TON-XXXX: Add Lambda instrumentation to the AWS Quick Start - #348
Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 3 commits intoAug 28, 2026
Conversation
tedkahwaji
force-pushed
the
teddy.kahwaji/lambda-instrumentation-cloudformation
branch
2 times, most recently
from
August 27, 2026 14:51
cdc81e0 to
484b802
Compare
This comment has been minimized.
This comment has been minimized.
tedkahwaji
force-pushed
the
teddy.kahwaji/lambda-instrumentation-cloudformation
branch
2 times, most recently
from
August 27, 2026 16:04
f419e03 to
0af59bc
Compare
tedkahwaji
changed the title
tedkahwaji
marked this pull request as ready for review
August 27, 2026 16:13
tedkahwaji
force-pushed
the
teddy.kahwaji/lambda-instrumentation-cloudformation
branch
from
August 27, 2026 17:48
aefe0a5 to
0af59bc
Compare
gpalmz
approved these changes
Aug 27, 2026
RaphaelAllier
approved these changes
Aug 28, 2026
tedkahwaji
force-pushed
the
teddy.kahwaji/lambda-instrumentation-cloudformation
branch
from
August 28, 2026 12:36
aefe0a5 to
35534a6
Compare
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
tedkahwaji
force-pushed
the
teddy.kahwaji/lambda-instrumentation-cloudformation
branch
from
August 28, 2026 12:49
a03882c to
95233cf
Compare
gh-worker-dd-devflow-36fce6
Bot
added
mergequeue-status: queued
mergequeue-status: in_progress
and removed
mergequeue-status: queued
labels
gh-worker-dd-mergequeue-cf854d
Bot
deleted the
teddy.kahwaji/lambda-instrumentation-cloudformation
branch
August 28, 2026 13:57
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This adds
aws:lambda:functionas a managed instrumentation resource type in the AWS Quick Start. Selected resource types flow through the existing permissions endpoint, which attaches the generated least-privilege Lambda policy to the AWS integration role while allowing Lambda-only responses with no helper-role permissions boundary.Lambda selections also deploy the resource-update forwarding stack and an EventBridge rule for function create, configuration update, tag, and untag CloudTrail events. The rule forwards affected functions to the targeted reconciliation path in the paired dd-source PR. The forwarding template is generated from the resource handler registry, so its rule matches the event names the intake extractor handles.
PolicyAttachmentSchemaVersionis bumped to6so upgrading an existing stack re-invokes the custom resource and adopts the Lambda-compatible permissions-boundary response handling even whenInstrumentationResourceTypesis unchanged. The Quick Start release goes to v4.20.0.