This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.
On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that
pyenv virtualenv 3.7.7 contacts-service
pyenv local contacts-service 3.7.7
pipenv sync -d
| service: serverless-feature-flag | |
| provider: | |
| name: aws | |
| runtime: nodejs12.x | |
| lambdaHashingVersion: 20201221 | |
| memorySize: 128 | |
| stage: ${opt:stage, 'develop'} | |
| region: eu-west-1 | |
| apiGateway: | |
| shouldStartNameWithService: true |
| #!/bin/sh | |
| # Set up Rails app. Run this script immediately after cloning the codebase. | |
| # Exit if any subcommand fails | |
| set -e | |
| # Copy over configs | |
| if ! [ -f .env ]; then | |
| cp .sample.env .env |
| service: my-service | |
| provider: | |
| name: aws | |
| runtime: nodejs8.10 | |
| stage: ${opt:stage, 'dev'} | |
| environment: | |
| REDIS_HOST: | |
| "Fn::GetAtt": [ElasticCacheCluster, RedisEndpoint.Address] | |
| functions: |
| import datetime | |
| import hashlib | |
| import hmac | |
| import urllib.parse | |
| def aws_sig_v4_headers(access_key_id, secret_access_key, pre_auth_headers, | |
| service, region, host, method, path, query, payload): | |
| algorithm = 'AWS4-HMAC-SHA256' |
This cheat sheet provides a detailed overview of the exposed lifecycle events and available commands (and entrypoints) of the Serverless framework, that can be hooked by plugins (internal and external ones). The document is structured by the commands invoked by the user.
Lifecycle events are shown as the globally available outer events (all providers) and sub lifecycle events that are provider specific in the called order. Currently only the AWS provider is shown. If you have information about the other provider,
