Per function name (AWS_LAMBDA_FUNCTION_NAME), over deploy.
The keys of values required with no default: a refresh refuses a bundle that drops one.
Every stack and operator key the service reads, resolved for its stage; a refresh replaces these.
deploy-owned keys every function of the artifact reads; never refreshed.