# What changed in @aws-sdk/client-lambda

> 17 changes in @aws-sdk/client-lambda 3 from its official release notes, upgrade guides and advisories: 1 security, 15 new APIs and options. Each one cited. Sources checked 2026-11-15. HTML: https://unstale.sh/npm/@aws-sdk/client-lambda/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @aws-sdk/client-lambda 3

### Security

- AWS Lambda Durable Functions supports configuring a KMS key in Durable Config to encrypt durable execution data. (3.1081.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310810-2026-07-07)

### New APIs and options

- CreateFunction and UpdateFunctionConfiguration now support customer-managed runtimes, with automatic updates or the option to pin a specific runtime version using existing runtime controls. (3.1169.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/2b5baaedefad259a64e4aa263034a9ff7474863e/clients/client-lambda/CHANGELOG.md#311690-2026-11-13)
- Adds ConsumptionMode to SelfManagedKafkaEventSourceConfig, allowing Lambda event source mappings to consume self-managed Apache Kafka topics as a queue. (3.1161.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/2b5baaedefad259a64e4aa263034a9ff7474863e/clients/client-lambda/CHANGELOG.md#311610-2026-10-30)
- An optional X-Ray trace header is supported for chained invocations in durable executions, linking child invocations to the initiating span. (3.1152.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#311520-2026-10-14)
- OAuth 2.0 is now available for Confluent Schema Registry. (3.1148.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#311480-2026-10-08)
- Self-managed Apache Kafka event source mappings now support OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER, with optional OAuth scope, audience, logical cluster, and identity pool parameters. (3.1148.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#311480-2026-10-08)
- AWS Lambda adds configurable control to enable or disable functions streaming file reads directly from S3 buckets, independent of memory size. (3.1124.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#311240-2026-09-01)
- Supports creating, retrieving, updating, and deleting function resource policies as complete JSON documents. (3.1115.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#311150-2026-08-20)
- AWS Lambda now supports the nodejs26.x runtime. (3.1099.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310990-2026-07-30)
- A new StateReasonCode and LastUpdateStatusReasonCode value identifies failures caused by an upstream dependency or service. (3.1087.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310870-2026-07-14)
- AWS Lambda now supports the Java 11 runtime on AL2023. (3.1086.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310860-2026-07-13)
- AWS Lambda now supports the Java 17 runtime on AL2023. (3.1086.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310860-2026-07-13)
- AWS Lambda now supports the Java 8 runtime on AL2023. (3.1086.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310860-2026-07-13)
- Added support for configuring system log level and custom log group for Managed Instances Capacity Provider logging. (3.1085.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310850-2026-07-10)
- Lambda can reference a copy of source code in your own S3 buckets, allowing you to maintain a single copy and manage your own code storage limits. (3.1076.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310760-2026-06-29)
- Adds support for tagging Network Connector resources in AWS Lambda. (3.1074.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310740-2026-06-22)

### Fixes and other changes

- AWS Lambda now supports the python3.15 runtime. (3.1099.0) — [release notes](https://github.com/aws/aws-sdk-js-v3/blob/163a566ffba89915cade6109031c5892ea3193c4/clients/client-lambda/CHANGELOG.md#310990-2026-07-30)