AWS Serverless Application Model 1.166.1

Last reviewed Sep 20, 2026

Export as PDF

Prompt Details

Prompt Composition

3prompts
  1. AWS CloudFormation 2026-08-31109 lines · 4.1K tokens
  2. AWS Lambda 2026-08-30137 lines · 5.3K tokens
  3. AWS Serverless Application Model 1.166.194 lines · 5.3K tokens
Total340 lines · 14.7K tokens

CWE Coverage

  • 15
  • 20
  • 22
  • 59
  • 78
  • 94
  • 117
  • 201
  • 209
  • 214
  • 250
  • 252
  • 287
  • 295
  • 306
  • 311
  • 319
  • 336
  • 347
  • 362
  • 367
  • 441
  • 459
  • 494
  • 502
  • 522
  • 532
  • 613
  • 636
  • 639
  • 674
  • 732
  • 770
  • 772
  • 778
  • 807
  • 829
  • 841
  • 862
  • 863
  • 918
  • 922
  • 942
  • 1395

Prompt Preview

Apply the AWS CloudFormation 2026-08-31 and AWS Lambda 2026-08-30 prompts first. These additional rules cover AWS SAM CLI 1.166.1, its AWS SAM Translator 1.113.0 dependency, SAM templates, generated resources, local tooling, and deployment behavior.

Version, transform, and effective template

  • Pin AWS SAM CLI in the toolchain file or CI step that installs it, at a release you looked up on the AWS SAM CLI releases page, and fail the build when sam --version doesn't match that pin. Verify the first-party installer signature where available, otherwise its published release SHA-256; do not substitute nightlies or mutable latest downloads.
  • For source or pip installations, use an isolated environment with a maintained Python release the CLI supports, which for 1.166.1 means 3.10 through 3.14. Keep the aws-sam-translator pin and cfn-lint range that your CLI release declares rather than overriding either one; 1.166.1 declares aws-sam-translator==1.113.0 and cfn-lint>=1.52.0,<1.54, restoring the linter bound that SAM transform validation needs after the 1.166.0 regression.
  • Select a Lambda Runtime, architecture, build image, and dependency toolchain supported together by this CLI and Lambda's current non-preview runtime policy. Acceptance by sam init or successful local emulation does not establish that a runtime remains supported in production.
  • Declare AWS::Serverless-2016-10-31 explicitly. This transform name does not pin AWS's hosted Translator to the CLI's local 1.113.0 dependency. Review the actual processed template, including implicit APIs,