diff --git a/checkov/cloudformation/checks/resource/aws/DeprecatedLambdaRuntime.py b/checkov/cloudformation/checks/resource/aws/DeprecatedLambdaRuntime.py index 7f25650c40..2243644081 100644 --- a/checkov/cloudformation/checks/resource/aws/DeprecatedLambdaRuntime.py +++ b/checkov/cloudformation/checks/resource/aws/DeprecatedLambdaRuntime.py @@ -20,11 +20,13 @@ def get_forbidden_values(self) -> List[Any]: return ["dotnetcore3.1", "nodejs12.x", "python3.6", "python2.7", "dotnet5.0", "dotnetcore2.1", "ruby2.5", "nodejs10.x", "nodejs8.10", "nodejs4.3", "nodejs6.10", "dotnetcore1.0", "dotnetcore2.0", "nodejs4.3-edge", "nodejs", "java8", "python3.7", "go1.x", "provided", "ruby2.7", "nodejs14.x", - "nodejs16.x", "python3.9", "dotnet7", "dotnet6" - # , "nodejs18.x" # Uncomment on Sept 1, 2025 - # , "provided.al2" # Uncomment on Jun 30, 2026 - # , "python3.9" # Uncomment on Nov 3, 2025 - ] + "nodejs16.x", "python3.8", "dotnet7", "dotnet6", "nodejs18.x"] + # , "python3.9" # Uncomment on Dec 15, 2025 + # , "ruby3.2" # Uncomment on Mar 31, 2026 + # , "nodejs20.x" # Uncomment on Apr 30, 2026 + # , "provided.al2" # Uncomment on Jun 30, 2026 + # , "python3.10" # Uncomment on Jun 30, 2026 + # , "python3.11" # Uncomment on Jun 30, 2026 check = DeprecatedLambdaRuntime() diff --git a/checkov/terraform/checks/resource/aws/DeprecatedLambdaRuntime.py b/checkov/terraform/checks/resource/aws/DeprecatedLambdaRuntime.py index b2114a6ff3..ecba4066b0 100644 --- a/checkov/terraform/checks/resource/aws/DeprecatedLambdaRuntime.py +++ b/checkov/terraform/checks/resource/aws/DeprecatedLambdaRuntime.py @@ -20,11 +20,13 @@ def get_forbidden_values(self) -> List[Any]: return ["dotnetcore3.1", "nodejs12.x", "python3.6", "python2.7", "dotnet5.0", "dotnetcore2.1", "ruby2.5", "nodejs10.x", "nodejs8.10", "nodejs4.3", "nodejs6.10", "dotnetcore1.0", "dotnetcore2.0", "nodejs4.3-edge", "nodejs", "java8", "python3.7", "go1.x", "provided", "ruby2.7", "nodejs14.x", - "nodejs16.x", "python3.9", "dotnet7", "dotnet6" - # , "nodejs18.x" # Uncomment on Sept 1, 2025 - # , "provided.al2" # Uncomment on Jun 30, 2026 - # , "python3.9" # Uncomment on Nov 3, 2025 - ] + "nodejs16.x", "python3.8", "dotnet7", "dotnet6", "nodejs18.x"] + # , "python3.9" # Uncomment on Dec 15, 2025 + # , "ruby3.2" # Uncomment on Mar 31, 2026 + # , "nodejs20.x" # Uncomment on Apr 30, 2026 + # , "provided.al2" # Uncomment on Jun 30, 2026 + # , "python3.10" # Uncomment on Jun 30, 2026 + # , "python3.11" # Uncomment on Jun 30, 2026 check = DeprecatedLambdaRuntime() diff --git a/tests/cloudformation/checks/resource/aws/example_DeprecatedLambdaRuntime/example.yaml b/tests/cloudformation/checks/resource/aws/example_DeprecatedLambdaRuntime/example.yaml index 5e4fd40144..f5b1a3cd35 100644 --- a/tests/cloudformation/checks/resource/aws/example_DeprecatedLambdaRuntime/example.yaml +++ b/tests/cloudformation/checks/resource/aws/example_DeprecatedLambdaRuntime/example.yaml @@ -8,7 +8,7 @@ Resources: Code: S3Bucket: 'myBucket' S3Key: 'code/myLambda.zip' - Runtime: 'nodejs18.x' + Runtime: 'python3.14' Fail: Type: 'AWS::Lambda::Function' Metadata: diff --git a/tests/cloudformation/checks/resource/aws/example_DeprecatedLambdaRuntime/exampleSAM.yaml b/tests/cloudformation/checks/resource/aws/example_DeprecatedLambdaRuntime/exampleSAM.yaml index c95da23695..80a4a5217a 100644 --- a/tests/cloudformation/checks/resource/aws/example_DeprecatedLambdaRuntime/exampleSAM.yaml +++ b/tests/cloudformation/checks/resource/aws/example_DeprecatedLambdaRuntime/exampleSAM.yaml @@ -32,7 +32,7 @@ Resources: Type: 'AWS::Serverless::Function' Properties: Handler: 'index.handler' - Runtime: 'python3.11' + Runtime: 'python3.14' CodeUri: './code/' # This should be the directory path where your Lambda code is. Events: MyApi: diff --git a/tests/terraform/checks/resource/aws/example_DeprecatedLambdaRuntime/main.tf b/tests/terraform/checks/resource/aws/example_DeprecatedLambdaRuntime/main.tf index 4c23bf0135..56ef3a0223 100644 --- a/tests/terraform/checks/resource/aws/example_DeprecatedLambdaRuntime/main.tf +++ b/tests/terraform/checks/resource/aws/example_DeprecatedLambdaRuntime/main.tf @@ -3,7 +3,7 @@ resource "aws_lambda_function" "pass" { function_name = "lambda_function_name" role = aws_iam_role.iam_for_lambda.arn handler = "index.test" - runtime = "nodejs18.x" + runtime = "python3.14" ephemeral_storage { size = 10240 # Min 512 MB and the Max 10240 MB