Working with layers for Python Lambda functions
A Lambda layer is a .zip file archive that contains supplementary code or data. Layers usually contain library dependencies, a custom runtime, or configuration files. Creating a layer involves three general steps:
-
Package your layer content. This means creating a .zip file archive that contains the dependencies you want to use in your functions.
-
Create the layer in Lambda.
-
Add the layer to your functions.
This topic contains steps and guidance on how to properly package and create a Python Lambda layer with external library dependencies.
Topics
Prerequisites
To follow the steps in this section, you must have the following:
-
Python 3.11
and the pip package installer
Throughout this topic, we reference the layer-python
In the layer-python sample application, there are two examples:
-
The first example involves packaging the
requestslibrary into a Lambda layer. The layer/directory contains the scripts to generate the layer. Thefunction/directory contains a sample function to help test that the layer works. The majority of this tutorial walks through how to create and package this layer. -
The second example involves packaging the
numpylibrary into a Lambda layer. The layer-numpy/directory contains the scripts to generate the layer. Thefunction-numpy/directory contains a sample function to help test that the layer works. For an example of how to create and package this layer, see Working with manylinux wheel distributions.
Python layer compatibility with Amazon Linux
The first step to creating a layer is to bundle all of your layer content into a .zip file archive. Because Lambda functions run on Amazon Linux, your layer content must be able to compile and build in a Linux environment.
In Python, most packages are available as wheels.whl files) in addition to the source distribution. Each wheel is a
type of built distribution that supports a specific combination of Python versions, operating
systems, and machine instruction sets.
Wheels are useful for ensuring that your layer is compatible with Amazon Linux. When you download
your dependencies, download the universal wheel if possible. (By default,
pip installs the universal wheel if one is available.) The universal wheel
contains any as the platform tag, indicating that it's compatible with all
platforms, including Amazon Linux.
In the example that follows, you package the requests library into a Lambda
layer. The requests library is an example of a package that's available as a
universal wheel.
Not all Python packages are distributed as universal wheels. For example, numpymanylinux distribution to ensure compatibility with Amazon Linux. For detailed
instructions about how to package such layers, see Working with manylinux wheel
distributions.
In rare cases, a Python package might not be available as a wheel. If only the source
distribution
Layer paths for Python runtimes
When you add a layer to a function, Lambda loads the layer content into the
/opt directory of that execution environment. For each Lambda runtime,
the PATH variable already includes specific folder paths within the
/opt directory. To ensure that the PATH variable picks up your layer content,
your layer .zip file should have its dependencies
in the following folder paths:
-
python -
python/lib/python3.x/site-packages
For example, the resulting layer .zip file that you create in this tutorial has the following directory structure:
layer_content.zip
â”” python
â”” lib
â”” python3.11
â”” site-packages
â”” requests
â”” <other_dependencies> (i.e. dependencies of the requests package)
â”” ...
The requestspython/lib/python3.11/site-packages directory. This
ensures that Lambda can locate the library during function invocations.
Packaging the layer content
In this example, you package the Python requests library in a layer .zip
file. Complete the following steps to install and package the layer content.
To install and package your layer content
-
Clone the
aws-lambda-developer-guideGitHub repo, which contains the sample code that you need in the sample-apps/layer-pythondirectory.git clone https://github.com/awsdocs/aws-lambda-developer-guide.git -
Navigate to the
layerdirectory of thelayer-pythonsample app. This directory contains the scripts that you use to create and package the layer properly.cd aws-lambda-developer-guide/sample-apps/layer-python/layer -
Examine the
requirements.txtfile. This file defines the dependencies that you want to include in the layer, namely the requestslibrary. You can update this file to include any dependencies that you want to include in your own layer.Example requirements.txt
requests==2.31.0 -
Ensure that you have permissions to run both scripts.
chmod 744 1-install.sh && chmod 744 2-package.sh -
Run the
1-install.shscript using the following command: ./1-install.shThis script uses
venvto create a Python virtual environment namedcreate_layer. It then installs all required dependencies in thecreate_layer/lib/python3.11/site-packagesdirectory.Example 1-install.sh
python3.11 -m venv create_layer source create_layer/bin/activate pip install -r requirements.txt -
Run the
2-package.shscript using the following command: ./2-package.shThis script copies the contents from the
create_layer/libdirectory into a new directory namedpython. It then zips the contents of thepythondirectory into a file namedlayer_content.zip. This is the .zip file for your layer. You can unzip the file and verify that it contains the correct file structure, as shown in the Layer paths for Python runtimes section.Example 2-package.sh
mkdir python cp -r create_layer/lib python/ zip -r layer_content.zip python
Creating the layer
In this section, you take the layer_content.zip file that you
generated in the previous section and upload it as a Lambda layer. You can upload a layer using
the AWS Management Console or the Lambda API via the AWS Command Line Interface (AWS CLI). When you upload your layer .zip
file, in the following PublishLayerVersion AWS CLI command, specify
python3.11 as the compatible runtime and arm64 as the compatible
architecture.
aws lambda publish-layer-version --layer-name python-requests-layer \ --zip-file fileb://layer_content.zip \ --compatible-runtimes python3.11 \ --compatible-architectures "arm64"
From the response, note the LayerVersionArn, which looks like
arn:aws:lambda:us-east-1:.
You'll need this Amazon Resource Name (ARN) in the next step of this tutorial, when you add
the layer to your function.123456789012:layer:python-requests-layer:1
Adding the layer to your function
In this section, you deploy a sample Lambda function that uses the requests
library in its function code, then you attach the layer. To deploy the function, you need an
execution role. If you don't have an existing execution role,
follow the steps in the collapsible section.
To create an execution role
-
Open the roles page
in the IAM console. -
Choose Create role.
-
Create a role with the following properties.
-
Trusted entity – Lambda.
-
Permissions – AWSLambdaBasicExecutionRole.
-
Role name –
lambda-role.
The AWSLambdaBasicExecutionRole policy has the permissions that the function needs to write logs to CloudWatch Logs.
-
The Lambda function coderequests library, makes a simple HTTP request,
and then returns the status code and body.
import requests def lambda_handler(event, context): print(f"Version of requests library: {requests.__version__}") request = requests.get('https://api.github.com/') return { 'statusCode': request.status_code, 'body': request.text }
To deploy the Lambda function
-
Navigate to the
function/directory. If you're currently in thelayer/directory, then run the following command:cd ../function -
Create a .zip file deployment package using the following command:
zip my_deployment_package.zip lambda_function.py -
Deploy the function. In the following AWS CLI command, replace the
--roleparameter with your execution role ARN:aws lambda create-function --function-name python_function_with_layer \ --runtime python3.11 \ --architectures "arm64" \ --handler lambda_function.lambda_handler \ --rolearn:aws:iam::123456789012:role/lambda-role\ --zip-file fileb://my_deployment_package.zip -
Next, attach the layer to your function. In the following AWS CLI command, replace the
--layersparameter with the layer version ARN that you noted earlier:aws lambda update-function-configuration --function-name python_function_with_layer \ --cli-binary-format raw-in-base64-out \ --layers "arn:aws:lambda:us-east-1:123456789012:layer:python-requests-layer:1" -
Finally, try to invoke your function using the following AWS CLI command:
aws lambda invoke --function-name python_function_with_layer \ --cli-binary-format raw-in-base64-out \ --payload '{ "key": "value" }' response.jsonYou should see output that looks like this:
{ "StatusCode": 200, "ExecutedVersion": "$LATEST" }The output
response.jsonfile contains details about the response.
You can now delete the resources that you created for this tutorial, unless you want to retain them. By deleting AWS resources that you're no longer using, you prevent unnecessary charges to your AWS account.
To delete the Lambda layer
-
Open the Layers page
of the Lambda console. -
Select the layer that you created.
-
Choose Delete, then choose Delete again.
To delete the Lambda function
-
Open the Functions page
of the Lambda console. -
Select the function that you created.
-
Choose Actions, Delete.
-
Type
deletein the text input field and choose Delete.
Working with manylinux wheel
distributions
Sometimes, a package that you want to include as a dependency won't have a
universal wheel (specifically, it doesn't have any
as the platform tag). In this case, download the wheel that supports
manylinux instead. This ensures that your layer libraries are
compatible with Amazon Linux.
numpynumpy package
in your layer, then you can complete the following example steps to install and package
your layer properly.
To install and package your layer content
-
Clone the
aws-lambda-developer-guideGitHub repo, which contains the sample code that you need in the sample-apps/layer-pythondirectory.git clone https://github.com/awsdocs/aws-lambda-developer-guide.git -
Navigate to the
layer-numpydirectory of thelayer-pythonsample app. This directory contains the scripts that you use to create and package the layer properly.cd aws-lambda-developer-guide/sample-apps/layer-python/layer-numpy -
Examine the
requirements.txtfile. This file defines the dependencies that you want to include in your layer, namely the numpylibrary. Here, you specify the URL of themanylinuxwheel distribution that's compatible with Python 3.11, Amazon Linux, and thex86_64instruction set:Example requirements.txt
https://files.pythonhosted.org/packages/3a/d0/edc009c27b406c4f9cbc79274d6e46d634d139075492ad055e3d68445925/numpy-1.26.4-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl -
Ensure that you have permissions to run both scripts.
chmod 744 1-install.sh && chmod 744 2-package.sh -
Run the
1-install.shscript using the following command: ./1-install.shThis script uses
venvto create a Python virtual environment namedcreate_layer. It then installs all required dependencies in thecreate_layer/lib/python3.11/site-packagesdirectory. Thepipcommand is different in this case, because you must specify the--platformtag asmanylinux2014_x86_64. This tellspipto install the correctmanylinuxwheel, even if your local machine uses macOS or Windows.Example 1-install.sh
python3.11 -m venv create_layer source create_layer/bin/activate pip install -r requirements.txt --platform=manylinux2014_x86_64 --only-binary=:all: --target ./create_layer/lib/python3.11/site-packages -
Run the
2-package.shscript using the following command: ./2-package.shThis script copies the contents from the
create_layer/libdirectory into a new directory namedpython. It then zips the contents of thepythondirectory into a file namedlayer_content.zip. This is the .zip file for your layer. You can unzip the file and verify that it contains the correct file structure as shown in the Layer paths for Python runtimes section.Example 2-package.sh
mkdir python cp -r create_layer/lib python/ zip -r layer_content.zip python
To upload this layer to Lambda, use the following PublishLayerVersion AWS CLI command:
aws lambda publish-layer-version --layer-name python-numpy-layer \ --zip-file fileb://layer_content.zip \ --compatible-runtimes python3.11 \ --compatible-architectures "x86_64"
From the response, note the LayerVersionArn, which looks like
arn:aws:lambda:us-east-1:.
To verify that your layer works as expected, deploy the Lambda function in the
123456789012:layer:python-numpy-layer:1function-numpy directory.
To deploy the Lambda function
-
Navigate to the
function-numpy/directory. If you're currently in thelayer-numpy/directory, then run the following command:cd ../function-numpy -
Review the function code
. The function imports the numpylibrary, creates a simplenumpyarray, and then returns a dummy status code and body.import json import numpy as np def lambda_handler(event, context): x = np.arange(15, dtype=np.int64).reshape(3, 5) print(x) return { 'statusCode': 200, 'body': json.dumps('Hello from Lambda!') } -
Create a .zip file deployment package using the following command:
zip my_deployment_package.zip lambda_function.py -
Deploy the function. In the following AWS CLI command, replace the
--roleparameter with your execution role ARN:aws lambda create-function --function-name python_function_with_numpy \ --runtime python3.11 \ --handler lambda_function.lambda_handler \--role arn:aws:iam::123456789012:role/lambda-role\ --zip-file fileb://my_deployment_package.zip -
Next, attach the layer to your function. In the following AWS CLI command, replace the
--layersparameter with your layer version ARN:aws lambda update-function-configuration --function-name python_function_with_numpy \ --cli-binary-format raw-in-base64-out \ --layers "arn:aws:lambda:us-east-1:123456789012:layer:python-requests-layer:1" -
Finally, try to invoke your function using the following AWS CLI command:
aws lambda invoke --function-name python_function_with_numpy \ --cli-binary-format raw-in-base64-out \ --payload '{ "key": "value" }' response.jsonYou should see output that looks like this:
{ "StatusCode": 200, "ExecutedVersion": "$LATEST" }You can examine the function logs to verify that the code prints the
numpyarray to standard out.

