@@ -128,15 +128,25 @@ final class UpdateFunctionConfigurationRequest extends Input
128128 private $ deadLetterConfig ;
129129
130130 /**
131- * The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt your function's environment
132- * variables [^1]. When Lambda SnapStart [^2] is activated, Lambda also uses this key is to encrypt your function's
133- * snapshot. If you deploy your function using a container image, Lambda also uses this key to encrypt your function
134- * when it's deployed. Note that this is not the same key that's used to protect your container image in the Amazon
135- * Elastic Container Registry (Amazon ECR). If you don't provide a customer managed key, Lambda uses a default service
136- * key.
131+ * The ARN of the Key Management Service (KMS) customer managed key that's used to encrypt the following resources:
132+ *
133+ * - The function's environment variables [^1].
134+ * - The function's Lambda SnapStart [^2] snapshots.
135+ * - When used with `SourceKMSKeyArn`, the unzipped version of the .zip deployment package that's used for function
136+ * invocations. For more information, see Specifying a customer managed key for Lambda [^3].
137+ * - The optimized version of the container image that's used for function invocations. Note that this is not the same
138+ * key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more
139+ * information, see Function lifecycle [^4].
140+ *
141+ * If you don't provide a customer managed key, Lambda uses an Amazon Web Services owned key [^5] or an Amazon Web
142+ * Services managed key [^6].
137143 *
138144 * [^1]: https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption
139145 * [^2]: https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html
146+ * [^3]: https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption
147+ * [^4]: https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle
148+ * [^5]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk
149+ * [^6]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk
140150 *
141151 * @var string|null
142152 */
0 commit comments