Lambda function should have a dead-letter queue configured

What it checks

Lambda function: no dead-letter queue is configured.

Where it applies

Terraform: aws_lambda_function

CloudFormation: AWS::Lambda::Function

How to fix it

1. Create an SQS queue and set dead_letter_config.target_arn on the Lambda. Set up an alarm on the DLQ ApproximateNumberOfMessagesVisible metric.

Frameworks

• SOC 2 CC7.3

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules