aws-lambda v5.21.0 - Enforce a target runtime for Lambda functions

Aug 06, 2026GuardrailsMods

What's new?

  • The AWS > Lambda > Function > Allowed Runtime policy can now enforce your runtime standard, not just check it. Set it to Enforce: Upgrade to Target Runtime and define the runtime you want in the new AWS > Lambda > Function > Allowed Runtime > Target Runtime policy, and functions are upgraded to that runtime — even from another allowed runtime, so you can move your fleet from nodejs22.x to nodejs24.x while both remain allowed. Upgrades are language-safe: a function is only updated to a target runtime of its own language (a nodejs target never touches a python function), and the target must itself be in the allowed values.
  • Note: The default list of allowed runtimes in the AWS > Lambda > Function > Allowed Runtime > Values policy has been refreshed to the runtimes AWS currently supports. If you rely on the default list in Check: Allowed Runtime mode, functions on runtimes AWS has deprecated (such as nodejs18.x or python3.9) will now raise an alarm.

Policy Types

Added

  • AWS > Lambda > Function > Allowed Runtime > Target Runtime

Action Types

Added

  • AWS > Lambda > Function > Update Runtime