# ServerlessFunctions Object

> Source: https://truto.one/docs/api-reference/unified-cloud-infrastructure-api/serverlessfunctions/

Schema for the `ServerlessFunctions` resource in **Unified Cloud Infrastructure API**.

## Properties

- **`id`** _(string, required)_
  Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
- **`provider_id`** _(string)_
  The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
- **`provider`** _(string)_
  Which cloud this object was read from.
  Allowed: `aws`, `azure`, `gcp`
- **`account`** _(string)_
  The account, subscription or project this object belongs to.
- **`region`** _(string)_
  Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
- **`native_type`** _(string)_
  The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
- **`tags`** _(object)_
  Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
- **`collected_at`** _(string)_
  When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
- **`updated_at`** _(string)_
  When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
- **`created_at`** _(string)_
  When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
- **`unreadable_fields`** _(array<object>)_
  Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
  - **`field`** _(string)_
    The property on this resource that could not be read.
  - **`reason`** _(string)_
    Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
    Allowed: `not_supported_by_provider`, `not_configured`, `permission_denied`, `not_collected`, `collection_error`, `partially_collected`, `available_on_get`
  - **`detail`** _(string)_
    Explanation of the reason, where one adds anything.
- **`remote_data`** _(object)_
  Raw data returned from the remote API call.
- **`name`** _(string)_
  The function's name, verbatim.
- **`runtime`** _(string)_
  The language runtime identifier, verbatim (nodejs22.x, python3.12). Null for a container-image function, which has no managed runtime.
- **`handler`** _(string)_
  The entry point the platform calls. Null for a container-image function.
- **`package_type`** _(string)_
  How the code is packaged: a zip archive or a container image. The provider's own value is in remote_data.
  Allowed: `archive`, `container_image`, `unknown`
- **`memory_mb`** _(integer)_
  Memory available to the function, in MB.
- **`timeout_seconds`** _(integer)_
  How long one invocation may run before it is stopped.
- **`architectures`** _(array<string>)_
  Instruction set architectures, verbatim (x86_64, arm64).
- **`execution_role`** _(object)_
  The identity the function runs as (on AWS the execution role).
  - **`id`** _(string)_
    The target's `id`.
- **`environment_variable_names`** _(array<string>)_
  Names of the environment variables set on the function. Values are never read into this row or into remote_data, because they often hold credentials.
- **`encryption_key`** _(object)_
  The customer managed key that encrypts the function's environment variables. Null when the provider's default key is used.
  - **`id`** _(string)_
    The target's `id`.
- **`network_boundary`** _(object)_
  The VPC / virtual network the function is attached to. Null when it runs on the provider network with no VPC attachment.
  - **`id`** _(string)_
    The target's `id`.
- **`subnet_ids`** _(array<string>)_
  Subnets of the VPC attachment. Empty with no VPC attachment.
- **`attached_rule_sets`** _(array<object>)_
  Security groups of the VPC attachment.
  - **`id`** _(string)_
    The target's `id`.
- **`tracing_enabled`** _(boolean)_
  Whether active request tracing is on (on AWS, X-Ray Active mode).
- **`dead_letter_target_id`** _(string)_
  Where failed asynchronous invocations go (an SQS queue or SNS topic ARN on AWS). Null when none is set.
- **`layers`** _(array<string>)_
  Layer ARNs attached to the function.
- **`log_destination`** _(object)_
  The log group the function writes to (on AWS the CloudWatch Logs group from its logging configuration, by default /aws/lambda/<name>). The provider creates it on the first invocation, so this can name a log group that does not exist yet.
  - **`id`** _(string)_
    The target's `id`.
- **`state`** _(string)_
  Lifecycle state, normalised. pending: being created or having resources set up; active: ready to invoke; inactive: idle long enough that the provider reclaimed its resources (the next invocation re-activates it); failed: creation or a resource update failed. Read on GET (on AWS the list does not return it). The provider's own value is in remote_data.
  Allowed: `pending`, `active`, `inactive`, `failed`, `unknown`
- **`code_sha256`** _(string)_
  Hash of the deployment package, as the provider reports it.

## Methods

- [GET /unified/cloud-infrastructure/serverless_functions/{id}](/docs/api-reference/unified-cloud-infrastructure-api/serverlessfunctions/get) — Get Serverless functions
- [GET /unified/cloud-infrastructure/serverless_functions](/docs/api-reference/unified-cloud-infrastructure-api/serverlessfunctions/list) — List Serverless functions