Runtime of Lambda is deprecated misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_363
Category - Subcategory	Compute - Unsanctioned Resource Or Type
Provider	AWS
Severity	MEDIUM
Framework	CloudFormation, Terraform, Terraform Plan

Impact

This rule is checking to make sure that the runtime used for Lambda is not deprecated. Lambda is an AWS service which lets you run your code without provisioning or managing servers. A runtime in this context refers to the programming language environment in which your code will be executed.

Using deprecated runtimes can be problematic for several reasons. Deprecated runtimes may no longer receive security updates, leaving your code vulnerable to newly discovered security threats. Additionally, deprecated runtimes might not support the latest language features, and can result in compatibility issues with other software in your stack. Using outdated runtimes can also lead to increased maintenance costs and technical debt as the runtime becomes further out of date.

How to Fix

To fix this issue, ensure that the Runtime property in the AWS::Lambda::Function or AWS::Serverless::Function resource is set to a supported runtime that is not deprecated.

Example: [source,go]

{ "Resources": { "MyLambdaFunction": { "Type": "AWS::Lambda::Function", "Properties": { ... "Runtime": "nodejs18.x", # Ensure to use a supported runtime ... } } } }

Resources: MyServerlessFunction: Type: AWS::Serverless::Function Properties: ... Runtime: nodejs18.x # Ensure to use a supported runtime