Our Blog

AWS Lambda durable functions now supports customer managed key encryption

Published
July 22, 2026
https://aws.amazon.com/about-aws/whats-new/2026/07/durablefunctions-cmk/

AWS Lambda Durable Functions Update

AWS Lambda durable functions now support encryption of durable execution data with an AWS Key Management Service (AWS KMS) customer managed key. This allows you to build long-running, reliable workflows directly in your Lambda function code with automatic state management.

Lambda encrypts execution state at rest by default with an AWS owned key. With support for AWS KMS, you can now choose and manage the encryption key yourself, which is particularly useful for regulated industries such as financial services or healthcare.

What to do

  • Configure a customer managed key for durable execution data.
  • Manage access to execution data separately from function configuration.

This feature is available in all AWS Regions where Lambda durable functions is available. Standard AWS KMS charges apply for customer managed keys. There are no additional Lambda charges for this feature.

Source: AWS release notes




If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.

Follow our blog

Get the latest insights and advice on AWS services from our experts.

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Related posts

Check out other insights from the team at West Loop Strategy.

View all
https://aws.amazon.com/about-aws/whats-new/2025/12/sagemaker-ai-serverless-mlflow-ai-development/

Amazon SageMaker AI announces serverless MLflow capability for faster AI development

Amazon SageMaker AI now offers a serverless MLflow capability that dynamically scales to support AI model development tasks
Read more
https://aws.amazon.com/about-aws/whats-new/2026/07/s3-removes-30-day-transitions-standard-ia-one-zone-ia

Amazon S3 removes 30-day minimum for transitions to S3 Standard-IA and S3 One Zone-IA

You can now transition objects to S3 Standard-Infrequent Access (S3 Standard-IA) and S3 One Zone-Infrequent Access (S3 One Zone-IA) as soon as the day they are created, without the previous 30-day minimum retention in S3 Standard
Read more
https://aws.amazon.com/about-aws/whats-new/2026/02/aws-backup-extends-amazon-neptune-five-additional-regions/

AWS Backup extends support for Amazon Neptune to five additional AWS Regions

AWS Backup now supports Amazon Neptune in five additional AWS Regions: Europe (Zurich), Asia Pacific (Melbourne), Canada West (Calgary), Asia Pacific (Malaysia), and Europe (Spain)
Read more
View all