AWS Lambda Product policy

AWS Lambda is tracked by BlackTree as a vendor-operated software service. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Evidence status

This record passed BlackTree's automatic primary-source checks with a confidence score of 96. It is returned for operational research without requiring routine manual approval. Confirm edition and deployment applicability before acting.

Product overview

AWS Lambda is tracked by BlackTree as a vendor-operated software service. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Main capabilities

Hosted product capabilities
Vendor-managed operation and updates
Version or feature retirement management

Typical use

Used through a hosted service, API or managed product interface.

Deployment

Operated by the publisher, with customer configuration and integrations where applicable.

This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page .

Collected lifecycle data

Product	AWS Lambda
Release	Product policy
End of Support	30 June 2026
Date precision	Day

Known exploited vulnerabilities

Catalogue updated 1 Oct 2026

These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.

No CISA known-exploited entries currently match this mapped product family.

This does not mean the product has no vulnerabilities.

Package vulnerability advisories

OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.

No package advisories have been linked for this product identity.

This is not evidence that the product has no vulnerabilities.

Source evidence

PRIMARYManual

AWS Lambda official lifecycle source

The following table lists the supported Lambda runtimes and projected deprecation dates. After a runtime is deprecated, you're still able to create and update functions for a limited period. For more information, see Runtime use after deprecation . The table provides the currently forecasted dates for runtime deprecation, based on our Runtime deprecation policy . These dates are provided for planning purposes and are subject to change. | The Node.js 26 and Python 3.15 runtimes are in public preview . Preview runtimes are not covered by the Lambda SLA or Technical Support, and should not be used for production workloads. | The purpose of preview runtimes is to gather feedback from customers, partners, and upstream language communities prior to General Availability, while breaking changes are still possible. You can provide feedback through the dedicated GitHub issues for Node.js 26 and Python 3.15 . For further information, see this blog post . | Amazon Linux 2 is scheduled for end of life on June 30, 2026. Lambda runtimes and container base images for Java 8 (AL2), Java 11 (AL2), Java 17 (AL2), Python 3.10, Python 3.11, and provided.al2 will continue to receive patches for critical and selected important Amazon Linux 2 security issues, in addition to language runtime patches, until the deprecation dates shown in the table below. | We recommend customers upgrade to an Amazon Linux 2023-based runtime as soon as possible. For customers upgrading to Java 21 or Java 25, you can use AWS Transform custom to assist with these upgrades. For customers unable to upgrade their Java version, we provide Amazon Linux 2023-based runtimes for Java 8, Java 11, and Java 17 that follow the AL2023 deprecation schedule. | Node.js 26 | nodejs26.x

Publisher identity used by product-specific official-source collectors.

First collected 26 Aug 2026 · Last collected 12 Sep 2026 · Review state accepted

Open official vendor source