Runtime Vulnerability Analytics (RVA) Support for AWS Lambda (Python)

[Jordi2]

Hello ,

We have deployed the Dynatrace OneAgent Lambda Layer to monitor our AWS Lambda functions running Python.

I would like to clarify whether Runtime Vulnerability Analytics (RVA) is supported for AWS Lambda functions. Specifically:

1. Can RVA detect third-party library vulnerabilities?
2. Can RVA detect Python runtime vulnerabilities?

I suspect this is not currently supported, as:

• I have been unable to find any mention of Lambda RVA support in the official documentation.
• I do not see any vulnerability data appearing in the Dynatrace platform for our monitored Lambda functions.

Could you confirm whether this is the case, or if there is additional configuration required on our end to enable this capability?

For reference, I'm aware that RVA is available for Azure Functions through the Dynatrace extension for Azure App Service Plan (Dedicated). I'm looking to confirm whether equivalent functionality exists for AWS Lambda.

Thank you.

Jordi

[sujit_k_singh · Accepted solution]

Hi @Jordi2 

Your suspicion is correct this is documented behavior rather than a configuration gap on your side.

The Dynatrace documentation for AWS Lambda tracing states that code-level attack and vulnerability evaluation is not supported for AWS Lambda functions, along with several other runtime-specific limitations.

So to answer directly:

Third-party library vulnerability detection – not currently supported for Lambda. RVA's third-party detection relies on OneAgent deep process monitoring on a host/runtime it fully manages, which the Lambda layer/extension model doesn't provide.
Python runtime vulnerability detection – also not supported for the same reason.

You can find the relevant statement in the documentation here: Trace Lambda functions — Dynatrace Docs

Thanks,

Sujit