merge from develop

Author: roger-zhangg

.github/workflows/quality_check.yml

@@ -71,7 +71,7 @@ jobs:
       - name: Complexity baseline
         run: make complexity-baseline
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@7afa10ed9b269c561c2336fd862446844e0cbf71 # 4.2.0
+        uses: codecov/codecov-action@84508663e988701840491b86de86b666e8a86bed # 4.3.0
         with:
           file: ./coverage.xml
           env_vars: PYTHON

.github/workflows/secure_workflows.yml

@@ -32,6 +32,6 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633  # v4.1.2
       - name: Ensure 3rd party workflows have SHA pinned
-        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ba37328d4ea95eaf8b3bd6c6cef308f709a5f2ec # v3.0.3
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@19ebcb0babbd282ae1822a0b9c28f3f1f25cea45 # v3.0.4
         with:
           allowlist: slsa-framework/slsa-github-generator

docs/core/event_handler/api_gateway.md

@@ -874,6 +874,13 @@ You can use the `Response` class to have full control over the response. For exa
     --8<-- "examples/event_handler_rest/src/fine_grained_responses_output.json"
     ```
 
+???- note "Using `Response` with data validation?"
+    When using the [data validation](#data-validation) feature with `enable_validation=True`, you must specify the concrete type for the `Response` class. This allows the validation middleware to infer the underlying type and perform validation correctly.
+
+    ```python hl_lines="8 26 32"
+    --8<-- "examples/event_handler_rest/src/data_validation_fine_grained_response.py"
+    ```
+
 ### Compress
 
 You can compress with gzip and base64 encode your responses via `compress` parameter. You have the option to pass the `compress` parameter when working with a specific route or using the Response object.

examples/event_handler_rest/src/data_validation_fine_grained_response.py

@@ -0,0 +1,39 @@
+from http import HTTPStatus
+from typing import Optional
+
+import requests
+from pydantic import BaseModel, Field
+
+from aws_lambda_powertools import Logger, Tracer
+from aws_lambda_powertools.event_handler import APIGatewayRestResolver, Response, content_types
+from aws_lambda_powertools.logging import correlation_paths
+from aws_lambda_powertools.utilities.typing import LambdaContext
+
+tracer = Tracer()
+logger = Logger()
+app = APIGatewayRestResolver(enable_validation=True)
+
+
+class Todo(BaseModel):
+    userId: int
+    id_: Optional[int] = Field(alias="id", default=None)
+    title: str
+    completed: bool
+
+
+@app.get("/todos/<todo_id>")
+@tracer.capture_method
+def get_todo_by_id(todo_id: int) -> Response[Todo]:
+    todo = requests.get(f"https://jsonplaceholder.typicode.com/todos/{todo_id}")
+    todo.raise_for_status()
+    return Response(
+        status_code=HTTPStatus.OK.value,
+        content_type=content_types.APPLICATION_JSON,
+        body=todo.json(),
+    )
+
+
+@logger.inject_lambda_context(correlation_id_path=correlation_paths.API_GATEWAY_REST)
+@tracer.capture_lambda_handler
+def lambda_handler(event: dict, context: LambdaContext) -> dict:
+    return app.resolve(event, context)

poetry.lock

@@ -73,8 +73,8 @@ aws-cdk-lib = "^2.136.0"
 "aws-cdk.aws-apigatewayv2-alpha" = "^2.38.1-alpha.0"
 "aws-cdk.aws-apigatewayv2-integrations-alpha" = "^2.38.1-alpha.0"
 "aws-cdk.aws-apigatewayv2-authorizers-alpha" = "^2.38.1-alpha.0"
-"aws-cdk.aws-lambda-python-alpha" = "^2.135.0a0"
-"cdklabs.generative-ai-cdk-constructs" = "^0.1.107"
+"aws-cdk.aws-lambda-python-alpha" = "^2.136.0a0"
+"cdklabs.generative-ai-cdk-constructs" = "^0.1.110"
 pytest-benchmark = "^4.0.0"
 mypy-boto3-appconfig = "^1.34.58"
 mypy-boto3-cloudformation = "^1.34.77"
@@ -89,7 +89,7 @@ mypy-boto3-xray = "^1.34.0"
 types-requests = "^2.31.0"
 typing-extensions = "^4.6.2"
 mkdocs-material = "^9.5.17"
-filelock = "^3.13.3"
+filelock = "^3.13.4"
 checksumdir = "^1.2.0"
 mypy-boto3-appconfigdata = "^1.34.24"
 ijson = "^3.2.2"