AWS Lambda
Official · maintained by Marmotmarmotdata/lambda Discover Lambda functions from AWS accounts
The Lambda plugin discovers and catalogs AWS Lambda functions across your AWS accounts. It captures function metadata including runtime, memory, timeout, VPC configuration, layers, tracing, and tags.
Required Permissions
AWS Configuration
See AWS Configuration for the supported AWS configuration options.
In the UI
Point-and-click, no config file needed.
- 1 Open Runs Create pipeline
- 2 Pick AWS Lambda from the plugin list.
- 3 Fill in the wizard, set a schedule, save.
With the CLI
Save a YAML config, then run marmot ingest.
name: my-lambda-pipeline
runs:
- lambda:
# No required fields — see the Configuration tab.$ marmot ingest -c ingest.yamlNot using plugins? Other ways to populate Marmot
Configuration
6 top-level fields. * marks required fields.
tags multiselect Tags to apply to discovered assets
external_links object[] External links to show on all assets
name string Display name for the link
icon string Icon identifier for the link
url string URL to the external resource
filter object Filter discovered assets by name (regex)
include multiselect Include patterns for resource names (regex)
exclude multiselect Exclude patterns for resource names (regex)
credentials object AWS credentials configuration
use_default bool Use AWS credentials from environment or default profile (recommended)
- default
- true
id string AWS access key ID
secret password AWS secret access key
token password AWS session token
profile string AWS profile to use from shared credentials file
role string AWS IAM role ARN to assume
role_external_id string External ID for cross-account role assumption
region string AWS region for services
endpoint string Custom endpoint URL for AWS services
tags_to_metadata bool Convert AWS tags to Marmot metadata
include_tags multiselect List of AWS tags to include as metadata. By default, all tags are included.
Assets emitted
Metadata this plugin attaches to each discovered asset.
Lambda
LambdaFieldsLambdaFields represents Lambda-specific metadata fields
function_arn stringThe ARN of the Lambda function
runtime stringThe runtime environment for the function (e.g. go1.x, python3.12, nodejs20.x)
handler stringThe function's entry point handler
role stringThe IAM execution role ARN
code_size intThe size of the function's deployment package in bytes
code_sha256 stringSHA256 hash of the deployment package
package_type stringDeployment package type (Zip or Image)
memory_size_mb intMemory allocated to the function in MB
timeout_seconds intFunction execution timeout in seconds
description stringThe function's description
last_modified stringDate and time the function was last modified
version stringThe function version
architectures stringInstruction set architectures (x86_64, arm64)
environment_variable_count intNumber of environment variables configured
vpc_id stringVPC ID if the function is connected to a VPC
subnet_count intNumber of VPC subnets
security_group_count intNumber of VPC security groups
ephemeral_storage_mb intEphemeral storage allocated in MB
layers stringLambda layer ARNs attached to the function
layer_count intNumber of Lambda layers attached
tracing_mode stringX-Ray tracing mode (Active or PassThrough)
state stringCurrent state of the function (Active, Pending, Inactive, Failed)
last_update_status stringStatus of the last update (Successful, Failed, InProgress)
tags objectAWS resource tags