Using the Lambda runtime interface emulator with a custom Bash runtime | by Teri Radichel | Cloud Security | September 2023

esteria.white

ACM.307 Revisiting the RIE with a revamped Arm container for Lambda

Part of my series on Automation of cybersecurity measures. Container security. Lambda. Deploy a static website. THE Coded.

Free content on Cybersecurity Jobs | Register at Broadcast list

In the last article I fixed the error handling in my custom Bash runtime in the container I’m testing with Lambda.

Now I want to see it again Lambda Runtime Interface Emulator (RIE) and let’s see if we can make it work with this container. Remember that we built this container using an AWS base image into which the Lambda runtime interface emulator should be integrated.

So the first thing I tried to do was move the RIE code to a separate script and create a separate Entry.sh script.

entry.sh

I moved the execution code to rie-bash.sh and modified it to use the Handler variable for the called function. Note that I am *not* going to let someone overwrite the working directory for the reasons stated in the comment.

rie-bash.sh

Allowing a user to specify and execute any file inside the container would be a security risk that I’m not willing to take.

I need to copy them to the Docker image and set the permissions and I renamed the function directory to functions wherever it is referenced.

Docker file

Leave a comment