Skip to main content
cd ../lexicon
sys/docs/lexicon/aws-lambda.md
Lexicon
AWS Lambda

AWS Lambda

AWS Lambda is a serverless compute service that runs code in response to events without managed servers; this entry defines its execution model, architecture role and common operational pitfalls.
Difficulty: Intermediate
4 min read
Updated 2026-08-14

In plain English

Plain definition

AWS Lambda is a serverless compute service that runs code in response to events without managed servers; this entry defines its execution model, architecture role and common operational pitfalls.

Technical Definition

AWS Lambda executes discrete units of code, called functions, on compute infrastructure that AWS provisions, scales and retires automatically on the caller’s behalf. A function is packaged with its dependencies and configured with an execution role (an AWS Identity and Access Management, or IAM, role), a memory allocation, a maximum execution duration, and either a supported managed language runtime or a custom runtime. Lambda functions can be invoked synchronously, where the caller waits for a response; asynchronously, where the event is queued and processed independently of the caller; or through an event source mapping, where Lambda polls or subscribes to a stream, queue or other event source on the function’s behalf. Because billing and scaling are tied to actual invocation and execution rather than continuous server uptime, compute capacity is provisioned only for the time required to process each invocation.

Operational Relevance

Systems, platform and operations practitioners use AWS Lambda to build event-driven backends, integrate disparate services, run scheduled maintenance tasks, and process streaming or queued data without operating a persistent server fleet. Because AWS manages host patching, scaling and fleet management, day-to-day operational responsibility shifts towards function-level concerns: applying least-privilege permissions to the execution role, choosing an appropriate memory and timeout configuration for the workload, managing dependency size and cold-start behaviour, and maintaining observability through structured logs and metrics. Misconfigured execution-role permissions and mismatched timeout or memory settings are common, recoverable sources of operational incidents, which is why validating a function’s behaviour in an isolated or non-production environment before promoting any change is a standard safeguard rather than an optional step.

Architecture Relationship

AWS Lambda is typically one component within a broader event-driven or serverless architecture rather than a complete system on its own. It commonly sits between an event source, such as an API gateway, a message queue, a storage event or a scheduled trigger, and a downstream target, such as a database, another queue, or a notification service. Lambda functions are stateless between invocations, so any state that must persist across calls is stored externally, typically in a managed database or object store rather than in the function itself. The execution role attached to a function defines the boundary of what that function may read, write or invoke elsewhere in an AWS account, which makes IAM configuration part of the architectural boundary rather than an operational afterthought.

Example

A common pattern connects an object-storage upload event to a Lambda function that validates or transforms the uploaded file and writes a processed copy to a separate storage location. The function’s execution role is scoped to read only from the source location and write only to the destination location, and its timeout and memory allocation are sized to the largest file the function is expected to process, rather than left at a default value.

Misunderstanding

A frequent misunderstanding is that “serverless” guarantees each invocation starts from a completely clean, isolated environment. In practice, AWS Lambda may reuse a warm execution environment across successive invocations for efficiency, which means in-memory state, cached credentials or open connections created during one invocation can sometimes still be present in the next, on a timeline the platform controls rather than the caller. Function code should be written so that correctness never depends on this reuse occurring, while operational reasoning about issues such as connection-pool exhaustion should account for the fact that reuse can happen.

  • Serverless computing
  • Event-driven architecture
  • AWS Identity and Access Management (IAM)
  • Amazon API Gateway
  • Amazon Simple Queue Service (SQS)
  • Cold start

Further Reading

This entry describes AWS Lambda’s stable architectural concepts: its execution model, invocation types, and the role Lambda plays within an event-driven system. Numeric limits such as the maximum execution duration, memory ceiling, concurrency defaults and pricing structure change periodically and were not independently verified against an AWS-specific source for this entry; confirm any such figure against AWS’s current published documentation for the relevant account, region and service tier before relying on it for a design or capacity decision. The next safe step for a practitioner evaluating Lambda for a new workload is to validate an isolated proof-of-concept function against the current quotas and pricing published for that account, rather than assuming any previously seen figure still applies.