lambda_documentdb_mapping.json

{
  "source": "Native AWS public endpoints; guarded CLI STS and signed boto3",
  "captured_at": "2026-10-01T00:02:01.950159+00:00",
  "account": "000000000000",
  "region": "us-east-1",
  "actor": "arn:aws:iam::000000000000:user/Delegated",
  "prefix": "stackd-cfn-docdb-215bb3fd92b5",
  "ethics_review": {
    "allowed": true,
    "decision": "allow",
    "reason": "permitted",
    "account": "000000000000",
    "region": "us-east-1",
    "actor": "arn:aws:iam::000000000000:user/Delegated",
    "reviewed_at": "2026-10-01",
    "scope": "Fresh mounted ethics review: one exact-created private VPC/two subnets/security group/subnet group, one DocumentDB cluster, at most one smallest supported instance only if disabled control readiness needs it; one synthetic secret, least-privilege role, 128MiB concurrency-zero Lambda and qualifiers, one disabled CFN mapping stack at a time; no invokes/customer data/public ingress/shared mutation. 3600s capture+cleanup bound, durable before/after writes and exact-owned cleanup/recovery."
  },
  "guard_identity": {
    "UserId": "AIDAQAAAAAAAMEZHRHAHY",
    "Account": "000000000000",
    "Arn": "arn:aws:iam::000000000000:user/Delegated"
  },
  "bounds": {
    "stack_wait_seconds": 300,
    "resource_wait_seconds": 180,
    "poll_seconds": 3,
    "total_seconds": 3600,
    "reserved_cleanup_seconds": 900
  },
  "owned": {
    "stacks": {
      "mapping": {
        "name": "stackd-cfn-docdb-215bb3fd92b5-mapping",
        "creation_attempted": true,
        "id": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
        "deleted": true
      }
    },
    "streams": {},
    "mappings": [
      "df26f12a-973a-489f-bcbb-728fde50cedd"
    ],
    "network": {
      "vpc": {
        "creation_attempted": true,
        "id": "vpc-03132cdf0ed5aae97"
      },
      "subnet0": {
        "creation_attempted": true,
        "id": "subnet-0dfd17589fdba1cec"
      },
      "subnet1": {
        "creation_attempted": true,
        "id": "subnet-0c34773315f2ea842"
      },
      "security_group": {
        "creation_attempted": true,
        "id": "sg-0e2b33b00adf8fcd9"
      }
    },
    "subnet_group": {
      "name": "stackd-cfn-docdb-215bb3fd92b5",
      "creation_attempted": true,
      "absence_verified": true
    },
    "cluster": {
      "name": "stackd-cfn-docdb-215bb3fd92b5",
      "creation_attempted": true,
      "absence_verified": true,
      "arn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
      "resource_id": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA"
    },
    "secret": {
      "name": "stackd-cfn-docdb-215bb3fd92b5",
      "creation_attempted": true,
      "absence_verified": true,
      "arn": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
    },
    "role": {
      "name": "stackd-cfn-docdb-215bb3fd92b5-role",
      "creation_attempted": true,
      "arn": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
      "id": "AROAQAAAAAAAK2AHGVEG7",
      "policy": "owned-documentdb-access"
    },
    "function": {
      "name": "stackd-cfn-docdb-215bb3fd92b5-fn",
      "creation_attempted": true,
      "versions": [
        "1"
      ],
      "arn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
      "revision": "0dc8a0c2-5dc0-4e5b-8071-916304f8b35f",
      "aliases": [
        "owned-target"
      ]
    }
  },
  "calls": [
    {
      "label": "identity-before-writes",
      "service": "sts",
      "operation": "GetCallerIdentity",
      "input": {},
      "started_at": "2026-10-01T00:02:01.950363+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "UserId": "AIDAQAAAAAAAMEZHRHAHY",
        "Account": "000000000000",
        "Arn": "arn:aws:iam::000000000000:user/Delegated"
      },
      "metadata": {
        "RequestId": "cd3db68a-f324-48be-81a6-55c128d8b0ff",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "cd3db68a-f324-48be-81a6-55c128d8b0ff",
          "x-amz-sts-extended-request-id": "MTp1cy1lYXN0LTE6UzoxNzkwODEyOTIyMzIzOlI6U21LbFRzNVI=",
          "content-type": "text/xml",
          "content-length": "406",
          "date": "Thu, 01 Oct 2026 00:02:02 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:02.394111+00:00"
    },
    {
      "label": "mapping-public-registry-schema",
      "service": "cloudformation",
      "operation": "DescribeType",
      "input": {
        "Type": "RESOURCE",
        "TypeName": "AWS::Lambda::EventSourceMapping"
      },
      "started_at": "2026-10-01T00:02:03.811967+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Arn": "arn:aws:cloudformation:us-east-1::type/resource/AWS-Lambda-EventSourceMapping",
        "Type": "RESOURCE",
        "TypeName": "AWS::Lambda::EventSourceMapping",
        "IsDefaultVersion": true,
        "Description": "The ``AWS::Lambda::EventSourceMapping`` resource creates a mapping between an event source and an LAMlong function. LAM reads items from the event source and triggers the function.\n For details about each event source type, see the following topics. In particular, each of the topics describes the required and optional parameters for the specific event source. \n  +   [Configuring a Dynamo DB stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-dynamodb-eventsourcemapping) \n  +   [Configuring a Kinesis stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-eventsourcemapping) \n  +   [Configuring an SQS queue as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-eventsource) \n  +   [Configuring an MQ broker as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-eventsourcemapping) \n  +   [Configuring MSK as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html) \n  +   [Configuring Self-Managed Apache Kafka as an event source](https://docs.aws.amazon.com/lambda/latest/dg/kafka-smaa.html) \n  +   [Configuring Amazon DocumentDB as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html)",
        "Schema": "{\"tagging\":{\"permissions\":[\"lambda:ListTags\",\"lambda:TagResource\",\"lambda:UntagResource\"],\"taggable\":true,\"tagOnCreate\":true,\"tagUpdatable\":true,\"tagProperty\":\"/properties/Tags\",\"cloudFormationSystemTags\":true},\"propertyTransform\":{\"/properties/FunctionName\":\"$split(FunctionName, \\\":\\\")[-1] $OR FunctionName $OR $join([\\\"((arn:.*:lambda:.*:[0-9]{12}:function)|([0-9]{12}:function)):\\\", $split(FunctionName, \\\":\\\")[-1]])\",\"/properties/StartingPositionTimestamp\":\"StartingPositionTimestamp * 1000\"},\"handlers\":{\"read\":{\"permissions\":[\"lambda:GetEventSourceMapping\",\"lambda:ListTags\",\"kms:Decrypt\"]},\"create\":{\"permissions\":[\"lambda:CreateEventSourceMapping\",\"lambda:GetEventSourceMapping\",\"lambda:TagResource\",\"kms:DescribeKey\",\"kms:GenerateDataKey\",\"kms:Decrypt\"]},\"update\":{\"permissions\":[\"lambda:UpdateEventSourceMapping\",\"lambda:GetEventSourceMapping\",\"lambda:TagResource\",\"lambda:UntagResource\",\"kms:DescribeKey\",\"kms:GenerateDataKey\",\"kms:Decrypt\"]},\"list\":{\"permissions\":[\"lambda:ListEventSourceMappings\"]},\"delete\":{\"permissions\":[\"lambda:DeleteEventSourceMapping\",\"lambda:GetEventSourceMapping\",\"kms:Decrypt\"]}},\"typeName\":\"AWS::Lambda::EventSourceMapping\",\"readOnlyProperties\":[\"/properties/Id\",\"/properties/EventSourceMappingArn\"],\"description\":\"The ``AWS::Lambda::EventSourceMapping`` resource creates a mapping between an event source and an LAMlong function. LAM reads items from the event source and triggers the function.\\n For details about each event source type, see the following topics. In particular, each of the topics describes the required and optional parameters for the specific event source. \\n  +   [Configuring a Dynamo DB stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-dynamodb-eventsourcemapping) \\n  +   [Configuring a Kinesis stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-eventsourcemapping) \\n  +   [Configuring an SQS queue as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-eventsource) \\n  +   [Configuring an MQ broker as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-eventsourcemapping) \\n  +   [Configuring MSK as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html) \\n  +   [Configuring Self-Managed Apache Kafka as an event source](https://docs.aws.amazon.com/lambda/latest/dg/kafka-smaa.html) \\n  +   [Configuring Amazon DocumentDB as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html)\",\"createOnlyProperties\":[\"/properties/EventSourceArn\",\"/properties/StartingPosition\",\"/properties/StartingPositionTimestamp\",\"/properties/SelfManagedEventSource\"],\"additionalProperties\":false,\"primaryIdentifier\":[\"/properties/Id\"],\"definitions\":{\"ScalingConfig\":{\"description\":\"(Amazon SQS only) The scaling configuration for the event source. To remove the configuration, pass an empty value.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"MaximumConcurrency\":{\"description\":\"Limits the number of concurrent instances that the SQS event source can invoke.\",\"$ref\":\"#/definitions/MaximumConcurrency\"}}},\"SchemaRegistryConfig\":{\"description\":\"Specific configuration settings for a Kafka schema registry.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"SchemaValidationConfigs\":{\"minItems\":1,\"maxItems\":2,\"uniqueItems\":true,\"description\":\"An array of schema validation configuration objects, which tell Lambda the message attributes you want to validate and filter using your schema registry.\",\"type\":\"array\",\"items\":{\"$ref\":\"#/definitions/SchemaValidationConfig\"}},\"SchemaRegistryURI\":{\"minLength\":1,\"pattern\":\"[a-zA-Z0-9-/*:_+=.@-]*\",\"description\":\"The URI for your schema registry. The correct URI format depends on the type of schema registry you're using.\\n  +  For GLU schema registries, use the ARN of the registry.\\n  +  For Confluent schema registries, use the URL of the registry.\",\"type\":\"string\",\"maxLength\":10000},\"EventRecordFormat\":{\"description\":\"The record format that Lambda delivers to your function after schema validation.\\n  +  Choose ``JSON`` to have Lambda deliver the record to your function as a standard JSON object.\\n  +  Choose ``SOURCE`` to have Lambda deliver the record to your function in its original source format. Lambda removes all schema metadata, such as the schema ID, before sending the record to your function.\",\"type\":\"string\",\"enum\":[\"JSON\",\"SOURCE\"]},\"AccessConfigs\":{\"maxItems\":2,\"uniqueItems\":true,\"description\":\"An array of access configuration objects that tell Lambda how to authenticate with your schema registry.\",\"type\":\"array\",\"items\":{\"$ref\":\"#/definitions/SchemaRegistryAccessConfig\"}}}},\"SelfManagedEventSource\":{\"description\":\"The self-managed Apache Kafka cluster for your event source.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Endpoints\":{\"description\":\"The list of bootstrap servers for your Kafka brokers in the following format: ``\\\"KafkaBootstrapServers\\\": [\\\"abc.xyz.com:xxxx\\\",\\\"abc2.xyz.com:xxxx\\\"]``.\",\"$ref\":\"#/definitions/Endpoints\"}}},\"MaximumConcurrency\":{\"description\":\"The maximum number of concurrent functions that an event source can invoke.\",\"maximum\":1000,\"type\":\"integer\",\"minimum\":2},\"SourceAccessConfiguration\":{\"description\":\"An array of the authentication protocol, VPC components, or virtual host to secure and define your event source.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Type\":{\"description\":\"The type of authentication protocol, VPC components, or virtual host for your event source. For example: ``\\\"Type\\\":\\\"SASL_SCRAM_512_AUTH\\\"``.\\n  +  ``BASIC_AUTH`` \\u2013 (Amazon MQ) The ASMlong secret that stores your broker credentials.\\n  +  ``BASIC_AUTH`` \\u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL/PLAIN authentication of your Apache Kafka brokers.\\n  +  ``VPC_SUBNET`` \\u2013 (Self-managed Apache Kafka) The subnets associated with your VPC. Lambda connects to these subnets to fetch data from your self-managed Apache Kafka cluster.\\n  +  ``VPC_SECURITY_GROUP`` \\u2013 (Self-managed Apache Kafka) The VPC security group used to manage access to your self-managed Apache Kafka brokers.\\n  +  ``SASL_SCRAM_256_AUTH`` \\u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-256 authentication of your self-managed Apache Kafka brokers.\\n  +  ``SASL_SCRAM_512_AUTH`` \\u2013 (Amazon MSK, Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-512 authentication of your self-managed Apache Kafka brokers.\\n  +  ``VIRTUAL_HOST`` \\u2013- (RabbitMQ) The name of the virtual host in your RabbitMQ broker. Lambda uses this RabbitMQ host as the event source. This property cannot be specified in an UpdateEventSourceMapping API call.\\n  +  ``CLIENT_CERTIFICATE_TLS_AUTH`` \\u2013 (Amazon MSK, self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the certificate chain (X.509 PEM), private key (PKCS#8 PEM), and private key password (optional) used for mutual TLS authentication of your MSK/Apache Kafka brokers.\\n  +  ``SERVER_ROOT_CA_CERTIFICATE`` \\u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the root CA certificate (X.509 PEM) used for TLS encryption of your Apache Kafka brokers.\",\"type\":\"string\",\"enum\":[\"BASIC_AUTH\",\"VPC_SUBNET\",\"VPC_SECURITY_GROUP\",\"SASL_SCRAM_512_AUTH\",\"SASL_SCRAM_256_AUTH\",\"VIRTUAL_HOST\",\"CLIENT_CERTIFICATE_TLS_AUTH\",\"SERVER_ROOT_CA_CERTIFICATE\",\"OAUTHBEARER_AUTH\",\"OAUTHBEARER_SCOPE\",\"OAUTHBEARER_AUDIENCE\",\"OAUTHBEARER_LOGICAL_CLUSTER\",\"OAUTHBEARER_IDENTITY_POOL\",\"IAM_AUTH\",\"IAM_OAUTHBEARER_AUTH\"]},\"URI\":{\"minLength\":1,\"pattern\":\"[a-zA-Z0-9-\\\\/*:_+=.@-]*\",\"description\":\"The value for your chosen configuration in ``Type``. For example: ``\\\"URI\\\": \\\"arn:aws:secretsmanager:us-east-1:01234567890:secret:MyBrokerSecretName\\\"``.\",\"type\":\"string\",\"maxLength\":200}}},\"FilterCriteria\":{\"description\":\"An object that contains the filters for an event source.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Filters\":{\"minItems\":1,\"maxItems\":20,\"uniqueItems\":true,\"description\":\"A list of filters.\",\"type\":\"array\",\"items\":{\"$ref\":\"#/definitions/Filter\"}}}},\"ProvisionedPollerConfig\":{\"description\":\"The [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode) configuration for the event source. Use Provisioned Mode to customize the minimum and maximum number of event pollers for your event source.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"PollerGroupName\":{\"minLength\":0,\"description\":\"(Amazon MSK and self-managed Apache Kafka) The name of the provisioned poller group. Use this option to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.\",\"type\":\"string\",\"maxLength\":128},\"MinimumPollers\":{\"description\":\"The minimum number of event pollers this event source can scale down to. For Amazon SQS events source mappings, default is 2, and minimum 2 required. For Amazon MSK and self-managed Apache Kafka event source mappings, default is 1.\",\"maximum\":200,\"type\":\"integer\",\"minimum\":1},\"MaximumPollers\":{\"description\":\"The maximum number of event pollers this event source can scale up to. For Amazon SQS event source mappings, the accepted range is between 2 and 10,000, with a default of 200. For Amazon MSK and self-managed Apache Kafka event source mappings, the accepted range is between 1 and 2,000, with a default of 200.\",\"maximum\":10000,\"type\":\"integer\",\"minimum\":1}}},\"SelfManagedKafkaEventSourceConfig\":{\"description\":\"Specific configuration settings for a self-managed Apache Kafka event source.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"ConsumerGroupId\":{\"description\":\"The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see [Customizable consumer group ID](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka-process.html#services-smaa-topic-add).\",\"$ref\":\"#/definitions/ConsumerGroupId\"},\"SchemaRegistryConfig\":{\"description\":\"Specific configuration settings for a Kafka schema registry.\",\"$ref\":\"#/definitions/SchemaRegistryConfig\"},\"ConsumptionMode\":{\"description\":\"\",\"$ref\":\"#/definitions/ConsumptionMode\"}}},\"MetricsConfig\":{\"description\":\"The metrics configuration for your event source. Use this configuration object to define which metrics you want your event source mapping to produce.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Metrics\":{\"minItems\":0,\"maxItems\":3,\"uniqueItems\":true,\"description\":\"The metrics you want your event source mapping to produce, including ``EventCount``, ``ErrorCount``, ``KafkaMetrics``. \\n  +  ``EventCount`` to receive metrics related to the number of events processed by your event source mapping.\\n  +  ``ErrorCount`` (Amazon MSK and self-managed Apache Kafka) to receive metrics related to the number of errors in your event source mapping processing.\\n  +  ``KafkaMetrics`` (Amazon MSK and self-managed Apache Kafka) to receive metrics related to the Kafka consumers from your event source mapping.\\n  \\n  For more information about these metrics, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).\",\"type\":\"array\",\"items\":{\"type\":\"string\",\"enum\":[\"EventCount\",\"ErrorCount\",\"KafkaMetrics\"]}}}},\"DocumentDBEventSourceConfig\":{\"description\":\"Specific configuration settings for a DocumentDB event source.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"FullDocument\":{\"description\":\"Determines what DocumentDB sends to your event stream during document update operations. If set to UpdateLookup, DocumentDB sends a delta describing the changes, along with a copy of the entire document. Otherwise, DocumentDB sends only a partial document that contains the changes.\",\"type\":\"string\",\"enum\":[\"UpdateLookup\",\"Default\"]},\"CollectionName\":{\"minLength\":1,\"description\":\"The name of the collection to consume within the database. If you do not specify a collection, Lambda consumes all collections.\",\"type\":\"string\",\"maxLength\":57},\"DatabaseName\":{\"minLength\":1,\"description\":\"The name of the database to consume within the DocumentDB cluster.\",\"type\":\"string\",\"maxLength\":63}}},\"Endpoints\":{\"description\":\"The list of bootstrap servers for your Kafka brokers in the following format: ``\\\"KafkaBootstrapServers\\\": [\\\"abc.xyz.com:xxxx\\\",\\\"abc2.xyz.com:xxxx\\\"]``.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"KafkaBootstrapServers\":{\"minItems\":1,\"maxItems\":10,\"uniqueItems\":true,\"description\":\"The list of bootstrap servers for your Kafka brokers in the following format: ``\\\"KafkaBootstrapServers\\\": [\\\"abc.xyz.com:xxxx\\\",\\\"abc2.xyz.com:xxxx\\\"]``.\",\"type\":\"array\",\"items\":{\"minLength\":1,\"pattern\":\"^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\\\-]*[a-zA-Z0-9])\\\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\\\-]*[A-Za-z0-9]):[0-9]{1,5}\",\"description\":\"The URL of a Kafka server.\",\"type\":\"string\",\"maxLength\":300}}}},\"DestinationConfig\":{\"description\":\"A configuration object that specifies the destination of an event after Lambda processes it. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations).\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"OnFailure\":{\"description\":\"The destination configuration for failed invocations.\",\"$ref\":\"#/definitions/OnFailure\"}}},\"ConsumerGroupId\":{\"minLength\":1,\"pattern\":\"[a-zA-Z0-9-\\\\/*:_+=.@-]*\",\"description\":\"The identifier for the Kafka Consumer Group to join.\",\"type\":\"string\",\"maxLength\":200},\"Filter\":{\"description\":\"A structure within a ``FilterCriteria`` object that defines an event filtering pattern.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Pattern\":{\"minLength\":0,\"pattern\":\".*\",\"description\":\"A filter pattern. For more information on the syntax of a filter pattern, see [Filter rule syntax](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-syntax).\",\"type\":\"string\",\"maxLength\":4096}}},\"AmazonManagedKafkaEventSourceConfig\":{\"description\":\"Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"ConsumerGroupId\":{\"description\":\"The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see [Customizable consumer group ID](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-consumer-group-id).\",\"$ref\":\"#/definitions/ConsumerGroupId\"},\"SchemaRegistryConfig\":{\"description\":\"Specific configuration settings for a Kafka schema registry.\",\"$ref\":\"#/definitions/SchemaRegistryConfig\"}}},\"LoggingConfig\":{\"description\":\"The function's Amazon CloudWatch Logs configuration settings.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"SystemLogLevel\":{\"description\":\"Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where ``DEBUG`` is the highest level and ``WARN`` is the lowest.\",\"type\":\"string\",\"enum\":[\"DEBUG\",\"INFO\",\"WARN\"]}}},\"Tag\":{\"description\":\"A [tag](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the event source mapping.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Value\":{\"minLength\":0,\"description\":\"The value for this tag.\",\"type\":\"string\",\"maxLength\":256},\"Key\":{\"minLength\":1,\"description\":\"The key for this tag.\",\"type\":\"string\",\"maxLength\":128}},\"required\":[\"Key\"]},\"SchemaValidationConfig\":{\"description\":\"Specific schema validation configuration settings that tell Lambda the message attributes you want to validate and filter using your schema registry.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Attribute\":{\"description\":\"The attributes you want your schema registry to validate and filter for. If you selected ``JSON`` as the ``EventRecordFormat``, Lambda also deserializes the selected message attributes.\",\"type\":\"string\",\"enum\":[\"KEY\",\"VALUE\"]}}},\"SchemaRegistryAccessConfig\":{\"description\":\"Specific access configuration settings that tell Lambda how to authenticate with your schema registry.\\n If you're working with an GLU schema registry, don't provide authentication details in this object. Instead, ensure that your execution role has the required permissions for Lambda to access your cluster.\\n If you're working with a Confluent schema registry, choose the authentication method in the ``Type`` field, and provide the ASMlong secret ARN in the ``URI`` field.\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Type\":{\"description\":\"The type of authentication Lambda uses to access your schema registry.\",\"type\":\"string\",\"enum\":[\"BASIC_AUTH\",\"CLIENT_CERTIFICATE_TLS_AUTH\",\"SERVER_ROOT_CA_CERTIFICATE\",\"OAUTHBEARER_AUTH\"]},\"URI\":{\"minLength\":1,\"pattern\":\"arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\\\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\\\d{1})?:(\\\\d{12})?:(.*)\",\"description\":\"The URI of the secret (Secrets Manager secret ARN) to authenticate with your schema registry.\",\"type\":\"string\",\"maxLength\":10000}}},\"ConsumptionMode\":{\"description\":\"The mode that determines how Lambda reads from a Kafka topic. Use Stream for ordered processing or Queue for higher throughput when ordering is not required.\",\"type\":\"string\",\"enum\":[\"Stream\",\"Queue\"]},\"OnFailure\":{\"description\":\"A destination for events that failed processing. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations).\",\"additionalProperties\":false,\"type\":\"object\",\"properties\":{\"Destination\":{\"minLength\":12,\"pattern\":\"^$|kafka://([^.]([a-zA-Z0-9\\\\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\\\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\\\d{1})?:(\\\\d{12})?:(.*)\",\"description\":\"The Amazon Resource Name (ARN) of the destination resource.\\n To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html), [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html), [self-managed Apache Kafka](https://docs.aws.amazon.com/lambda/latest/dg/kafka-on-failure.html), or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/kafka-on-failure.html), you can configure an Amazon SNS topic, Amazon SQS queue, Amazon S3 bucket, or Kafka topic as the destination.\\n  Amazon SNS destinations have a message size limit of 256 KB. If the combined size of the function request and response payload exceeds the limit, Lambda will drop the payload when sending ``OnFailure`` event to the destination. For details on this behavior, refer to [Retaining records of asynchronous invocations](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html).\\n  To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html), [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html), [self-managed Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination) or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination), you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination.\",\"type\":\"string\",\"maxLength\":1024}}}},\"required\":[\"FunctionName\"],\"properties\":{\"StartingPosition\":{\"minLength\":6,\"pattern\":\"(LATEST|TRIM_HORIZON|AT_TIMESTAMP)+\",\"description\":\"The position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB.\\n  +  *LATEST* - Read only new records.\\n  +  *TRIM_HORIZON* - Process all available records.\\n  +  *AT_TIMESTAMP* - Specify a time from which to start reading records.\",\"type\":\"string\",\"maxLength\":12},\"SelfManagedEventSource\":{\"description\":\"The self-managed Apache Kafka cluster for your event source.\",\"$ref\":\"#/definitions/SelfManagedEventSource\"},\"ParallelizationFactor\":{\"description\":\"(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1.\",\"maximum\":10,\"type\":\"integer\",\"minimum\":1},\"FilterCriteria\":{\"description\":\"An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html).\",\"$ref\":\"#/definitions/FilterCriteria\"},\"ProvisionedPollerConfig\":{\"description\":\"(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode).\",\"$ref\":\"#/definitions/ProvisionedPollerConfig\"},\"MetricsConfig\":{\"description\":\"The metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).\",\"$ref\":\"#/definitions/MetricsConfig\"},\"FunctionName\":{\"minLength\":1,\"pattern\":\"(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\\\d{1}:)?(\\\\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\\\\$LATEST(\\\\.PUBLISHED)?|[a-zA-Z0-9-_]+))?\",\"description\":\"The name or ARN of the Lambda function.\\n  **Name formats**\\n +  *Function name* \\u2013 ``MyFunction``.\\n  +  *Function ARN* \\u2013 ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction``.\\n  +  *Version or Alias ARN* \\u2013 ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD``.\\n  +  *Partial ARN* \\u2013 ``123456789012:function:MyFunction``.\\n  \\n The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.\",\"type\":\"string\",\"maxLength\":140},\"DestinationConfig\":{\"description\":\"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) A configuration object that specifies the destination of an event after Lambda processes it.\",\"$ref\":\"#/definitions/DestinationConfig\"},\"KmsKeyArn\":{\"minLength\":12,\"pattern\":\"(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()\",\"description\":\"The ARN of the KMSlong (KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics).\",\"type\":\"string\",\"maxLength\":2048},\"AmazonManagedKafkaEventSourceConfig\":{\"description\":\"Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.\",\"$ref\":\"#/definitions/AmazonManagedKafkaEventSourceConfig\"},\"SourceAccessConfigurations\":{\"minItems\":1,\"maxItems\":29,\"uniqueItems\":true,\"description\":\"An array of the authentication protocol, VPC components, or virtual host to secure and define your event source.\",\"type\":\"array\",\"items\":{\"$ref\":\"#/definitions/SourceAccessConfiguration\"}},\"Tags\":{\"uniqueItems\":true,\"description\":\"A list of tags to add to the event source mapping.\\n  You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.\",\"insertionOrder\":false,\"type\":\"array\",\"items\":{\"$ref\":\"#/definitions/Tag\"}},\"MaximumBatchingWindowInSeconds\":{\"description\":\"The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.\\n *Default (, , event sources)*: 0\\n *Default (, Kafka, , event sources)*: 500 ms\\n *Related setting:* For SQS event sources, when you set ``BatchSize`` to a value greater than 10, you must set ``MaximumBatchingWindowInSeconds`` to at least 1.\",\"maximum\":300,\"type\":\"integer\",\"minimum\":0},\"BatchSize\":{\"description\":\"The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).\\n  +  *Amazon Kinesis* \\u2013 Default 100. Max 10,000.\\n  +  *Amazon DynamoDB Streams* \\u2013 Default 100. Max 10,000.\\n  +  *Amazon Simple Queue Service* \\u2013 Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.\\n  +  *Amazon Managed Streaming for Apache Kafka* \\u2013 Default 100. Max 10,000.\\n  +  *Self-managed Apache Kafka* \\u2013 Default 100. Max 10,000.\\n  +  *Amazon MQ (ActiveMQ and RabbitMQ)* \\u2013 Default 100. Max 10,000.\\n  +  *DocumentDB* \\u2013 Default 100. Max 10,000.\",\"maximum\":10000,\"type\":\"integer\",\"minimum\":1},\"MaximumRetryAttempts\":{\"description\":\"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source.\",\"maximum\":10000,\"type\":\"integer\",\"minimum\":-1},\"Topics\":{\"minItems\":1,\"maxItems\":1,\"uniqueItems\":true,\"description\":\"The name of the Kafka topic.\",\"type\":\"array\",\"items\":{\"minLength\":1,\"pattern\":\"^[^.]([a-zA-Z0-9\\\\-_.]+)\",\"type\":\"string\",\"maxLength\":249}},\"ScalingConfig\":{\"description\":\"This property is for Amazon SQS event sources only. You cannot use ``ProvisionedPollerConfig`` while using ``ScalingConfig``. These options are mutually exclusive. To remove the scaling configuration, pass an empty value.\",\"$ref\":\"#/definitions/ScalingConfig\"},\"Enabled\":{\"description\":\"When true, the event source mapping is active. When false, Lambda pauses polling and invocation.\\n Default: True\",\"type\":\"boolean\"},\"EventSourceArn\":{\"minLength\":12,\"pattern\":\"arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\\\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\\\d{1})?:(\\\\d{12})?:(.*)\",\"description\":\"The Amazon Resource Name (ARN) of the event source.\\n  +  *Amazon Kinesis* \\u2013 The ARN of the data stream or a stream consumer.\\n  +  *Amazon DynamoDB Streams* \\u2013 The ARN of the stream.\\n  +  *Amazon Simple Queue Service* \\u2013 The ARN of the queue.\\n  +  *Amazon Managed Streaming for Apache Kafka* \\u2013 The ARN of the cluster or the ARN of the VPC connection (for [cross-account event source mappings](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#msk-multi-vpc)).\\n  +  *Amazon MQ* \\u2013 The ARN of the broker.\\n  +  *Amazon DocumentDB* \\u2013 The ARN of the DocumentDB change stream.\",\"type\":\"string\",\"maxLength\":1024},\"SelfManagedKafkaEventSourceConfig\":{\"description\":\"Specific configuration settings for a self-managed Apache Kafka event source.\",\"$ref\":\"#/definitions/SelfManagedKafkaEventSourceConfig\"},\"DocumentDBEventSourceConfig\":{\"description\":\"Specific configuration settings for a DocumentDB event source.\",\"$ref\":\"#/definitions/DocumentDBEventSourceConfig\"},\"TumblingWindowInSeconds\":{\"description\":\"(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.\",\"maximum\":900,\"type\":\"integer\",\"minimum\":0},\"BisectBatchOnFunctionError\":{\"description\":\"(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry. The default value is false.\\n  When using ``BisectBatchOnFunctionError``, check the ``BatchSize`` parameter in the ``OnFailure`` destination message's metadata. The ``BatchSize`` could be greater than 1 since LAM consolidates failed messages metadata when writing to the ``OnFailure`` destination.\",\"type\":\"boolean\"},\"EventSourceMappingArn\":{\"minLength\":85,\"pattern\":\"arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\\\d{1}:\\\\d{12}:event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\",\"description\":\"\",\"type\":\"string\",\"maxLength\":120},\"MaximumRecordAgeInSeconds\":{\"description\":\"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.\\n  The minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed\",\"maximum\":604800,\"type\":\"integer\",\"minimum\":-1},\"StartingPositionTimestamp\":{\"description\":\"With ``StartingPosition`` set to ``AT_TIMESTAMP``, the time from which to start reading, in Unix time seconds. ``StartingPositionTimestamp`` cannot be in the future.\",\"type\":\"number\"},\"LoggingConfig\":{\"description\":\"(Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. For more information, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html).\",\"$ref\":\"#/definitions/LoggingConfig\"},\"Queues\":{\"minItems\":1,\"maxItems\":1,\"uniqueItems\":true,\"description\":\"(Amazon MQ) The name of the Amazon MQ broker destination queue to consume.\",\"type\":\"array\",\"items\":{\"minLength\":1,\"pattern\":\"[\\\\s\\\\S]*\",\"type\":\"string\",\"maxLength\":1000}},\"Id\":{\"minLength\":36,\"pattern\":\"[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}\",\"description\":\"\",\"type\":\"string\",\"maxLength\":36},\"FunctionResponseTypes\":{\"uniqueItems\":true,\"minLength\":0,\"description\":\"(Kinesis, DynamoDB Streams, and SQS) A list of current response type enums applied to the event source mapping.\\n Valid Values: ``ReportBatchItemFailures``\",\"type\":\"array\",\"items\":{\"type\":\"string\",\"enum\":[\"ReportBatchItemFailures\"]},\"maxLength\":1}}}",
        "ProvisioningType": "FULLY_MUTABLE",
        "DeprecatedStatus": "LIVE",
        "Visibility": "PUBLIC",
        "TimeCreated": "2020-03-31T19:08:36.735000+00:00"
      },
      "metadata": {
        "RequestId": "6cfb5c87-a0e6-482d-bb7b-097449c6edce",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "6cfb5c87-a0e6-482d-bb7b-097449c6edce",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:02:04 GMT",
          "content-type": "text/xml",
          "content-length": "39962",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:04.410345+00:00"
    },
    {
      "label": "available-zones",
      "service": "ec2",
      "operation": "DescribeAvailabilityZones",
      "input": {
        "Filters": [
          {
            "Name": "state",
            "Values": [
              "available"
            ]
          }
        ]
      },
      "started_at": "2026-10-01T00:02:04.420402+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "AvailabilityZones": [
          {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "us-east-1",
            "ZoneName": "us-east-1a",
            "ZoneId": "use1-az6",
            "GroupName": "us-east-1-zg-1",
            "NetworkBorderGroup": "us-east-1",
            "ZoneType": "availability-zone",
            "GroupLongName": "US East (N. Virginia) 1",
            "Geography": [
              {
                "Name": "United States of America"
              }
            ],
            "SubGeography": [
              {
                "Name": "Virginia"
              }
            ],
            "State": "available"
          },
          {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "us-east-1",
            "ZoneName": "us-east-1b",
            "ZoneId": "use1-az1",
            "GroupName": "us-east-1-zg-1",
            "NetworkBorderGroup": "us-east-1",
            "ZoneType": "availability-zone",
            "GroupLongName": "US East (N. Virginia) 1",
            "Geography": [
              {
                "Name": "United States of America"
              }
            ],
            "SubGeography": [
              {
                "Name": "Virginia"
              }
            ],
            "State": "available"
          },
          {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "us-east-1",
            "ZoneName": "us-east-1c",
            "ZoneId": "use1-az2",
            "GroupName": "us-east-1-zg-1",
            "NetworkBorderGroup": "us-east-1",
            "ZoneType": "availability-zone",
            "GroupLongName": "US East (N. Virginia) 1",
            "Geography": [
              {
                "Name": "United States of America"
              }
            ],
            "SubGeography": [
              {
                "Name": "Virginia"
              }
            ],
            "State": "available"
          },
          {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "us-east-1",
            "ZoneName": "us-east-1d",
            "ZoneId": "use1-az4",
            "GroupName": "us-east-1-zg-1",
            "NetworkBorderGroup": "us-east-1",
            "ZoneType": "availability-zone",
            "GroupLongName": "US East (N. Virginia) 1",
            "Geography": [
              {
                "Name": "United States of America"
              }
            ],
            "SubGeography": [
              {
                "Name": "Virginia"
              }
            ],
            "State": "available"
          },
          {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "us-east-1",
            "ZoneName": "us-east-1e",
            "ZoneId": "use1-az3",
            "GroupName": "us-east-1-zg-1",
            "NetworkBorderGroup": "us-east-1",
            "ZoneType": "availability-zone",
            "GroupLongName": "US East (N. Virginia) 1",
            "Geography": [
              {
                "Name": "United States of America"
              }
            ],
            "SubGeography": [
              {
                "Name": "Virginia"
              }
            ],
            "State": "available"
          },
          {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "us-east-1",
            "ZoneName": "us-east-1f",
            "ZoneId": "use1-az5",
            "GroupName": "us-east-1-zg-1",
            "NetworkBorderGroup": "us-east-1",
            "ZoneType": "availability-zone",
            "GroupLongName": "US East (N. Virginia) 1",
            "Geography": [
              {
                "Name": "United States of America"
              }
            ],
            "SubGeography": [
              {
                "Name": "Virginia"
              }
            ],
            "State": "available"
          }
        ]
      },
      "metadata": {
        "RequestId": "8a8a354e-6e5d-4e04-af88-51d480830546",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "8a8a354e-6e5d-4e04-af88-51d480830546",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "vary": "accept-encoding",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "3389",
          "date": "Thu, 01 Oct 2026 00:02:04 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:04.957263+00:00"
    },
    {
      "label": "create-vpc",
      "service": "ec2",
      "operation": "CreateVpc",
      "input": {
        "CidrBlock": "10.219.0.0/24",
        "TagSpecifications": [
          {
            "ResourceType": "vpc",
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ]
          }
        ]
      },
      "started_at": "2026-10-01T00:02:04.968935+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Vpc": {
          "OwnerId": "000000000000",
          "InstanceTenancy": "default",
          "Ipv6CidrBlockAssociationSet": [],
          "CidrBlockAssociationSet": [
            {
              "AssociationId": "vpc-cidr-assoc-09b67b10ec8f35140",
              "CidrBlock": "10.219.0.0/24",
              "CidrBlockState": {
                "State": "associated"
              }
            }
          ],
          "IsDefault": false,
          "Tags": [
            {
              "Key": "stackd-probe",
              "Value": "stackd-cfn-docdb-215bb3fd92b5"
            }
          ],
          "VpcId": "vpc-03132cdf0ed5aae97",
          "State": "pending",
          "CidrBlock": "10.219.0.0/24",
          "DhcpOptionsId": "dopt-0f7ace7ebae95c51e"
        }
      },
      "metadata": {
        "RequestId": "5e56dce5-64cf-4606-bd75-3df04d84ae66",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "5e56dce5-64cf-4606-bd75-3df04d84ae66",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "793",
          "date": "Thu, 01 Oct 2026 00:02:05 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:05.499991+00:00"
    },
    {
      "label": "create-subnet0",
      "service": "ec2",
      "operation": "CreateSubnet",
      "input": {
        "VpcId": "vpc-03132cdf0ed5aae97",
        "CidrBlock": "10.219.0.0/25",
        "AvailabilityZone": "us-east-1a",
        "TagSpecifications": [
          {
            "ResourceType": "subnet",
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ]
          }
        ]
      },
      "started_at": "2026-10-01T00:02:05.512862+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Subnet": {
          "AvailabilityZoneId": "use1-az6",
          "MapCustomerOwnedIpOnLaunch": false,
          "OwnerId": "000000000000",
          "AssignIpv6AddressOnCreation": false,
          "Ipv6CidrBlockAssociationSet": [],
          "Tags": [
            {
              "Key": "stackd-probe",
              "Value": "stackd-cfn-docdb-215bb3fd92b5"
            }
          ],
          "SubnetArn": "arn:aws:ec2:us-east-1:000000000000:subnet/subnet-0dfd17589fdba1cec",
          "EnableDns64": false,
          "Ipv6Native": false,
          "PrivateDnsNameOptionsOnLaunch": {
            "HostnameType": "ip-name",
            "EnableResourceNameDnsARecord": false,
            "EnableResourceNameDnsAAAARecord": false
          },
          "SubnetId": "subnet-0dfd17589fdba1cec",
          "State": "available",
          "VpcId": "vpc-03132cdf0ed5aae97",
          "CidrBlock": "10.219.0.0/25",
          "AvailableIpAddressCount": 123,
          "AvailabilityZone": "us-east-1a",
          "DefaultForAz": false,
          "MapPublicIpOnLaunch": false
        }
      },
      "metadata": {
        "RequestId": "0d5b9e64-a1d7-403e-8718-2c2ea2293be3",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "0d5b9e64-a1d7-403e-8718-2c2ea2293be3",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "1254",
          "date": "Thu, 01 Oct 2026 00:02:06 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:06.108143+00:00"
    },
    {
      "label": "create-subnet1",
      "service": "ec2",
      "operation": "CreateSubnet",
      "input": {
        "VpcId": "vpc-03132cdf0ed5aae97",
        "CidrBlock": "10.219.0.128/25",
        "AvailabilityZone": "us-east-1b",
        "TagSpecifications": [
          {
            "ResourceType": "subnet",
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ]
          }
        ]
      },
      "started_at": "2026-10-01T00:02:06.113875+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Subnet": {
          "AvailabilityZoneId": "use1-az1",
          "MapCustomerOwnedIpOnLaunch": false,
          "OwnerId": "000000000000",
          "AssignIpv6AddressOnCreation": false,
          "Ipv6CidrBlockAssociationSet": [],
          "Tags": [
            {
              "Key": "stackd-probe",
              "Value": "stackd-cfn-docdb-215bb3fd92b5"
            }
          ],
          "SubnetArn": "arn:aws:ec2:us-east-1:000000000000:subnet/subnet-0c34773315f2ea842",
          "EnableDns64": false,
          "Ipv6Native": false,
          "PrivateDnsNameOptionsOnLaunch": {
            "HostnameType": "ip-name",
            "EnableResourceNameDnsARecord": false,
            "EnableResourceNameDnsAAAARecord": false
          },
          "SubnetId": "subnet-0c34773315f2ea842",
          "State": "available",
          "VpcId": "vpc-03132cdf0ed5aae97",
          "CidrBlock": "10.219.0.128/25",
          "AvailableIpAddressCount": 123,
          "AvailabilityZone": "us-east-1b",
          "DefaultForAz": false,
          "MapPublicIpOnLaunch": false
        }
      },
      "metadata": {
        "RequestId": "cca310f4-24a0-4338-85ad-fc6f94c08d7a",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "cca310f4-24a0-4338-85ad-fc6f94c08d7a",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "1256",
          "date": "Thu, 01 Oct 2026 00:02:06 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:06.517554+00:00"
    },
    {
      "label": "create-private-security-group",
      "service": "ec2",
      "operation": "CreateSecurityGroup",
      "input": {
        "GroupName": "stackd-cfn-docdb-215bb3fd92b5",
        "Description": "Owned disabled DocumentDB calibration; no public ingress",
        "VpcId": "vpc-03132cdf0ed5aae97",
        "TagSpecifications": [
          {
            "ResourceType": "security-group",
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ]
          }
        ]
      },
      "started_at": "2026-10-01T00:02:06.530862+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "GroupId": "sg-0e2b33b00adf8fcd9",
        "Tags": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ],
        "SecurityGroupArn": "arn:aws:ec2:us-east-1:000000000000:security-group/sg-0e2b33b00adf8fcd9"
      },
      "metadata": {
        "RequestId": "03399be0-23e8-4d58-a155-daa9eb3aaeb1",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "03399be0-23e8-4d58-a155-daa9eb3aaeb1",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "470",
          "date": "Thu, 01 Oct 2026 00:02:06 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:06.881364+00:00"
    },
    {
      "label": "private-source-self-ingress",
      "service": "ec2",
      "operation": "AuthorizeSecurityGroupIngress",
      "input": {
        "GroupId": "sg-0e2b33b00adf8fcd9",
        "IpPermissions": [
          {
            "IpProtocol": "tcp",
            "FromPort": 27017,
            "ToPort": 27017,
            "UserIdGroupPairs": [
              {
                "GroupId": "sg-0e2b33b00adf8fcd9"
              }
            ]
          }
        ]
      },
      "started_at": "2026-10-01T00:02:06.892501+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Return": true,
        "SecurityGroupRules": [
          {
            "SecurityGroupRuleId": "sgr-0ac45fc18b467810a",
            "GroupId": "sg-0e2b33b00adf8fcd9",
            "GroupOwnerId": "000000000000",
            "IsEgress": false,
            "IpProtocol": "tcp",
            "FromPort": 27017,
            "ToPort": 27017,
            "ReferencedGroupInfo": {
              "GroupId": "sg-0e2b33b00adf8fcd9",
              "UserId": "000000000000"
            },
            "SecurityGroupRuleArn": "arn:aws:ec2:us-east-1:000000000000:security-group-rule/sgr-0ac45fc18b467810a"
          }
        ]
      },
      "metadata": {
        "RequestId": "f7fa90d6-b12b-452d-8719-cf07e83d754e",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "f7fa90d6-b12b-452d-8719-cf07e83d754e",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "783",
          "date": "Thu, 01 Oct 2026 00:02:07 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:07.494774+00:00"
    },
    {
      "label": "subnet-group-name-absent",
      "service": "docdb",
      "operation": "DescribeDBSubnetGroups",
      "input": {
        "DBSubnetGroupName": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:02:07.497106+00:00",
      "phase": "workflow",
      "code": "DBSubnetGroupNotFoundFault",
      "error": {
        "Type": "Sender",
        "Code": "DBSubnetGroupNotFoundFault",
        "Message": "DB Subnet group 'stackd-cfn-docdb-215bb3fd92b5' not found."
      },
      "metadata": {
        "RequestId": "ac954fdb-90c9-4a11-bfdd-58942c817402",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "x-amzn-requestid": "ac954fdb-90c9-4a11-bfdd-58942c817402",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "315",
          "date": "Thu, 01 Oct 2026 00:02:07 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:08.036888+00:00"
    },
    {
      "label": "create-subnet-group",
      "service": "docdb",
      "operation": "CreateDBSubnetGroup",
      "input": {
        "DBSubnetGroupName": "stackd-cfn-docdb-215bb3fd92b5",
        "DBSubnetGroupDescription": "Exact-owned CFN DocumentDB capture",
        "SubnetIds": [
          "subnet-0dfd17589fdba1cec",
          "subnet-0c34773315f2ea842"
        ],
        "Tags": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ]
      },
      "started_at": "2026-10-01T00:02:08.050286+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "DBSubnetGroup": {
          "DBSubnetGroupName": "stackd-cfn-docdb-215bb3fd92b5",
          "DBSubnetGroupDescription": "Exact-owned CFN DocumentDB capture",
          "VpcId": "vpc-03132cdf0ed5aae97",
          "SubnetGroupStatus": "Complete",
          "Subnets": [
            {
              "SubnetIdentifier": "subnet-0dfd17589fdba1cec",
              "SubnetAvailabilityZone": {
                "Name": "us-east-1a"
              },
              "SubnetStatus": "Active"
            },
            {
              "SubnetIdentifier": "subnet-0c34773315f2ea842",
              "SubnetAvailabilityZone": {
                "Name": "us-east-1b"
              },
              "SubnetStatus": "Active"
            }
          ],
          "DBSubnetGroupArn": "arn:aws:rds:us-east-1:000000000000:subgrp:stackd-cfn-docdb-215bb3fd92b5",
          "SupportedNetworkTypes": [
            "IPV4"
          ]
        }
      },
      "metadata": {
        "RequestId": "dd29724f-90b8-46c7-ac06-3626e6600ca4",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "dd29724f-90b8-46c7-ac06-3626e6600ca4",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "1398",
          "date": "Thu, 01 Oct 2026 00:02:08 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:08.912187+00:00"
    },
    {
      "label": "cluster-name-absent",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:02:08.914740+00:00",
      "phase": "workflow",
      "code": "DBClusterNotFoundFault",
      "error": {
        "Type": "Sender",
        "Code": "DBClusterNotFoundFault",
        "Message": "DBCluster stackd-cfn-docdb-215bb3fd92b5 not found."
      },
      "metadata": {
        "RequestId": "3aefafee-bdc0-4960-8964-45db39d4a81c",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "x-amzn-requestid": "3aefafee-bdc0-4960-8964-45db39d4a81c",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "303",
          "date": "Thu, 01 Oct 2026 00:02:09 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:09.077279+00:00"
    },
    {
      "label": "create-real-documentdb-cluster-no-instance",
      "service": "docdb",
      "operation": "CreateDBCluster",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
        "Engine": "docdb",
        "EngineVersion": "5.0.0",
        "MasterUsername": "ownedprobe",
        "MasterUserPassword": "<redacted-synthetic-credential>",
        "DBSubnetGroupName": "stackd-cfn-docdb-215bb3fd92b5",
        "VpcSecurityGroupIds": [
          "sg-0e2b33b00adf8fcd9"
        ],
        "StorageEncrypted": true,
        "BackupRetentionPeriod": 1,
        "DeletionProtection": false,
        "Tags": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ]
      },
      "started_at": "2026-10-01T00:02:09.088841+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "DBCluster": {
          "AvailabilityZones": [
            "us-east-1a",
            "us-east-1b",
            "us-east-1f"
          ],
          "BackupRetentionPeriod": 1,
          "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
          "DBClusterParameterGroup": "default.docdb5.0",
          "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
          "Status": "creating",
          "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
          "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
          "MultiAZ": false,
          "Engine": "docdb",
          "EngineVersion": "5.0.0",
          "Port": 27017,
          "MasterUsername": "ownedprobe",
          "PreferredBackupWindow": "09:33-10:03",
          "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
          "ReadReplicaIdentifiers": [],
          "DBClusterMembers": [],
          "VpcSecurityGroups": [
            {
              "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
              "Status": "active"
            }
          ],
          "HostedZoneId": "ZNKXH85TT8WVW",
          "StorageEncrypted": true,
          "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
          "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
          "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
          "AssociatedRoles": [],
          "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
          "DeletionProtection": false,
          "NetworkType": "IPV4"
        }
      },
      "metadata": {
        "RequestId": "eab90ebf-b365-470f-bd44-c39978326bef",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "eab90ebf-b365-470f-bd44-c39978326bef",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3067",
          "date": "Thu, 01 Oct 2026 00:02:10 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:10.885481+00:00"
    },
    {
      "label": "secret-name-absent",
      "service": "secretsmanager",
      "operation": "DescribeSecret",
      "input": {
        "SecretId": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:02:10.901811+00:00",
      "phase": "workflow",
      "code": "ResourceNotFoundException",
      "error": {
        "Message": "Secrets Manager can't find the specified secret.",
        "Code": "ResourceNotFoundException"
      },
      "metadata": {
        "RequestId": "905bdad1-2a4d-4896-a637-e4bc33aec324",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:11 GMT",
          "x-amzn-requestid": "905bdad1-2a4d-4896-a637-e4bc33aec324",
          "connection": "close",
          "content-type": "application/x-amz-json-1.1",
          "content-length": "99"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:11.329590+00:00"
    },
    {
      "label": "create-owned-source-secret",
      "service": "secretsmanager",
      "operation": "CreateSecret",
      "input": {
        "Name": "stackd-cfn-docdb-215bb3fd92b5",
        "SecretString": "<redacted-synthetic-credential>",
        "Tags": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ]
      },
      "started_at": "2026-10-01T00:02:11.334943+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "ARN": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o",
        "Name": "stackd-cfn-docdb-215bb3fd92b5",
        "VersionId": "11cc2c56-639f-4856-813d-cadfc7621a23"
      },
      "metadata": {
        "RequestId": "6b82296c-a10d-4d9b-aa15-d46411efba71",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:11 GMT",
          "x-amzn-requestid": "6b82296c-a10d-4d9b-aa15-d46411efba71",
          "content-type": "application/x-amz-json-1.1",
          "content-length": "189"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:11.816159+00:00"
    },
    {
      "label": "cluster-readiness",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:02:11.821500+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "DBClusters": [
          {
            "AvailabilityZones": [
              "us-east-1a",
              "us-east-1b",
              "us-east-1f"
            ],
            "BackupRetentionPeriod": 1,
            "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
            "DBClusterParameterGroup": "default.docdb5.0",
            "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
            "Status": "creating",
            "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "MultiAZ": false,
            "Engine": "docdb",
            "EngineVersion": "5.0.0",
            "Port": 27017,
            "MasterUsername": "ownedprobe",
            "PreferredBackupWindow": "09:33-10:03",
            "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
            "ReadReplicaIdentifiers": [],
            "DBClusterMembers": [],
            "VpcSecurityGroups": [
              {
                "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
                "Status": "active"
              }
            ],
            "HostedZoneId": "ZNKXH85TT8WVW",
            "StorageEncrypted": true,
            "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
            "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
            "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "AssociatedRoles": [],
            "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
            "DeletionProtection": false,
            "NetworkType": "IPV4"
          }
        ]
      },
      "metadata": {
        "RequestId": "4e0370b4-a18e-42f6-8e2d-ec455841e67a",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "4e0370b4-a18e-42f6-8e2d-ec455841e67a",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3352",
          "date": "Thu, 01 Oct 2026 00:02:11 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:12.032953+00:00"
    },
    {
      "label": "cluster-readiness",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:02:27.037589+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "DBClusters": [
          {
            "AvailabilityZones": [
              "us-east-1a",
              "us-east-1b",
              "us-east-1f"
            ],
            "BackupRetentionPeriod": 1,
            "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
            "DBClusterParameterGroup": "default.docdb5.0",
            "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
            "Status": "creating",
            "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "MultiAZ": false,
            "Engine": "docdb",
            "EngineVersion": "5.0.0",
            "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Port": 27017,
            "MasterUsername": "ownedprobe",
            "PreferredBackupWindow": "09:33-10:03",
            "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
            "ReadReplicaIdentifiers": [],
            "DBClusterMembers": [],
            "VpcSecurityGroups": [
              {
                "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
                "Status": "active"
              }
            ],
            "HostedZoneId": "ZNKXH85TT8WVW",
            "StorageEncrypted": true,
            "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
            "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
            "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "AssociatedRoles": [],
            "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
            "DeletionProtection": false,
            "NetworkType": "IPV4"
          }
        ]
      },
      "metadata": {
        "RequestId": "66bd108b-3c42-4742-880f-ff4a813e3276",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "66bd108b-3c42-4742-880f-ff4a813e3276",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3512",
          "date": "Thu, 01 Oct 2026 00:02:27 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:27.344112+00:00"
    },
    {
      "label": "cluster-readiness",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:02:42.348632+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "DBClusters": [
          {
            "AvailabilityZones": [
              "us-east-1a",
              "us-east-1b",
              "us-east-1f"
            ],
            "BackupRetentionPeriod": 1,
            "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
            "DBClusterParameterGroup": "default.docdb5.0",
            "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
            "Status": "available",
            "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "MultiAZ": false,
            "Engine": "docdb",
            "EngineVersion": "5.0.0",
            "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Port": 27017,
            "MasterUsername": "ownedprobe",
            "PreferredBackupWindow": "09:33-10:03",
            "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
            "ReadReplicaIdentifiers": [],
            "DBClusterMembers": [],
            "VpcSecurityGroups": [
              {
                "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
                "Status": "active"
              }
            ],
            "HostedZoneId": "ZNKXH85TT8WVW",
            "StorageEncrypted": true,
            "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
            "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
            "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "AssociatedRoles": [],
            "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
            "DeletionProtection": false,
            "NetworkType": "IPV4"
          }
        ]
      },
      "metadata": {
        "RequestId": "247c0863-683c-417b-a96e-441246f656ef",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "247c0863-683c-417b-a96e-441246f656ef",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3513",
          "date": "Thu, 01 Oct 2026 00:02:42 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:42.619658+00:00"
    },
    {
      "label": "role-name-absent",
      "service": "iam",
      "operation": "GetRole",
      "input": {
        "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role"
      },
      "started_at": "2026-10-01T00:02:42.633370+00:00",
      "phase": "workflow",
      "code": "NoSuchEntity",
      "error": {
        "Type": "Sender",
        "Code": "NoSuchEntity",
        "Message": "The role with name stackd-cfn-docdb-215bb3fd92b5-role cannot be found."
      },
      "metadata": {
        "RequestId": "cff7250c-1af9-419e-a47b-5395609be468",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:43 GMT",
          "x-amzn-requestid": "cff7250c-1af9-419e-a47b-5395609be468",
          "content-type": "text/xml",
          "content-length": "314"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:43.132401+00:00"
    },
    {
      "label": "create-role",
      "service": "iam",
      "operation": "CreateRole",
      "input": {
        "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role",
        "Tags": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ],
        "AssumeRolePolicyDocument": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Effect\": \"Allow\", \"Principal\": {\"Service\": \"lambda.amazonaws.com\"}, \"Action\": \"sts:AssumeRole\"}]}"
      },
      "started_at": "2026-10-01T00:02:43.144653+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Role": {
          "Path": "/",
          "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role",
          "RoleId": "AROAQAAAAAAAK2AHGVEG7",
          "Arn": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
          "CreateDate": "2026-10-01T00:02:43+00:00",
          "AssumeRolePolicyDocument": {
            "Version": "2012-10-17",
            "Statement": [
              {
                "Effect": "Allow",
                "Principal": {
                  "Service": "lambda.amazonaws.com"
                },
                "Action": "sts:AssumeRole"
              }
            ]
          },
          "Tags": [
            {
              "Key": "stackd-probe",
              "Value": "stackd-cfn-docdb-215bb3fd92b5"
            }
          ]
        }
      },
      "metadata": {
        "RequestId": "7ddf11aa-e0d6-448e-99c3-5c3cca0c9f80",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:43 GMT",
          "x-amzn-requestid": "7ddf11aa-e0d6-448e-99c3-5c3cca0c9f80",
          "content-type": "text/xml",
          "content-length": "973"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:43.338540+00:00"
    },
    {
      "label": "function-name-absent",
      "service": "lambda",
      "operation": "GetFunctionConfiguration",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:02:43.351115+00:00",
      "phase": "workflow",
      "code": "ResourceNotFoundException",
      "error": {
        "Message": "Function not found: arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "Code": "ResourceNotFoundException"
      },
      "metadata": {
        "RequestId": "c5dc9197-d1dd-4c7e-af1d-852290564672",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:43 GMT",
          "content-type": "application/json",
          "content-length": "127",
          "connection": "keep-alive",
          "x-amzn-requestid": "c5dc9197-d1dd-4c7e-af1d-852290564672",
          "x-amzn-errortype": "ResourceNotFoundException"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:43.832345+00:00"
    },
    {
      "label": "create-function-0",
      "service": "lambda",
      "operation": "CreateFunction",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Runtime": "python3.12",
        "Handler": "entry.handler",
        "Timeout": 3,
        "MemorySize": 128,
        "Code": {
          "ZipFile": {
            "base64": "UEsDBBQAAAAIAFUIQV2C5h2TtAAAAB0BAAAIAAAAZW50cnkucHltjMsKwjAQRff9ipCVBekHdBexi2B9UAuimxDsVIPtRKZj8YH/bhErot7lvfccVx89sfBNEBRQir3FogIaQAvIQ7H1yHDmMA5EFwI+EYqbbIEa51HG/SEqT7jlrjKvafgE+kiHrT9AYSx9Qn37hrv5B3TsbOWu9nngyxE6gW8iwNaRx2gHPJBqtTSpmo7GyuiZzrVK9Ublej4z+XqRyPBLWls6AP3xLLL5KDFTlU2STIb34AFQSwECFAMUAAAACABVCEFdguYdk7QAAAAdAQAACAAAAAAAAAAAAAAAgAEAAAAAZW50cnkucHlQSwUGAAAAAAEAAQA2AAAA2gAAAAAA",
            "bytes": 294
          }
        },
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "Tags": {
          "stackd-probe": "stackd-cfn-docdb-215bb3fd92b5"
        }
      },
      "started_at": "2026-10-01T00:02:43.850301+00:00",
      "phase": "workflow",
      "code": "InvalidParameterValueException",
      "error": {
        "Message": "The role defined for the function cannot be assumed by Lambda.",
        "Code": "InvalidParameterValueException"
      },
      "metadata": {
        "RequestId": "f882eb17-00e8-4f50-8653-8670463869d4",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:44 GMT",
          "content-type": "application/json",
          "content-length": "90",
          "connection": "keep-alive",
          "x-amzn-requestid": "f882eb17-00e8-4f50-8653-8670463869d4",
          "x-amzn-errortype": "InvalidParameterValueException"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:44.124203+00:00"
    },
    {
      "label": "create-function-1",
      "service": "lambda",
      "operation": "CreateFunction",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Runtime": "python3.12",
        "Handler": "entry.handler",
        "Timeout": 3,
        "MemorySize": 128,
        "Code": {
          "ZipFile": {
            "base64": "UEsDBBQAAAAIAFUIQV2C5h2TtAAAAB0BAAAIAAAAZW50cnkucHltjMsKwjAQRff9ipCVBekHdBexi2B9UAuimxDsVIPtRKZj8YH/bhErot7lvfccVx89sfBNEBRQir3FogIaQAvIQ7H1yHDmMA5EFwI+EYqbbIEa51HG/SEqT7jlrjKvafgE+kiHrT9AYSx9Qn37hrv5B3TsbOWu9nngyxE6gW8iwNaRx2gHPJBqtTSpmo7GyuiZzrVK9Ublej4z+XqRyPBLWls6AP3xLLL5KDFTlU2STIb34AFQSwECFAMUAAAACABVCEFdguYdk7QAAAAdAQAACAAAAAAAAAAAAAAAgAEAAAAAZW50cnkucHlQSwUGAAAAAAEAAQA2AAAA2gAAAAAA",
            "bytes": 294
          }
        },
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "Tags": {
          "stackd-probe": "stackd-cfn-docdb-215bb3fd92b5"
        }
      },
      "started_at": "2026-10-01T00:02:47.127751+00:00",
      "phase": "workflow",
      "code": "InvalidParameterValueException",
      "error": {
        "Message": "The role defined for the function cannot be assumed by Lambda.",
        "Code": "InvalidParameterValueException"
      },
      "metadata": {
        "RequestId": "defb307c-3385-4b16-9e5f-90ccf7a3bdad",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:47 GMT",
          "content-type": "application/json",
          "content-length": "90",
          "connection": "keep-alive",
          "x-amzn-requestid": "defb307c-3385-4b16-9e5f-90ccf7a3bdad",
          "x-amzn-errortype": "InvalidParameterValueException"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:47.513475+00:00"
    },
    {
      "label": "create-function-2",
      "service": "lambda",
      "operation": "CreateFunction",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Runtime": "python3.12",
        "Handler": "entry.handler",
        "Timeout": 3,
        "MemorySize": 128,
        "Code": {
          "ZipFile": {
            "base64": "UEsDBBQAAAAIAFUIQV2C5h2TtAAAAB0BAAAIAAAAZW50cnkucHltjMsKwjAQRff9ipCVBekHdBexi2B9UAuimxDsVIPtRKZj8YH/bhErot7lvfccVx89sfBNEBRQir3FogIaQAvIQ7H1yHDmMA5EFwI+EYqbbIEa51HG/SEqT7jlrjKvafgE+kiHrT9AYSx9Qn37hrv5B3TsbOWu9nngyxE6gW8iwNaRx2gHPJBqtTSpmo7GyuiZzrVK9Ublej4z+XqRyPBLWls6AP3xLLL5KDFTlU2STIb34AFQSwECFAMUAAAACABVCEFdguYdk7QAAAAdAQAACAAAAAAAAAAAAAAAgAEAAAAAZW50cnkucHlQSwUGAAAAAAEAAQA2AAAA2gAAAAAA",
            "bytes": 294
          }
        },
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "Tags": {
          "stackd-probe": "stackd-cfn-docdb-215bb3fd92b5"
        }
      },
      "started_at": "2026-10-01T00:02:50.516892+00:00",
      "phase": "workflow",
      "code": "InvalidParameterValueException",
      "error": {
        "Message": "The role defined for the function cannot be assumed by Lambda.",
        "Code": "InvalidParameterValueException"
      },
      "metadata": {
        "RequestId": "281aa43a-bf94-44b8-a8b8-c46b9a717b14",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:50 GMT",
          "content-type": "application/json",
          "content-length": "90",
          "connection": "keep-alive",
          "x-amzn-requestid": "281aa43a-bf94-44b8-a8b8-c46b9a717b14",
          "x-amzn-errortype": "InvalidParameterValueException"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:50.858577+00:00"
    },
    {
      "label": "create-function-3",
      "service": "lambda",
      "operation": "CreateFunction",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Runtime": "python3.12",
        "Handler": "entry.handler",
        "Timeout": 3,
        "MemorySize": 128,
        "Code": {
          "ZipFile": {
            "base64": "UEsDBBQAAAAIAFUIQV2C5h2TtAAAAB0BAAAIAAAAZW50cnkucHltjMsKwjAQRff9ipCVBekHdBexi2B9UAuimxDsVIPtRKZj8YH/bhErot7lvfccVx89sfBNEBRQir3FogIaQAvIQ7H1yHDmMA5EFwI+EYqbbIEa51HG/SEqT7jlrjKvafgE+kiHrT9AYSx9Qn37hrv5B3TsbOWu9nngyxE6gW8iwNaRx2gHPJBqtTSpmo7GyuiZzrVK9Ublej4z+XqRyPBLWls6AP3xLLL5KDFTlU2STIb34AFQSwECFAMUAAAACABVCEFdguYdk7QAAAAdAQAACAAAAAAAAAAAAAAAgAEAAAAAZW50cnkucHlQSwUGAAAAAAEAAQA2AAAA2gAAAAAA",
            "bytes": 294
          }
        },
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "Tags": {
          "stackd-probe": "stackd-cfn-docdb-215bb3fd92b5"
        }
      },
      "started_at": "2026-10-01T00:02:53.945760+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "Runtime": "python3.12",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Handler": "entry.handler",
        "CodeSize": 294,
        "Description": "",
        "Timeout": 3,
        "MemorySize": 128,
        "LastModified": "2026-10-01T00:02:54.157+0000",
        "CodeSha256": "ZqcgGSJnU7sWNNzPzhiDeG8oD1kwea2ZZrdstbLPVwQ=",
        "Version": "$LATEST",
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "TracingConfig": {
          "Mode": "PassThrough"
        },
        "RevisionId": "0dc8a0c2-5dc0-4e5b-8071-916304f8b35f",
        "State": "Pending",
        "StateReason": "The function is being created.",
        "StateReasonCode": "Creating",
        "PackageType": "Zip",
        "Architectures": [
          "x86_64"
        ],
        "EphemeralStorage": {
          "Size": 512
        },
        "SnapStart": {
          "ApplyOn": "None",
          "OptimizationStatus": "Off"
        },
        "RuntimeVersionConfig": {
          "RuntimeVersionArn": "arn:aws:lambda:us-east-1::runtime:82e039f92842e36f1a6625923469bca61af525e1ba09578e99a8baf78ff79db7"
        },
        "LoggingConfig": {
          "LogFormat": "Text",
          "LogGroup": "/aws/lambda/stackd-cfn-docdb-215bb3fd92b5-fn"
        }
      },
      "metadata": {
        "RequestId": "c3464a3c-134b-4499-9f8c-7bd867d2fb87",
        "HTTPStatusCode": 201,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:54 GMT",
          "content-type": "application/json",
          "content-length": "1499",
          "connection": "keep-alive",
          "x-amzn-requestid": "c3464a3c-134b-4499-9f8c-7bd867d2fb87"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:54.505717+00:00"
    },
    {
      "label": "function-ready-0",
      "service": "lambda",
      "operation": "GetFunctionConfiguration",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:02:54.514579+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "Runtime": "python3.12",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Handler": "entry.handler",
        "CodeSize": 294,
        "Description": "",
        "Timeout": 3,
        "MemorySize": 128,
        "LastModified": "2026-10-01T00:02:54.157+0000",
        "CodeSha256": "ZqcgGSJnU7sWNNzPzhiDeG8oD1kwea2ZZrdstbLPVwQ=",
        "Version": "$LATEST",
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "TracingConfig": {
          "Mode": "PassThrough"
        },
        "RevisionId": "0dc8a0c2-5dc0-4e5b-8071-916304f8b35f",
        "State": "Pending",
        "StateReason": "The function is being created.",
        "StateReasonCode": "Creating",
        "PackageType": "Zip",
        "Architectures": [
          "x86_64"
        ],
        "EphemeralStorage": {
          "Size": 512
        },
        "SnapStart": {
          "ApplyOn": "None",
          "OptimizationStatus": "Off"
        },
        "RuntimeVersionConfig": {
          "RuntimeVersionArn": "arn:aws:lambda:us-east-1::runtime:82e039f92842e36f1a6625923469bca61af525e1ba09578e99a8baf78ff79db7"
        },
        "LoggingConfig": {
          "LogFormat": "Text",
          "LogGroup": "/aws/lambda/stackd-cfn-docdb-215bb3fd92b5-fn"
        }
      },
      "metadata": {
        "RequestId": "afd599d8-9743-41ec-85ed-7d1a7967251c",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:54 GMT",
          "content-type": "application/json",
          "content-length": "1499",
          "connection": "keep-alive",
          "x-amzn-requestid": "afd599d8-9743-41ec-85ed-7d1a7967251c"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:54.737056+00:00"
    },
    {
      "label": "function-ready-1",
      "service": "lambda",
      "operation": "GetFunctionConfiguration",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:02:56.740608+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "Runtime": "python3.12",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Handler": "entry.handler",
        "CodeSize": 294,
        "Description": "",
        "Timeout": 3,
        "MemorySize": 128,
        "LastModified": "2026-10-01T00:02:54.157+0000",
        "CodeSha256": "ZqcgGSJnU7sWNNzPzhiDeG8oD1kwea2ZZrdstbLPVwQ=",
        "Version": "$LATEST",
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "TracingConfig": {
          "Mode": "PassThrough"
        },
        "RevisionId": "0dc8a0c2-5dc0-4e5b-8071-916304f8b35f",
        "State": "Pending",
        "StateReason": "The function is being created.",
        "StateReasonCode": "Creating",
        "PackageType": "Zip",
        "Architectures": [
          "x86_64"
        ],
        "EphemeralStorage": {
          "Size": 512
        },
        "SnapStart": {
          "ApplyOn": "None",
          "OptimizationStatus": "Off"
        },
        "RuntimeVersionConfig": {
          "RuntimeVersionArn": "arn:aws:lambda:us-east-1::runtime:82e039f92842e36f1a6625923469bca61af525e1ba09578e99a8baf78ff79db7"
        },
        "LoggingConfig": {
          "LogFormat": "Text",
          "LogGroup": "/aws/lambda/stackd-cfn-docdb-215bb3fd92b5-fn"
        }
      },
      "metadata": {
        "RequestId": "80750a4d-f2a9-4edf-a821-86e1980de333",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:56 GMT",
          "content-type": "application/json",
          "content-length": "1499",
          "connection": "keep-alive",
          "x-amzn-requestid": "80750a4d-f2a9-4edf-a821-86e1980de333"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:56.979872+00:00"
    },
    {
      "label": "function-ready-2",
      "service": "lambda",
      "operation": "GetFunctionConfiguration",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:02:58.983591+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "Runtime": "python3.12",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Handler": "entry.handler",
        "CodeSize": 294,
        "Description": "",
        "Timeout": 3,
        "MemorySize": 128,
        "LastModified": "2026-10-01T00:02:54.157+0000",
        "CodeSha256": "ZqcgGSJnU7sWNNzPzhiDeG8oD1kwea2ZZrdstbLPVwQ=",
        "Version": "$LATEST",
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "TracingConfig": {
          "Mode": "PassThrough"
        },
        "RevisionId": "893d78a9-7a01-4cc0-9272-f1630bb4fc8e",
        "State": "Active",
        "LastUpdateStatus": "Successful",
        "PackageType": "Zip",
        "Architectures": [
          "x86_64"
        ],
        "EphemeralStorage": {
          "Size": 512
        },
        "SnapStart": {
          "ApplyOn": "None",
          "OptimizationStatus": "Off"
        },
        "RuntimeVersionConfig": {
          "RuntimeVersionArn": "arn:aws:lambda:us-east-1::runtime:82e039f92842e36f1a6625923469bca61af525e1ba09578e99a8baf78ff79db7"
        },
        "LoggingConfig": {
          "LogFormat": "Text",
          "LogGroup": "/aws/lambda/stackd-cfn-docdb-215bb3fd92b5-fn"
        }
      },
      "metadata": {
        "RequestId": "ea54229d-87f4-4eeb-a493-d2a4b2bf733c",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:59 GMT",
          "content-type": "application/json",
          "content-length": "1472",
          "connection": "keep-alive",
          "x-amzn-requestid": "ea54229d-87f4-4eeb-a493-d2a4b2bf733c"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:59.198583+00:00"
    },
    {
      "label": "reserve-zero-concurrency",
      "service": "lambda",
      "operation": "PutFunctionConcurrency",
      "input": {
        "FunctionName": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "ReservedConcurrentExecutions": 0
      },
      "started_at": "2026-10-01T00:02:59.202149+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "ReservedConcurrentExecutions": 0
      },
      "metadata": {
        "RequestId": "90c2191a-2351-45ec-bd7e-1cc980f4ea94",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:59 GMT",
          "content-type": "application/json",
          "content-length": "34",
          "connection": "keep-alive",
          "x-amzn-requestid": "90c2191a-2351-45ec-bd7e-1cc980f4ea94"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:59.364731+00:00"
    },
    {
      "label": "confirm-zero-concurrency",
      "service": "lambda",
      "operation": "GetFunctionConcurrency",
      "input": {
        "FunctionName": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:02:59.368311+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "ReservedConcurrentExecutions": 0
      },
      "metadata": {
        "RequestId": "0b80a4a7-1aa5-45e7-b77c-b2eb2da42969",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:59 GMT",
          "content-type": "application/json",
          "content-length": "34",
          "connection": "keep-alive",
          "x-amzn-requestid": "0b80a4a7-1aa5-45e7-b77c-b2eb2da42969"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:59.506323+00:00"
    },
    {
      "label": "put-owned-source-policy",
      "service": "iam",
      "operation": "PutRolePolicy",
      "input": {
        "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role",
        "PolicyName": "owned-documentdb-access",
        "PolicyDocument": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Effect\": \"Allow\", \"Action\": [\"rds:DescribeDBClusters\", \"rds:DescribeDBClusterParameters\", \"rds:DescribeDBSubnetGroups\", \"ec2:DescribeNetworkInterfaces\", \"ec2:DescribeVpcs\", \"ec2:DescribeSubnets\", \"ec2:DescribeSecurityGroups\"], \"Resource\": \"*\"}, {\"Effect\": \"Allow\", \"Action\": \"secretsmanager:GetSecretValue\", \"Resource\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}, {\"Effect\": \"Allow\", \"Action\": \"ec2:CreateNetworkInterface\", \"Resource\": [\"arn:aws:ec2:us-east-1:000000000000:subnet/subnet-0dfd17589fdba1cec\", \"arn:aws:ec2:us-east-1:000000000000:subnet/subnet-0c34773315f2ea842\", \"arn:aws:ec2:us-east-1:000000000000:security-group/sg-0e2b33b00adf8fcd9\"]}, {\"Effect\": \"Allow\", \"Action\": [\"ec2:CreateNetworkInterface\", \"ec2:DeleteNetworkInterface\"], \"Resource\": \"arn:aws:ec2:us-east-1:000000000000:network-interface/*\", \"Condition\": {\"ArnEquals\": {\"ec2:Vpc\": \"arn:aws:ec2:us-east-1:000000000000:vpc/vpc-03132cdf0ed5aae97\"}}}]}"
      },
      "started_at": "2026-10-01T00:02:59.519331+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {},
      "metadata": {
        "RequestId": "54041dd1-9379-46a6-8c70-6a178124b9e1",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:02:59 GMT",
          "x-amzn-requestid": "54041dd1-9379-46a6-8c70-6a178124b9e1",
          "content-type": "text/xml",
          "content-length": "206"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:02:59.698738+00:00"
    },
    {
      "label": "publish-owned-noninvoked-version",
      "service": "lambda",
      "operation": "PublishVersion",
      "input": {
        "FunctionName": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:03:14.702486+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn:1",
        "Runtime": "python3.12",
        "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
        "Handler": "entry.handler",
        "CodeSize": 294,
        "Description": "",
        "Timeout": 3,
        "MemorySize": 128,
        "LastModified": "2026-10-01T00:02:54.157+0000",
        "CodeSha256": "ZqcgGSJnU7sWNNzPzhiDeG8oD1kwea2ZZrdstbLPVwQ=",
        "Version": "1",
        "Environment": {
          "Variables": {
            "PROBE_MARKER": "native"
          }
        },
        "TracingConfig": {
          "Mode": "PassThrough"
        },
        "RevisionId": "d6eaed36-76d1-4b83-b733-877c85852133",
        "State": "Active",
        "LastUpdateStatus": "Successful",
        "PackageType": "Zip",
        "Architectures": [
          "x86_64"
        ],
        "EphemeralStorage": {
          "Size": 512
        },
        "SnapStart": {
          "ApplyOn": "None",
          "OptimizationStatus": "Off"
        },
        "RuntimeVersionConfig": {
          "RuntimeVersionArn": "arn:aws:lambda:us-east-1::runtime:82e039f92842e36f1a6625923469bca61af525e1ba09578e99a8baf78ff79db7"
        },
        "LoggingConfig": {
          "LogFormat": "Text",
          "LogGroup": "/aws/lambda/stackd-cfn-docdb-215bb3fd92b5-fn"
        }
      },
      "metadata": {
        "RequestId": "8b99d8c1-6369-499e-b360-b97f3668f330",
        "HTTPStatusCode": 201,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:15 GMT",
          "content-type": "application/json",
          "content-length": "1468",
          "connection": "keep-alive",
          "x-amzn-requestid": "8b99d8c1-6369-499e-b360-b97f3668f330"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:15.086505+00:00"
    },
    {
      "label": "create-owned-alias",
      "service": "lambda",
      "operation": "CreateAlias",
      "input": {
        "FunctionName": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "Name": "owned-target",
        "FunctionVersion": "1"
      },
      "started_at": "2026-10-01T00:03:15.099156+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "AliasArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn:owned-target",
        "Name": "owned-target",
        "FunctionVersion": "1",
        "Description": "",
        "RevisionId": "09271799-a0a1-4531-9503-8a1af3671817"
      },
      "metadata": {
        "RequestId": "16b771d3-dab5-4370-93bd-8264fa524f6f",
        "HTTPStatusCode": 201,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:15 GMT",
          "content-type": "application/json",
          "content-length": "241",
          "connection": "keep-alive",
          "x-amzn-requestid": "16b771d3-dab5-4370-93bd-8264fa524f6f"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:15.249734+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-stack-name-absent",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping"
      },
      "started_at": "2026-10-01T00:03:15.253503+00:00",
      "phase": "workflow",
      "code": "ValidationError",
      "error": {
        "Type": "Sender",
        "Code": "ValidationError",
        "Message": "Stack with id stackd-cfn-docdb-215bb3fd92b5-mapping does not exist"
      },
      "metadata": {
        "RequestId": "5ba75ce2-a9f9-4350-aeb2-085efaeb22fd",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "x-amzn-requestid": "5ba75ce2-a9f9-4350-aeb2-085efaeb22fd",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:15 GMT",
          "content-type": "text/xml",
          "content-length": "323",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:15.777500+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-submit",
      "service": "cloudformation",
      "operation": "CreateStack",
      "input": {
        "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
        "TemplateBody": "{\"AWSTemplateFormatVersion\": \"2010-09-09\", \"Resources\": {\"Mapping\": {\"Type\": \"AWS::Lambda::EventSourceMapping\", \"Properties\": {\"FunctionName\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\", \"EventSourceArn\": \"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\", \"Enabled\": false, \"DocumentDBEventSourceConfig\": {\"DatabaseName\": \"owned\"}, \"SourceAccessConfigurations\": [{\"Type\": \"BASIC_AUTH\", \"URI\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}]}}}, \"Outputs\": {\"MappingRef\": {\"Value\": {\"Ref\": \"Mapping\"}}, \"MappingId\": {\"Value\": {\"Fn::GetAtt\": [\"Mapping\", \"Id\"]}}, \"MappingArn\": {\"Value\": {\"Fn::GetAtt\": [\"Mapping\", \"EventSourceMappingArn\"]}}}}",
        "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position",
        "Tags": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ]
      },
      "started_at": "2026-10-01T00:03:15.790712+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
        "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d"
      },
      "metadata": {
        "RequestId": "fb851de2-f647-47ee-8a43-a772abbb34ec",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "fb851de2-f647-47ee-8a43-a772abbb34ec",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:16 GMT",
          "content-type": "text/xml",
          "content-length": "475",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:16.114907+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-poll-0",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:16.127981+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Stacks": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "CreationTime": "2026-10-01T00:03:15.910000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "CREATE_IN_PROGRESS",
            "StackStatusReason": "User Initiated",
            "DisableRollback": false,
            "DeploymentConfig": {
              "Mode": "STANDARD",
              "DisableRollback": false
            },
            "NotificationARNs": [],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "EnableTerminationProtection": false,
            "DriftInformation": {
              "StackDriftStatus": "NOT_CHECKED"
            },
            "LastOperations": [
              {
                "OperationType": "CREATE_STACK",
                "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d"
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "eacb05d5-d44a-41a9-9c42-14752d7d98a8",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "eacb05d5-d44a-41a9-9c42-14752d7d98a8",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:16 GMT",
          "content-type": "text/xml",
          "content-length": "1548",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:16.260731+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-poll-1",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:19.267614+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Stacks": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "CreationTime": "2026-10-01T00:03:15.910000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "CREATE_IN_PROGRESS",
            "DisableRollback": false,
            "DeploymentConfig": {
              "Mode": "STANDARD",
              "DisableRollback": false
            },
            "NotificationARNs": [],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "EnableTerminationProtection": false,
            "DriftInformation": {
              "StackDriftStatus": "NOT_CHECKED"
            },
            "LastOperations": [
              {
                "OperationType": "CREATE_STACK",
                "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d"
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "10e6042f-6efd-40ae-8625-48cac3d74747",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "10e6042f-6efd-40ae-8625-48cac3d74747",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:19 GMT",
          "content-type": "text/xml",
          "content-length": "1486",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:19.401733+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-poll-2",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:22.406001+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Stacks": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "CreationTime": "2026-10-01T00:03:15.910000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "CREATE_IN_PROGRESS",
            "DisableRollback": false,
            "DeploymentConfig": {
              "Mode": "STANDARD",
              "DisableRollback": false
            },
            "NotificationARNs": [],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "EnableTerminationProtection": false,
            "DriftInformation": {
              "StackDriftStatus": "NOT_CHECKED"
            },
            "LastOperations": [
              {
                "OperationType": "CREATE_STACK",
                "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d"
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "55161f22-b21d-49fb-b06d-07f777f552a2",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "55161f22-b21d-49fb-b06d-07f777f552a2",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:22 GMT",
          "content-type": "text/xml",
          "content-length": "1486",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:22.530865+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-poll-3",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:25.535139+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Stacks": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "CreationTime": "2026-10-01T00:03:15.910000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "CREATE_COMPLETE",
            "DisableRollback": false,
            "DeploymentConfig": {
              "Mode": "STANDARD",
              "DisableRollback": false
            },
            "NotificationARNs": [],
            "Outputs": [
              {
                "OutputKey": "MappingId",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingArn",
                "OutputValue": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingRef",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              }
            ],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "EnableTerminationProtection": false,
            "DriftInformation": {
              "StackDriftStatus": "NOT_CHECKED"
            },
            "LastOperations": [
              {
                "OperationType": "CREATE_STACK",
                "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d"
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "c177d6b8-89ff-46f5-8b64-859b66b767ad",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "c177d6b8-89ff-46f5-8b64-859b66b767ad",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:25 GMT",
          "content-type": "text/xml",
          "content-length": "2061",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:25.664353+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-describe_stack_resources",
      "service": "cloudformation",
      "operation": "DescribeStackResources",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:25.668651+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "StackResources": [
          {
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:22.276000+00:00",
            "ResourceStatus": "CREATE_COMPLETE",
            "DriftInformation": {
              "StackResourceDriftStatus": "NOT_CHECKED"
            }
          }
        ]
      },
      "metadata": {
        "RequestId": "73f9ce6a-b365-49b3-a7d3-6a03cb8c9111",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "73f9ce6a-b365-49b3-a7d3-6a03cb8c9111",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:25 GMT",
          "content-type": "text/xml",
          "content-length": "1051",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:25.813045+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-describe_stack_events",
      "service": "cloudformation",
      "operation": "DescribeStackEvents",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:25.826450+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "StackEvents": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "858734b0-bd2b-11f1-a16d-12df42add461",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "PhysicalResourceId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "ResourceType": "AWS::CloudFormation::Stack",
            "Timestamp": "2026-10-01T00:03:24.647000+00:00",
            "ResourceStatus": "CREATE_COMPLETE",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "Mapping-CREATE_COMPLETE-2026-10-01T00:03:22.276Z",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:22.276000+00:00",
            "ResourceStatus": "CREATE_COMPLETE",
            "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "Mapping-CREATE_IN_PROGRESS-2026-10-01T00:03:21.049Z",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:21.049000+00:00",
            "ResourceStatus": "CREATE_IN_PROGRESS",
            "ResourceStatusReason": "Resource creation Initiated",
            "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "Mapping-CREATE_IN_PROGRESS-2026-10-01T00:03:18.781Z",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:18.781000+00:00",
            "ResourceStatus": "CREATE_IN_PROGRESS",
            "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "PhysicalResourceId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "ResourceType": "AWS::CloudFormation::Stack",
            "Timestamp": "2026-10-01T00:03:15.910000+00:00",
            "ResourceStatus": "CREATE_IN_PROGRESS",
            "ResourceStatusReason": "User Initiated",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          }
        ]
      },
      "metadata": {
        "RequestId": "3ec0f08f-5f21-421f-994b-cb51e4bbfa66",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "3ec0f08f-5f21-421f-994b-cb51e4bbfa66",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:25 GMT",
          "content-type": "text/xml",
          "content-length": "6632",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:25.958922+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-get-template",
      "service": "cloudformation",
      "operation": "GetTemplate",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:25.972510+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "TemplateBody": {
          "AWSTemplateFormatVersion": "2010-09-09",
          "Resources": {
            "Mapping": {
              "Type": "AWS::Lambda::EventSourceMapping",
              "Properties": {
                "FunctionName": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
                "EventSourceArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
                "Enabled": false,
                "DocumentDBEventSourceConfig": {
                  "DatabaseName": "owned"
                },
                "SourceAccessConfigurations": [
                  {
                    "Type": "BASIC_AUTH",
                    "URI": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
                  }
                ]
              }
            }
          },
          "Outputs": {
            "MappingRef": {
              "Value": {
                "Ref": "Mapping"
              }
            },
            "MappingId": {
              "Value": {
                "Fn::GetAtt": [
                  "Mapping",
                  "Id"
                ]
              }
            },
            "MappingArn": {
              "Value": {
                "Fn::GetAtt": [
                  "Mapping",
                  "EventSourceMappingArn"
                ]
              }
            }
          }
        },
        "StagesAvailable": [
          "Original",
          "Processed"
        ]
      },
      "metadata": {
        "RequestId": "6d6491c7-4b06-431f-9598-b39053deb9c2",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "6d6491c7-4b06-431f-9598-b39053deb9c2",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:26 GMT",
          "content-type": "text/xml",
          "content-length": "1501",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:26.093337+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-mapping-ready-0",
      "service": "lambda",
      "operation": "GetEventSourceMapping",
      "input": {
        "UUID": "df26f12a-973a-489f-bcbb-728fde50cedd"
      },
      "started_at": "2026-10-01T00:03:26.098103+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "UUID": "df26f12a-973a-489f-bcbb-728fde50cedd",
        "StartingPosition": "LATEST",
        "BatchSize": 100,
        "EventSourceArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
        "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "LastModified": "2026-10-01T01:03:20.410000+01:00",
        "LastProcessingResult": "No records processed",
        "State": "Disabled",
        "StateTransitionReason": "USER_INITIATED",
        "SourceAccessConfigurations": [
          {
            "Type": "BASIC_AUTH",
            "URI": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
          }
        ],
        "DocumentDBEventSourceConfig": {
          "DatabaseName": "owned",
          "FullDocument": "Default"
        },
        "EventSourceMappingArn": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
      },
      "metadata": {
        "RequestId": "52cbcc5f-072a-4173-86ab-5d2a2b833dbb",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:26 GMT",
          "content-type": "application/json",
          "content-length": "1371",
          "connection": "keep-alive",
          "x-amzn-requestid": "52cbcc5f-072a-4173-86ab-5d2a2b833dbb"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:26.546173+00:00"
    },
    {
      "label": "fresh-omitted-starting-position-mapping-tags",
      "service": "lambda",
      "operation": "ListTags",
      "input": {
        "Resource": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
      },
      "started_at": "2026-10-01T00:03:26.551153+00:00",
      "phase": "workflow",
      "code": "Success",
      "output": {
        "Tags": {
          "aws:cloudformation:logical-id": "Mapping",
          "aws:cloudformation:stack-id": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "aws:cloudformation:stack-name": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "stackd-probe": "stackd-cfn-docdb-215bb3fd92b5"
        }
      },
      "metadata": {
        "RequestId": "62bd5c6a-d719-4740-bc55-985ec34f54e2",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:26 GMT",
          "content-type": "application/json",
          "content-length": "330",
          "connection": "keep-alive",
          "x-amzn-requestid": "62bd5c6a-d719-4740-bc55-985ec34f54e2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:26.844573+00:00"
    },
    {
      "label": "cleanup-stack-resource-inventory",
      "service": "cloudformation",
      "operation": "DescribeStackResources",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:26.869960+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "StackResources": [
          {
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:22.276000+00:00",
            "ResourceStatus": "CREATE_COMPLETE",
            "DriftInformation": {
              "StackResourceDriftStatus": "NOT_CHECKED"
            }
          }
        ]
      },
      "metadata": {
        "RequestId": "97457b61-87df-45d2-a852-62576ee9fe17",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "97457b61-87df-45d2-a852-62576ee9fe17",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:26 GMT",
          "content-type": "text/xml",
          "content-length": "1051",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:27.010852+00:00"
    },
    {
      "label": "cleanup-mapping-current",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:27.024722+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Stacks": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "CreationTime": "2026-10-01T00:03:15.910000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "CREATE_COMPLETE",
            "DisableRollback": false,
            "DeploymentConfig": {
              "Mode": "STANDARD",
              "DisableRollback": false
            },
            "NotificationARNs": [],
            "Outputs": [
              {
                "OutputKey": "MappingId",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingArn",
                "OutputValue": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingRef",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              }
            ],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "EnableTerminationProtection": false,
            "DriftInformation": {
              "StackDriftStatus": "NOT_CHECKED"
            },
            "LastOperations": [
              {
                "OperationType": "CREATE_STACK",
                "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d"
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "1666da3d-65c8-4bb3-8d5e-f80f3099a959",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "1666da3d-65c8-4bb3-8d5e-f80f3099a959",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:27 GMT",
          "content-type": "text/xml",
          "content-length": "2061",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:27.151938+00:00"
    },
    {
      "label": "cleanup-mapping-delete",
      "service": "cloudformation",
      "operation": "DeleteStack",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:27.157408+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {},
      "metadata": {
        "RequestId": "c9934c6f-6e83-466a-ae32-ed90994f7204",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "c9934c6f-6e83-466a-ae32-ed90994f7204",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:27 GMT",
          "content-type": "text/xml",
          "content-length": "212",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:27.420223+00:00"
    },
    {
      "label": "cleanup-mapping-poll-0",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:27.425309+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Stacks": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "CreationTime": "2026-10-01T00:03:15.910000+00:00",
            "DeletionTime": "2026-10-01T00:03:27.281000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "DELETE_IN_PROGRESS",
            "StackStatusReason": "User Initiated",
            "DisableRollback": false,
            "DeploymentConfig": {
              "Mode": "STANDARD",
              "DisableRollback": false
            },
            "NotificationARNs": [],
            "Outputs": [
              {
                "OutputKey": "MappingId",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingArn",
                "OutputValue": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingRef",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              }
            ],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "EnableTerminationProtection": false,
            "DriftInformation": {
              "StackDriftStatus": "NOT_CHECKED"
            },
            "LastOperations": [
              {
                "OperationType": "DELETE_STACK",
                "OperationId": "f889acfd-66f2-4819-9b7d-f4bae09fc146"
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "2cf67965-97a9-43c1-beab-81b4634a2006",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "2cf67965-97a9-43c1-beab-81b4634a2006",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:27 GMT",
          "content-type": "text/xml",
          "content-length": "2188",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:27.561791+00:00"
    },
    {
      "label": "cleanup-mapping-poll-1",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:30.566996+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Stacks": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "CreationTime": "2026-10-01T00:03:15.910000+00:00",
            "DeletionTime": "2026-10-01T00:03:27.281000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "DELETE_IN_PROGRESS",
            "DisableRollback": false,
            "DeploymentConfig": {
              "Mode": "STANDARD",
              "DisableRollback": false
            },
            "NotificationARNs": [],
            "Outputs": [
              {
                "OutputKey": "MappingId",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingArn",
                "OutputValue": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingRef",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              }
            ],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "EnableTerminationProtection": false,
            "DriftInformation": {
              "StackDriftStatus": "NOT_CHECKED"
            },
            "LastOperations": [
              {
                "OperationType": "DELETE_STACK",
                "OperationId": "f889acfd-66f2-4819-9b7d-f4bae09fc146"
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "115c6620-e77f-4446-af0e-9bb4993e023e",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "115c6620-e77f-4446-af0e-9bb4993e023e",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:30 GMT",
          "content-type": "text/xml",
          "content-length": "2126",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:30.695007+00:00"
    },
    {
      "label": "cleanup-mapping-poll-2",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:33.700366+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Stacks": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "CreationTime": "2026-10-01T00:03:15.910000+00:00",
            "DeletionTime": "2026-10-01T00:03:27.281000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "DELETE_COMPLETE",
            "DisableRollback": false,
            "DeploymentConfig": {
              "Mode": "STANDARD",
              "DisableRollback": false
            },
            "NotificationARNs": [],
            "Outputs": [
              {
                "OutputKey": "MappingId",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingArn",
                "OutputValue": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
              },
              {
                "OutputKey": "MappingRef",
                "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
              }
            ],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "DriftInformation": {
              "StackDriftStatus": "NOT_CHECKED"
            },
            "LastOperations": [
              {
                "OperationType": "DELETE_STACK",
                "OperationId": "f889acfd-66f2-4819-9b7d-f4bae09fc146"
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "9ec27b2e-f3b9-48d7-9c7c-a285855b52d7",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "9ec27b2e-f3b9-48d7-9c7c-a285855b52d7",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:33 GMT",
          "content-type": "text/xml",
          "content-length": "2050",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:33.828783+00:00"
    },
    {
      "label": "cleanup-mapping-events",
      "service": "cloudformation",
      "operation": "DescribeStackEvents",
      "input": {
        "StackName": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d"
      },
      "started_at": "2026-10-01T00:03:33.834077+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "StackEvents": [
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "895e0640-bd2b-11f1-9cd0-122bb3b04057",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "f889acfd-66f2-4819-9b7d-f4bae09fc146",
            "LogicalResourceId": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "PhysicalResourceId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "ResourceType": "AWS::CloudFormation::Stack",
            "Timestamp": "2026-10-01T00:03:31.076000+00:00",
            "ResourceStatus": "DELETE_COMPLETE"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "Mapping-DELETE_COMPLETE-2026-10-01T00:03:30.729Z",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "f889acfd-66f2-4819-9b7d-f4bae09fc146",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:30.729000+00:00",
            "ResourceStatus": "DELETE_COMPLETE",
            "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "Mapping-DELETE_IN_PROGRESS-2026-10-01T00:03:28.859Z",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "f889acfd-66f2-4819-9b7d-f4bae09fc146",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:28.859000+00:00",
            "ResourceStatus": "DELETE_IN_PROGRESS",
            "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "87185c00-bd2b-11f1-a64f-12ffcb2244c1",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "f889acfd-66f2-4819-9b7d-f4bae09fc146",
            "LogicalResourceId": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "PhysicalResourceId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "ResourceType": "AWS::CloudFormation::Stack",
            "Timestamp": "2026-10-01T00:03:27.281000+00:00",
            "ResourceStatus": "DELETE_IN_PROGRESS",
            "ResourceStatusReason": "User Initiated"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "858734b0-bd2b-11f1-a16d-12df42add461",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "PhysicalResourceId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "ResourceType": "AWS::CloudFormation::Stack",
            "Timestamp": "2026-10-01T00:03:24.647000+00:00",
            "ResourceStatus": "CREATE_COMPLETE",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "Mapping-CREATE_COMPLETE-2026-10-01T00:03:22.276Z",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:22.276000+00:00",
            "ResourceStatus": "CREATE_COMPLETE",
            "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "Mapping-CREATE_IN_PROGRESS-2026-10-01T00:03:21.049Z",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:21.049000+00:00",
            "ResourceStatus": "CREATE_IN_PROGRESS",
            "ResourceStatusReason": "Resource creation Initiated",
            "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "Mapping-CREATE_IN_PROGRESS-2026-10-01T00:03:18.781Z",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "Mapping",
            "PhysicalResourceId": "",
            "ResourceType": "AWS::Lambda::EventSourceMapping",
            "Timestamp": "2026-10-01T00:03:18.781000+00:00",
            "ResourceStatus": "CREATE_IN_PROGRESS",
            "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          },
          {
            "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "EventId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
            "LogicalResourceId": "stackd-cfn-docdb-215bb3fd92b5-mapping",
            "PhysicalResourceId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
            "ResourceType": "AWS::CloudFormation::Stack",
            "Timestamp": "2026-10-01T00:03:15.910000+00:00",
            "ResourceStatus": "CREATE_IN_PROGRESS",
            "ResourceStatusReason": "User Initiated",
            "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
          }
        ]
      },
      "metadata": {
        "RequestId": "48a4b0e0-a456-4f08-8cfe-d5d5c7796f45",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "48a4b0e0-a456-4f08-8cfe-d5d5c7796f45",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:33 GMT",
          "content-type": "text/xml",
          "content-length": "11023",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:33.962197+00:00"
    },
    {
      "label": "cleanup-mapping-name-absent",
      "service": "cloudformation",
      "operation": "DescribeStacks",
      "input": {
        "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping"
      },
      "started_at": "2026-10-01T00:03:33.970743+00:00",
      "phase": "cleanup",
      "code": "ValidationError",
      "error": {
        "Type": "Sender",
        "Code": "ValidationError",
        "Message": "Stack with id stackd-cfn-docdb-215bb3fd92b5-mapping does not exist"
      },
      "metadata": {
        "RequestId": "fb0d5f07-5e49-4d5e-88ba-658db9646f52",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "x-amzn-requestid": "fb0d5f07-5e49-4d5e-88ba-658db9646f52",
          "strict-transport-security": "max-age=47304000; includeSubDomains",
          "cache-control": "no-store, no-cache",
          "date": "Thu, 01 Oct 2026 00:03:34 GMT",
          "content-type": "text/xml",
          "content-length": "323",
          "connection": "keep-alive"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:34.111720+00:00"
    },
    {
      "label": "cleanup-mapping-identity-df26f12a-973a-489f-bcbb-728fde50cedd",
      "service": "lambda",
      "operation": "GetEventSourceMapping",
      "input": {
        "UUID": "df26f12a-973a-489f-bcbb-728fde50cedd"
      },
      "started_at": "2026-10-01T00:03:34.126441+00:00",
      "phase": "cleanup",
      "code": "ResourceNotFoundException",
      "error": {
        "Message": "The resource you requested does not exist.",
        "Code": "ResourceNotFoundException"
      },
      "metadata": {
        "RequestId": "0ea5a1ab-6afa-4e98-bed3-7b6e74ab4e58",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:34 GMT",
          "content-type": "application/json",
          "content-length": "70",
          "connection": "keep-alive",
          "x-amzn-requestid": "0ea5a1ab-6afa-4e98-bed3-7b6e74ab4e58",
          "x-amzn-errortype": "ResourceNotFoundException"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:34.552585+00:00"
    },
    {
      "label": "cleanup-secret-identity",
      "service": "secretsmanager",
      "operation": "DescribeSecret",
      "input": {
        "SecretId": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
      },
      "started_at": "2026-10-01T00:03:34.558459+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "ARN": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o",
        "Name": "stackd-cfn-docdb-215bb3fd92b5",
        "LastChangedDate": "2026-10-01T01:02:11.680000+01:00",
        "LastAccessedDate": "2026-10-01T01:00:00+01:00",
        "Tags": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ],
        "VersionIdsToStages": {
          "11cc2c56-639f-4856-813d-cadfc7621a23": [
            "AWSCURRENT"
          ]
        },
        "CreatedDate": "2026-10-01T01:02:11.634000+01:00"
      },
      "metadata": {
        "RequestId": "2673e5b1-0676-4561-8bfd-bb81338f2b7d",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:34 GMT",
          "x-amzn-requestid": "2673e5b1-0676-4561-8bfd-bb81338f2b7d",
          "content-type": "application/x-amz-json-1.1",
          "content-length": "383"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:35.028999+00:00"
    },
    {
      "label": "cleanup-delete-secret",
      "service": "secretsmanager",
      "operation": "DeleteSecret",
      "input": {
        "SecretId": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o",
        "ForceDeleteWithoutRecovery": true
      },
      "started_at": "2026-10-01T00:03:35.034774+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "ARN": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o",
        "Name": "stackd-cfn-docdb-215bb3fd92b5",
        "DeletionDate": "2026-10-01T01:03:35.122000+01:00"
      },
      "metadata": {
        "RequestId": "3c3aec81-0d97-4788-931d-e0ede5fb2162",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:35 GMT",
          "x-amzn-requestid": "3c3aec81-0d97-4788-931d-e0ede5fb2162",
          "content-type": "application/x-amz-json-1.1",
          "content-length": "170"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:35.249471+00:00"
    },
    {
      "label": "cleanup-secret-absent-0",
      "service": "secretsmanager",
      "operation": "DescribeSecret",
      "input": {
        "SecretId": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
      },
      "started_at": "2026-10-01T00:03:35.255221+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "ARN": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o",
        "Name": "stackd-cfn-docdb-215bb3fd92b5",
        "LastChangedDate": "2026-10-01T01:03:35.138000+01:00",
        "LastAccessedDate": "2026-10-01T01:00:00+01:00",
        "DeletedDate": "2026-10-01T01:03:35.132000+01:00",
        "Tags": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ],
        "VersionIdsToStages": {
          "11cc2c56-639f-4856-813d-cadfc7621a23": [
            "AWSCURRENT"
          ]
        },
        "CreatedDate": "2026-10-01T01:02:11.634000+01:00"
      },
      "metadata": {
        "RequestId": "eb16654c-3df0-4214-bd2c-f04df9ae91a5",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:35 GMT",
          "x-amzn-requestid": "eb16654c-3df0-4214-bd2c-f04df9ae91a5",
          "content-type": "application/x-amz-json-1.1",
          "content-length": "415"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:35.398505+00:00"
    },
    {
      "label": "cleanup-secret-absent-1",
      "service": "secretsmanager",
      "operation": "DescribeSecret",
      "input": {
        "SecretId": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
      },
      "started_at": "2026-10-01T00:03:38.404486+00:00",
      "phase": "cleanup",
      "code": "ResourceNotFoundException",
      "error": {
        "Message": "Secrets Manager can't find the specified secret.",
        "Code": "ResourceNotFoundException"
      },
      "metadata": {
        "RequestId": "12049186-5329-4a5a-8d7c-cba8a2efbfe6",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:03:38 GMT",
          "x-amzn-requestid": "12049186-5329-4a5a-8d7c-cba8a2efbfe6",
          "connection": "close",
          "content-type": "application/x-amz-json-1.1",
          "content-length": "99"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:38.642587+00:00"
    },
    {
      "label": "cleanup-cluster-identity",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:03:38.648473+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "DBClusters": [
          {
            "AvailabilityZones": [
              "us-east-1a",
              "us-east-1b",
              "us-east-1f"
            ],
            "BackupRetentionPeriod": 1,
            "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
            "DBClusterParameterGroup": "default.docdb5.0",
            "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
            "Status": "available",
            "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "MultiAZ": false,
            "Engine": "docdb",
            "EngineVersion": "5.0.0",
            "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Port": 27017,
            "MasterUsername": "ownedprobe",
            "PreferredBackupWindow": "09:33-10:03",
            "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
            "ReadReplicaIdentifiers": [],
            "DBClusterMembers": [],
            "VpcSecurityGroups": [
              {
                "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
                "Status": "active"
              }
            ],
            "HostedZoneId": "ZNKXH85TT8WVW",
            "StorageEncrypted": true,
            "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
            "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
            "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "AssociatedRoles": [],
            "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
            "DeletionProtection": false,
            "NetworkType": "IPV4"
          }
        ]
      },
      "metadata": {
        "RequestId": "8ebc1c86-f227-4a96-ab9f-9e49f3e80782",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "8ebc1c86-f227-4a96-ab9f-9e49f3e80782",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3513",
          "date": "Thu, 01 Oct 2026 00:03:38 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:38.863262+00:00"
    },
    {
      "label": "cleanup-cluster-tags",
      "service": "docdb",
      "operation": "ListTagsForResource",
      "input": {
        "ResourceName": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:03:38.869195+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "TagList": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ]
      },
      "metadata": {
        "RequestId": "18c33d30-7e57-4bbc-a8f3-9d72424a71be",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "18c33d30-7e57-4bbc-a8f3-9d72424a71be",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "417",
          "date": "Thu, 01 Oct 2026 00:03:38 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:39.026250+00:00"
    },
    {
      "label": "cleanup-delete-cluster",
      "service": "docdb",
      "operation": "DeleteDBCluster",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
        "SkipFinalSnapshot": true
      },
      "started_at": "2026-10-01T00:03:39.032323+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "DBCluster": {
          "AvailabilityZones": [
            "us-east-1a",
            "us-east-1b",
            "us-east-1f"
          ],
          "BackupRetentionPeriod": 1,
          "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
          "DBClusterParameterGroup": "default.docdb5.0",
          "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
          "Status": "available",
          "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
          "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
          "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
          "MultiAZ": false,
          "Engine": "docdb",
          "EngineVersion": "5.0.0",
          "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
          "Port": 27017,
          "MasterUsername": "ownedprobe",
          "PreferredBackupWindow": "09:33-10:03",
          "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
          "ReadReplicaIdentifiers": [],
          "DBClusterMembers": [],
          "VpcSecurityGroups": [
            {
              "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
              "Status": "active"
            }
          ],
          "HostedZoneId": "ZNKXH85TT8WVW",
          "StorageEncrypted": true,
          "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
          "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
          "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
          "AssociatedRoles": [],
          "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
          "DeletionProtection": false,
          "NetworkType": "IPV4"
        }
      },
      "metadata": {
        "RequestId": "2cdbf20f-3e9b-456f-9a36-acbc0fed5f2c",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "2cdbf20f-3e9b-456f-9a36-acbc0fed5f2c",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3224",
          "date": "Thu, 01 Oct 2026 00:03:39 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:39.298259+00:00"
    },
    {
      "label": "cleanup-cluster-absent",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:03:39.304359+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "DBClusters": [
          {
            "AvailabilityZones": [
              "us-east-1a",
              "us-east-1b",
              "us-east-1f"
            ],
            "BackupRetentionPeriod": 1,
            "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
            "DBClusterParameterGroup": "default.docdb5.0",
            "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
            "Status": "available",
            "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "MultiAZ": false,
            "Engine": "docdb",
            "EngineVersion": "5.0.0",
            "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Port": 27017,
            "MasterUsername": "ownedprobe",
            "PreferredBackupWindow": "09:33-10:03",
            "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
            "ReadReplicaIdentifiers": [],
            "DBClusterMembers": [],
            "VpcSecurityGroups": [
              {
                "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
                "Status": "active"
              }
            ],
            "HostedZoneId": "ZNKXH85TT8WVW",
            "StorageEncrypted": true,
            "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
            "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
            "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "AssociatedRoles": [],
            "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
            "DeletionProtection": false,
            "NetworkType": "IPV4"
          }
        ]
      },
      "metadata": {
        "RequestId": "d4d3d679-24e1-47df-ba5a-6ed84a2e5cff",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "d4d3d679-24e1-47df-ba5a-6ed84a2e5cff",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3513",
          "date": "Thu, 01 Oct 2026 00:03:39 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:39.559259+00:00"
    },
    {
      "label": "cleanup-cluster-absent",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:03:49.566483+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "DBClusters": [
          {
            "AvailabilityZones": [
              "us-east-1a",
              "us-east-1b",
              "us-east-1f"
            ],
            "BackupRetentionPeriod": 1,
            "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
            "DBClusterParameterGroup": "default.docdb5.0",
            "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
            "Status": "deleting",
            "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "MultiAZ": false,
            "Engine": "docdb",
            "EngineVersion": "5.0.0",
            "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Port": 27017,
            "MasterUsername": "ownedprobe",
            "PreferredBackupWindow": "09:33-10:03",
            "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
            "ReadReplicaIdentifiers": [],
            "DBClusterMembers": [],
            "VpcSecurityGroups": [
              {
                "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
                "Status": "active"
              }
            ],
            "HostedZoneId": "ZNKXH85TT8WVW",
            "StorageEncrypted": true,
            "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
            "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
            "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "AssociatedRoles": [],
            "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
            "DeletionProtection": false,
            "NetworkType": "IPV4"
          }
        ]
      },
      "metadata": {
        "RequestId": "098ee31a-89c8-43ef-b0d8-8fbfc955950d",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "098ee31a-89c8-43ef-b0d8-8fbfc955950d",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3512",
          "date": "Thu, 01 Oct 2026 00:03:49 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:03:49.781470+00:00"
    },
    {
      "label": "cleanup-cluster-absent",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:03:59.787721+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "DBClusters": [
          {
            "AvailabilityZones": [
              "us-east-1a",
              "us-east-1b",
              "us-east-1f"
            ],
            "BackupRetentionPeriod": 1,
            "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
            "DBClusterParameterGroup": "default.docdb5.0",
            "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
            "Status": "deleting",
            "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "MultiAZ": false,
            "Engine": "docdb",
            "EngineVersion": "5.0.0",
            "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Port": 27017,
            "MasterUsername": "ownedprobe",
            "PreferredBackupWindow": "09:33-10:03",
            "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
            "ReadReplicaIdentifiers": [],
            "DBClusterMembers": [],
            "VpcSecurityGroups": [
              {
                "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
                "Status": "active"
              }
            ],
            "HostedZoneId": "ZNKXH85TT8WVW",
            "StorageEncrypted": true,
            "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
            "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
            "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "AssociatedRoles": [],
            "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
            "DeletionProtection": false,
            "NetworkType": "IPV4"
          }
        ]
      },
      "metadata": {
        "RequestId": "041b21d6-747c-4756-8f5c-d57881ffa0c7",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "041b21d6-747c-4756-8f5c-d57881ffa0c7",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3512",
          "date": "Thu, 01 Oct 2026 00:03:59 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:00.002248+00:00"
    },
    {
      "label": "cleanup-cluster-absent",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:04:10.008635+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "DBClusters": [
          {
            "AvailabilityZones": [
              "us-east-1a",
              "us-east-1b",
              "us-east-1f"
            ],
            "BackupRetentionPeriod": 1,
            "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
            "DBClusterParameterGroup": "default.docdb5.0",
            "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
            "Status": "deleting",
            "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
            "MultiAZ": false,
            "Engine": "docdb",
            "EngineVersion": "5.0.0",
            "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
            "Port": 27017,
            "MasterUsername": "ownedprobe",
            "PreferredBackupWindow": "09:33-10:03",
            "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
            "ReadReplicaIdentifiers": [],
            "DBClusterMembers": [],
            "VpcSecurityGroups": [
              {
                "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
                "Status": "active"
              }
            ],
            "HostedZoneId": "ZNKXH85TT8WVW",
            "StorageEncrypted": true,
            "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
            "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
            "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "AssociatedRoles": [],
            "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
            "DeletionProtection": false,
            "NetworkType": "IPV4"
          }
        ]
      },
      "metadata": {
        "RequestId": "8ef835fd-933a-43ce-b69f-ace3b3f99890",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "8ef835fd-933a-43ce-b69f-ace3b3f99890",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "3512",
          "date": "Thu, 01 Oct 2026 00:04:10 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:10.225704+00:00"
    },
    {
      "label": "cleanup-cluster-absent",
      "service": "docdb",
      "operation": "DescribeDBClusters",
      "input": {
        "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:04:20.232215+00:00",
      "phase": "cleanup",
      "code": "DBClusterNotFoundFault",
      "error": {
        "Type": "Sender",
        "Code": "DBClusterNotFoundFault",
        "Message": "DBCluster stackd-cfn-docdb-215bb3fd92b5 not found."
      },
      "metadata": {
        "RequestId": "b93e359a-251e-42d0-8d3e-02e1993f84e1",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "x-amzn-requestid": "b93e359a-251e-42d0-8d3e-02e1993f84e1",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "303",
          "date": "Thu, 01 Oct 2026 00:04:20 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:20.385393+00:00"
    },
    {
      "label": "cleanup-subnet-group-identity",
      "service": "docdb",
      "operation": "DescribeDBSubnetGroups",
      "input": {
        "DBSubnetGroupName": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:04:20.391894+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "DBSubnetGroups": [
          {
            "DBSubnetGroupName": "stackd-cfn-docdb-215bb3fd92b5",
            "DBSubnetGroupDescription": "Exact-owned CFN DocumentDB capture",
            "VpcId": "vpc-03132cdf0ed5aae97",
            "SubnetGroupStatus": "Complete",
            "Subnets": [
              {
                "SubnetIdentifier": "subnet-0dfd17589fdba1cec",
                "SubnetAvailabilityZone": {
                  "Name": "us-east-1a"
                },
                "SubnetStatus": "Active"
              },
              {
                "SubnetIdentifier": "subnet-0c34773315f2ea842",
                "SubnetAvailabilityZone": {
                  "Name": "us-east-1b"
                },
                "SubnetStatus": "Active"
              }
            ],
            "DBSubnetGroupArn": "arn:aws:rds:us-east-1:000000000000:subgrp:stackd-cfn-docdb-215bb3fd92b5",
            "SupportedNetworkTypes": [
              "IPV4"
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "d5981128-3a94-44e2-8465-d14926f41aee",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "d5981128-3a94-44e2-8465-d14926f41aee",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "1509",
          "date": "Thu, 01 Oct 2026 00:04:20 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:20.602723+00:00"
    },
    {
      "label": "cleanup-subnet-group-tags",
      "service": "docdb",
      "operation": "ListTagsForResource",
      "input": {
        "ResourceName": "arn:aws:rds:us-east-1:000000000000:subgrp:stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:04:20.609352+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "TagList": [
          {
            "Key": "stackd-probe",
            "Value": "stackd-cfn-docdb-215bb3fd92b5"
          }
        ]
      },
      "metadata": {
        "RequestId": "dd2a3c28-07f1-40db-a73e-277b53fe0129",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "dd2a3c28-07f1-40db-a73e-277b53fe0129",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "417",
          "date": "Thu, 01 Oct 2026 00:04:20 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:20.754516+00:00"
    },
    {
      "label": "cleanup-delete-subnet-group",
      "service": "docdb",
      "operation": "DeleteDBSubnetGroup",
      "input": {
        "DBSubnetGroupName": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:04:20.761041+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {},
      "metadata": {
        "RequestId": "fc1bab94-870e-40db-9111-19c52e3340ed",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "fc1bab94-870e-40db-9111-19c52e3340ed",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "217",
          "date": "Thu, 01 Oct 2026 00:04:20 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:20.954141+00:00"
    },
    {
      "label": "cleanup-subnet-group-absent",
      "service": "docdb",
      "operation": "DescribeDBSubnetGroups",
      "input": {
        "DBSubnetGroupName": "stackd-cfn-docdb-215bb3fd92b5"
      },
      "started_at": "2026-10-01T00:04:20.960577+00:00",
      "phase": "cleanup",
      "code": "DBSubnetGroupNotFoundFault",
      "error": {
        "Type": "Sender",
        "Code": "DBSubnetGroupNotFoundFault",
        "Message": "DB Subnet group 'stackd-cfn-docdb-215bb3fd92b5' not found."
      },
      "metadata": {
        "RequestId": "5b38b2af-c98b-4f9e-b253-574a5446bf2d",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "x-amzn-requestid": "5b38b2af-c98b-4f9e-b253-574a5446bf2d",
          "strict-transport-security": "max-age=31536000",
          "content-type": "text/xml",
          "content-length": "315",
          "date": "Thu, 01 Oct 2026 00:04:21 GMT"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:21.097121+00:00"
    },
    {
      "label": "cleanup-security_group-identity",
      "service": "ec2",
      "operation": "DescribeSecurityGroups",
      "input": {
        "GroupIds": [
          "sg-0e2b33b00adf8fcd9"
        ]
      },
      "started_at": "2026-10-01T00:04:21.103672+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "SecurityGroups": [
          {
            "GroupId": "sg-0e2b33b00adf8fcd9",
            "IpPermissionsEgress": [
              {
                "IpProtocol": "-1",
                "UserIdGroupPairs": [],
                "IpRanges": [
                  {
                    "CidrIp": "0.0.0.0/0"
                  }
                ],
                "Ipv6Ranges": [],
                "PrefixListIds": []
              }
            ],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "VpcId": "vpc-03132cdf0ed5aae97",
            "SecurityGroupArn": "arn:aws:ec2:us-east-1:000000000000:security-group/sg-0e2b33b00adf8fcd9",
            "OwnerId": "000000000000",
            "GroupName": "stackd-cfn-docdb-215bb3fd92b5",
            "Description": "Owned disabled DocumentDB calibration; no public ingress",
            "IpPermissions": [
              {
                "IpProtocol": "tcp",
                "FromPort": 27017,
                "ToPort": 27017,
                "UserIdGroupPairs": [
                  {
                    "UserId": "000000000000",
                    "GroupId": "sg-0e2b33b00adf8fcd9"
                  }
                ],
                "IpRanges": [],
                "Ipv6Ranges": [],
                "PrefixListIds": []
              }
            ]
          }
        ]
      },
      "metadata": {
        "RequestId": "4438fc67-7ade-4f16-a987-be9cb56cb4cd",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "4438fc67-7ade-4f16-a987-be9cb56cb4cd",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "1158",
          "date": "Thu, 01 Oct 2026 00:04:21 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:21.647984+00:00"
    },
    {
      "label": "cleanup-delete-security_group",
      "service": "ec2",
      "operation": "DeleteSecurityGroup",
      "input": {
        "GroupId": "sg-0e2b33b00adf8fcd9"
      },
      "started_at": "2026-10-01T00:04:21.654732+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Return": true,
        "GroupId": "sg-0e2b33b00adf8fcd9"
      },
      "metadata": {
        "RequestId": "e127e8ba-2667-48a5-9f71-4a35342576d5",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "e127e8ba-2667-48a5-9f71-4a35342576d5",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "266",
          "date": "Thu, 01 Oct 2026 00:04:21 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:22.005377+00:00"
    },
    {
      "label": "cleanup-security_group-absent",
      "service": "ec2",
      "operation": "DescribeSecurityGroups",
      "input": {
        "GroupIds": [
          "sg-0e2b33b00adf8fcd9"
        ]
      },
      "started_at": "2026-10-01T00:04:22.012101+00:00",
      "phase": "cleanup",
      "code": "InvalidGroup.NotFound",
      "error": {
        "Code": "InvalidGroup.NotFound",
        "Message": "The security group 'sg-0e2b33b00adf8fcd9' does not exist"
      },
      "metadata": {
        "RequestId": "59e221b7-6bda-4e1b-b5d2-3375587a01f1",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "x-amzn-requestid": "59e221b7-6bda-4e1b-b5d2-3375587a01f1",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "vary": "accept-encoding",
          "content-type": "text/xml;charset=UTF-8",
          "transfer-encoding": "chunked",
          "date": "Thu, 01 Oct 2026 00:04:22 GMT",
          "connection": "close",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:22.207065+00:00"
    },
    {
      "label": "cleanup-subnet1-identity",
      "service": "ec2",
      "operation": "DescribeSubnets",
      "input": {
        "SubnetIds": [
          "subnet-0c34773315f2ea842"
        ]
      },
      "started_at": "2026-10-01T00:04:22.213947+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Subnets": [
          {
            "AvailabilityZoneId": "use1-az1",
            "MapCustomerOwnedIpOnLaunch": false,
            "OwnerId": "000000000000",
            "AssignIpv6AddressOnCreation": false,
            "Ipv6CidrBlockAssociationSet": [],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "SubnetArn": "arn:aws:ec2:us-east-1:000000000000:subnet/subnet-0c34773315f2ea842",
            "EnableDns64": false,
            "Ipv6Native": false,
            "PrivateDnsNameOptionsOnLaunch": {
              "HostnameType": "ip-name",
              "EnableResourceNameDnsARecord": false,
              "EnableResourceNameDnsAAAARecord": false
            },
            "BlockPublicAccessStates": {
              "InternetGatewayBlockMode": "off"
            },
            "SubnetId": "subnet-0c34773315f2ea842",
            "State": "available",
            "VpcId": "vpc-03132cdf0ed5aae97",
            "CidrBlock": "10.219.0.128/25",
            "AvailableIpAddressCount": 123,
            "AvailabilityZone": "us-east-1b",
            "DefaultForAz": false,
            "MapPublicIpOnLaunch": false
          }
        ]
      },
      "metadata": {
        "RequestId": "e0993984-c947-4b10-a213-63961e323ca1",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "e0993984-c947-4b10-a213-63961e323ca1",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "1388",
          "date": "Thu, 01 Oct 2026 00:04:22 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:22.770034+00:00"
    },
    {
      "label": "cleanup-delete-subnet1",
      "service": "ec2",
      "operation": "DeleteSubnet",
      "input": {
        "SubnetId": "subnet-0c34773315f2ea842"
      },
      "started_at": "2026-10-01T00:04:22.776904+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {},
      "metadata": {
        "RequestId": "a5ad1325-dbcd-4bfa-b6a6-30137a739bfa",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "a5ad1325-dbcd-4bfa-b6a6-30137a739bfa",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "213",
          "date": "Thu, 01 Oct 2026 00:04:23 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:23.307724+00:00"
    },
    {
      "label": "cleanup-subnet1-absent",
      "service": "ec2",
      "operation": "DescribeSubnets",
      "input": {
        "SubnetIds": [
          "subnet-0c34773315f2ea842"
        ]
      },
      "started_at": "2026-10-01T00:04:23.314731+00:00",
      "phase": "cleanup",
      "code": "InvalidSubnetID.NotFound",
      "error": {
        "Code": "InvalidSubnetID.NotFound",
        "Message": "The subnet ID 'subnet-0c34773315f2ea842' does not exist"
      },
      "metadata": {
        "RequestId": "bafd2610-fa60-4268-985f-747450610379",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "x-amzn-requestid": "bafd2610-fa60-4268-985f-747450610379",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "vary": "accept-encoding",
          "content-type": "text/xml;charset=UTF-8",
          "transfer-encoding": "chunked",
          "date": "Thu, 01 Oct 2026 00:04:23 GMT",
          "connection": "close",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:23.500369+00:00"
    },
    {
      "label": "cleanup-subnet0-identity",
      "service": "ec2",
      "operation": "DescribeSubnets",
      "input": {
        "SubnetIds": [
          "subnet-0dfd17589fdba1cec"
        ]
      },
      "started_at": "2026-10-01T00:04:23.538986+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Subnets": [
          {
            "AvailabilityZoneId": "use1-az6",
            "MapCustomerOwnedIpOnLaunch": false,
            "OwnerId": "000000000000",
            "AssignIpv6AddressOnCreation": false,
            "Ipv6CidrBlockAssociationSet": [],
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "SubnetArn": "arn:aws:ec2:us-east-1:000000000000:subnet/subnet-0dfd17589fdba1cec",
            "EnableDns64": false,
            "Ipv6Native": false,
            "PrivateDnsNameOptionsOnLaunch": {
              "HostnameType": "ip-name",
              "EnableResourceNameDnsARecord": false,
              "EnableResourceNameDnsAAAARecord": false
            },
            "BlockPublicAccessStates": {
              "InternetGatewayBlockMode": "off"
            },
            "SubnetId": "subnet-0dfd17589fdba1cec",
            "State": "available",
            "VpcId": "vpc-03132cdf0ed5aae97",
            "CidrBlock": "10.219.0.0/25",
            "AvailableIpAddressCount": 123,
            "AvailabilityZone": "us-east-1a",
            "DefaultForAz": false,
            "MapPublicIpOnLaunch": false
          }
        ]
      },
      "metadata": {
        "RequestId": "cd84573c-e47b-4c48-8cec-8295d76e5e30",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "cd84573c-e47b-4c48-8cec-8295d76e5e30",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "1386",
          "date": "Thu, 01 Oct 2026 00:04:24 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:24.122056+00:00"
    },
    {
      "label": "cleanup-delete-subnet0",
      "service": "ec2",
      "operation": "DeleteSubnet",
      "input": {
        "SubnetId": "subnet-0dfd17589fdba1cec"
      },
      "started_at": "2026-10-01T00:04:24.197826+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {},
      "metadata": {
        "RequestId": "f5d2d81b-56bd-4c7a-bab3-a83bb1322aee",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "f5d2d81b-56bd-4c7a-bab3-a83bb1322aee",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "213",
          "date": "Thu, 01 Oct 2026 00:04:24 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:24.804094+00:00"
    },
    {
      "label": "cleanup-subnet0-absent",
      "service": "ec2",
      "operation": "DescribeSubnets",
      "input": {
        "SubnetIds": [
          "subnet-0dfd17589fdba1cec"
        ]
      },
      "started_at": "2026-10-01T00:04:24.811259+00:00",
      "phase": "cleanup",
      "code": "InvalidSubnetID.NotFound",
      "error": {
        "Code": "InvalidSubnetID.NotFound",
        "Message": "The subnet ID 'subnet-0dfd17589fdba1cec' does not exist"
      },
      "metadata": {
        "RequestId": "f89a793b-ed8d-47db-8597-f7b08186c61c",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "x-amzn-requestid": "f89a793b-ed8d-47db-8597-f7b08186c61c",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "vary": "accept-encoding",
          "content-type": "text/xml;charset=UTF-8",
          "transfer-encoding": "chunked",
          "date": "Thu, 01 Oct 2026 00:04:24 GMT",
          "connection": "close",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:24.998209+00:00"
    },
    {
      "label": "cleanup-vpc-identity",
      "service": "ec2",
      "operation": "DescribeVpcs",
      "input": {
        "VpcIds": [
          "vpc-03132cdf0ed5aae97"
        ]
      },
      "started_at": "2026-10-01T00:04:25.005338+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Vpcs": [
          {
            "OwnerId": "000000000000",
            "InstanceTenancy": "default",
            "CidrBlockAssociationSet": [
              {
                "AssociationId": "vpc-cidr-assoc-09b67b10ec8f35140",
                "CidrBlock": "10.219.0.0/24",
                "CidrBlockState": {
                  "State": "associated"
                }
              }
            ],
            "IsDefault": false,
            "Tags": [
              {
                "Key": "stackd-probe",
                "Value": "stackd-cfn-docdb-215bb3fd92b5"
              }
            ],
            "BlockPublicAccessStates": {
              "InternetGatewayBlockMode": "off"
            },
            "VpcId": "vpc-03132cdf0ed5aae97",
            "State": "available",
            "CidrBlock": "10.219.0.0/24",
            "DhcpOptionsId": "dopt-0f7ace7ebae95c51e"
          }
        ]
      },
      "metadata": {
        "RequestId": "fb820d4e-8be3-4fb5-b426-a00313d2650e",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "fb820d4e-8be3-4fb5-b426-a00313d2650e",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "897",
          "date": "Thu, 01 Oct 2026 00:04:25 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:25.527235+00:00"
    },
    {
      "label": "cleanup-delete-vpc",
      "service": "ec2",
      "operation": "DeleteVpc",
      "input": {
        "VpcId": "vpc-03132cdf0ed5aae97"
      },
      "started_at": "2026-10-01T00:04:25.534263+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {},
      "metadata": {
        "RequestId": "a547de2f-0812-4a1c-8f2e-99dabc78467d",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "x-amzn-requestid": "a547de2f-0812-4a1c-8f2e-99dabc78467d",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "content-type": "text/xml;charset=UTF-8",
          "content-length": "207",
          "date": "Thu, 01 Oct 2026 00:04:26 GMT",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:26.092163+00:00"
    },
    {
      "label": "cleanup-vpc-absent",
      "service": "ec2",
      "operation": "DescribeVpcs",
      "input": {
        "VpcIds": [
          "vpc-03132cdf0ed5aae97"
        ]
      },
      "started_at": "2026-10-01T00:04:26.099204+00:00",
      "phase": "cleanup",
      "code": "InvalidVpcID.NotFound",
      "error": {
        "Code": "InvalidVpcID.NotFound",
        "Message": "The vpc ID 'vpc-03132cdf0ed5aae97' does not exist"
      },
      "metadata": {
        "RequestId": "e05a9b2a-7497-4ddf-9513-c20a3d91c080",
        "HTTPStatusCode": 400,
        "HTTPHeaders": {
          "x-amzn-requestid": "e05a9b2a-7497-4ddf-9513-c20a3d91c080",
          "cache-control": "no-cache, no-store",
          "strict-transport-security": "max-age=31536000; includeSubDomains",
          "vary": "accept-encoding",
          "content-type": "text/xml;charset=UTF-8",
          "transfer-encoding": "chunked",
          "date": "Thu, 01 Oct 2026 00:04:26 GMT",
          "connection": "close",
          "server": "AmazonEC2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:26.283264+00:00"
    },
    {
      "label": "cleanup-function-identity",
      "service": "lambda",
      "operation": "GetFunction",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:04:26.290622+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Configuration": {
          "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
          "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
          "Runtime": "python3.12",
          "Role": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
          "Handler": "entry.handler",
          "CodeSize": 294,
          "Description": "",
          "Timeout": 3,
          "MemorySize": 128,
          "LastModified": "2026-10-01T00:02:54.157+0000",
          "CodeSha256": "ZqcgGSJnU7sWNNzPzhiDeG8oD1kwea2ZZrdstbLPVwQ=",
          "Version": "$LATEST",
          "Environment": {
            "Variables": {
              "PROBE_MARKER": "native"
            }
          },
          "TracingConfig": {
            "Mode": "PassThrough"
          },
          "RevisionId": "61542838-ccdb-4711-bac1-1ec28b89cd0f",
          "State": "Active",
          "LastUpdateStatus": "Successful",
          "PackageType": "Zip",
          "Architectures": [
            "x86_64"
          ],
          "EphemeralStorage": {
            "Size": 512
          },
          "SnapStart": {
            "ApplyOn": "None",
            "OptimizationStatus": "Off"
          },
          "RuntimeVersionConfig": {
            "RuntimeVersionArn": "arn:aws:lambda:us-east-1::runtime:82e039f92842e36f1a6625923469bca61af525e1ba09578e99a8baf78ff79db7"
          },
          "LoggingConfig": {
            "LogFormat": "Text",
            "LogGroup": "/aws/lambda/stackd-cfn-docdb-215bb3fd92b5-fn"
          }
        },
        "Code": {
          "RepositoryType": "S3",
          "Location": "https://prod-iad-c1-djusa-tasks.s3.us-east-1.amazonaws.com/snapshots/000000000000/stackd-cfn-docdb-215bb3fd92b5-fn-d9994122-747d-4019-81a1-a30486e4e294?versionId=R4cNLZpEkvYtFxBAzMIszenznGg8jepN&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEKL%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJGMEQCIDbDMcur6yTFyLdh7rWJ46GpxifZxGOzSOH1ft2P2XSOAiB2HY3h8VZpy0cGKhqYusJoYlEJcVNorz%2BBBgTYYbXZkSqLAghrEAQaDDQ3OTIzMzAyNTM3OSIMirnqWGvnmaSGZxSlKugBpEDXDz%2BDuv2W72rz142dNwH3DxHD3a7ZBjFz1yFzZMwe38s%2Bb5ZqFys03oCMmkQb6F03FnBUv2HnGrf9KPhy59a%2BpxM1oHeLSV%2B%2FHg9G066UPR%2FBqRviXNoAIAphGh6D2%2FlpBbqt%2F6Sx2b2h6ghGU6xNf5YvtKIikinAGfjXg3dJoSOPaNsebwJXuY1OULmf93VEjgKe%2BmtM36GgsWG8ocLhLZMKIr4RK6iSCkr55ETYXGYG9pkXRsPqTInIj0oe0pc5S9wyxkk1HYSd5MXSCJThvVm8WWcYwXSsAQHLWxhm%2B4danV69DTCslvXVBjqOAQZmCuh24B9zRkskmPHoTDZS5sDi%2BCEzxRxKwnEaW1x9hp9%2FBzub29gp8MbCcF9DKapsh1s%2FywEZkwrKX8DBhrKDjSg75sMjKcEy1dR51d%2FZuIsr%2BUZU8AT5wAQY%2BwcwIqRlWSY0DFbpmjDT65aKxbwMcdt1TXAlO%2BVS1M1W1a5G%2Bovg%2FjkjE%2BKhA0z0jwc%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20261001T000426Z&X-Amz-SignedHeaders=host&X-Amz-Expires=600&X-Amz-Credential=ASIAW7FEDUVRR437B4SB%2F20261001%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=6f333d7d91c0354b727c66e96951704d452830a6c30d3e4913db8c13c45ef72b"
        },
        "Tags": {
          "stackd-probe": "stackd-cfn-docdb-215bb3fd92b5"
        },
        "Concurrency": {
          "ReservedConcurrentExecutions": 0
        }
      },
      "metadata": {
        "RequestId": "4f4c9f0e-932a-469a-a457-fc7e55aa4bd2",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:26 GMT",
          "content-type": "application/json",
          "content-length": "3028",
          "connection": "keep-alive",
          "x-amzn-requestid": "4f4c9f0e-932a-469a-a457-fc7e55aa4bd2"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:26.499250+00:00"
    },
    {
      "label": "cleanup-delete-function",
      "service": "lambda",
      "operation": "DeleteFunction",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:04:26.506653+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "StatusCode": 204
      },
      "metadata": {
        "RequestId": "9e6e7e89-9aba-4835-9259-248f24d8ac58",
        "HTTPStatusCode": 204,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:26 GMT",
          "content-type": "application/json",
          "connection": "keep-alive",
          "x-amzn-requestid": "9e6e7e89-9aba-4835-9259-248f24d8ac58"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:26.944505+00:00"
    },
    {
      "label": "cleanup-function-absent",
      "service": "lambda",
      "operation": "GetFunctionConfiguration",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn"
      },
      "started_at": "2026-10-01T00:04:26.956152+00:00",
      "phase": "cleanup",
      "code": "ResourceNotFoundException",
      "error": {
        "Message": "Function not found: arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "Code": "ResourceNotFoundException"
      },
      "metadata": {
        "RequestId": "5a306ed6-ff71-4fca-aba0-4919561d7671",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:27 GMT",
          "content-type": "application/json",
          "content-length": "127",
          "connection": "keep-alive",
          "x-amzn-requestid": "5a306ed6-ff71-4fca-aba0-4919561d7671",
          "x-amzn-errortype": "ResourceNotFoundException"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:27.133993+00:00"
    },
    {
      "label": "cleanup-alias-absent-owned-target",
      "service": "lambda",
      "operation": "GetAlias",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "Name": "owned-target"
      },
      "started_at": "2026-10-01T00:04:27.163138+00:00",
      "phase": "cleanup",
      "code": "ResourceNotFoundException",
      "error": {
        "Message": "Cannot find alias arn: arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn:owned-target",
        "Code": "ResourceNotFoundException"
      },
      "metadata": {
        "RequestId": "0ad57145-08e7-474b-b994-7bee4736d4f5",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:27 GMT",
          "content-type": "application/json",
          "content-length": "143",
          "connection": "keep-alive",
          "x-amzn-requestid": "0ad57145-08e7-474b-b994-7bee4736d4f5",
          "x-amzn-errortype": "ResourceNotFoundException"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:27.303754+00:00"
    },
    {
      "label": "cleanup-version-absent-1",
      "service": "lambda",
      "operation": "GetFunctionConfiguration",
      "input": {
        "FunctionName": "stackd-cfn-docdb-215bb3fd92b5-fn",
        "Qualifier": "1"
      },
      "started_at": "2026-10-01T00:04:27.311321+00:00",
      "phase": "cleanup",
      "code": "ResourceNotFoundException",
      "error": {
        "Message": "Function not found: arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn:1",
        "Code": "ResourceNotFoundException"
      },
      "metadata": {
        "RequestId": "8c84e939-816e-4c5a-a992-c9baedd993a0",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:27 GMT",
          "content-type": "application/json",
          "content-length": "129",
          "connection": "keep-alive",
          "x-amzn-requestid": "8c84e939-816e-4c5a-a992-c9baedd993a0",
          "x-amzn-errortype": "ResourceNotFoundException"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:27.483624+00:00"
    },
    {
      "label": "cleanup-role-identity",
      "service": "iam",
      "operation": "GetRole",
      "input": {
        "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role"
      },
      "started_at": "2026-10-01T00:04:27.491228+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {
        "Role": {
          "Path": "/",
          "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role",
          "RoleId": "AROAQAAAAAAAK2AHGVEG7",
          "Arn": "arn:aws:iam::000000000000:role/stackd-cfn-docdb-215bb3fd92b5-role",
          "CreateDate": "2026-10-01T00:02:43+00:00",
          "AssumeRolePolicyDocument": {
            "Version": "2012-10-17",
            "Statement": [
              {
                "Effect": "Allow",
                "Principal": {
                  "Service": "lambda.amazonaws.com"
                },
                "Action": "sts:AssumeRole"
              }
            ]
          },
          "MaxSessionDuration": 3600,
          "Tags": [
            {
              "Key": "stackd-probe",
              "Value": "stackd-cfn-docdb-215bb3fd92b5"
            }
          ],
          "RoleLastUsed": {}
        }
      },
      "metadata": {
        "RequestId": "bbe31b3c-d439-4050-a524-92bfc3ef5475",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:27 GMT",
          "x-amzn-requestid": "bbe31b3c-d439-4050-a524-92bfc3ef5475",
          "content-type": "text/xml",
          "content-length": "1008"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:27.987116+00:00"
    },
    {
      "label": "cleanup-delete-owned-role-policy",
      "service": "iam",
      "operation": "DeleteRolePolicy",
      "input": {
        "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role",
        "PolicyName": "owned-documentdb-access"
      },
      "started_at": "2026-10-01T00:04:27.994868+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {},
      "metadata": {
        "RequestId": "c5db7337-48fa-47c8-8ca6-835807e0cece",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:28 GMT",
          "x-amzn-requestid": "c5db7337-48fa-47c8-8ca6-835807e0cece",
          "content-type": "text/xml",
          "content-length": "212"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:28.162855+00:00"
    },
    {
      "label": "cleanup-delete-role",
      "service": "iam",
      "operation": "DeleteRole",
      "input": {
        "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role"
      },
      "started_at": "2026-10-01T00:04:28.170359+00:00",
      "phase": "cleanup",
      "code": "Success",
      "output": {},
      "metadata": {
        "RequestId": "afd79b26-00c1-4b7f-901a-5a14397a92bb",
        "HTTPStatusCode": 200,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:28 GMT",
          "x-amzn-requestid": "afd79b26-00c1-4b7f-901a-5a14397a92bb",
          "content-type": "text/xml",
          "content-length": "200"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:28.414112+00:00"
    },
    {
      "label": "cleanup-role-absent",
      "service": "iam",
      "operation": "GetRole",
      "input": {
        "RoleName": "stackd-cfn-docdb-215bb3fd92b5-role"
      },
      "started_at": "2026-10-01T00:04:28.490446+00:00",
      "phase": "cleanup",
      "code": "NoSuchEntity",
      "error": {
        "Type": "Sender",
        "Code": "NoSuchEntity",
        "Message": "The role with name stackd-cfn-docdb-215bb3fd92b5-role cannot be found."
      },
      "metadata": {
        "RequestId": "cadba19f-fbc9-4100-8232-58d2ddf4e239",
        "HTTPStatusCode": 404,
        "HTTPHeaders": {
          "date": "Thu, 01 Oct 2026 00:04:28 GMT",
          "x-amzn-requestid": "cadba19f-fbc9-4100-8232-58d2ddf4e239",
          "content-type": "text/xml",
          "content-length": "314"
        },
        "RetryAttempts": 0
      },
      "finished_at": "2026-10-01T00:04:28.754576+00:00"
    }
  ],
  "templates": {
    "fresh-omitted-starting-position": {
      "AWSTemplateFormatVersion": "2010-09-09",
      "Resources": {
        "Mapping": {
          "Type": "AWS::Lambda::EventSourceMapping",
          "Properties": {
            "FunctionName": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
            "EventSourceArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
            "Enabled": false,
            "DocumentDBEventSourceConfig": {
              "DatabaseName": "owned"
            },
            "SourceAccessConfigurations": [
              {
                "Type": "BASIC_AUTH",
                "URI": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
              }
            ]
          }
        }
      },
      "Outputs": {
        "MappingRef": {
          "Value": {
            "Ref": "Mapping"
          }
        },
        "MappingId": {
          "Value": {
            "Fn::GetAtt": [
              "Mapping",
              "Id"
            ]
          }
        },
        "MappingArn": {
          "Value": {
            "Fn::GetAtt": [
              "Mapping",
              "EventSourceMappingArn"
            ]
          }
        }
      }
    }
  },
  "findings": {
    "schema_contract": {
      "primaryIdentifier": [
        "/properties/Id"
      ],
      "readOnlyProperties": [
        "/properties/Id",
        "/properties/EventSourceMappingArn"
      ],
      "createOnlyProperties": [
        "/properties/EventSourceArn",
        "/properties/StartingPosition",
        "/properties/StartingPositionTimestamp",
        "/properties/SelfManagedEventSource"
      ],
      "required": [
        "FunctionName"
      ],
      "tagging": {
        "permissions": [
          "lambda:ListTags",
          "lambda:TagResource",
          "lambda:UntagResource"
        ],
        "taggable": true,
        "tagOnCreate": true,
        "tagUpdatable": true,
        "tagProperty": "/properties/Tags",
        "cloudFormationSystemTags": true
      }
    },
    "real-cluster-ready-without-instance": {
      "AvailabilityZones": [
        "us-east-1a",
        "us-east-1b",
        "us-east-1f"
      ],
      "BackupRetentionPeriod": 1,
      "DBClusterIdentifier": "stackd-cfn-docdb-215bb3fd92b5",
      "DBClusterParameterGroup": "default.docdb5.0",
      "DBSubnetGroup": "stackd-cfn-docdb-215bb3fd92b5",
      "Status": "available",
      "EarliestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
      "Endpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
      "ReaderEndpoint": "stackd-cfn-docdb-215bb3fd92b5.cluster-ro-ccpqsgwiy4ep.us-east-1.docdb.amazonaws.com",
      "MultiAZ": false,
      "Engine": "docdb",
      "EngineVersion": "5.0.0",
      "LatestRestorableTime": "2026-10-01T00:02:26.693000+00:00",
      "Port": 27017,
      "MasterUsername": "ownedprobe",
      "PreferredBackupWindow": "09:33-10:03",
      "PreferredMaintenanceWindow": "wed:03:15-wed:03:45",
      "ReadReplicaIdentifiers": [],
      "DBClusterMembers": [],
      "VpcSecurityGroups": [
        {
          "VpcSecurityGroupId": "sg-0e2b33b00adf8fcd9",
          "Status": "active"
        }
      ],
      "HostedZoneId": "ZNKXH85TT8WVW",
      "StorageEncrypted": true,
      "KmsKeyId": "arn:aws:kms:us-east-1:000000000000:key/a0f9035b-b4c7-4342-9e0c-cbdf45698565",
      "DbClusterResourceId": "cluster-GYSGZWFBIZETJHCTUYTL4JWXYA",
      "DBClusterArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
      "AssociatedRoles": [],
      "ClusterCreateTime": "2026-10-01T00:02:10.142000+00:00",
      "DeletionProtection": false,
      "NetworkType": "IPV4"
    },
    "fresh-omitted-starting-position": {
      "submission_code": "Success",
      "StackResources": [
        {
          "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "LogicalResourceId": "Mapping",
          "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
          "ResourceType": "AWS::Lambda::EventSourceMapping",
          "Timestamp": "2026-10-01T00:03:22.276000+00:00",
          "ResourceStatus": "CREATE_COMPLETE",
          "DriftInformation": {
            "StackResourceDriftStatus": "NOT_CHECKED"
          }
        }
      ],
      "StackEvents": [
        {
          "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "EventId": "858734b0-bd2b-11f1-a16d-12df42add461",
          "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
          "LogicalResourceId": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "PhysicalResourceId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "ResourceType": "AWS::CloudFormation::Stack",
          "Timestamp": "2026-10-01T00:03:24.647000+00:00",
          "ResourceStatus": "CREATE_COMPLETE",
          "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
        },
        {
          "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "EventId": "Mapping-CREATE_COMPLETE-2026-10-01T00:03:22.276Z",
          "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
          "LogicalResourceId": "Mapping",
          "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
          "ResourceType": "AWS::Lambda::EventSourceMapping",
          "Timestamp": "2026-10-01T00:03:22.276000+00:00",
          "ResourceStatus": "CREATE_COMPLETE",
          "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
          "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
        },
        {
          "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "EventId": "Mapping-CREATE_IN_PROGRESS-2026-10-01T00:03:21.049Z",
          "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
          "LogicalResourceId": "Mapping",
          "PhysicalResourceId": "df26f12a-973a-489f-bcbb-728fde50cedd",
          "ResourceType": "AWS::Lambda::EventSourceMapping",
          "Timestamp": "2026-10-01T00:03:21.049000+00:00",
          "ResourceStatus": "CREATE_IN_PROGRESS",
          "ResourceStatusReason": "Resource creation Initiated",
          "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
          "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
        },
        {
          "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "EventId": "Mapping-CREATE_IN_PROGRESS-2026-10-01T00:03:18.781Z",
          "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
          "LogicalResourceId": "Mapping",
          "PhysicalResourceId": "",
          "ResourceType": "AWS::Lambda::EventSourceMapping",
          "Timestamp": "2026-10-01T00:03:18.781000+00:00",
          "ResourceStatus": "CREATE_IN_PROGRESS",
          "ResourceProperties": "{\"FunctionName\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn\",\"Enabled\":\"false\",\"SourceAccessConfigurations\":[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o\"}],\"EventSourceArn\":\"arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5\",\"DocumentDBEventSourceConfig\":{\"DatabaseName\":\"owned\"}}",
          "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
        },
        {
          "StackId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "EventId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
          "StackName": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "OperationId": "804adfb0-bd2b-11f1-a908-0e7efe71f17d",
          "LogicalResourceId": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "PhysicalResourceId": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "ResourceType": "AWS::CloudFormation::Stack",
          "Timestamp": "2026-10-01T00:03:15.910000+00:00",
          "ResourceStatus": "CREATE_IN_PROGRESS",
          "ResourceStatusReason": "User Initiated",
          "ClientRequestToken": "stackd-cfn-docdb-215bb3fd92b5-fresh-omitted-starting-position"
        }
      ],
      "stack_status": "CREATE_COMPLETE",
      "outputs": [
        {
          "OutputKey": "MappingId",
          "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
        },
        {
          "OutputKey": "MappingArn",
          "OutputValue": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
        },
        {
          "OutputKey": "MappingRef",
          "OutputValue": "df26f12a-973a-489f-bcbb-728fde50cedd"
        }
      ],
      "mapping": {
        "UUID": "df26f12a-973a-489f-bcbb-728fde50cedd",
        "StartingPosition": "LATEST",
        "BatchSize": 100,
        "EventSourceArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
        "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
        "LastModified": "2026-10-01T01:03:20.410000+01:00",
        "LastProcessingResult": "No records processed",
        "State": "Disabled",
        "StateTransitionReason": "USER_INITIATED",
        "SourceAccessConfigurations": [
          {
            "Type": "BASIC_AUTH",
            "URI": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
          }
        ],
        "DocumentDBEventSourceConfig": {
          "DatabaseName": "owned",
          "FullDocument": "Default"
        },
        "EventSourceMappingArn": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
      },
      "tags": {
        "Tags": {
          "aws:cloudformation:logical-id": "Mapping",
          "aws:cloudformation:stack-id": "arn:aws:cloudformation:us-east-1:000000000000:stack/stackd-cfn-docdb-215bb3fd92b5-mapping/8049a730-bd2b-11f1-a908-0e7efe71f17d",
          "aws:cloudformation:stack-name": "stackd-cfn-docdb-215bb3fd92b5-mapping",
          "stackd-probe": "stackd-cfn-docdb-215bb3fd92b5"
        }
      }
    },
    "current_mapping": {
      "UUID": "df26f12a-973a-489f-bcbb-728fde50cedd",
      "StartingPosition": "LATEST",
      "BatchSize": 100,
      "EventSourceArn": "arn:aws:rds:us-east-1:000000000000:cluster:stackd-cfn-docdb-215bb3fd92b5",
      "FunctionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-cfn-docdb-215bb3fd92b5-fn",
      "LastModified": "2026-10-01T01:03:20.410000+01:00",
      "LastProcessingResult": "No records processed",
      "State": "Disabled",
      "StateTransitionReason": "USER_INITIATED",
      "SourceAccessConfigurations": [
        {
          "Type": "BASIC_AUTH",
          "URI": "arn:aws:secretsmanager:us-east-1:000000000000:secret:stackd-cfn-docdb-215bb3fd92b5-vHL57o"
        }
      ],
      "DocumentDBEventSourceConfig": {
        "DatabaseName": "owned",
        "FullDocument": "Default"
      },
      "EventSourceMappingArn": "arn:aws:lambda:us-east-1:000000000000:event-source-mapping:df26f12a-973a-489f-bcbb-728fde50cedd"
    }
  },
  "documentation": [
    {
      "source": "https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-eventsourcemapping.md",
      "captured_at": "2026-10-01T00:02:02.701865+00:00",
      "sha256": "34ea0ec43ca801399d30f37eca4fbc05c49d56e705e1166eea686482c8613daf",
      "content": "\n\nThis is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).\n\n# AWS::Lambda::EventSourceMapping\n<a name=\"aws-resource-lambda-eventsourcemapping\"></a>\n\nThe `AWS::Lambda::EventSourceMapping` resource creates a mapping between an event source and an AWS Lambda function. Lambda reads items from the event source and triggers the function.\n\nFor details about each event source type, see the following topics. In particular, each of the topics describes the required and optional parameters for the specific event source. \n+  [ Configuring a Dynamo DB stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-dynamodb-eventsourcemapping) \n+  [ Configuring a Kinesis stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-eventsourcemapping) \n+  [ Configuring an SQS queue as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-eventsource) \n+  [ Configuring an MQ broker as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-eventsourcemapping) \n+  [ Configuring MSK as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html) \n+  [ Configuring Self-Managed Apache Kafka as an event source](https://docs.aws.amazon.com/lambda/latest/dg/kafka-smaa.html) \n+  [ Configuring Amazon DocumentDB as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html) \n\n## Syntax\n<a name=\"aws-resource-lambda-eventsourcemapping-syntax\"></a>\n\nTo declare this entity in your CloudFormation template, use the following syntax:\n\n### JSON\n<a name=\"aws-resource-lambda-eventsourcemapping-syntax.json\"></a>\n\n```\n{\n  \"Type\" : \"AWS::Lambda::EventSourceMapping\",\n  \"Properties\" : {\n      \"[AmazonManagedKafkaEventSourceConfig](#cfn-lambda-eventsourcemapping-amazonmanagedkafkaeventsourceconfig)\" : {{AmazonManagedKafkaEventSourceConfig}},\n      \"[BatchSize](#cfn-lambda-eventsourcemapping-batchsize)\" : {{Integer}},\n      \"[BisectBatchOnFunctionError](#cfn-lambda-eventsourcemapping-bisectbatchonfunctionerror)\" : {{Boolean}},\n      \"[DestinationConfig](#cfn-lambda-eventsourcemapping-destinationconfig)\" : {{DestinationConfig}},\n      \"[DocumentDBEventSourceConfig](#cfn-lambda-eventsourcemapping-documentdbeventsourceconfig)\" : {{DocumentDBEventSourceConfig}},\n      \"[Enabled](#cfn-lambda-eventsourcemapping-enabled)\" : {{Boolean}},\n      \"[EventSourceArn](#cfn-lambda-eventsourcemapping-eventsourcearn)\" : {{String}},\n      \"[FilterCriteria](#cfn-lambda-eventsourcemapping-filtercriteria)\" : {{FilterCriteria}},\n      \"[FunctionName](#cfn-lambda-eventsourcemapping-functionname)\" : {{String}},\n      \"[FunctionResponseTypes](#cfn-lambda-eventsourcemapping-functionresponsetypes)\" : {{[ String, ... ]}},\n      \"[KmsKeyArn](#cfn-lambda-eventsourcemapping-kmskeyarn)\" : {{String}},\n      \"[LoggingConfig](#cfn-lambda-eventsourcemapping-loggingconfig)\" : {{LoggingConfig}},\n      \"[MaximumBatchingWindowInSeconds](#cfn-lambda-eventsourcemapping-maximumbatchingwindowinseconds)\" : {{Integer}},\n      \"[MaximumRecordAgeInSeconds](#cfn-lambda-eventsourcemapping-maximumrecordageinseconds)\" : {{Integer}},\n      \"[MaximumRetryAttempts](#cfn-lambda-eventsourcemapping-maximumretryattempts)\" : {{Integer}},\n      \"[MetricsConfig](#cfn-lambda-eventsourcemapping-metricsconfig)\" : {{MetricsConfig}},\n      \"[ParallelizationFactor](#cfn-lambda-eventsourcemapping-parallelizationfactor)\" : {{Integer}},\n      \"[ProvisionedPollerConfig](#cfn-lambda-eventsourcemapping-provisionedpollerconfig)\" : {{ProvisionedPollerConfig}},\n      \"[Queues](#cfn-lambda-eventsourcemapping-queues)\" : {{[ String, ... ]}},\n      \"[ScalingConfig](#cfn-lambda-eventsourcemapping-scalingconfig)\" : {{ScalingConfig}},\n      \"[SelfManagedEventSource](#cfn-lambda-eventsourcemapping-selfmanagedeventsource)\" : {{SelfManagedEventSource}},\n      \"[SelfManagedKafkaEventSourceConfig](#cfn-lambda-eventsourcemapping-selfmanagedkafkaeventsourceconfig)\" : {{SelfManagedKafkaEventSourceConfig}},\n      \"[SourceAccessConfigurations](#cfn-lambda-eventsourcemapping-sourceaccessconfigurations)\" : {{[ SourceAccessConfiguration, ... ]}},\n      \"[StartingPosition](#cfn-lambda-eventsourcemapping-startingposition)\" : {{String}},\n      \"[StartingPositionTimestamp](#cfn-lambda-eventsourcemapping-startingpositiontimestamp)\" : {{Number}},\n      \"[Tags](#cfn-lambda-eventsourcemapping-tags)\" : {{[ Tag, ... ]}},\n      \"[Topics](#cfn-lambda-eventsourcemapping-topics)\" : {{[ String, ... ]}},\n      \"[TumblingWindowInSeconds](#cfn-lambda-eventsourcemapping-tumblingwindowinseconds)\" : {{Integer}}\n    }\n}\n```\n\n### YAML\n<a name=\"aws-resource-lambda-eventsourcemapping-syntax.yaml\"></a>\n\n```\nType: AWS::Lambda::EventSourceMapping\nProperties:\n  [AmazonManagedKafkaEventSourceConfig](#cfn-lambda-eventsourcemapping-amazonmanagedkafkaeventsourceconfig): {{\n    AmazonManagedKafkaEventSourceConfig}}\n  [BatchSize](#cfn-lambda-eventsourcemapping-batchsize): {{Integer}}\n  [BisectBatchOnFunctionError](#cfn-lambda-eventsourcemapping-bisectbatchonfunctionerror): {{Boolean}}\n  [DestinationConfig](#cfn-lambda-eventsourcemapping-destinationconfig): {{\n    DestinationConfig}}\n  [DocumentDBEventSourceConfig](#cfn-lambda-eventsourcemapping-documentdbeventsourceconfig): {{\n    DocumentDBEventSourceConfig}}\n  [Enabled](#cfn-lambda-eventsourcemapping-enabled): {{Boolean}}\n  [EventSourceArn](#cfn-lambda-eventsourcemapping-eventsourcearn): {{String}}\n  [FilterCriteria](#cfn-lambda-eventsourcemapping-filtercriteria): {{\n    FilterCriteria}}\n  [FunctionName](#cfn-lambda-eventsourcemapping-functionname): {{String}}\n  [FunctionResponseTypes](#cfn-lambda-eventsourcemapping-functionresponsetypes): {{\n    - String}}\n  [KmsKeyArn](#cfn-lambda-eventsourcemapping-kmskeyarn): {{String}}\n  [LoggingConfig](#cfn-lambda-eventsourcemapping-loggingconfig): {{\n    LoggingConfig}}\n  [MaximumBatchingWindowInSeconds](#cfn-lambda-eventsourcemapping-maximumbatchingwindowinseconds): {{Integer}}\n  [MaximumRecordAgeInSeconds](#cfn-lambda-eventsourcemapping-maximumrecordageinseconds): {{Integer}}\n  [MaximumRetryAttempts](#cfn-lambda-eventsourcemapping-maximumretryattempts): {{Integer}}\n  [MetricsConfig](#cfn-lambda-eventsourcemapping-metricsconfig): {{\n    MetricsConfig}}\n  [ParallelizationFactor](#cfn-lambda-eventsourcemapping-parallelizationfactor): {{Integer}}\n  [ProvisionedPollerConfig](#cfn-lambda-eventsourcemapping-provisionedpollerconfig): {{\n    ProvisionedPollerConfig}}\n  [Queues](#cfn-lambda-eventsourcemapping-queues): {{\n    - String}}\n  [ScalingConfig](#cfn-lambda-eventsourcemapping-scalingconfig): {{\n    ScalingConfig}}\n  [SelfManagedEventSource](#cfn-lambda-eventsourcemapping-selfmanagedeventsource): {{\n    SelfManagedEventSource}}\n  [SelfManagedKafkaEventSourceConfig](#cfn-lambda-eventsourcemapping-selfmanagedkafkaeventsourceconfig): {{\n    SelfManagedKafkaEventSourceConfig}}\n  [SourceAccessConfigurations](#cfn-lambda-eventsourcemapping-sourceaccessconfigurations): {{\n    - SourceAccessConfiguration}}\n  [StartingPosition](#cfn-lambda-eventsourcemapping-startingposition): {{String}}\n  [StartingPositionTimestamp](#cfn-lambda-eventsourcemapping-startingpositiontimestamp): {{Number}}\n  [Tags](#cfn-lambda-eventsourcemapping-tags): {{\n    - Tag}}\n  [Topics](#cfn-lambda-eventsourcemapping-topics): {{\n    - String}}\n  [TumblingWindowInSeconds](#cfn-lambda-eventsourcemapping-tumblingwindowinseconds): {{Integer}}\n```\n\n## Properties\n<a name=\"aws-resource-lambda-eventsourcemapping-properties\"></a>\n\n`AmazonManagedKafkaEventSourceConfig`  <a name=\"cfn-lambda-eventsourcemapping-amazonmanagedkafkaeventsourceconfig\"></a>\nSpecific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.  \n*Required*: No  \n*Type*: [AmazonManagedKafkaEventSourceConfig](aws-properties-lambda-eventsourcemapping-amazonmanagedkafkaeventsourceconfig.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`BatchSize`  <a name=\"cfn-lambda-eventsourcemapping-batchsize\"></a>\nThe maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).  \n+ **Amazon Kinesis** \u2013 Default 100. Max 10,000.\n+ **Amazon DynamoDB Streams** \u2013 Default 100. Max 10,000.\n+ **Amazon Simple Queue Service** \u2013 Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.\n+ **Amazon Managed Streaming for Apache Kafka** \u2013 Default 100. Max 10,000.\n+ **Self-managed Apache Kafka** \u2013 Default 100. Max 10,000.\n+ **Amazon MQ (ActiveMQ and RabbitMQ)** \u2013 Default 100. Max 10,000.\n+ **DocumentDB** \u2013 Default 100. Max 10,000.\n*Required*: No  \n*Type*: Integer  \n*Minimum*: `1`  \n*Maximum*: `10000`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`BisectBatchOnFunctionError`  <a name=\"cfn-lambda-eventsourcemapping-bisectbatchonfunctionerror\"></a>\n(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry. The default value is false.  \nWhen using `BisectBatchOnFunctionError`, check the `BatchSize` parameter in the `OnFailure` destination message's metadata. The `BatchSize` could be greater than 1 since Lambda consolidates failed messages metadata when writing to the `OnFailure` destination.\n*Required*: No  \n*Type*: Boolean  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`DestinationConfig`  <a name=\"cfn-lambda-eventsourcemapping-destinationconfig\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) A configuration object that specifies the destination of an event after Lambda processes it.  \n*Required*: No  \n*Type*: [DestinationConfig](aws-properties-lambda-eventsourcemapping-destinationconfig.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`DocumentDBEventSourceConfig`  <a name=\"cfn-lambda-eventsourcemapping-documentdbeventsourceconfig\"></a>\nSpecific configuration settings for a DocumentDB event source.  \n*Required*: No  \n*Type*: [DocumentDBEventSourceConfig](aws-properties-lambda-eventsourcemapping-documentdbeventsourceconfig.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`Enabled`  <a name=\"cfn-lambda-eventsourcemapping-enabled\"></a>\nWhen true, the event source mapping is active. When false, Lambda pauses polling and invocation.  \nDefault: True  \n*Required*: No  \n*Type*: Boolean  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`EventSourceArn`  <a name=\"cfn-lambda-eventsourcemapping-eventsourcearn\"></a>\nThe Amazon Resource Name (ARN) of the event source.  \n+ **Amazon Kinesis** \u2013 The ARN of the data stream or a stream consumer.\n+ **Amazon DynamoDB Streams** \u2013 The ARN of the stream.\n+ **Amazon Simple Queue Service** \u2013 The ARN of the queue.\n+ **Amazon Managed Streaming for Apache Kafka** \u2013 The ARN of the cluster or the ARN of the VPC connection (for [cross-account event source mappings](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#msk-multi-vpc)).\n+ **Amazon MQ** \u2013 The ARN of the broker.\n+ **Amazon DocumentDB** \u2013 The ARN of the DocumentDB change stream.\n*Required*: No  \n*Type*: String  \n*Pattern*: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)`  \n*Minimum*: `12`  \n*Maximum*: `1024`  \n*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)\n\n`FilterCriteria`  <a name=\"cfn-lambda-eventsourcemapping-filtercriteria\"></a>\nAn object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html).  \n*Required*: No  \n*Type*: [FilterCriteria](aws-properties-lambda-eventsourcemapping-filtercriteria.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`FunctionName`  <a name=\"cfn-lambda-eventsourcemapping-functionname\"></a>\nThe name or ARN of the Lambda function.  \n\n**Name formats**\n+ **Function name** \u2013 `MyFunction`.\n+ **Function ARN** \u2013 `arn:aws:lambda:us-west-2:123456789012:function:MyFunction`.\n+ **Version or Alias ARN** \u2013 `arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD`.\n+ **Partial ARN** \u2013 `123456789012:function:MyFunction`.\nThe length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.  \n*Required*: Yes  \n*Type*: String  \n*Pattern*: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:)?(\\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\\$LATEST(\\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`  \n*Minimum*: `1`  \n*Maximum*: `140`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`FunctionResponseTypes`  <a name=\"cfn-lambda-eventsourcemapping-functionresponsetypes\"></a>\n(Kinesis, DynamoDB Streams, and SQS) A list of current response type enums applied to the event source mapping.  \nValid Values: `ReportBatchItemFailures`  \n*Required*: No  \n*Type*: Array of String  \n*Allowed values*: `ReportBatchItemFailures`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`KmsKeyArn`  <a name=\"cfn-lambda-eventsourcemapping-kmskeyarn\"></a>\n The ARN of the AWS Key Management Service (AWS KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics).  \n*Required*: No  \n*Type*: String  \n*Pattern*: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()`  \n*Minimum*: `12`  \n*Maximum*: `2048`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`LoggingConfig`  <a name=\"cfn-lambda-eventsourcemapping-loggingconfig\"></a>\n(Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. For more information, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html).  \n*Required*: No  \n*Type*: [LoggingConfig](aws-properties-lambda-eventsourcemapping-loggingconfig.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`MaximumBatchingWindowInSeconds`  <a name=\"cfn-lambda-eventsourcemapping-maximumbatchingwindowinseconds\"></a>\nThe maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.  \n**Default (Kinesis, DynamoDB, Amazon SQS event sources)**: 0  \n**Default (Amazon MSK, Kafka, Amazon MQ, Amazon DocumentDB event sources)**: 500 ms  \n**Related setting: ** For Amazon SQS event sources, when you set `BatchSize` to a value greater than 10, you must set `MaximumBatchingWindowInSeconds` to at least 1.  \n*Required*: No  \n*Type*: Integer  \n*Minimum*: `0`  \n*Maximum*: `300`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`MaximumRecordAgeInSeconds`  <a name=\"cfn-lambda-eventsourcemapping-maximumrecordageinseconds\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.  \nThe minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed\n*Required*: No  \n*Type*: Integer  \n*Minimum*: `-1`  \n*Maximum*: `604800`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`MaximumRetryAttempts`  <a name=\"cfn-lambda-eventsourcemapping-maximumretryattempts\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source.  \n*Required*: No  \n*Type*: Integer  \n*Minimum*: `-1`  \n*Maximum*: `10000`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`MetricsConfig`  <a name=\"cfn-lambda-eventsourcemapping-metricsconfig\"></a>\nThe metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).  \n*Required*: No  \n*Type*: [MetricsConfig](aws-properties-lambda-eventsourcemapping-metricsconfig.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`ParallelizationFactor`  <a name=\"cfn-lambda-eventsourcemapping-parallelizationfactor\"></a>\n(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1.  \n*Required*: No  \n*Type*: Integer  \n*Minimum*: `1`  \n*Maximum*: `10`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`ProvisionedPollerConfig`  <a name=\"cfn-lambda-eventsourcemapping-provisionedpollerconfig\"></a>\n(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode).  \n*Required*: No  \n*Type*: [ProvisionedPollerConfig](aws-properties-lambda-eventsourcemapping-provisionedpollerconfig.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`Queues`  <a name=\"cfn-lambda-eventsourcemapping-queues\"></a>\n (Amazon MQ) The name of the Amazon MQ broker destination queue to consume.  \n*Required*: No  \n*Type*: Array of String  \n*Minimum*: `1 | 1`  \n*Maximum*: `1000 | 1`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`ScalingConfig`  <a name=\"cfn-lambda-eventsourcemapping-scalingconfig\"></a>\nThis property is for Amazon SQS event sources only. You cannot use `ProvisionedPollerConfig` while using `ScalingConfig`. These options are mutually exclusive. To remove the scaling configuration, pass an empty value.  \n*Required*: No  \n*Type*: [ScalingConfig](aws-properties-lambda-eventsourcemapping-scalingconfig.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`SelfManagedEventSource`  <a name=\"cfn-lambda-eventsourcemapping-selfmanagedeventsource\"></a>\nThe self-managed Apache Kafka cluster for your event source.  \n*Required*: No  \n*Type*: [SelfManagedEventSource](aws-properties-lambda-eventsourcemapping-selfmanagedeventsource.md)  \n*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)\n\n`SelfManagedKafkaEventSourceConfig`  <a name=\"cfn-lambda-eventsourcemapping-selfmanagedkafkaeventsourceconfig\"></a>\nSpecific configuration settings for a self-managed Apache Kafka event source.  \n*Required*: No  \n*Type*: [SelfManagedKafkaEventSourceConfig](aws-properties-lambda-eventsourcemapping-selfmanagedkafkaeventsourceconfig.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`SourceAccessConfigurations`  <a name=\"cfn-lambda-eventsourcemapping-sourceaccessconfigurations\"></a>\nAn array of the authentication protocol, VPC components, or virtual host to secure and define your event source.  \n*Required*: No  \n*Type*: Array of [SourceAccessConfiguration](aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration.md)  \n*Minimum*: `1`  \n*Maximum*: `29`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`StartingPosition`  <a name=\"cfn-lambda-eventsourcemapping-startingposition\"></a>\nThe position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB.  \n+ **LATEST** - Read only new records.\n+ **TRIM\\_HORIZON** - Process all available records.\n+ **AT\\_TIMESTAMP** - Specify a time from which to start reading records.\n*Required*: No  \n*Type*: String  \n*Pattern*: `(LATEST|TRIM_HORIZON|AT_TIMESTAMP)+`  \n*Minimum*: `6`  \n*Maximum*: `12`  \n*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)\n\n`StartingPositionTimestamp`  <a name=\"cfn-lambda-eventsourcemapping-startingpositiontimestamp\"></a>\nWith `StartingPosition` set to `AT_TIMESTAMP`, the time from which to start reading, in Unix time seconds. `StartingPositionTimestamp` cannot be in the future.  \n*Required*: No  \n*Type*: Number  \n*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)\n\n`Tags`  <a name=\"cfn-lambda-eventsourcemapping-tags\"></a>\nA list of tags to add to the event source mapping.  \nYou must have the `lambda:TagResource`, `lambda:UntagResource`, and `lambda:ListTags` permissions for your [IAM principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CloudFormation stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.\n*Required*: No  \n*Type*: Array of [Tag](aws-properties-lambda-eventsourcemapping-tag.md)  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`Topics`  <a name=\"cfn-lambda-eventsourcemapping-topics\"></a>\nThe name of the Kafka topic.  \n*Required*: No  \n*Type*: Array of String  \n*Minimum*: `1 | 1`  \n*Maximum*: `249 | 1`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`TumblingWindowInSeconds`  <a name=\"cfn-lambda-eventsourcemapping-tumblingwindowinseconds\"></a>\n(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.  \n*Required*: No  \n*Type*: Integer  \n*Minimum*: `0`  \n*Maximum*: `900`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n## Return values\n<a name=\"aws-resource-lambda-eventsourcemapping-return-values\"></a>\n\n### Ref\n<a name=\"aws-resource-lambda-eventsourcemapping-return-values-ref\"></a>\n\nWhen you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the mapping's ID.\n\nFor more information about using the `Ref` function, see [`Ref`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html).\n\n### Fn::GetAtt\n<a name=\"aws-resource-lambda-eventsourcemapping-return-values-fn--getatt\"></a>\n\nThe `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.\n\nFor more information about using the `Fn::GetAtt` intrinsic function, see [`Fn::GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html).\n\n#### \n<a name=\"aws-resource-lambda-eventsourcemapping-return-values-fn--getatt-fn--getatt\"></a>\n\n`EventSourceMappingArn`  <a name=\"EventSourceMappingArn-fn::getatt\"></a>\nThe Amazon Resource Name (ARN) of the event source mapping.\n\n`Id`  <a name=\"Id-fn::getatt\"></a>\nThe event source mapping's ID.\n\n## Examples\n<a name=\"aws-resource-lambda-eventsourcemapping--examples\"></a>\n\n\n\n### Event Source Mapping\n<a name=\"aws-resource-lambda-eventsourcemapping--examples--Event_Source_Mapping\"></a>\n\nCreate an event source mapping that reads events from Amazon Kinesis and invokes a Lambda function in the same template.\n\n#### JSON\n<a name=\"aws-resource-lambda-eventsourcemapping--examples--Event_Source_Mapping--json\"></a>\n\n```\n\"EventSourceMapping\": {\n    \"Type\": \"AWS::Lambda::EventSourceMapping\",\n    \"Properties\": {\n        \"EventSourceArn\": {\n            \"Fn::Join\": [\n                \"\",\n                [\n                    \"arn:aws:kinesis:\",\n                    {\n                        \"Ref\": \"AWS::Region\"\n                    },\n                    \":\",\n                    {\n                        \"Ref\": \"AWS::AccountId\"\n                    },\n                    \":stream/\",\n                    {\n                        \"Ref\": \"KinesisStream\"\n                    }\n                ]\n            ]\n        },\n        \"FunctionName\": {\n            \"Fn::GetAtt\": [\n                \"LambdaFunction\",\n                \"Arn\"\n            ]\n        },\n        \"StartingPosition\": \"TRIM_HORIZON\"\n    }\n}\n```\n\n#### YAML\n<a name=\"aws-resource-lambda-eventsourcemapping--examples--Event_Source_Mapping--yaml\"></a>\n\n```\nMyEventSourceMapping:\n  Type: AWS::Lambda::EventSourceMapping\n  Properties:\n    EventSourceArn:\n      Fn::Join:\n        - \"\"\n        -\n          - \"arn:aws:kinesis:\"\n          -\n            Ref: \"AWS::Region\"\n          - \":\"\n          -\n            Ref: \"AWS::AccountId\"\n          - \":stream/\"\n          -\n            Ref: \"KinesisStream\"\n    FunctionName:\n      Fn::GetAtt:\n        - \"LambdaFunction\"\n        - \"Arn\"\n    StartingPosition: \"TRIM_HORIZON\"\n```"
    },
    {
      "source": "https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-eventsourcemapping-documentdbeventsourceconfig.md",
      "captured_at": "2026-10-01T00:02:02.957532+00:00",
      "sha256": "b3d7134cd45f850a59ba10693b3ffdeab9a0fa13e3a7133a1b532856fbaa826e",
      "content": "\n\nThis is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).\n\n# AWS::Lambda::EventSourceMapping DocumentDBEventSourceConfig\n<a name=\"aws-properties-lambda-eventsourcemapping-documentdbeventsourceconfig\"></a>\n\n Specific configuration settings for a DocumentDB event source. \n\n## Syntax\n<a name=\"aws-properties-lambda-eventsourcemapping-documentdbeventsourceconfig-syntax\"></a>\n\nTo declare this entity in your CloudFormation template, use the following syntax:\n\n### JSON\n<a name=\"aws-properties-lambda-eventsourcemapping-documentdbeventsourceconfig-syntax.json\"></a>\n\n```\n{\n  \"[CollectionName](#cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-collectionname)\" : {{String}},\n  \"[DatabaseName](#cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-databasename)\" : {{String}},\n  \"[FullDocument](#cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-fulldocument)\" : {{String}}\n}\n```\n\n### YAML\n<a name=\"aws-properties-lambda-eventsourcemapping-documentdbeventsourceconfig-syntax.yaml\"></a>\n\n```\n  [CollectionName](#cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-collectionname): {{String}}\n  [DatabaseName](#cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-databasename): {{String}}\n  [FullDocument](#cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-fulldocument): {{String}}\n```\n\n## Properties\n<a name=\"aws-properties-lambda-eventsourcemapping-documentdbeventsourceconfig-properties\"></a>\n\n`CollectionName`  <a name=\"cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-collectionname\"></a>\n The name of the collection to consume within the database. If you do not specify a collection, Lambda consumes all collections.   \n*Required*: No  \n*Type*: String  \n*Minimum*: `1`  \n*Maximum*: `57`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`DatabaseName`  <a name=\"cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-databasename\"></a>\n The name of the database to consume within the DocumentDB cluster.   \n*Required*: No  \n*Type*: String  \n*Minimum*: `1`  \n*Maximum*: `63`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`FullDocument`  <a name=\"cfn-lambda-eventsourcemapping-documentdbeventsourceconfig-fulldocument\"></a>\n Determines what DocumentDB sends to your event stream during document update operations. If set to UpdateLookup, DocumentDB sends a delta describing the changes, along with a copy of the entire document. Otherwise, DocumentDB sends only a partial document that contains the changes.   \n*Required*: No  \n*Type*: String  \n*Allowed values*: `UpdateLookup | Default`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)"
    },
    {
      "source": "https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration.md",
      "captured_at": "2026-10-01T00:02:03.213703+00:00",
      "sha256": "4b6e368a1a10dd2e3dc01cce3229aeb1a5b8b7f208aafbf612fb37105a5a0f11",
      "content": "\n\nThis is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).\n\n# AWS::Lambda::EventSourceMapping SourceAccessConfiguration\n<a name=\"aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration\"></a>\n\nAn array of the authentication protocol, VPC components, or virtual host to secure and define your event source.\n\n## Syntax\n<a name=\"aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration-syntax\"></a>\n\nTo declare this entity in your CloudFormation template, use the following syntax:\n\n### JSON\n<a name=\"aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration-syntax.json\"></a>\n\n```\n{\n  \"[Type](#cfn-lambda-eventsourcemapping-sourceaccessconfiguration-type)\" : {{String}},\n  \"[URI](#cfn-lambda-eventsourcemapping-sourceaccessconfiguration-uri)\" : {{String}}\n}\n```\n\n### YAML\n<a name=\"aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration-syntax.yaml\"></a>\n\n```\n  [Type](#cfn-lambda-eventsourcemapping-sourceaccessconfiguration-type): {{String}}\n  [URI](#cfn-lambda-eventsourcemapping-sourceaccessconfiguration-uri): {{String}}\n```\n\n## Properties\n<a name=\"aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration-properties\"></a>\n\n`Type`  <a name=\"cfn-lambda-eventsourcemapping-sourceaccessconfiguration-type\"></a>\nThe type of authentication protocol, VPC components, or virtual host for your event source. For example: `\"Type\":\"SASL_SCRAM_512_AUTH\"`.  \n+ `BASIC_AUTH` \u2013 (Amazon MQ) The AWS Secrets Manager secret that stores your broker credentials.\n+ `BASIC_AUTH` \u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL/PLAIN authentication of your Apache Kafka brokers.\n+ `VPC_SUBNET` \u2013 (Self-managed Apache Kafka) The subnets associated with your VPC. Lambda connects to these subnets to fetch data from your self-managed Apache Kafka cluster.\n+ `VPC_SECURITY_GROUP` \u2013 (Self-managed Apache Kafka) The VPC security group used to manage access to your self-managed Apache Kafka brokers.\n+ `SASL_SCRAM_256_AUTH` \u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-256 authentication of your self-managed Apache Kafka brokers.\n+ `SASL_SCRAM_512_AUTH` \u2013 (Amazon MSK, Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-512 authentication of your self-managed Apache Kafka brokers.\n+ `VIRTUAL_HOST` \u2013- (RabbitMQ) The name of the virtual host in your RabbitMQ broker. Lambda uses this RabbitMQ host as the event source. This property cannot be specified in an UpdateEventSourceMapping API call.\n+ `CLIENT_CERTIFICATE_TLS_AUTH` \u2013 (Amazon MSK, self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the certificate chain (X.509 PEM), private key (PKCS\\#8 PEM), and private key password (optional) used for mutual TLS authentication of your MSK/Apache Kafka brokers.\n+ `SERVER_ROOT_CA_CERTIFICATE` \u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the root CA certificate (X.509 PEM) used for TLS encryption of your Apache Kafka brokers. \n*Required*: No  \n*Type*: String  \n*Allowed values*: `BASIC_AUTH | VPC_SUBNET | VPC_SECURITY_GROUP | SASL_SCRAM_512_AUTH | SASL_SCRAM_256_AUTH | VIRTUAL_HOST | CLIENT_CERTIFICATE_TLS_AUTH | SERVER_ROOT_CA_CERTIFICATE | OAUTHBEARER_AUTH | OAUTHBEARER_SCOPE | OAUTHBEARER_AUDIENCE | OAUTHBEARER_LOGICAL_CLUSTER | OAUTHBEARER_IDENTITY_POOL | IAM_AUTH | IAM_OAUTHBEARER_AUTH`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)\n\n`URI`  <a name=\"cfn-lambda-eventsourcemapping-sourceaccessconfiguration-uri\"></a>\nThe value for your chosen configuration in `Type`. For example: `\"URI\": \"arn:aws:secretsmanager:us-east-1:01234567890:secret:MyBrokerSecretName\"`.  \n*Required*: No  \n*Type*: String  \n*Pattern*: `[a-zA-Z0-9-\\/*:_+=.@-]*`  \n*Minimum*: `1`  \n*Maximum*: `200`  \n*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)"
    },
    {
      "source": "https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.md",
      "captured_at": "2026-10-01T00:02:03.278745+00:00",
      "sha256": "0650d49d9419b7e293a07777b38ee4f25f3ddab778bab519af4956a727df46b6",
      "content": "\n\n# Process Amazon DocumentDB events with Lambda\n<a name=\"with-documentdb\"></a>\n\nYou can use a Lambda function to process events in an [Amazon DocumentDB (with MongoDB compatibility) change stream](https://docs.aws.amazon.com/documentdb/latest/developerguide/change_streams.html) by configuring an Amazon DocumentDB cluster as an event source. Then, you can automate event-driven workloads by invoking your Lambda function each time that data changes with your Amazon DocumentDB cluster.\n\n**Note**  \nLambda supports version 4.0 and 5.0 of Amazon DocumentDB only. Lambda doesn't support version 3.6.  \nAlso, for event source mappings, Lambda supports instance-based clusters and regional clusters only. Lambda doesn't support [ elastic clusters](https://docs.aws.amazon.com/documentdb/latest/developerguide/docdb-using-elastic-clusters.html) or [ global clusters](https://docs.aws.amazon.com/documentdb/latest/developerguide/global-clusters.html). This limitation doesn't apply when using Lambda as a client to connect to Amazon DocumentDB. Lambda can connect to all cluster types to perform CRUD operations.\n\nLambda processes events from Amazon DocumentDB change streams sequentially in the order in which they arrive. Because of this, your function can handle only one concurrent invocation from Amazon DocumentDB at a time. To monitor your function, you can track its [concurrency metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-concurrency.html).\n\n**Warning**  \nLambda event source mappings process each event at least once, and duplicate processing of records can occur. To avoid potential issues related to duplicate events, we strongly recommend that you make your function code idempotent. To learn more, see [How do I make my Lambda function idempotent](https://repost.aws/knowledge-center/lambda-function-idempotent) in the AWS Knowledge Center.\n\n**Topics**\n+ [Example Amazon DocumentDB event](#docdb-sample-event)\n+ [Prerequisites and permissions](#docdb-prereqs)\n+ [Configure network security](#docdb-network)\n+ [Creating an Amazon DocumentDB event source mapping (console)](#docdb-configuration)\n+ [Creating an Amazon DocumentDB event source mapping (SDK or CLI)](#docdb-api)\n+ [Polling and stream starting positions](#docdb-stream-polling)\n+ [Monitoring your Amazon DocumentDB event source](#docdb-monitoring)\n+ [Tutorial: Using AWS Lambda with Amazon DocumentDB Streams](with-documentdb-tutorial.md)\n\n## Example Amazon DocumentDB event\n<a name=\"docdb-sample-event\"></a>\n\n```\n{\n    \"eventSourceArn\": \"arn:aws:rds:us-east-1:123456789012:cluster:canaryclusterb2a659a2-qo5tcmqkcl03\",\n    \"events\": [\n        {\n            \"event\": {\n                \"_id\": {\n                    \"_data\": \"0163eeb6e7000000090100000009000041e1\"\n                },\n                \"clusterTime\": {\n                    \"$timestamp\": {\n                        \"t\": 1676588775,\n                        \"i\": 9\n                    }\n                },\n                \"documentKey\": {\n                    \"_id\": {\n                        \"$oid\": \"63eeb6e7d418cd98afb1c1d7\"\n                    }\n                },\n                \"fullDocument\": {\n                    \"_id\": {\n                        \"$oid\": \"63eeb6e7d418cd98afb1c1d7\"\n                    },\n                    \"anyField\": \"sampleValue\"\n                },\n                \"ns\": {\n                    \"db\": \"test_database\",\n                    \"coll\": \"test_collection\"\n                },\n                \"operationType\": \"insert\"\n            }\n        }\n    ],\n    \"eventSource\": \"aws:docdb\"\n}\n```\n\nFor more information about the events in this example and their shapes, see [Change Events](https://www.mongodb.com/docs/manual/reference/change-events/) on the MongoDB Documentation website.\n\n## Prerequisites and permissions\n<a name=\"docdb-prereqs\"></a>\n\nBefore you can use Amazon DocumentDB as an event source for your Lambda function, note the following prerequisites. You must:\n+ **Have an existing Amazon DocumentDB cluster in the same AWS account and AWS Region as your function.** If you don't have an existing cluster, you can create one by following the steps in [Get Started with Amazon DocumentDB](https://docs.aws.amazon.com/documentdb/latest/developerguide/get-started-guide.html) in the *Amazon DocumentDB Developer Guide*. Alternatively, the first set of steps in [Tutorial: Using AWS Lambda with Amazon DocumentDB Streams](with-documentdb-tutorial.md) guide you through creating an Amazon DocumentDB cluster with all the necessary prerequisites.\n+ **Allow Lambda to access the Amazon Virtual Private Cloud (Amazon VPC) resources associated with your Amazon DocumentDB cluster.** For more information, see [Configure network security](#docdb-network).\n+ **Enable TLS on your Amazon DocumentDB cluster.** This is the default setting. If you disable TLS, then Lambda cannot communicate with your cluster.\n+ **Activate change streams on your Amazon DocumentDB cluster.** For more information, see [Using Change Streams with Amazon DocumentDB](https://docs.aws.amazon.com/documentdb/latest/developerguide/change_streams.html) in the *Amazon DocumentDB Developer Guide*.\n+ **Provide Lambda with credentials to access your Amazon DocumentDB cluster.** When setting up the event source, provide the [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) key that contains the authentication details (username and password) required to access your cluster. To provide this key during setup, do either of the following:\n  + If you're using the Lambda console for setup, then provide the key in the **Secrets manager key** field.\n  + If you're using the AWS Command Line Interface (AWS CLI) for setup, then provide this key in the `source-access-configurations` option. You can include this option with either the [`create-event-source-mapping`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/lambda/create-event-source-mapping.html) command or the [`update-event-source-mapping`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/lambda/update-event-source-mapping.html) command. For example:\n\n    ```\n    aws lambda create-event-source-mapping \\\n        ...\n        --source-access-configurations  '[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-west-2:123456789012:secret:DocDBSecret-AbC4E6\"}]' \\\n        ...\n    ```\n+ **Grant Lambda permissions to manage resources related to your Amazon DocumentDB stream.** Manually add the following permissions to your function's [execution role](lambda-intro-execution-role.md):\n  + [rds:DescribeDBClusters](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusters.html)\n  + [rds:DescribeDBClusterParameters](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusterParameters.html)\n  + [rds:DescribeDBSubnetGroups](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBSubnetGroups.html)\n  + [ec2:CreateNetworkInterface](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateNetworkInterface.html)\n  + [ec2:DescribeNetworkInterfaces](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInterfaces.html)\n  + [ec2:DescribeVpcs](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcs.html)\n  + [ec2:DeleteNetworkInterface](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DeleteNetworkInterface.html)\n  + [ec2:DescribeSubnets](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSubnets.html)\n  + [ec2:DescribeSecurityGroups](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSecurityGroups.html)\n  + [kms:Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html)\n  + [secretsmanager:GetSecretValue](https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html)\n+ **Keep the size of Amazon DocumentDB change stream events that you send to Lambda under 6 MB.** Lambda supports payload sizes of up to 6 MB. If your change stream tries to send Lambda an event larger than 6 MB, then Lambda drops the message and emits the `OversizedRecordCount` metric. Lambda emits all metrics on a best-effort basis.\n\n**Note**  \nWhile Lambda functions typically have a maximum timeout limit of 15 minutes, event source mappings for Amazon MSK, self-managed Apache Kafka, Amazon DocumentDB, and Amazon MQ for ActiveMQ and RabbitMQ only support functions with maximum timeout limits of 14 minutes. This constraint ensures that the event source mapping can properly handle function errors and retries.\n\n## Configure network security\n<a name=\"docdb-network\"></a>\n\nTo give Lambda full access to Amazon DocumentDB through your event source mapping, either your cluster must use a public endpoint (public IP address), or you must provide access to the Amazon VPC you created the cluster in.\n\nWhen you use Amazon DocumentDB with Lambda, create [AWS PrivateLink VPC endpoints](https://docs.aws.amazon.com/vpc/latest/privatelink/create-interface-endpoint.html) that provide your function access to the resources in your Amazon VPC.\n\n**Note**  \nAWS PrivateLink VPC endpoints are required for functions with event source mappings that use the default (on-demand) mode for event pollers. If your event source mapping uses [ provisioned mode](invocation-eventsourcemapping.md#invocation-eventsourcemapping-provisioned-mode), you don't need to configure AWS PrivateLink VPC endpoints.\n\nCreate an endpoint to provide access to the following resources:\n+  Lambda \u2014 Create an endpoint for the Lambda service principal. \n+  AWS STS \u2014 Create an endpoint for the AWS STS in order for a service principal to assume a role on your behalf. \n+  Secrets Manager \u2014 If your cluster uses Secrets Manager to store credentials, create an endpoint for Secrets Manager. \n\nAlternatively, configure a NAT gateway on each public subnet in the Amazon VPC. For more information, see [Enable internet access for VPC-connected Lambda functions](configuration-vpc-internet.md).\n\nWhen you create an event source mapping for Amazon DocumentDB, Lambda checks whether Elastic Network Interfaces (ENIs) are already present for the subnets and security groups configured for your Amazon VPC. If Lambda finds existing ENIs, it attempts to re-use them. Otherwise, Lambda creates new ENIs to connect to the event source and invoke your function.\n\n**Note**  \nLambda functions always run inside VPCs owned by the Lambda service. Your function's VPC configuration does not affect the event source mapping. Only the networking configuration of the event source's determines how Lambda connects to your event source.\n\nConfigure the security groups for the Amazon VPC containing your cluster. By default, Amazon DocumentDB uses the following ports: `27017`.\n+ Inbound rules \u2013 Allow all traffic on the default broker port for the security group associated with your event source. Alternatively, you can use a self-referencing security group rule to allow access from instances within the same security group.\n+ Outbound rules \u2013 Allow all traffic on port `443` for external destinations if your function needs to communicate with AWS services. Alternatively, you can also use a self-referencing security group rule to limit access to the broker if you don't need to communicate with other AWS services.\n+ Amazon VPC endpoint inbound rules \u2014 If you are using an Amazon VPC endpoint, the security group associated with your Amazon VPC endpoint must allow inbound traffic on port `443` from the cluster security group.\n\nIf your cluster uses authentication, you can also restrict the endpoint policy for the Secrets Manager endpoint. To call the Secrets Manager API, Lambda uses your function role, not the Lambda service principal.\n\n**Example VPC endpoint policy \u2014 Secrets Manager endpoint**  \n\n```\n{\n      \"Statement\": [\n          {\n              \"Action\": \"secretsmanager:GetSecretValue\",\n              \"Effect\": \"Allow\",\n              \"Principal\": {\n                  \"AWS\": [\n                      \"arn:aws::iam::123456789012:role/{{my-role}}\"\n                  ]\n              },\n              \"Resource\": \"arn:aws::secretsmanager:{{us-west-2}}:123456789012:secret:{{my-secret}}\"\n          }\n      ]\n  }\n```\n\nWhen you use Amazon VPC endpoints, AWS routes your API calls to invoke your function using the endpoint's Elastic Network Interface (ENI). The Lambda service principal needs to call `lambda:InvokeFunction` on any roles and functions that use those ENIs.\n\nBy default, Amazon VPC endpoints have open IAM policies that allow broad access to resources. Best practice is to restrict these policies to perform the needed actions using that endpoint. To ensure that your event source mapping is able to invoke your Lambda function, the VPC endpoint policy must allow the Lambda service principal to call `sts:AssumeRole` and `lambda:InvokeFunction`. Restricting your VPC endpoint policies to allow only API calls originating within your organization prevents the event source mapping from functioning properly, so `\"Resource\": \"*\"` is required in these policies.\n\nThe following example VPC endpoint policies show how to grant the required access to the Lambda service principal for the AWS STS and Lambda endpoints.\n\n**Example VPC Endpoint policy \u2014 AWS STS endpoint**  \n\n```\n{\n      \"Statement\": [\n          {\n              \"Action\": \"sts:AssumeRole\",\n              \"Effect\": \"Allow\",\n              \"Principal\": {\n                  \"Service\": [\n                      \"lambda.amazonaws.com\"\n                  ]\n              },\n              \"Resource\": \"*\"\n          }\n      ]\n    }\n```\n\n**Example VPC Endpoint policy \u2014 Lambda endpoint**  \n\n```\n{\n      \"Statement\": [\n          {\n              \"Action\": \"lambda:InvokeFunction\",\n              \"Effect\": \"Allow\",\n              \"Principal\": {\n                  \"Service\": [\n                      \"lambda.amazonaws.com\"\n                  ]\n              },\n              \"Resource\": \"*\"\n          }\n      ]\n  }\n```\n\n## Creating an Amazon DocumentDB event source mapping (console)\n<a name=\"docdb-configuration\"></a>\n\nFor a Lambda function to read from an Amazon DocumentDB cluster's change stream, create an [event source mapping](invocation-eventsourcemapping.md). This section describes how to do this from the Lambda console. For AWS SDK and AWS CLI instructions, see [Creating an Amazon DocumentDB event source mapping (SDK or CLI)](#docdb-api).\n\n**To create an Amazon DocumentDB event source mapping (console)**\n\n1. Open the [Functions page](https://console.aws.amazon.com/lambda/home#/functions) of the Lambda console.\n\n1. Choose the name of a function.\n\n1. Under **Function overview**, choose **Add trigger**.\n\n1. Under **Trigger configuration**, in the dropdown list, choose **DocumentDB**.\n\n1. Configure the required options, and then choose **Add**.\n\nLambda supports the following options for Amazon DocumentDB event sources:\n+ **DocumentDB cluster** \u2013 Select an Amazon DocumentDB cluster.\n+ **Activate trigger** \u2013 Choose whether you want to activate the trigger immediately. If you select this check box, then your function immediately starts receiving traffic from the specified Amazon DocumentDB change stream upon creation of the event source mapping. We recommend that you clear the check box to create the event source mapping in a deactivated state for testing. After creation, you can activate the event source mapping at any time.\n+ **Database name** \u2013 Enter the name of a database within the cluster to consume.\n+ (Optional) **Collection name** \u2013 Enter the name of a collection within the database to consume. If you don't specify a collection, then Lambda listens to all events from each collection in the database.\n+ **Batch size** \u2013 Set the maximum number of messages to retrieve in a single batch, up to 10,000. The default batch size is 100.\n+ **Starting position** \u2013 Choose the position in the stream to start reading records from.\n  + **Latest** \u2013 Process only new records that are added to the stream. Your function starts processing records only after Lambda finishes creating your event source. This means that some records might be dropped until your event source is created successfully.\n  + **Trim horizon** \u2013 Process all records in the stream. Lambda uses the log retention duration of your cluster to determine where to start reading events from. Specifically, Lambda starts reading from `current_time - log_retention_duration`. Your change stream must already be active before this timestamp for Lambda to read all events properly.\n  + **At timestamp** \u2013 Process records starting from a specific time. Your change stream must already be active before the specified timestamp for Lambda to read all events properly.\n+ **Authentication** \u2013 Choose the authentication method for accessing the brokers in your cluster.\n  + **BASIC\\_AUTH** \u2013 With basic authentication, you must provide the Secrets Manager key that contains the credentials to access your cluster.\n+ **Secrets Manager key** \u2013 Choose the Secrets Manager key that contains the authentication details (username and password) required to access your Amazon DocumentDB cluster.\n+ (Optional) **Batch window** \u2013 Set the maximum amount of time in seconds to gather records before invoking your function, up to 300.\n+ (Optional) **Full document configuration** \u2013 For document update operations, choose what you want to send to the stream. The default value is `Default`, which means that for each change stream event, Amazon DocumentDB sends only a delta describing the changes made. For more information about this field, see [FullDocument](https://mongodb.github.io/mongo-java-driver/3.9/javadoc/com/mongodb/client/model/changestream/FullDocument.html#DEFAULT) in the MongoDB Javadoc API documentation.\n  + **Default** \u2013 Lambda sends only a partial document describing the changes made.\n  + **UpdateLookup** \u2013 Lambda sends a delta describing the changes, along with a copy of the entire document.\n\n## Creating an Amazon DocumentDB event source mapping (SDK or CLI)\n<a name=\"docdb-api\"></a>\n\nTo create or manage an Amazon DocumentDB event source mapping with an [AWS SDK](https://aws.amazon.com/developer/tools/), you can use the following API operations:\n+ [CreateEventSourceMapping](https://docs.aws.amazon.com/lambda/latest/api/API_CreateEventSourceMapping.html)\n+ [ListEventSourceMappings](https://docs.aws.amazon.com/lambda/latest/api/API_ListEventSourceMappings.html)\n+ [GetEventSourceMapping](https://docs.aws.amazon.com/lambda/latest/api/API_GetEventSourceMapping.html)\n+ [UpdateEventSourceMapping](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateEventSourceMapping.html)\n+ [DeleteEventSourceMapping](https://docs.aws.amazon.com/lambda/latest/api/API_DeleteEventSourceMapping.html)\n\nTo create the event source mapping with the AWS CLI, use the [`create-event-source-mapping`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/lambda/create-event-source-mapping.html) command. The following example uses this command to map a function named `my-function` to an Amazon DocumentDB change stream. The event source is specified by an Amazon Resource Name (ARN), with a batch size of 500, starting from the timestamp in Unix time. The command also specifies the Secrets Manager key that Lambda uses to connect to Amazon DocumentDB. Additionally, it includes `document-db-event-source-config` parameters that specify the database and the collection to read from.\n\n```\naws lambda create-event-source-mapping --function-name my-function \\\n    --event-source-arn arn:aws:rds:us-west-2:123456789012:cluster:privatecluster7de2-epzcyvu4pjoy\n    --batch-size 500 \\\n    --starting-position AT_TIMESTAMP \\\n    --starting-position-timestamp 1541139109 \\\n    --source-access-configurations '[{\"Type\":\"BASIC_AUTH\",\"URI\":\"arn:aws:secretsmanager:us-east-1:123456789012:secret:DocDBSecret-BAtjxi\"}]' \\\n    --document-db-event-source-config '{\"DatabaseName\":\"test_database\", \"CollectionName\": \"test_collection\"}' \\\n```\n\nYou should see output that looks like this:\n\n```\n{\n    \"UUID\": \"2b733gdc-8ac3-cdf5-af3a-1827b3b11284\",\n    \"BatchSize\": 500,\n    \"DocumentDBEventSourceConfig\": {\n        \"CollectionName\": \"test_collection\",\n        \"DatabaseName\": \"test_database\",\n        \"FullDocument\": \"Default\"\n    },\n    \"MaximumBatchingWindowInSeconds\": 0,\n    \"EventSourceArn\": \"arn:aws:rds:us-west-2:123456789012:cluster:privatecluster7de2-epzcyvu4pjoy\",\n    \"FunctionArn\": \"arn:aws:lambda:us-west-2:123456789012:function:my-function\",\n    \"LastModified\": 1541348195.412,\n    \"LastProcessingResult\": \"No records processed\",\n    \"State\": \"Creating\",\n    \"StateTransitionReason\": \"User action\"\n}\n```\n\nAfter creation, you can use the [`update-event-source-mapping`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/lambda/update-event-source-mapping.html) command to update the settings for your Amazon DocumentDB event source. The following example updates the batch size to 1,000 and the batch window to 10 seconds. For this command, you need the UUID of your event source mapping, which you can retrieve using the `list-event-source-mapping` command or the Lambda console.\n\n```\naws lambda update-event-source-mapping --function-name my-function \\\n    --uuid f89f8514-cdd9-4602-9e1f-01a5b77d449b \\\n    --batch-size 1000 \\\n    --batch-window 10\n```\n\nYou should see this output that looks like this:\n\n```\n{\n    \"UUID\": \"2b733gdc-8ac3-cdf5-af3a-1827b3b11284\",\n    \"BatchSize\": 500,\n    \"DocumentDBEventSourceConfig\": {\n        \"CollectionName\": \"test_collection\",\n        \"DatabaseName\": \"test_database\",\n        \"FullDocument\": \"Default\"\n    },\n    \"MaximumBatchingWindowInSeconds\": 0,\n    \"EventSourceArn\": \"arn:aws:rds:us-west-2:123456789012:cluster:privatecluster7de2-epzcyvu4pjoy\",\n    \"FunctionArn\": \"arn:aws:lambda:us-west-2:123456789012:function:my-function\",\n    \"LastModified\": 1541359182.919,\n    \"LastProcessingResult\": \"OK\",\n    \"State\": \"Updating\",\n    \"StateTransitionReason\": \"User action\"\n}\n```\n\nLambda updates settings asynchronously, so you might not see these changes in the output until the process completes. To view the current settings of your event source mapping, use the [`get-event-source-mapping`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/lambda/get-event-source-mapping.html) command.\n\n```\naws lambda get-event-source-mapping --uuid f89f8514-cdd9-4602-9e1f-01a5b77d449b\n```\n\nYou should see this output that looks like this:\n\n```\n{\n    \"UUID\": \"2b733gdc-8ac3-cdf5-af3a-1827b3b11284\",\n    \"DocumentDBEventSourceConfig\": {\n        \"CollectionName\": \"test_collection\",\n        \"DatabaseName\": \"test_database\",\n        \"FullDocument\": \"Default\"\n    },\n    \"BatchSize\": 1000,\n    \"MaximumBatchingWindowInSeconds\": 10,\n    \"EventSourceArn\": \"arn:aws:rds:us-west-2:123456789012:cluster:privatecluster7de2-epzcyvu4pjoy\",\n    \"FunctionArn\": \"arn:aws:lambda:us-west-2:123456789012:function:my-function\",\n    \"LastModified\": 1541359182.919,\n    \"LastProcessingResult\": \"OK\",\n    \"State\": \"Enabled\",\n    \"StateTransitionReason\": \"User action\"\n}\n```\n\nTo delete your Amazon DocumentDB event source mapping, use the [`delete-event-source-mapping`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/lambda/delete-event-source-mapping.html) command.\n\n```\naws lambda delete-event-source-mapping \\\n    --uuid 2b733gdc-8ac3-cdf5-af3a-1827b3b11284\n```\n\n## Polling and stream starting positions\n<a name=\"docdb-stream-polling\"></a>\n\nBe aware that stream polling during event source mapping creation and updates is eventually consistent.\n+ During event source mapping creation, it may take several minutes to start polling events from the stream.\n+ During event source mapping updates, it may take several minutes to stop and restart polling events from the stream.\n\nThis behavior means that if you specify `LATEST` as the starting position for the stream, the event source mapping could miss events during creation or updates. To ensure that no events are missed, specify the stream starting position as `TRIM_HORIZON` or `AT_TIMESTAMP`.\n\n## Monitoring your Amazon DocumentDB event source\n<a name=\"docdb-monitoring\"></a>\n\nTo help you monitor your Amazon DocumentDB event source, Lambda emits the `IteratorAge` metric when your function finishes processing a batch of records. *Iterator age* is the difference between the timestamp of the most recent event and the current timestamp. Essentially, the `IteratorAge` metric indicates how old the last processed record in the batch is.\n\nIf your function is currently processing new events, then you can use the iterator age to estimate the latency between when a record is added and when your function processes it. An increasing trend in `IteratorAge` can indicate issues with your function. For more information, see [Using CloudWatch metrics with Lambda](monitoring-metrics.md).\n\nAmazon DocumentDB change streams aren't optimized to handle large time gaps between events. If your Amazon DocumentDB event source doesn't receive any events for an extended period of time, Lambda might disable the event source mapping. The length of this time period can vary from a few weeks to a few months depending on cluster size and other workloads.\n\nLambda supports payloads of up to 6 MB. However, Amazon DocumentDB change stream events can be up to 16 MB in size. If your change stream tries to send Lambda a change stream event larger than 6 MB, then Lambda drops the message and emits the `OversizedRecordCount` metric. Lambda emits all metrics on a best-effort basis."
    },
    {
      "source": "https://docs.aws.amazon.com/lambda/latest/api/API_CreateEventSourceMapping.md",
      "captured_at": "2026-10-01T00:02:03.543999+00:00",
      "sha256": "a8cd6d726c6dd5f0041e390b70f4c918a954fe963056a9f5a0ed99216ddbfff9",
      "content": "\n\n# CreateEventSourceMapping\n<a name=\"API_CreateEventSourceMapping\"></a>\n\nCreates a mapping between an event source and an AWS Lambda function. Lambda reads items from the event source and invokes the function.\n\nFor details about how to configure different event sources, see the following topics. \n+  [ Amazon DynamoDB Streams](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-dynamodb-eventsourcemapping) \n+  [ Amazon Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-eventsourcemapping) \n+  [ Amazon SQS](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-eventsource) \n+  [ Amazon MQ and RabbitMQ](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-eventsourcemapping) \n+  [ Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html) \n+  [ Apache Kafka](https://docs.aws.amazon.com/lambda/latest/dg/kafka-smaa.html) \n+  [ Amazon DocumentDB](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html) \n\nThe following error handling options are available for stream sources (DynamoDB, Kinesis, Amazon MSK, and self-managed Apache Kafka):\n+  `BisectBatchOnFunctionError` \u2013 If the function returns an error, split the batch in two and retry.\n+  `MaximumRecordAgeInSeconds` \u2013 Discard records older than the specified age. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires\n+  `MaximumRetryAttempts` \u2013 Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.\n+  `OnFailure` \u2013 Send discarded records to an Amazon SQS queue, Amazon SNS topic, Kafka topic, or Amazon S3 bucket. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations).\n\nThe following option is available only for DynamoDB and Kinesis event sources:\n+  `ParallelizationFactor` \u2013 Process multiple batches from each shard concurrently.\n\nFor information about which configuration parameters apply to each event source, see the following topics.\n+  [ Amazon DynamoDB Streams](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-ddb-params) \n+  [ Amazon Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-params) \n+  [ Amazon SQS](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#services-sqs-params) \n+  [ Amazon MQ and RabbitMQ](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-params) \n+  [ Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-parms) \n+  [ Apache Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-kafka-parms) \n+  [ Amazon DocumentDB](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html#docdb-configuration) \n\n## Request Syntax\n<a name=\"API_CreateEventSourceMapping_RequestSyntax\"></a>\n\n```\nPOST /2015-03-31/event-source-mappings HTTP/1.1\nContent-type: application/json\n\n{\n   \"AmazonManagedKafkaEventSourceConfig\": { \n      \"ConsumerGroupId\": \"{{string}}\",\n      \"SchemaRegistryConfig\": { \n         \"AccessConfigs\": [ \n            { \n               \"Type\": \"{{string}}\",\n               \"URI\": \"{{string}}\"\n            }\n         ],\n         \"EventRecordFormat\": \"{{string}}\",\n         \"SchemaRegistryURI\": \"{{string}}\",\n         \"SchemaValidationConfigs\": [ \n            { \n               \"Attribute\": \"{{string}}\"\n            }\n         ]\n      }\n   },\n   \"BatchSize\": {{number}},\n   \"BisectBatchOnFunctionError\": {{boolean}},\n   \"DestinationConfig\": { \n      \"OnFailure\": { \n         \"Destination\": \"{{string}}\"\n      },\n      \"OnSuccess\": { \n         \"Destination\": \"{{string}}\"\n      }\n   },\n   \"DocumentDBEventSourceConfig\": { \n      \"CollectionName\": \"{{string}}\",\n      \"DatabaseName\": \"{{string}}\",\n      \"FullDocument\": \"{{string}}\"\n   },\n   \"Enabled\": {{boolean}},\n   \"EventSourceArn\": \"{{string}}\",\n   \"FilterCriteria\": { \n      \"Filters\": [ \n         { \n            \"Pattern\": \"{{string}}\"\n         }\n      ]\n   },\n   \"FunctionName\": \"{{string}}\",\n   \"FunctionResponseTypes\": [ \"{{string}}\" ],\n   \"KMSKeyArn\": \"{{string}}\",\n   \"LoggingConfig\": { \n      \"SystemLogLevel\": \"{{string}}\"\n   },\n   \"MaximumBatchingWindowInSeconds\": {{number}},\n   \"MaximumRecordAgeInSeconds\": {{number}},\n   \"MaximumRetryAttempts\": {{number}},\n   \"MetricsConfig\": { \n      \"Metrics\": [ \"{{string}}\" ]\n   },\n   \"ParallelizationFactor\": {{number}},\n   \"ProvisionedPollerConfig\": { \n      \"MaximumPollers\": {{number}},\n      \"MinimumPollers\": {{number}},\n      \"PollerGroupName\": \"{{string}}\"\n   },\n   \"Queues\": [ \"{{string}}\" ],\n   \"ScalingConfig\": { \n      \"MaximumConcurrency\": {{number}}\n   },\n   \"SelfManagedEventSource\": { \n      \"Endpoints\": { \n         \"{{string}}\" : [ \"{{string}}\" ]\n      }\n   },\n   \"SelfManagedKafkaEventSourceConfig\": { \n      \"ConsumerGroupId\": \"{{string}}\",\n      \"SchemaRegistryConfig\": { \n         \"AccessConfigs\": [ \n            { \n               \"Type\": \"{{string}}\",\n               \"URI\": \"{{string}}\"\n            }\n         ],\n         \"EventRecordFormat\": \"{{string}}\",\n         \"SchemaRegistryURI\": \"{{string}}\",\n         \"SchemaValidationConfigs\": [ \n            { \n               \"Attribute\": \"{{string}}\"\n            }\n         ]\n      }\n   },\n   \"SourceAccessConfigurations\": [ \n      { \n         \"Type\": \"{{string}}\",\n         \"URI\": \"{{string}}\"\n      }\n   ],\n   \"StartingPosition\": \"{{string}}\",\n   \"StartingPositionTimestamp\": {{number}},\n   \"Tags\": { \n      \"{{string}}\" : \"{{string}}\" \n   },\n   \"Topics\": [ \"{{string}}\" ],\n   \"TumblingWindowInSeconds\": {{number}}\n}\n```\n\n## URI Request Parameters\n<a name=\"API_CreateEventSourceMapping_RequestParameters\"></a>\n\nThe request does not use any URI parameters.\n\n## Request Body\n<a name=\"API_CreateEventSourceMapping_RequestBody\"></a>\n\nThe request accepts the following data in JSON format.\n\n ** [AmazonManagedKafkaEventSourceConfig](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-AmazonManagedKafkaEventSourceConfig\"></a>\nSpecific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.  \nType: [AmazonManagedKafkaEventSourceConfig](API_AmazonManagedKafkaEventSourceConfig.md) object  \nRequired: No\n\n ** [BatchSize](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-BatchSize\"></a>\nThe maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).  \n+  **Amazon Kinesis** \u2013 Default 100. Max 10,000.\n+  **Amazon DynamoDB Streams** \u2013 Default 100. Max 10,000.\n+  **Amazon Simple Queue Service** \u2013 Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.\n+  **Amazon Managed Streaming for Apache Kafka** \u2013 Default 100. Max 10,000.\n+  **Self-managed Apache Kafka** \u2013 Default 100. Max 10,000.\n+  **Amazon MQ (ActiveMQ and RabbitMQ)** \u2013 Default 100. Max 10,000.\n+  **DocumentDB** \u2013 Default 100. Max 10,000.\nType: Integer  \nValid Range: Minimum value of 1. Maximum value of 10000.  \nRequired: No\n\n ** [BisectBatchOnFunctionError](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-BisectBatchOnFunctionError\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) If the function returns an error, split the batch in two and retry.  \nType: Boolean  \nRequired: No\n\n ** [DestinationConfig](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-DestinationConfig\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) A configuration object that specifies the destination of an event after Lambda processes it.  \nType: [DestinationConfig](API_DestinationConfig.md) object  \nRequired: No\n\n ** [DocumentDBEventSourceConfig](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-DocumentDBEventSourceConfig\"></a>\nSpecific configuration settings for a DocumentDB event source.  \nType: [DocumentDBEventSourceConfig](API_DocumentDBEventSourceConfig.md) object  \nRequired: No\n\n ** [Enabled](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-Enabled\"></a>\nWhen true, the event source mapping is active. When false, Lambda pauses polling and invocation.  \nDefault: True  \nType: Boolean  \nRequired: No\n\n ** [EventSourceArn](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-EventSourceArn\"></a>\nThe Amazon Resource Name (ARN) of the event source.  \n+  **Amazon Kinesis** \u2013 The ARN of the data stream or a stream consumer.\n+  **Amazon DynamoDB Streams** \u2013 The ARN of the stream.\n+  **Amazon Simple Queue Service** \u2013 The ARN of the queue.\n+  **Amazon Managed Streaming for Apache Kafka** \u2013 The ARN of the cluster or the ARN of the VPC connection (for [cross-account event source mappings](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#msk-multi-vpc)).\n+  **Amazon MQ** \u2013 The ARN of the broker.\n+  **Amazon DocumentDB** \u2013 The ARN of the DocumentDB change stream.\nType: String  \nPattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:([a-z]{2}(-gov)?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)`   \nRequired: No\n\n ** [FilterCriteria](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-FilterCriteria\"></a>\nAn object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html).  \nType: [FilterCriteria](API_FilterCriteria.md) object  \nRequired: No\n\n ** [FunctionName](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-FunctionName\"></a>\nThe name or ARN of the Lambda function.  \n\n**Name formats**\n+  **Function name** \u2013 `MyFunction`.\n+  **Function ARN** \u2013 `arn:aws:lambda:us-west-2:123456789012:function:MyFunction`.\n+  **Version or Alias ARN** \u2013 `arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD`.\n+  **Partial ARN** \u2013 `123456789012:function:MyFunction`.\nThe length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.  \nType: String  \nLength Constraints: Minimum length of 1. Maximum length of 256.  \nPattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:)?(\\d{12}:)?(function:)?([a-zA-Z0-9-_\\.]+)(:(\\$LATEST(\\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`   \nRequired: Yes\n\n ** [FunctionResponseTypes](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-FunctionResponseTypes\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, self-managed Apache Kafka, and Amazon SQS) A list of current response type enums applied to the event source mapping.  \nType: Array of strings  \nArray Members: Minimum number of 0 items. Maximum number of 1 item.  \nValid Values: `ReportBatchItemFailures`   \nRequired: No\n\n ** [KMSKeyArn](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-KMSKeyArn\"></a>\n The ARN of the AWS Key Management Service (AWS KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics). By default, Lambda does not encrypt your filter criteria object. Specify this property to encrypt data using your own customer managed key.   \nType: String  \nPattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()`   \nRequired: No\n\n ** [LoggingConfig](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-LoggingConfig\"></a>\n(Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. For more information, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html).  \nType: [EventSourceMappingLoggingConfig](API_EventSourceMappingLoggingConfig.md) object  \nRequired: No\n\n ** [MaximumBatchingWindowInSeconds](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-MaximumBatchingWindowInSeconds\"></a>\nThe maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function. You can configure `MaximumBatchingWindowInSeconds` to any value from 0 seconds to 300 seconds in increments of seconds.  \nFor Kinesis, DynamoDB, and Amazon SQS event sources, the default batching window is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ, and DocumentDB event sources, the default batching window is 500 ms. Note that because you can only change `MaximumBatchingWindowInSeconds` in increments of seconds, you cannot revert back to the 500 ms default batching window after you have changed it. To restore the default batching window, you must create a new event source mapping.  \nRelated setting: For Kinesis, DynamoDB, and Amazon SQS event sources, when you set `BatchSize` to a value greater than 10, you must set `MaximumBatchingWindowInSeconds` to at least 1.  \nType: Integer  \nValid Range: Minimum value of 0. Maximum value of 300.  \nRequired: No\n\n ** [MaximumRecordAgeInSeconds](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-MaximumRecordAgeInSeconds\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records older than the specified age. The default value is infinite (-1).  \nType: Integer  \nValid Range: Minimum value of -1. Maximum value of 604800.  \nRequired: No\n\n ** [MaximumRetryAttempts](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-MaximumRetryAttempts\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.  \nType: Integer  \nValid Range: Minimum value of -1. Maximum value of 10000.  \nRequired: No\n\n ** [MetricsConfig](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-MetricsConfig\"></a>\nThe metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).  \nType: [EventSourceMappingMetricsConfig](API_EventSourceMappingMetricsConfig.md) object  \nRequired: No\n\n ** [ParallelizationFactor](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-ParallelizationFactor\"></a>\n(Kinesis and DynamoDB Streams only) The number of batches to process from each shard concurrently.  \nType: Integer  \nValid Range: Minimum value of 1. Maximum value of 10.  \nRequired: No\n\n ** [ProvisionedPollerConfig](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-ProvisionedPollerConfig\"></a>\n(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode).  \nType: [ProvisionedPollerConfig](API_ProvisionedPollerConfig.md) object  \nRequired: No\n\n ** [Queues](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-Queues\"></a>\n (MQ) The name of the Amazon MQ broker destination queue to consume.   \nType: Array of strings  \nArray Members: Fixed number of 1 item.  \nLength Constraints: Minimum length of 1. Maximum length of 1000.  \nPattern: `[\\s\\S]*`   \nRequired: No\n\n ** [ScalingConfig](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-ScalingConfig\"></a>\n(Amazon SQS only) The scaling configuration for the event source. For more information, see [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency).  \nType: [ScalingConfig](API_ScalingConfig.md) object  \nRequired: No\n\n ** [SelfManagedEventSource](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-SelfManagedEventSource\"></a>\nThe self-managed Apache Kafka cluster to receive records from.  \nType: [SelfManagedEventSource](API_SelfManagedEventSource.md) object  \nRequired: No\n\n ** [SelfManagedKafkaEventSourceConfig](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-SelfManagedKafkaEventSourceConfig\"></a>\nSpecific configuration settings for a self-managed Apache Kafka event source.  \nType: [SelfManagedKafkaEventSourceConfig](API_SelfManagedKafkaEventSourceConfig.md) object  \nRequired: No\n\n ** [SourceAccessConfigurations](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-SourceAccessConfigurations\"></a>\nAn array of authentication protocols or VPC components required to secure your event source.  \nType: Array of [SourceAccessConfiguration](API_SourceAccessConfiguration.md) objects  \nArray Members: Minimum number of 0 items. Maximum number of 22 items.  \nRequired: No\n\n ** [StartingPosition](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-StartingPosition\"></a>\nThe position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB Stream event sources. `AT_TIMESTAMP` is supported only for Amazon Kinesis streams, Amazon DocumentDB, Amazon MSK, and self-managed Apache Kafka.  \nType: String  \nValid Values: `TRIM_HORIZON | LATEST | AT_TIMESTAMP`   \nRequired: No\n\n ** [StartingPositionTimestamp](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-StartingPositionTimestamp\"></a>\nWith `StartingPosition` set to `AT_TIMESTAMP`, the time from which to start reading, in Unix time seconds. `StartingPositionTimestamp` cannot be in the future.  \nType: Timestamp  \nRequired: No\n\n ** [Tags](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-Tags\"></a>\nA list of tags to apply to the event source mapping.  \nType: String to string map  \nRequired: No\n\n ** [Topics](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-Topics\"></a>\nThe name of the Kafka topic.  \nType: Array of strings  \nArray Members: Fixed number of 1 item.  \nLength Constraints: Minimum length of 1. Maximum length of 249.  \nPattern: `[^.]([a-zA-Z0-9\\-_.]+)`   \nRequired: No\n\n ** [TumblingWindowInSeconds](#API_CreateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-CreateEventSourceMapping-request-TumblingWindowInSeconds\"></a>\n(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.  \nType: Integer  \nValid Range: Minimum value of 0. Maximum value of 900.  \nRequired: No\n\n## Response Syntax\n<a name=\"API_CreateEventSourceMapping_ResponseSyntax\"></a>\n\n```\nHTTP/1.1 202\nContent-type: application/json\n\n{\n   \"AmazonManagedKafkaEventSourceConfig\": { \n      \"ConsumerGroupId\": \"string\",\n      \"SchemaRegistryConfig\": { \n         \"AccessConfigs\": [ \n            { \n               \"Type\": \"string\",\n               \"URI\": \"string\"\n            }\n         ],\n         \"EventRecordFormat\": \"string\",\n         \"SchemaRegistryURI\": \"string\",\n         \"SchemaValidationConfigs\": [ \n            { \n               \"Attribute\": \"string\"\n            }\n         ]\n      }\n   },\n   \"BatchSize\": number,\n   \"BisectBatchOnFunctionError\": boolean,\n   \"DestinationConfig\": { \n      \"OnFailure\": { \n         \"Destination\": \"string\"\n      },\n      \"OnSuccess\": { \n         \"Destination\": \"string\"\n      }\n   },\n   \"DocumentDBEventSourceConfig\": { \n      \"CollectionName\": \"string\",\n      \"DatabaseName\": \"string\",\n      \"FullDocument\": \"string\"\n   },\n   \"EventSourceArn\": \"string\",\n   \"EventSourceMappingArn\": \"string\",\n   \"FilterCriteria\": { \n      \"Filters\": [ \n         { \n            \"Pattern\": \"string\"\n         }\n      ]\n   },\n   \"FilterCriteriaError\": { \n      \"ErrorCode\": \"string\",\n      \"Message\": \"string\"\n   },\n   \"FunctionArn\": \"string\",\n   \"FunctionResponseTypes\": [ \"string\" ],\n   \"KMSKeyArn\": \"string\",\n   \"LastModified\": number,\n   \"LastProcessingResult\": \"string\",\n   \"LoggingConfig\": { \n      \"SystemLogLevel\": \"string\"\n   },\n   \"MaximumBatchingWindowInSeconds\": number,\n   \"MaximumRecordAgeInSeconds\": number,\n   \"MaximumRetryAttempts\": number,\n   \"MetricsConfig\": { \n      \"Metrics\": [ \"string\" ]\n   },\n   \"ParallelizationFactor\": number,\n   \"ProvisionedPollerConfig\": { \n      \"MaximumPollers\": number,\n      \"MinimumPollers\": number,\n      \"PollerGroupName\": \"string\"\n   },\n   \"Queues\": [ \"string\" ],\n   \"ScalingConfig\": { \n      \"MaximumConcurrency\": number\n   },\n   \"SelfManagedEventSource\": { \n      \"Endpoints\": { \n         \"string\" : [ \"string\" ]\n      }\n   },\n   \"SelfManagedKafkaEventSourceConfig\": { \n      \"ConsumerGroupId\": \"string\",\n      \"SchemaRegistryConfig\": { \n         \"AccessConfigs\": [ \n            { \n               \"Type\": \"string\",\n               \"URI\": \"string\"\n            }\n         ],\n         \"EventRecordFormat\": \"string\",\n         \"SchemaRegistryURI\": \"string\",\n         \"SchemaValidationConfigs\": [ \n            { \n               \"Attribute\": \"string\"\n            }\n         ]\n      }\n   },\n   \"SourceAccessConfigurations\": [ \n      { \n         \"Type\": \"string\",\n         \"URI\": \"string\"\n      }\n   ],\n   \"StartingPosition\": \"string\",\n   \"StartingPositionTimestamp\": number,\n   \"State\": \"string\",\n   \"StateTransitionReason\": \"string\",\n   \"Topics\": [ \"string\" ],\n   \"TumblingWindowInSeconds\": number,\n   \"UUID\": \"string\"\n}\n```\n\n## Response Elements\n<a name=\"API_CreateEventSourceMapping_ResponseElements\"></a>\n\nIf the action is successful, the service sends back an HTTP 202 response.\n\nThe following data is returned in JSON format by the service.\n\n ** [AmazonManagedKafkaEventSourceConfig](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-AmazonManagedKafkaEventSourceConfig\"></a>\nSpecific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.  \nType: [AmazonManagedKafkaEventSourceConfig](API_AmazonManagedKafkaEventSourceConfig.md) object\n\n ** [BatchSize](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-BatchSize\"></a>\nThe maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).  \nDefault value: Varies by service. For Amazon SQS, the default is 10. For all other services, the default is 100.  \nRelated setting: When you set `BatchSize` to a value greater than 10, you must set `MaximumBatchingWindowInSeconds` to at least 1.  \nType: Integer  \nValid Range: Minimum value of 1. Maximum value of 10000.\n\n ** [BisectBatchOnFunctionError](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-BisectBatchOnFunctionError\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) If the function returns an error, split the batch in two and retry. The default value is false.  \nType: Boolean\n\n ** [DestinationConfig](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-DestinationConfig\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) A configuration object that specifies the destination of an event after Lambda processes it.  \nType: [DestinationConfig](API_DestinationConfig.md) object\n\n ** [DocumentDBEventSourceConfig](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-DocumentDBEventSourceConfig\"></a>\nSpecific configuration settings for a DocumentDB event source.  \nType: [DocumentDBEventSourceConfig](API_DocumentDBEventSourceConfig.md) object\n\n ** [EventSourceArn](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-EventSourceArn\"></a>\nThe Amazon Resource Name (ARN) of the event source.  \nType: String  \nPattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:([a-z]{2}(-gov)?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)` \n\n ** [EventSourceMappingArn](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-EventSourceMappingArn\"></a>\nThe Amazon Resource Name (ARN) of the event source mapping.  \nType: String  \nLength Constraints: Minimum length of 85. Maximum length of 120.  \nPattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:\\d{12}:event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}` \n\n ** [FilterCriteria](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-FilterCriteria\"></a>\nAn object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html).  \nIf filter criteria is encrypted, this field shows up as `null` in the response of ListEventSourceMapping API calls. You can view this field in plaintext in the response of GetEventSourceMapping and DeleteEventSourceMapping calls if you have `kms:Decrypt` permissions for the correct AWS KMS key.  \nType: [FilterCriteria](API_FilterCriteria.md) object\n\n ** [FilterCriteriaError](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-FilterCriteriaError\"></a>\nAn object that contains details about an error related to filter criteria encryption.  \nType: [FilterCriteriaError](API_FilterCriteriaError.md) object\n\n ** [FunctionArn](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-FunctionArn\"></a>\nThe ARN of the Lambda function.  \nType: String  \nLength Constraints: Minimum length of 0. Maximum length of 10000.  \nPattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:\\d{12}:function:[a-zA-Z0-9-_]+(:(\\$LATEST|[a-zA-Z0-9-_]+))?` \n\n ** [FunctionResponseTypes](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-FunctionResponseTypes\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, self-managed Apache Kafka, and Amazon SQS) A list of current response type enums applied to the event source mapping.  \nType: Array of strings  \nArray Members: Minimum number of 0 items. Maximum number of 1 item.  \nValid Values: `ReportBatchItemFailures` \n\n ** [KMSKeyArn](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-KMSKeyArn\"></a>\n The ARN of the AWS Key Management Service (AWS KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics).  \nType: String  \nPattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()` \n\n ** [LastModified](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-LastModified\"></a>\nThe date that the event source mapping was last updated or that its state changed, in Unix time seconds.  \nType: Timestamp\n\n ** [LastProcessingResult](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-LastProcessingResult\"></a>\nThe result of the event source mapping's last processing attempt.  \nType: String\n\n ** [LoggingConfig](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-LoggingConfig\"></a>\n(Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. For more information, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html).  \nType: [EventSourceMappingLoggingConfig](API_EventSourceMappingLoggingConfig.md) object\n\n ** [MaximumBatchingWindowInSeconds](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-MaximumBatchingWindowInSeconds\"></a>\nThe maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function. You can configure `MaximumBatchingWindowInSeconds` to any value from 0 seconds to 300 seconds in increments of seconds.  \nFor streams and Amazon SQS event sources, the default batching window is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ, and DocumentDB event sources, the default batching window is 500 ms. Note that because you can only change `MaximumBatchingWindowInSeconds` in increments of seconds, you cannot revert back to the 500 ms default batching window after you have changed it. To restore the default batching window, you must create a new event source mapping.  \nRelated setting: For streams and Amazon SQS event sources, when you set `BatchSize` to a value greater than 10, you must set `MaximumBatchingWindowInSeconds` to at least 1.  \nType: Integer  \nValid Range: Minimum value of 0. Maximum value of 300.\n\n ** [MaximumRecordAgeInSeconds](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-MaximumRecordAgeInSeconds\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.  \nThe minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed\nType: Integer  \nValid Range: Minimum value of -1. Maximum value of 604800.\n\n ** [MaximumRetryAttempts](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-MaximumRetryAttempts\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source.  \nType: Integer  \nValid Range: Minimum value of -1. Maximum value of 10000.\n\n ** [MetricsConfig](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-MetricsConfig\"></a>\nThe metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).  \nType: [EventSourceMappingMetricsConfig](API_EventSourceMappingMetricsConfig.md) object\n\n ** [ParallelizationFactor](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-ParallelizationFactor\"></a>\n(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1.  \nType: Integer  \nValid Range: Minimum value of 1. Maximum value of 10.\n\n ** [ProvisionedPollerConfig](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-ProvisionedPollerConfig\"></a>\n(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode).  \nType: [ProvisionedPollerConfig](API_ProvisionedPollerConfig.md) object\n\n ** [Queues](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-Queues\"></a>\n (Amazon MQ) The name of the Amazon MQ broker destination queue to consume.  \nType: Array of strings  \nArray Members: Fixed number of 1 item.  \nLength Constraints: Minimum length of 1. Maximum length of 1000.  \nPattern: `[\\s\\S]*` \n\n ** [ScalingConfig](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-ScalingConfig\"></a>\n(Amazon SQS only) The scaling configuration for the event source. For more information, see [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency).  \nType: [ScalingConfig](API_ScalingConfig.md) object\n\n ** [SelfManagedEventSource](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-SelfManagedEventSource\"></a>\nThe self-managed Apache Kafka cluster for your event source.  \nType: [SelfManagedEventSource](API_SelfManagedEventSource.md) object\n\n ** [SelfManagedKafkaEventSourceConfig](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-SelfManagedKafkaEventSourceConfig\"></a>\nSpecific configuration settings for a self-managed Apache Kafka event source.  \nType: [SelfManagedKafkaEventSourceConfig](API_SelfManagedKafkaEventSourceConfig.md) object\n\n ** [SourceAccessConfigurations](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-SourceAccessConfigurations\"></a>\nAn array of the authentication protocol, VPC components, or virtual host to secure and define your event source.  \nType: Array of [SourceAccessConfiguration](API_SourceAccessConfiguration.md) objects  \nArray Members: Minimum number of 0 items. Maximum number of 22 items.\n\n ** [StartingPosition](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-StartingPosition\"></a>\nThe position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB Stream event sources. `AT_TIMESTAMP` is supported only for Amazon Kinesis streams, Amazon DocumentDB, Amazon MSK, and self-managed Apache Kafka.  \nType: String  \nValid Values: `TRIM_HORIZON | LATEST | AT_TIMESTAMP` \n\n ** [StartingPositionTimestamp](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-StartingPositionTimestamp\"></a>\nWith `StartingPosition` set to `AT_TIMESTAMP`, the time from which to start reading, in Unix time seconds. `StartingPositionTimestamp` cannot be in the future.  \nType: Timestamp\n\n ** [State](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-State\"></a>\nThe state of the event source mapping. It can be one of the following: `Creating`, `Enabling`, `Enabled`, `Disabling`, `Disabled`, `Updating`, or `Deleting`.  \nType: String\n\n ** [StateTransitionReason](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-StateTransitionReason\"></a>\nIndicates whether a user or Lambda made the last change to the event source mapping.  \nType: String\n\n ** [Topics](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-Topics\"></a>\nThe name of the Kafka topic.  \nType: Array of strings  \nArray Members: Fixed number of 1 item.  \nLength Constraints: Minimum length of 1. Maximum length of 249.  \nPattern: `[^.]([a-zA-Z0-9\\-_.]+)` \n\n ** [TumblingWindowInSeconds](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-TumblingWindowInSeconds\"></a>\n(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.  \nType: Integer  \nValid Range: Minimum value of 0. Maximum value of 900.\n\n ** [UUID](#API_CreateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-CreateEventSourceMapping-response-UUID\"></a>\nThe identifier of the event source mapping.  \nType: String\n\n## Errors\n<a name=\"API_CreateEventSourceMapping_Errors\"></a>\n\nFor information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).\n\n ** InvalidParameterValueException **   \nOne of the parameters in the request is not valid.    \n ** message **   \nThe exception message.  \n ** Type **   \nThe exception type.\nHTTP Status Code: 400\n\n ** ResourceConflictException **   \nThe resource already exists, or another operation is in progress.    \n ** message **   \nThe exception message.  \n ** Type **   \nThe exception type.\nHTTP Status Code: 409\n\n ** ResourceNotFoundException **   \nThe resource specified in the request does not exist.  \nHTTP Status Code: 404\n\n ** ServiceException **   \nThe AWS Lambda service encountered an internal error.  \nHTTP Status Code: 500\n\n ** TooManyRequestsException **   \nThe request throughput limit was exceeded. For more information, see [Lambda quotas](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-limits.html#api-requests).    \n ** retryAfterSeconds **   \nThe number of seconds the caller should wait before retrying.\nHTTP Status Code: 429\n\n## See Also\n<a name=\"API_CreateEventSourceMapping_SeeAlso\"></a>\n\nFor more information about using this API in one of the language-specific AWS SDKs, see the following:\n+  [AWS Command Line Interface V2](https://docs.aws.amazon.com/goto/cli2/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for .NET V4](https://docs.aws.amazon.com/goto/DotNetSDKV4/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for C\\+\\+](https://docs.aws.amazon.com/goto/SdkForCpp/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for Go v2](https://docs.aws.amazon.com/goto/SdkForGoV2/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for JavaScript V3](https://docs.aws.amazon.com/goto/SdkForJavaScriptV3/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for Kotlin](https://docs.aws.amazon.com/goto/SdkForKotlin/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for PHP V3](https://docs.aws.amazon.com/goto/SdkForPHPV3/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for Python (Boto3)](https://docs.aws.amazon.com/goto/boto3/lambda-2015-03-31/CreateEventSourceMapping) \n+  [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/lambda-2015-03-31/CreateEventSourceMapping) "
    },
    {
      "source": "https://docs.aws.amazon.com/lambda/latest/api/API_UpdateEventSourceMapping.md",
      "captured_at": "2026-10-01T00:02:03.801899+00:00",
      "sha256": "190d30065d7b0f27c7df46540a780cc8faeffafd7926dfd328eb03717cb319a7",
      "content": "\n\n# UpdateEventSourceMapping\n<a name=\"API_UpdateEventSourceMapping\"></a>\n\nUpdates an event source mapping. You can change the function that AWS Lambda invokes, or pause invocation and resume later from the same location.\n\nFor details about how to configure different event sources, see the following topics. \n+  [ Amazon DynamoDB Streams](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-dynamodb-eventsourcemapping) \n+  [ Amazon Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-eventsourcemapping) \n+  [ Amazon SQS](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-eventsource) \n+  [ Amazon MQ and RabbitMQ](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-eventsourcemapping) \n+  [ Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html) \n+  [ Apache Kafka](https://docs.aws.amazon.com/lambda/latest/dg/kafka-smaa.html) \n+  [ Amazon DocumentDB](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html) \n\nThe following error handling options are available for stream sources (DynamoDB, Kinesis, Amazon MSK, and self-managed Apache Kafka):\n+  `BisectBatchOnFunctionError` \u2013 If the function returns an error, split the batch in two and retry.\n+  `MaximumRecordAgeInSeconds` \u2013 Discard records older than the specified age. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires\n+  `MaximumRetryAttempts` \u2013 Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.\n+  `OnFailure` \u2013 Send discarded records to an Amazon SQS queue, Amazon SNS topic, Kafka topic, or Amazon S3 bucket. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations).\n\nThe following option is available only for DynamoDB and Kinesis event sources:\n+  `ParallelizationFactor` \u2013 Process multiple batches from each shard concurrently.\n\nFor information about which configuration parameters apply to each event source, see the following topics.\n+  [ Amazon DynamoDB Streams](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-ddb-params) \n+  [ Amazon Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-params) \n+  [ Amazon SQS](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#services-sqs-params) \n+  [ Amazon MQ and RabbitMQ](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-params) \n+  [ Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-parms) \n+  [ Apache Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-kafka-parms) \n+  [ Amazon DocumentDB](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html#docdb-configuration) \n\n## Request Syntax\n<a name=\"API_UpdateEventSourceMapping_RequestSyntax\"></a>\n\n```\nPUT /2015-03-31/event-source-mappings/{{UUID}} HTTP/1.1\nContent-type: application/json\n\n{\n   \"AmazonManagedKafkaEventSourceConfig\": { \n      \"ConsumerGroupId\": \"{{string}}\",\n      \"SchemaRegistryConfig\": { \n         \"AccessConfigs\": [ \n            { \n               \"Type\": \"{{string}}\",\n               \"URI\": \"{{string}}\"\n            }\n         ],\n         \"EventRecordFormat\": \"{{string}}\",\n         \"SchemaRegistryURI\": \"{{string}}\",\n         \"SchemaValidationConfigs\": [ \n            { \n               \"Attribute\": \"{{string}}\"\n            }\n         ]\n      }\n   },\n   \"BatchSize\": {{number}},\n   \"BisectBatchOnFunctionError\": {{boolean}},\n   \"DestinationConfig\": { \n      \"OnFailure\": { \n         \"Destination\": \"{{string}}\"\n      },\n      \"OnSuccess\": { \n         \"Destination\": \"{{string}}\"\n      }\n   },\n   \"DocumentDBEventSourceConfig\": { \n      \"CollectionName\": \"{{string}}\",\n      \"DatabaseName\": \"{{string}}\",\n      \"FullDocument\": \"{{string}}\"\n   },\n   \"Enabled\": {{boolean}},\n   \"FilterCriteria\": { \n      \"Filters\": [ \n         { \n            \"Pattern\": \"{{string}}\"\n         }\n      ]\n   },\n   \"FunctionName\": \"{{string}}\",\n   \"FunctionResponseTypes\": [ \"{{string}}\" ],\n   \"KMSKeyArn\": \"{{string}}\",\n   \"LoggingConfig\": { \n      \"SystemLogLevel\": \"{{string}}\"\n   },\n   \"MaximumBatchingWindowInSeconds\": {{number}},\n   \"MaximumRecordAgeInSeconds\": {{number}},\n   \"MaximumRetryAttempts\": {{number}},\n   \"MetricsConfig\": { \n      \"Metrics\": [ \"{{string}}\" ]\n   },\n   \"ParallelizationFactor\": {{number}},\n   \"ProvisionedPollerConfig\": { \n      \"MaximumPollers\": {{number}},\n      \"MinimumPollers\": {{number}},\n      \"PollerGroupName\": \"{{string}}\"\n   },\n   \"ScalingConfig\": { \n      \"MaximumConcurrency\": {{number}}\n   },\n   \"SelfManagedKafkaEventSourceConfig\": { \n      \"ConsumerGroupId\": \"{{string}}\",\n      \"SchemaRegistryConfig\": { \n         \"AccessConfigs\": [ \n            { \n               \"Type\": \"{{string}}\",\n               \"URI\": \"{{string}}\"\n            }\n         ],\n         \"EventRecordFormat\": \"{{string}}\",\n         \"SchemaRegistryURI\": \"{{string}}\",\n         \"SchemaValidationConfigs\": [ \n            { \n               \"Attribute\": \"{{string}}\"\n            }\n         ]\n      }\n   },\n   \"SourceAccessConfigurations\": [ \n      { \n         \"Type\": \"{{string}}\",\n         \"URI\": \"{{string}}\"\n      }\n   ],\n   \"TumblingWindowInSeconds\": {{number}}\n}\n```\n\n## URI Request Parameters\n<a name=\"API_UpdateEventSourceMapping_RequestParameters\"></a>\n\nThe request uses the following URI parameters.\n\n ** [UUID](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-uri-UUID\"></a>\nThe identifier of the event source mapping.  \nRequired: Yes\n\n## Request Body\n<a name=\"API_UpdateEventSourceMapping_RequestBody\"></a>\n\nThe request accepts the following data in JSON format.\n\n ** [AmazonManagedKafkaEventSourceConfig](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-AmazonManagedKafkaEventSourceConfig\"></a>\nSpecific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.  \nType: [AmazonManagedKafkaEventSourceConfig](API_AmazonManagedKafkaEventSourceConfig.md) object  \nRequired: No\n\n ** [BatchSize](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-BatchSize\"></a>\nThe maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).  \n+  **Amazon Kinesis** \u2013 Default 100. Max 10,000.\n+  **Amazon DynamoDB Streams** \u2013 Default 100. Max 10,000.\n+  **Amazon Simple Queue Service** \u2013 Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.\n+  **Amazon Managed Streaming for Apache Kafka** \u2013 Default 100. Max 10,000.\n+  **Self-managed Apache Kafka** \u2013 Default 100. Max 10,000.\n+  **Amazon MQ (ActiveMQ and RabbitMQ)** \u2013 Default 100. Max 10,000.\n+  **DocumentDB** \u2013 Default 100. Max 10,000.\nType: Integer  \nValid Range: Minimum value of 1. Maximum value of 10000.  \nRequired: No\n\n ** [BisectBatchOnFunctionError](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-BisectBatchOnFunctionError\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) If the function returns an error, split the batch in two and retry.  \nType: Boolean  \nRequired: No\n\n ** [DestinationConfig](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-DestinationConfig\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) A configuration object that specifies the destination of an event after Lambda processes it.  \nType: [DestinationConfig](API_DestinationConfig.md) object  \nRequired: No\n\n ** [DocumentDBEventSourceConfig](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-DocumentDBEventSourceConfig\"></a>\nSpecific configuration settings for a DocumentDB event source.  \nType: [DocumentDBEventSourceConfig](API_DocumentDBEventSourceConfig.md) object  \nRequired: No\n\n ** [Enabled](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-Enabled\"></a>\nWhen true, the event source mapping is active. When false, Lambda pauses polling and invocation.  \nDefault: True  \nType: Boolean  \nRequired: No\n\n ** [FilterCriteria](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-FilterCriteria\"></a>\nAn object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html).  \nType: [FilterCriteria](API_FilterCriteria.md) object  \nRequired: No\n\n ** [FunctionName](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-FunctionName\"></a>\nThe name or ARN of the Lambda function.  \n\n**Name formats**\n+  **Function name** \u2013 `MyFunction`.\n+  **Function ARN** \u2013 `arn:aws:lambda:us-west-2:123456789012:function:MyFunction`.\n+  **Version or Alias ARN** \u2013 `arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD`.\n+  **Partial ARN** \u2013 `123456789012:function:MyFunction`.\nThe length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.  \nType: String  \nLength Constraints: Minimum length of 1. Maximum length of 256.  \nPattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:)?(\\d{12}:)?(function:)?([a-zA-Z0-9-_\\.]+)(:(\\$LATEST(\\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`   \nRequired: No\n\n ** [FunctionResponseTypes](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-FunctionResponseTypes\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, self-managed Apache Kafka, and Amazon SQS) A list of current response type enums applied to the event source mapping.  \nType: Array of strings  \nArray Members: Minimum number of 0 items. Maximum number of 1 item.  \nValid Values: `ReportBatchItemFailures`   \nRequired: No\n\n ** [KMSKeyArn](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-KMSKeyArn\"></a>\n The ARN of the AWS Key Management Service (AWS KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics). By default, Lambda does not encrypt your filter criteria object. Specify this property to encrypt data using your own customer managed key.   \nType: String  \nPattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()`   \nRequired: No\n\n ** [LoggingConfig](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-LoggingConfig\"></a>\n(Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. Use this configuration object to define the level of logs for your event source mapping.   \nType: [EventSourceMappingLoggingConfig](API_EventSourceMappingLoggingConfig.md) object  \nRequired: No\n\n ** [MaximumBatchingWindowInSeconds](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-MaximumBatchingWindowInSeconds\"></a>\nThe maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function. You can configure `MaximumBatchingWindowInSeconds` to any value from 0 seconds to 300 seconds in increments of seconds.  \nFor Kinesis, DynamoDB, and Amazon SQS event sources, the default batching window is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ, and DocumentDB event sources, the default batching window is 500 ms. Note that because you can only change `MaximumBatchingWindowInSeconds` in increments of seconds, you cannot revert back to the 500 ms default batching window after you have changed it. To restore the default batching window, you must create a new event source mapping.  \nRelated setting: For Kinesis, DynamoDB, and Amazon SQS event sources, when you set `BatchSize` to a value greater than 10, you must set `MaximumBatchingWindowInSeconds` to at least 1.  \nType: Integer  \nValid Range: Minimum value of 0. Maximum value of 300.  \nRequired: No\n\n ** [MaximumRecordAgeInSeconds](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-MaximumRecordAgeInSeconds\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records older than the specified age. The default value is infinite (-1).  \nType: Integer  \nValid Range: Minimum value of -1. Maximum value of 604800.  \nRequired: No\n\n ** [MaximumRetryAttempts](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-MaximumRetryAttempts\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records after the specified number of retries. The default value is infinite (-1). When set to infinite (-1), failed records are retried until the record expires.  \nType: Integer  \nValid Range: Minimum value of -1. Maximum value of 10000.  \nRequired: No\n\n ** [MetricsConfig](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-MetricsConfig\"></a>\nThe metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).  \nType: [EventSourceMappingMetricsConfig](API_EventSourceMappingMetricsConfig.md) object  \nRequired: No\n\n ** [ParallelizationFactor](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-ParallelizationFactor\"></a>\n(Kinesis and DynamoDB Streams only) The number of batches to process from each shard concurrently.  \nType: Integer  \nValid Range: Minimum value of 1. Maximum value of 10.  \nRequired: No\n\n ** [ProvisionedPollerConfig](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-ProvisionedPollerConfig\"></a>\n(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode).  \nType: [ProvisionedPollerConfig](API_ProvisionedPollerConfig.md) object  \nRequired: No\n\n ** [ScalingConfig](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-ScalingConfig\"></a>\n(Amazon SQS only) The scaling configuration for the event source. For more information, see [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency).  \nType: [ScalingConfig](API_ScalingConfig.md) object  \nRequired: No\n\n ** [SelfManagedKafkaEventSourceConfig](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-SelfManagedKafkaEventSourceConfig\"></a>\nSpecific configuration settings for a self-managed Apache Kafka event source.  \nType: [SelfManagedKafkaEventSourceConfig](API_SelfManagedKafkaEventSourceConfig.md) object  \nRequired: No\n\n ** [SourceAccessConfigurations](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-SourceAccessConfigurations\"></a>\nAn array of authentication protocols or VPC components required to secure your event source.  \nType: Array of [SourceAccessConfiguration](API_SourceAccessConfiguration.md) objects  \nArray Members: Minimum number of 0 items. Maximum number of 22 items.  \nRequired: No\n\n ** [TumblingWindowInSeconds](#API_UpdateEventSourceMapping_RequestSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-request-TumblingWindowInSeconds\"></a>\n(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.  \nType: Integer  \nValid Range: Minimum value of 0. Maximum value of 900.  \nRequired: No\n\n## Response Syntax\n<a name=\"API_UpdateEventSourceMapping_ResponseSyntax\"></a>\n\n```\nHTTP/1.1 202\nContent-type: application/json\n\n{\n   \"AmazonManagedKafkaEventSourceConfig\": { \n      \"ConsumerGroupId\": \"string\",\n      \"SchemaRegistryConfig\": { \n         \"AccessConfigs\": [ \n            { \n               \"Type\": \"string\",\n               \"URI\": \"string\"\n            }\n         ],\n         \"EventRecordFormat\": \"string\",\n         \"SchemaRegistryURI\": \"string\",\n         \"SchemaValidationConfigs\": [ \n            { \n               \"Attribute\": \"string\"\n            }\n         ]\n      }\n   },\n   \"BatchSize\": number,\n   \"BisectBatchOnFunctionError\": boolean,\n   \"DestinationConfig\": { \n      \"OnFailure\": { \n         \"Destination\": \"string\"\n      },\n      \"OnSuccess\": { \n         \"Destination\": \"string\"\n      }\n   },\n   \"DocumentDBEventSourceConfig\": { \n      \"CollectionName\": \"string\",\n      \"DatabaseName\": \"string\",\n      \"FullDocument\": \"string\"\n   },\n   \"EventSourceArn\": \"string\",\n   \"EventSourceMappingArn\": \"string\",\n   \"FilterCriteria\": { \n      \"Filters\": [ \n         { \n            \"Pattern\": \"string\"\n         }\n      ]\n   },\n   \"FilterCriteriaError\": { \n      \"ErrorCode\": \"string\",\n      \"Message\": \"string\"\n   },\n   \"FunctionArn\": \"string\",\n   \"FunctionResponseTypes\": [ \"string\" ],\n   \"KMSKeyArn\": \"string\",\n   \"LastModified\": number,\n   \"LastProcessingResult\": \"string\",\n   \"LoggingConfig\": { \n      \"SystemLogLevel\": \"string\"\n   },\n   \"MaximumBatchingWindowInSeconds\": number,\n   \"MaximumRecordAgeInSeconds\": number,\n   \"MaximumRetryAttempts\": number,\n   \"MetricsConfig\": { \n      \"Metrics\": [ \"string\" ]\n   },\n   \"ParallelizationFactor\": number,\n   \"ProvisionedPollerConfig\": { \n      \"MaximumPollers\": number,\n      \"MinimumPollers\": number,\n      \"PollerGroupName\": \"string\"\n   },\n   \"Queues\": [ \"string\" ],\n   \"ScalingConfig\": { \n      \"MaximumConcurrency\": number\n   },\n   \"SelfManagedEventSource\": { \n      \"Endpoints\": { \n         \"string\" : [ \"string\" ]\n      }\n   },\n   \"SelfManagedKafkaEventSourceConfig\": { \n      \"ConsumerGroupId\": \"string\",\n      \"SchemaRegistryConfig\": { \n         \"AccessConfigs\": [ \n            { \n               \"Type\": \"string\",\n               \"URI\": \"string\"\n            }\n         ],\n         \"EventRecordFormat\": \"string\",\n         \"SchemaRegistryURI\": \"string\",\n         \"SchemaValidationConfigs\": [ \n            { \n               \"Attribute\": \"string\"\n            }\n         ]\n      }\n   },\n   \"SourceAccessConfigurations\": [ \n      { \n         \"Type\": \"string\",\n         \"URI\": \"string\"\n      }\n   ],\n   \"StartingPosition\": \"string\",\n   \"StartingPositionTimestamp\": number,\n   \"State\": \"string\",\n   \"StateTransitionReason\": \"string\",\n   \"Topics\": [ \"string\" ],\n   \"TumblingWindowInSeconds\": number,\n   \"UUID\": \"string\"\n}\n```\n\n## Response Elements\n<a name=\"API_UpdateEventSourceMapping_ResponseElements\"></a>\n\nIf the action is successful, the service sends back an HTTP 202 response.\n\nThe following data is returned in JSON format by the service.\n\n ** [AmazonManagedKafkaEventSourceConfig](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-AmazonManagedKafkaEventSourceConfig\"></a>\nSpecific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.  \nType: [AmazonManagedKafkaEventSourceConfig](API_AmazonManagedKafkaEventSourceConfig.md) object\n\n ** [BatchSize](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-BatchSize\"></a>\nThe maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).  \nDefault value: Varies by service. For Amazon SQS, the default is 10. For all other services, the default is 100.  \nRelated setting: When you set `BatchSize` to a value greater than 10, you must set `MaximumBatchingWindowInSeconds` to at least 1.  \nType: Integer  \nValid Range: Minimum value of 1. Maximum value of 10000.\n\n ** [BisectBatchOnFunctionError](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-BisectBatchOnFunctionError\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) If the function returns an error, split the batch in two and retry. The default value is false.  \nType: Boolean\n\n ** [DestinationConfig](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-DestinationConfig\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) A configuration object that specifies the destination of an event after Lambda processes it.  \nType: [DestinationConfig](API_DestinationConfig.md) object\n\n ** [DocumentDBEventSourceConfig](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-DocumentDBEventSourceConfig\"></a>\nSpecific configuration settings for a DocumentDB event source.  \nType: [DocumentDBEventSourceConfig](API_DocumentDBEventSourceConfig.md) object\n\n ** [EventSourceArn](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-EventSourceArn\"></a>\nThe Amazon Resource Name (ARN) of the event source.  \nType: String  \nPattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:([a-z]{2}(-gov)?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)` \n\n ** [EventSourceMappingArn](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-EventSourceMappingArn\"></a>\nThe Amazon Resource Name (ARN) of the event source mapping.  \nType: String  \nLength Constraints: Minimum length of 85. Maximum length of 120.  \nPattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:\\d{12}:event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}` \n\n ** [FilterCriteria](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-FilterCriteria\"></a>\nAn object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html).  \nIf filter criteria is encrypted, this field shows up as `null` in the response of ListEventSourceMapping API calls. You can view this field in plaintext in the response of GetEventSourceMapping and DeleteEventSourceMapping calls if you have `kms:Decrypt` permissions for the correct AWS KMS key.  \nType: [FilterCriteria](API_FilterCriteria.md) object\n\n ** [FilterCriteriaError](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-FilterCriteriaError\"></a>\nAn object that contains details about an error related to filter criteria encryption.  \nType: [FilterCriteriaError](API_FilterCriteriaError.md) object\n\n ** [FunctionArn](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-FunctionArn\"></a>\nThe ARN of the Lambda function.  \nType: String  \nLength Constraints: Minimum length of 0. Maximum length of 10000.  \nPattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:\\d{12}:function:[a-zA-Z0-9-_]+(:(\\$LATEST|[a-zA-Z0-9-_]+))?` \n\n ** [FunctionResponseTypes](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-FunctionResponseTypes\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, self-managed Apache Kafka, and Amazon SQS) A list of current response type enums applied to the event source mapping.  \nType: Array of strings  \nArray Members: Minimum number of 0 items. Maximum number of 1 item.  \nValid Values: `ReportBatchItemFailures` \n\n ** [KMSKeyArn](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-KMSKeyArn\"></a>\n The ARN of the AWS Key Management Service (AWS KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics).  \nType: String  \nPattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()` \n\n ** [LastModified](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-LastModified\"></a>\nThe date that the event source mapping was last updated or that its state changed, in Unix time seconds.  \nType: Timestamp\n\n ** [LastProcessingResult](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-LastProcessingResult\"></a>\nThe result of the event source mapping's last processing attempt.  \nType: String\n\n ** [LoggingConfig](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-LoggingConfig\"></a>\n(Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. For more information, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html).  \nType: [EventSourceMappingLoggingConfig](API_EventSourceMappingLoggingConfig.md) object\n\n ** [MaximumBatchingWindowInSeconds](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-MaximumBatchingWindowInSeconds\"></a>\nThe maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function. You can configure `MaximumBatchingWindowInSeconds` to any value from 0 seconds to 300 seconds in increments of seconds.  \nFor streams and Amazon SQS event sources, the default batching window is 0 seconds. For Amazon MSK, Self-managed Apache Kafka, Amazon MQ, and DocumentDB event sources, the default batching window is 500 ms. Note that because you can only change `MaximumBatchingWindowInSeconds` in increments of seconds, you cannot revert back to the 500 ms default batching window after you have changed it. To restore the default batching window, you must create a new event source mapping.  \nRelated setting: For streams and Amazon SQS event sources, when you set `BatchSize` to a value greater than 10, you must set `MaximumBatchingWindowInSeconds` to at least 1.  \nType: Integer  \nValid Range: Minimum value of 0. Maximum value of 300.\n\n ** [MaximumRecordAgeInSeconds](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-MaximumRecordAgeInSeconds\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.  \nThe minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed\nType: Integer  \nValid Range: Minimum value of -1. Maximum value of 604800.\n\n ** [MaximumRetryAttempts](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-MaximumRetryAttempts\"></a>\n(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source.  \nType: Integer  \nValid Range: Minimum value of -1. Maximum value of 10000.\n\n ** [MetricsConfig](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-MetricsConfig\"></a>\nThe metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).  \nType: [EventSourceMappingMetricsConfig](API_EventSourceMappingMetricsConfig.md) object\n\n ** [ParallelizationFactor](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-ParallelizationFactor\"></a>\n(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1.  \nType: Integer  \nValid Range: Minimum value of 1. Maximum value of 10.\n\n ** [ProvisionedPollerConfig](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-ProvisionedPollerConfig\"></a>\n(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode).  \nType: [ProvisionedPollerConfig](API_ProvisionedPollerConfig.md) object\n\n ** [Queues](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-Queues\"></a>\n (Amazon MQ) The name of the Amazon MQ broker destination queue to consume.  \nType: Array of strings  \nArray Members: Fixed number of 1 item.  \nLength Constraints: Minimum length of 1. Maximum length of 1000.  \nPattern: `[\\s\\S]*` \n\n ** [ScalingConfig](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-ScalingConfig\"></a>\n(Amazon SQS only) The scaling configuration for the event source. For more information, see [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency).  \nType: [ScalingConfig](API_ScalingConfig.md) object\n\n ** [SelfManagedEventSource](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-SelfManagedEventSource\"></a>\nThe self-managed Apache Kafka cluster for your event source.  \nType: [SelfManagedEventSource](API_SelfManagedEventSource.md) object\n\n ** [SelfManagedKafkaEventSourceConfig](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-SelfManagedKafkaEventSourceConfig\"></a>\nSpecific configuration settings for a self-managed Apache Kafka event source.  \nType: [SelfManagedKafkaEventSourceConfig](API_SelfManagedKafkaEventSourceConfig.md) object\n\n ** [SourceAccessConfigurations](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-SourceAccessConfigurations\"></a>\nAn array of the authentication protocol, VPC components, or virtual host to secure and define your event source.  \nType: Array of [SourceAccessConfiguration](API_SourceAccessConfiguration.md) objects  \nArray Members: Minimum number of 0 items. Maximum number of 22 items.\n\n ** [StartingPosition](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-StartingPosition\"></a>\nThe position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB Stream event sources. `AT_TIMESTAMP` is supported only for Amazon Kinesis streams, Amazon DocumentDB, Amazon MSK, and self-managed Apache Kafka.  \nType: String  \nValid Values: `TRIM_HORIZON | LATEST | AT_TIMESTAMP` \n\n ** [StartingPositionTimestamp](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-StartingPositionTimestamp\"></a>\nWith `StartingPosition` set to `AT_TIMESTAMP`, the time from which to start reading, in Unix time seconds. `StartingPositionTimestamp` cannot be in the future.  \nType: Timestamp\n\n ** [State](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-State\"></a>\nThe state of the event source mapping. It can be one of the following: `Creating`, `Enabling`, `Enabled`, `Disabling`, `Disabled`, `Updating`, or `Deleting`.  \nType: String\n\n ** [StateTransitionReason](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-StateTransitionReason\"></a>\nIndicates whether a user or Lambda made the last change to the event source mapping.  \nType: String\n\n ** [Topics](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-Topics\"></a>\nThe name of the Kafka topic.  \nType: Array of strings  \nArray Members: Fixed number of 1 item.  \nLength Constraints: Minimum length of 1. Maximum length of 249.  \nPattern: `[^.]([a-zA-Z0-9\\-_.]+)` \n\n ** [TumblingWindowInSeconds](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-TumblingWindowInSeconds\"></a>\n(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.  \nType: Integer  \nValid Range: Minimum value of 0. Maximum value of 900.\n\n ** [UUID](#API_UpdateEventSourceMapping_ResponseSyntax) **   <a name=\"lambda-UpdateEventSourceMapping-response-UUID\"></a>\nThe identifier of the event source mapping.  \nType: String\n\n## Errors\n<a name=\"API_UpdateEventSourceMapping_Errors\"></a>\n\nFor information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).\n\n ** InvalidParameterValueException **   \nOne of the parameters in the request is not valid.    \n ** message **   \nThe exception message.  \n ** Type **   \nThe exception type.\nHTTP Status Code: 400\n\n ** ResourceConflictException **   \nThe resource already exists, or another operation is in progress.    \n ** message **   \nThe exception message.  \n ** Type **   \nThe exception type.\nHTTP Status Code: 409\n\n ** ResourceInUseException **   \nThe operation conflicts with the resource's availability. For example, you tried to update an event source mapping in the CREATING state, or you tried to delete an event source mapping currently UPDATING.  \nHTTP Status Code: 400\n\n ** ResourceNotFoundException **   \nThe resource specified in the request does not exist.  \nHTTP Status Code: 404\n\n ** ServiceException **   \nThe AWS Lambda service encountered an internal error.  \nHTTP Status Code: 500\n\n ** TooManyRequestsException **   \nThe request throughput limit was exceeded. For more information, see [Lambda quotas](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-limits.html#api-requests).    \n ** retryAfterSeconds **   \nThe number of seconds the caller should wait before retrying.\nHTTP Status Code: 429\n\n## See Also\n<a name=\"API_UpdateEventSourceMapping_SeeAlso\"></a>\n\nFor more information about using this API in one of the language-specific AWS SDKs, see the following:\n+  [AWS Command Line Interface V2](https://docs.aws.amazon.com/goto/cli2/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for .NET V4](https://docs.aws.amazon.com/goto/DotNetSDKV4/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for C\\+\\+](https://docs.aws.amazon.com/goto/SdkForCpp/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for Go v2](https://docs.aws.amazon.com/goto/SdkForGoV2/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for JavaScript V3](https://docs.aws.amazon.com/goto/SdkForJavaScriptV3/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for Kotlin](https://docs.aws.amazon.com/goto/SdkForKotlin/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for PHP V3](https://docs.aws.amazon.com/goto/SdkForPHPV3/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for Python (Boto3)](https://docs.aws.amazon.com/goto/boto3/lambda-2015-03-31/UpdateEventSourceMapping) \n+  [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/lambda-2015-03-31/UpdateEventSourceMapping) "
    }
  ],
  "sources": [
    "https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-lambda-eventsourcemapping.md",
    "https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-eventsourcemapping-documentdbeventsourceconfig.md",
    "https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration.md",
    "https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.md",
    "https://docs.aws.amazon.com/lambda/latest/api/API_CreateEventSourceMapping.md",
    "https://docs.aws.amazon.com/lambda/latest/api/API_UpdateEventSourceMapping.md"
  ],
  "cleanup": {
    "complete": true,
    "errors": [],
    "finished_at": "2026-10-01T00:04:28.762121+00:00",
    "boundary": "Exact native IDs verified absent; deleted stack ARN retains DELETE_COMPLETE history"
  },
  "workflow_complete": false,
  "calibration_gaps": [
    "No records, invocation, native delivery, checkpoint, or MongoDB equivalence measured.",
    "Source ARN replacement to a second cluster is not executed: approved scope contains only one cluster.",
    "Enabled removal is not executed because every mapping must stay disabled."
  ],
  "schema": {
    "tagging": {
      "permissions": [
        "lambda:ListTags",
        "lambda:TagResource",
        "lambda:UntagResource"
      ],
      "taggable": true,
      "tagOnCreate": true,
      "tagUpdatable": true,
      "tagProperty": "/properties/Tags",
      "cloudFormationSystemTags": true
    },
    "propertyTransform": {
      "/properties/FunctionName": "$split(FunctionName, \":\")[-1] $OR FunctionName $OR $join([\"((arn:.*:lambda:.*:[0-9]{12}:function)|([0-9]{12}:function)):\", $split(FunctionName, \":\")[-1]])",
      "/properties/StartingPositionTimestamp": "StartingPositionTimestamp * 1000"
    },
    "handlers": {
      "read": {
        "permissions": [
          "lambda:GetEventSourceMapping",
          "lambda:ListTags",
          "kms:Decrypt"
        ]
      },
      "create": {
        "permissions": [
          "lambda:CreateEventSourceMapping",
          "lambda:GetEventSourceMapping",
          "lambda:TagResource",
          "kms:DescribeKey",
          "kms:GenerateDataKey",
          "kms:Decrypt"
        ]
      },
      "update": {
        "permissions": [
          "lambda:UpdateEventSourceMapping",
          "lambda:GetEventSourceMapping",
          "lambda:TagResource",
          "lambda:UntagResource",
          "kms:DescribeKey",
          "kms:GenerateDataKey",
          "kms:Decrypt"
        ]
      },
      "list": {
        "permissions": [
          "lambda:ListEventSourceMappings"
        ]
      },
      "delete": {
        "permissions": [
          "lambda:DeleteEventSourceMapping",
          "lambda:GetEventSourceMapping",
          "kms:Decrypt"
        ]
      }
    },
    "typeName": "AWS::Lambda::EventSourceMapping",
    "readOnlyProperties": [
      "/properties/Id",
      "/properties/EventSourceMappingArn"
    ],
    "description": "The ``AWS::Lambda::EventSourceMapping`` resource creates a mapping between an event source and an LAMlong function. LAM reads items from the event source and triggers the function.\n For details about each event source type, see the following topics. In particular, each of the topics describes the required and optional parameters for the specific event source. \n  +   [Configuring a Dynamo DB stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-dynamodb-eventsourcemapping) \n  +   [Configuring a Kinesis stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-eventsourcemapping) \n  +   [Configuring an SQS queue as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-eventsource) \n  +   [Configuring an MQ broker as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-eventsourcemapping) \n  +   [Configuring MSK as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html) \n  +   [Configuring Self-Managed Apache Kafka as an event source](https://docs.aws.amazon.com/lambda/latest/dg/kafka-smaa.html) \n  +   [Configuring Amazon DocumentDB as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html)",
    "createOnlyProperties": [
      "/properties/EventSourceArn",
      "/properties/StartingPosition",
      "/properties/StartingPositionTimestamp",
      "/properties/SelfManagedEventSource"
    ],
    "additionalProperties": false,
    "primaryIdentifier": [
      "/properties/Id"
    ],
    "definitions": {
      "ScalingConfig": {
        "description": "(Amazon SQS only) The scaling configuration for the event source. To remove the configuration, pass an empty value.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "MaximumConcurrency": {
            "description": "Limits the number of concurrent instances that the SQS event source can invoke.",
            "$ref": "#/definitions/MaximumConcurrency"
          }
        }
      },
      "SchemaRegistryConfig": {
        "description": "Specific configuration settings for a Kafka schema registry.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "SchemaValidationConfigs": {
            "minItems": 1,
            "maxItems": 2,
            "uniqueItems": true,
            "description": "An array of schema validation configuration objects, which tell Lambda the message attributes you want to validate and filter using your schema registry.",
            "type": "array",
            "items": {
              "$ref": "#/definitions/SchemaValidationConfig"
            }
          },
          "SchemaRegistryURI": {
            "minLength": 1,
            "pattern": "[a-zA-Z0-9-/*:_+=.@-]*",
            "description": "The URI for your schema registry. The correct URI format depends on the type of schema registry you're using.\n  +  For GLU schema registries, use the ARN of the registry.\n  +  For Confluent schema registries, use the URL of the registry.",
            "type": "string",
            "maxLength": 10000
          },
          "EventRecordFormat": {
            "description": "The record format that Lambda delivers to your function after schema validation.\n  +  Choose ``JSON`` to have Lambda deliver the record to your function as a standard JSON object.\n  +  Choose ``SOURCE`` to have Lambda deliver the record to your function in its original source format. Lambda removes all schema metadata, such as the schema ID, before sending the record to your function.",
            "type": "string",
            "enum": [
              "JSON",
              "SOURCE"
            ]
          },
          "AccessConfigs": {
            "maxItems": 2,
            "uniqueItems": true,
            "description": "An array of access configuration objects that tell Lambda how to authenticate with your schema registry.",
            "type": "array",
            "items": {
              "$ref": "#/definitions/SchemaRegistryAccessConfig"
            }
          }
        }
      },
      "SelfManagedEventSource": {
        "description": "The self-managed Apache Kafka cluster for your event source.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Endpoints": {
            "description": "The list of bootstrap servers for your Kafka brokers in the following format: ``\"KafkaBootstrapServers\": [\"abc.xyz.com:xxxx\",\"abc2.xyz.com:xxxx\"]``.",
            "$ref": "#/definitions/Endpoints"
          }
        }
      },
      "MaximumConcurrency": {
        "description": "The maximum number of concurrent functions that an event source can invoke.",
        "maximum": 1000,
        "type": "integer",
        "minimum": 2
      },
      "SourceAccessConfiguration": {
        "description": "An array of the authentication protocol, VPC components, or virtual host to secure and define your event source.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Type": {
            "description": "The type of authentication protocol, VPC components, or virtual host for your event source. For example: ``\"Type\":\"SASL_SCRAM_512_AUTH\"``.\n  +  ``BASIC_AUTH`` \u2013 (Amazon MQ) The ASMlong secret that stores your broker credentials.\n  +  ``BASIC_AUTH`` \u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL/PLAIN authentication of your Apache Kafka brokers.\n  +  ``VPC_SUBNET`` \u2013 (Self-managed Apache Kafka) The subnets associated with your VPC. Lambda connects to these subnets to fetch data from your self-managed Apache Kafka cluster.\n  +  ``VPC_SECURITY_GROUP`` \u2013 (Self-managed Apache Kafka) The VPC security group used to manage access to your self-managed Apache Kafka brokers.\n  +  ``SASL_SCRAM_256_AUTH`` \u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-256 authentication of your self-managed Apache Kafka brokers.\n  +  ``SASL_SCRAM_512_AUTH`` \u2013 (Amazon MSK, Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-512 authentication of your self-managed Apache Kafka brokers.\n  +  ``VIRTUAL_HOST`` \u2013- (RabbitMQ) The name of the virtual host in your RabbitMQ broker. Lambda uses this RabbitMQ host as the event source. This property cannot be specified in an UpdateEventSourceMapping API call.\n  +  ``CLIENT_CERTIFICATE_TLS_AUTH`` \u2013 (Amazon MSK, self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the certificate chain (X.509 PEM), private key (PKCS#8 PEM), and private key password (optional) used for mutual TLS authentication of your MSK/Apache Kafka brokers.\n  +  ``SERVER_ROOT_CA_CERTIFICATE`` \u2013 (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the root CA certificate (X.509 PEM) used for TLS encryption of your Apache Kafka brokers.",
            "type": "string",
            "enum": [
              "BASIC_AUTH",
              "VPC_SUBNET",
              "VPC_SECURITY_GROUP",
              "SASL_SCRAM_512_AUTH",
              "SASL_SCRAM_256_AUTH",
              "VIRTUAL_HOST",
              "CLIENT_CERTIFICATE_TLS_AUTH",
              "SERVER_ROOT_CA_CERTIFICATE",
              "OAUTHBEARER_AUTH",
              "OAUTHBEARER_SCOPE",
              "OAUTHBEARER_AUDIENCE",
              "OAUTHBEARER_LOGICAL_CLUSTER",
              "OAUTHBEARER_IDENTITY_POOL",
              "IAM_AUTH",
              "IAM_OAUTHBEARER_AUTH"
            ]
          },
          "URI": {
            "minLength": 1,
            "pattern": "[a-zA-Z0-9-\\/*:_+=.@-]*",
            "description": "The value for your chosen configuration in ``Type``. For example: ``\"URI\": \"arn:aws:secretsmanager:us-east-1:01234567890:secret:MyBrokerSecretName\"``.",
            "type": "string",
            "maxLength": 200
          }
        }
      },
      "FilterCriteria": {
        "description": "An object that contains the filters for an event source.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Filters": {
            "minItems": 1,
            "maxItems": 20,
            "uniqueItems": true,
            "description": "A list of filters.",
            "type": "array",
            "items": {
              "$ref": "#/definitions/Filter"
            }
          }
        }
      },
      "ProvisionedPollerConfig": {
        "description": "The [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode) configuration for the event source. Use Provisioned Mode to customize the minimum and maximum number of event pollers for your event source.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "PollerGroupName": {
            "minLength": 0,
            "description": "(Amazon MSK and self-managed Apache Kafka) The name of the provisioned poller group. Use this option to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.",
            "type": "string",
            "maxLength": 128
          },
          "MinimumPollers": {
            "description": "The minimum number of event pollers this event source can scale down to. For Amazon SQS events source mappings, default is 2, and minimum 2 required. For Amazon MSK and self-managed Apache Kafka event source mappings, default is 1.",
            "maximum": 200,
            "type": "integer",
            "minimum": 1
          },
          "MaximumPollers": {
            "description": "The maximum number of event pollers this event source can scale up to. For Amazon SQS event source mappings, the accepted range is between 2 and 10,000, with a default of 200. For Amazon MSK and self-managed Apache Kafka event source mappings, the accepted range is between 1 and 2,000, with a default of 200.",
            "maximum": 10000,
            "type": "integer",
            "minimum": 1
          }
        }
      },
      "SelfManagedKafkaEventSourceConfig": {
        "description": "Specific configuration settings for a self-managed Apache Kafka event source.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "ConsumerGroupId": {
            "description": "The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see [Customizable consumer group ID](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka-process.html#services-smaa-topic-add).",
            "$ref": "#/definitions/ConsumerGroupId"
          },
          "SchemaRegistryConfig": {
            "description": "Specific configuration settings for a Kafka schema registry.",
            "$ref": "#/definitions/SchemaRegistryConfig"
          },
          "ConsumptionMode": {
            "description": "",
            "$ref": "#/definitions/ConsumptionMode"
          }
        }
      },
      "MetricsConfig": {
        "description": "The metrics configuration for your event source. Use this configuration object to define which metrics you want your event source mapping to produce.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Metrics": {
            "minItems": 0,
            "maxItems": 3,
            "uniqueItems": true,
            "description": "The metrics you want your event source mapping to produce, including ``EventCount``, ``ErrorCount``, ``KafkaMetrics``. \n  +  ``EventCount`` to receive metrics related to the number of events processed by your event source mapping.\n  +  ``ErrorCount`` (Amazon MSK and self-managed Apache Kafka) to receive metrics related to the number of errors in your event source mapping processing.\n  +  ``KafkaMetrics`` (Amazon MSK and self-managed Apache Kafka) to receive metrics related to the Kafka consumers from your event source mapping.\n  \n  For more information about these metrics, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).",
            "type": "array",
            "items": {
              "type": "string",
              "enum": [
                "EventCount",
                "ErrorCount",
                "KafkaMetrics"
              ]
            }
          }
        }
      },
      "DocumentDBEventSourceConfig": {
        "description": "Specific configuration settings for a DocumentDB event source.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "FullDocument": {
            "description": "Determines what DocumentDB sends to your event stream during document update operations. If set to UpdateLookup, DocumentDB sends a delta describing the changes, along with a copy of the entire document. Otherwise, DocumentDB sends only a partial document that contains the changes.",
            "type": "string",
            "enum": [
              "UpdateLookup",
              "Default"
            ]
          },
          "CollectionName": {
            "minLength": 1,
            "description": "The name of the collection to consume within the database. If you do not specify a collection, Lambda consumes all collections.",
            "type": "string",
            "maxLength": 57
          },
          "DatabaseName": {
            "minLength": 1,
            "description": "The name of the database to consume within the DocumentDB cluster.",
            "type": "string",
            "maxLength": 63
          }
        }
      },
      "Endpoints": {
        "description": "The list of bootstrap servers for your Kafka brokers in the following format: ``\"KafkaBootstrapServers\": [\"abc.xyz.com:xxxx\",\"abc2.xyz.com:xxxx\"]``.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "KafkaBootstrapServers": {
            "minItems": 1,
            "maxItems": 10,
            "uniqueItems": true,
            "description": "The list of bootstrap servers for your Kafka brokers in the following format: ``\"KafkaBootstrapServers\": [\"abc.xyz.com:xxxx\",\"abc2.xyz.com:xxxx\"]``.",
            "type": "array",
            "items": {
              "minLength": 1,
              "pattern": "^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9]):[0-9]{1,5}",
              "description": "The URL of a Kafka server.",
              "type": "string",
              "maxLength": 300
            }
          }
        }
      },
      "DestinationConfig": {
        "description": "A configuration object that specifies the destination of an event after Lambda processes it. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations).",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "OnFailure": {
            "description": "The destination configuration for failed invocations.",
            "$ref": "#/definitions/OnFailure"
          }
        }
      },
      "ConsumerGroupId": {
        "minLength": 1,
        "pattern": "[a-zA-Z0-9-\\/*:_+=.@-]*",
        "description": "The identifier for the Kafka Consumer Group to join.",
        "type": "string",
        "maxLength": 200
      },
      "Filter": {
        "description": "A structure within a ``FilterCriteria`` object that defines an event filtering pattern.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Pattern": {
            "minLength": 0,
            "pattern": ".*",
            "description": "A filter pattern. For more information on the syntax of a filter pattern, see [Filter rule syntax](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-syntax).",
            "type": "string",
            "maxLength": 4096
          }
        }
      },
      "AmazonManagedKafkaEventSourceConfig": {
        "description": "Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "ConsumerGroupId": {
            "description": "The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see [Customizable consumer group ID](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-consumer-group-id).",
            "$ref": "#/definitions/ConsumerGroupId"
          },
          "SchemaRegistryConfig": {
            "description": "Specific configuration settings for a Kafka schema registry.",
            "$ref": "#/definitions/SchemaRegistryConfig"
          }
        }
      },
      "LoggingConfig": {
        "description": "The function's Amazon CloudWatch Logs configuration settings.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "SystemLogLevel": {
            "description": "Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where ``DEBUG`` is the highest level and ``WARN`` is the lowest.",
            "type": "string",
            "enum": [
              "DEBUG",
              "INFO",
              "WARN"
            ]
          }
        }
      },
      "Tag": {
        "description": "A [tag](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the event source mapping.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Value": {
            "minLength": 0,
            "description": "The value for this tag.",
            "type": "string",
            "maxLength": 256
          },
          "Key": {
            "minLength": 1,
            "description": "The key for this tag.",
            "type": "string",
            "maxLength": 128
          }
        },
        "required": [
          "Key"
        ]
      },
      "SchemaValidationConfig": {
        "description": "Specific schema validation configuration settings that tell Lambda the message attributes you want to validate and filter using your schema registry.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Attribute": {
            "description": "The attributes you want your schema registry to validate and filter for. If you selected ``JSON`` as the ``EventRecordFormat``, Lambda also deserializes the selected message attributes.",
            "type": "string",
            "enum": [
              "KEY",
              "VALUE"
            ]
          }
        }
      },
      "SchemaRegistryAccessConfig": {
        "description": "Specific access configuration settings that tell Lambda how to authenticate with your schema registry.\n If you're working with an GLU schema registry, don't provide authentication details in this object. Instead, ensure that your execution role has the required permissions for Lambda to access your cluster.\n If you're working with a Confluent schema registry, choose the authentication method in the ``Type`` field, and provide the ASMlong secret ARN in the ``URI`` field.",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Type": {
            "description": "The type of authentication Lambda uses to access your schema registry.",
            "type": "string",
            "enum": [
              "BASIC_AUTH",
              "CLIENT_CERTIFICATE_TLS_AUTH",
              "SERVER_ROOT_CA_CERTIFICATE",
              "OAUTHBEARER_AUTH"
            ]
          },
          "URI": {
            "minLength": 1,
            "pattern": "arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)",
            "description": "The URI of the secret (Secrets Manager secret ARN) to authenticate with your schema registry.",
            "type": "string",
            "maxLength": 10000
          }
        }
      },
      "ConsumptionMode": {
        "description": "The mode that determines how Lambda reads from a Kafka topic. Use Stream for ordered processing or Queue for higher throughput when ordering is not required.",
        "type": "string",
        "enum": [
          "Stream",
          "Queue"
        ]
      },
      "OnFailure": {
        "description": "A destination for events that failed processing. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations).",
        "additionalProperties": false,
        "type": "object",
        "properties": {
          "Destination": {
            "minLength": 12,
            "pattern": "^$|kafka://([^.]([a-zA-Z0-9\\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)",
            "description": "The Amazon Resource Name (ARN) of the destination resource.\n To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html), [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html), [self-managed Apache Kafka](https://docs.aws.amazon.com/lambda/latest/dg/kafka-on-failure.html), or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/kafka-on-failure.html), you can configure an Amazon SNS topic, Amazon SQS queue, Amazon S3 bucket, or Kafka topic as the destination.\n  Amazon SNS destinations have a message size limit of 256 KB. If the combined size of the function request and response payload exceeds the limit, Lambda will drop the payload when sending ``OnFailure`` event to the destination. For details on this behavior, refer to [Retaining records of asynchronous invocations](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html).\n  To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html), [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html), [self-managed Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination) or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination), you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination.",
            "type": "string",
            "maxLength": 1024
          }
        }
      }
    },
    "required": [
      "FunctionName"
    ],
    "properties": {
      "StartingPosition": {
        "minLength": 6,
        "pattern": "(LATEST|TRIM_HORIZON|AT_TIMESTAMP)+",
        "description": "The position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB.\n  +  *LATEST* - Read only new records.\n  +  *TRIM_HORIZON* - Process all available records.\n  +  *AT_TIMESTAMP* - Specify a time from which to start reading records.",
        "type": "string",
        "maxLength": 12
      },
      "SelfManagedEventSource": {
        "description": "The self-managed Apache Kafka cluster for your event source.",
        "$ref": "#/definitions/SelfManagedEventSource"
      },
      "ParallelizationFactor": {
        "description": "(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1.",
        "maximum": 10,
        "type": "integer",
        "minimum": 1
      },
      "FilterCriteria": {
        "description": "An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html).",
        "$ref": "#/definitions/FilterCriteria"
      },
      "ProvisionedPollerConfig": {
        "description": "(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode).",
        "$ref": "#/definitions/ProvisionedPollerConfig"
      },
      "MetricsConfig": {
        "description": "The metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics).",
        "$ref": "#/definitions/MetricsConfig"
      },
      "FunctionName": {
        "minLength": 1,
        "pattern": "(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:)?(\\d{12}:)?(function:)?([a-zA-Z0-9-_]+)(:(\\$LATEST(\\.PUBLISHED)?|[a-zA-Z0-9-_]+))?",
        "description": "The name or ARN of the Lambda function.\n  **Name formats**\n +  *Function name* \u2013 ``MyFunction``.\n  +  *Function ARN* \u2013 ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction``.\n  +  *Version or Alias ARN* \u2013 ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD``.\n  +  *Partial ARN* \u2013 ``123456789012:function:MyFunction``.\n  \n The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.",
        "type": "string",
        "maxLength": 140
      },
      "DestinationConfig": {
        "description": "(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) A configuration object that specifies the destination of an event after Lambda processes it.",
        "$ref": "#/definitions/DestinationConfig"
      },
      "KmsKeyArn": {
        "minLength": 12,
        "pattern": "(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()",
        "description": "The ARN of the KMSlong (KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics).",
        "type": "string",
        "maxLength": 2048
      },
      "AmazonManagedKafkaEventSourceConfig": {
        "description": "Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.",
        "$ref": "#/definitions/AmazonManagedKafkaEventSourceConfig"
      },
      "SourceAccessConfigurations": {
        "minItems": 1,
        "maxItems": 29,
        "uniqueItems": true,
        "description": "An array of the authentication protocol, VPC components, or virtual host to secure and define your event source.",
        "type": "array",
        "items": {
          "$ref": "#/definitions/SourceAccessConfiguration"
        }
      },
      "Tags": {
        "uniqueItems": true,
        "description": "A list of tags to add to the event source mapping.\n  You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.",
        "insertionOrder": false,
        "type": "array",
        "items": {
          "$ref": "#/definitions/Tag"
        }
      },
      "MaximumBatchingWindowInSeconds": {
        "description": "The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.\n *Default (, , event sources)*: 0\n *Default (, Kafka, , event sources)*: 500 ms\n *Related setting:* For SQS event sources, when you set ``BatchSize`` to a value greater than 10, you must set ``MaximumBatchingWindowInSeconds`` to at least 1.",
        "maximum": 300,
        "type": "integer",
        "minimum": 0
      },
      "BatchSize": {
        "description": "The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).\n  +  *Amazon Kinesis* \u2013 Default 100. Max 10,000.\n  +  *Amazon DynamoDB Streams* \u2013 Default 100. Max 10,000.\n  +  *Amazon Simple Queue Service* \u2013 Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.\n  +  *Amazon Managed Streaming for Apache Kafka* \u2013 Default 100. Max 10,000.\n  +  *Self-managed Apache Kafka* \u2013 Default 100. Max 10,000.\n  +  *Amazon MQ (ActiveMQ and RabbitMQ)* \u2013 Default 100. Max 10,000.\n  +  *DocumentDB* \u2013 Default 100. Max 10,000.",
        "maximum": 10000,
        "type": "integer",
        "minimum": 1
      },
      "MaximumRetryAttempts": {
        "description": "(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source.",
        "maximum": 10000,
        "type": "integer",
        "minimum": -1
      },
      "Topics": {
        "minItems": 1,
        "maxItems": 1,
        "uniqueItems": true,
        "description": "The name of the Kafka topic.",
        "type": "array",
        "items": {
          "minLength": 1,
          "pattern": "^[^.]([a-zA-Z0-9\\-_.]+)",
          "type": "string",
          "maxLength": 249
        }
      },
      "ScalingConfig": {
        "description": "This property is for Amazon SQS event sources only. You cannot use ``ProvisionedPollerConfig`` while using ``ScalingConfig``. These options are mutually exclusive. To remove the scaling configuration, pass an empty value.",
        "$ref": "#/definitions/ScalingConfig"
      },
      "Enabled": {
        "description": "When true, the event source mapping is active. When false, Lambda pauses polling and invocation.\n Default: True",
        "type": "boolean"
      },
      "EventSourceArn": {
        "minLength": 12,
        "pattern": "arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)",
        "description": "The Amazon Resource Name (ARN) of the event source.\n  +  *Amazon Kinesis* \u2013 The ARN of the data stream or a stream consumer.\n  +  *Amazon DynamoDB Streams* \u2013 The ARN of the stream.\n  +  *Amazon Simple Queue Service* \u2013 The ARN of the queue.\n  +  *Amazon Managed Streaming for Apache Kafka* \u2013 The ARN of the cluster or the ARN of the VPC connection (for [cross-account event source mappings](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#msk-multi-vpc)).\n  +  *Amazon MQ* \u2013 The ARN of the broker.\n  +  *Amazon DocumentDB* \u2013 The ARN of the DocumentDB change stream.",
        "type": "string",
        "maxLength": 1024
      },
      "SelfManagedKafkaEventSourceConfig": {
        "description": "Specific configuration settings for a self-managed Apache Kafka event source.",
        "$ref": "#/definitions/SelfManagedKafkaEventSourceConfig"
      },
      "DocumentDBEventSourceConfig": {
        "description": "Specific configuration settings for a DocumentDB event source.",
        "$ref": "#/definitions/DocumentDBEventSourceConfig"
      },
      "TumblingWindowInSeconds": {
        "description": "(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.",
        "maximum": 900,
        "type": "integer",
        "minimum": 0
      },
      "BisectBatchOnFunctionError": {
        "description": "(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry. The default value is false.\n  When using ``BisectBatchOnFunctionError``, check the ``BatchSize`` parameter in the ``OnFailure`` destination message's metadata. The ``BatchSize`` could be greater than 1 since LAM consolidates failed messages metadata when writing to the ``OnFailure`` destination.",
        "type": "boolean"
      },
      "EventSourceMappingArn": {
        "minLength": 85,
        "pattern": "arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1}:\\d{12}:event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}",
        "description": "",
        "type": "string",
        "maxLength": 120
      },
      "MaximumRecordAgeInSeconds": {
        "description": "(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.\n  The minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed",
        "maximum": 604800,
        "type": "integer",
        "minimum": -1
      },
      "StartingPositionTimestamp": {
        "description": "With ``StartingPosition`` set to ``AT_TIMESTAMP``, the time from which to start reading, in Unix time seconds. ``StartingPositionTimestamp`` cannot be in the future.",
        "type": "number"
      },
      "LoggingConfig": {
        "description": "(Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. For more information, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html).",
        "$ref": "#/definitions/LoggingConfig"
      },
      "Queues": {
        "minItems": 1,
        "maxItems": 1,
        "uniqueItems": true,
        "description": "(Amazon MQ) The name of the Amazon MQ broker destination queue to consume.",
        "type": "array",
        "items": {
          "minLength": 1,
          "pattern": "[\\s\\S]*",
          "type": "string",
          "maxLength": 1000
        }
      },
      "Id": {
        "minLength": 36,
        "pattern": "[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}",
        "description": "",
        "type": "string",
        "maxLength": 36
      },
      "FunctionResponseTypes": {
        "uniqueItems": true,
        "minLength": 0,
        "description": "(Kinesis, DynamoDB Streams, and SQS) A list of current response type enums applied to the event source mapping.\n Valid Values: ``ReportBatchItemFailures``",
        "type": "array",
        "items": {
          "type": "string",
          "enum": [
            "ReportBatchItemFailures"
          ]
        },
        "maxLength": 1
      }
    }
  },
  "runtime_source": "import os\n\ndef handler(event, context):\n    return {\"version\": context.function_version,\n            \"invoked_arn\": context.invoked_function_arn,\n            \"initialization_type\": os.environ.get(\"AWS_LAMBDA_INITIALIZATION_TYPE\"),\n            \"marker\": os.environ.get(\"PROBE_MARKER\")}\n",
  "failures": [
    {
      "at": "2026-10-01T00:03:26.863556+00:00",
      "error": "'maximum_stack_updates'"
    }
  ]
}