ReleaseBytes
aws AWS What's New ·

AWS Lambda durable functions support customer-managed KMS encryption

securityawshealthcarefinanceaws-lambda
feature

AWS Lambda durable functions now supports encryption of execution data using customer-managed AWS KMS keys, offering enhanced control for regulated industries. This feature allows users in sectors like finance and healthcare to meet stricter data governance policies by managing their own encryption keys. It is available in all regions where Lambda durable functions are supported, with standard KMS charges applying.

  • →Lambda durable functions support customer-managed KMS key encryption
  • →Enables independent management of execution data encryption keys
  • →Benefits for regulated industries and availability
Features (1) ›
  • Lambda durable functions support customer-managed KMS key encryption

    AWS Lambda durable functions can now encrypt durable execution data using customer-managed AWS KMS keys, providing greater control over encryption and access. This complements the default AWS-owned key encryption.

Enhancements (1) ›
  • Enables independent management of execution data encryption keys

    Users can now manage a dedicated key for durable execution data, separate from the function-level key used for environment variables and SnapStart. This allows for distinct access control policies.

Notes (1) ›
  • Benefits for regulated industries and availability

    This feature is particularly useful for financial services and healthcare industries requiring customer-owned encryption keys due to data governance policies. It is available in all regions where Lambda durable functions are offered, with standard KMS charges applying.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/07/durablefunctions-cmk/

Related releases