Enable Tracing | Vulnerability Database

Lambda functions should have X-Ray tracing enabled

X-Ray tracing enables end-to-end debugging and analysis of all function activity. This will allow for identifying bottlenecks, slow downs and timeouts.

Impact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Enable tracing

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11


Resources:
  GoodExample:
    Type: AWS::Lambda::Function
    Properties:
      Code:
        S3Bucket: my-bucket
        S3Key: function.zip
      Handler: index.handler
      Runtime: nodejs12.x
      TracingConfig:
        Mode: Active

Enable tracing

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12


resource "aws_lambda_function" "good_example" {
  filename         = "lambda_function_payload.zip"
  function_name    = "lambda_function_name"
  role             = "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
  handler          = "exports.test"
  source_code_hash = filebase64sha256("lambda_function_payload.zip")

  runtime = "nodejs12.x"
  tracing_config {
    mode = "Active"
  }
}

Remediation Links

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambda_function#mode