the function you want to delete. Note: You should keep at least the latest version of the function. - Repeat step 4 for all the functions that have too many versions.
- Verify that the number of versions of each function is reduced to an acceptable number.
Using Python
Using Python
To remediate the issue of having too many versions of AWS Lambda Functions, you can use the following Python script:This script uses the Boto3 library to interact with the AWS Lambda service. It first sets the region and the Lambda function name that needs to be remediated. Then, it lists all the versions of the Lambda function using the
list_versions_by_function method. If there are more than 10 versions, it deletes the oldest versions using the delete_function method.You can schedule this script to run periodically using a Lambda function or a cron job to ensure that the number of versions of your Lambda functions stays within a manageable limit.