Using Amazon built Lambda functions
Amazon provides some prebuilt Amazon Lambda functions that you can use with Amazon S3 Object Lambda to detect and redact personally identifiable information (PII) and decompress S3 objects. These Lambda functions are available in the Amazon Serverless Application Repository. You can select these functions through the Amazon Web Services Management Console when you create your Object Lambda Access Point.
For more information about how to deploy serverless applications from the Amazon Serverless Application Repository, see Deploying Applications in the Amazon Serverless Application Repository Developer Guide.
Note
The following examples can be used only with GetObject requests.
Example 1: PII access control
This Lambda function uses Amazon Comprehend, a natural language processing (NLP) service that uses machine learning to find insights and relationships in text. This function automatically detects personally identifiable information (PII), such as names, addresses, dates, credit card numbers, and social security numbers in documents in your Amazon S3 bucket. If you have documents in your bucket that include PII, you can configure the PII Access Control function to detect these PII entity types and restrict access to unauthorized users.
To get started, deploy the following Lambda function in your account and add the Amazon Resource Name (ARN) for the function to your Object Lambda Access Point configuration.
The following is an example ARN for this function:
arn:aws-cn:serverlessrepo:us-east-1:111122223333:applications/ComprehendPiiAccessControlS3ObjectLambda
You can add or view this function on the Amazon Web Services Management Console by using the following Amazon Serverless Application Repository link:
ComprehendPiiAccessControlS3ObjectLambda
To view this function on GitHub, see Amazon Comprehend S3 Object Lambda.
Example 2: PII redaction
This Lambda function uses Amazon Comprehend, a natural language processing (NLP) service that uses machine learning to find insights and relationships in text. This function automatically redacts personally identifiable information (PII), such as names, addresses, dates, credit card numbers, and social security numbers from documents in your Amazon S3 bucket.
If you have documents in your bucket that include information such as credit card numbers or bank account information, you can configure the PII Redaction S3 Object Lambda function to detect PII and then return a copy of these documents in which PII entity types are redacted.
To get started, deploy the following Lambda function in your account and add the ARN for the function to your Object Lambda Access Point configuration.
The following is an example ARN for this function:
arn:aws-cn:serverlessrepo:us-east-1:111122223333::applications/ComprehendPiiRedactionS3ObjectLambda
You can add or view this function on the Amazon Web Services Management Console by using the following Amazon Serverless Application Repository link:
ComprehendPiiRedactionS3ObjectLambda
To view this function on GitHub, see Amazon Comprehend S3 Object Lambda.
To learn about complete end-to-end procedures for some S3 Object Lambda tasks in PII redaction, see Tutorial: Detecting and redacting PII data with S3 Object Lambda and Amazon Comprehend.
Example 3: Decompression
The Lambda function S3ObjectLambdaDecompression can decompress objects
that are stored in Amazon S3 in one of six compressed file formats: bzip2,
gzip, snappy, zlib, zstandard,
and ZIP.
To get started, deploy the following Lambda function in your account and add the ARN for the function to your Object Lambda Access Point configuration.
The following is an example ARN for this function:
arn:aws-cn:serverlessrepo:us-east-1:111122223333::applications/S3ObjectLambdaDecompression
You can add or view this function on the Amazon Web Services Management Console by using the following Amazon Serverless Application Repository link:
S3ObjectLambdaDecompression
To view this function on GitHub, see S3 Object Lambda Decompression.