显示环境变量的 AWS Lambda 函数更新命令答案

【问题标题】：AWS Lambda function update command showing environment variables显示环境变量的 AWS Lambda 函数更新命令
【发布时间】：2022-07-04 22:26:02
【问题描述】：

我正在使用 gitlab 管道来更新我的 AWS Lambda 函数的配置和代码。我注意到，当您执行 AWS cli 请求以更新 Lambda 时：

aws lambda update-function-configuration --region $your_region --function-name $your_lambda_arn --handler $your_lambda_handler --runtime $your_lambda_runtime

或

aws lambda update-function-code --region $your_region --function-name $your_lambda_arn --s3-bucket $your_s3_bucket --s3-key $your_project_name.zip

gitlab 控制台中的两个请求响应都会显示环境变量（如数据库连接字符串），我想保密。有什么方法、任何标志或任何东西来隐藏这些值作为响应？

问候

【问题讨论】：

标签： gitlab environment-variables

【解决方案1】：

也许可以使用jq 排除输出？否则使用 SDK（例如 boto3 或 aws-sdk-go）并且不要打印整个响应。

$ cat ~/Desktop/Me.json
{
    "FunctionName": "my-function",
    "LastModified": "2019-09-26T20:28:40.438+0000",
    "RevisionId": "e52502d4-9320-4688-9cd6-152a6ab7490d",
    "MemorySize": 256,
    "Version": "$LATEST",
    "Role": "arn:aws:iam::123456789012:role/service-role/my-function-role-uy3l9qyq",
    "Timeout": 3,
    "Runtime": "nodejs10.x",
    "TracingConfig": {
        "Mode": "PassThrough"
    },
    "Environment": {
        "foo": "bar"
    },
    "CodeSha256": "5tT2qgzYUHaqwR716pZ2dpkn/0J1FrzJmlKidWoaCgk=",
    "Description": "",
    "VpcConfig": {
        "SubnetIds": [],
        "VpcId": "",
        "SecurityGroupIds": []
    },
    "CodeSize": 304,
    "FunctionArn": "arn:aws:lambda:us-west-2:123456789012:function:my-function",
    "Handler": "index.handler"
}

# no Environment key
$ cat ~/Desktop/Me.json | jq 'del(.Environment)'
{
  "FunctionName": "my-function",
  "LastModified": "2019-09-26T20:28:40.438+0000",
  "RevisionId": "e52502d4-9320-4688-9cd6-152a6ab7490d",
  "MemorySize": 256,
  "Version": "$LATEST",
  "Role": "arn:aws:iam::123456789012:role/service-role/my-function-role-uy3l9qyq",
  "Timeout": 3,
  "Runtime": "nodejs10.x",
  "TracingConfig": {
    "Mode": "PassThrough"
  },
  "CodeSha256": "5tT2qgzYUHaqwR716pZ2dpkn/0J1FrzJmlKidWoaCgk=",
  "Description": "",
  "VpcConfig": {
    "SubnetIds": [],
    "VpcId": "",
    "SecurityGroupIds": []
  },
  "CodeSize": 304,
  "FunctionArn": "arn:aws:lambda:us-west-2:123456789012:function:my-function",
  "Handler": "index.handler"
}

【讨论】：