A deployment package Lambda fetches from S3. An archive passed inline is capped at 50 MB zipped; one in S3 may unzip to 250 MB.
Optional
Set on every baked artifact once the s3 stack publishes the key: Lambda encrypts its copy of the zip and the environment under this key, so GetFunction returns no code to a principal the key refuses (alias/cfx-lambda-code).
GetFunction
alias/cfx-lambda-code
A deployment package Lambda fetches from S3. An archive passed inline is capped at 50 MB zipped; one in S3 may unzip to 250 MB.