feat(aws-lambda): Add Lambda runtime resource attributes

[pabloDeputter]

Description

Expand aws-lambda instrumentation with extra resource identity and runtime metadata following OTel (https://opentelemetry.io/docs/specs/semconv/faas/aws-lambda/).

Changes:

• add sentry.kind=server.
• add cloud.account.id, extracted from the invoked function ARN.
• cloud.resource_id is now normalized from the invoked function ARN; keep the original value in aws.lambda.invoked_arn and replace an alias with the resolved published version when the function is not $LATEST.
• add cloud.availability_zone from the metadata endpoint when available; cached using the same Cache-Control max-age; reduced during SnapStart initialization (https://docs.aws.amazon.com/lambda/latest/dg/configuration-metadata-endpoint.html).
• cloud.region is now extracted from AWS_REGION env. var; faas.name from AWS_LAMBDA_FUNCTION_NAME; faas.version from AWS_LAMBDA_FUNCTION_VERSION following OTel (https://opentelemetry.io/docs/specs/semconv/faas/aws-lambda/#resource-detector).
• refresh sentry_sdk on every test setup (for easier local testing so runs don’t reuse old behavior from earlier implementation).
• add capture_internal_exceptions() around attribute extraction so that a single failure does not affect the other instrumentation.

Tests:

• add following test behavior to test_span_streaming_url_query_params_with_data_collection(): verify that its availability-zone response is reused across warm invocations according to Cache-Control.

Issues

Resolves #7931

[github-actions]

Coverage Results 📊

✅ 55850 passed | ❌ 2 failed | ⏭️ 2868 skipped | Total: 58720 | Pass Rate: 95.11% | Execution Time: 153m 34s

📊 Comparison with Base Branch

Metric	Change
Total Tests	📉 -82222
Passed Tests	📉 -77816
Failed Tests	📈 +2
Skipped Tests	📉 -4408

➕ New Tests (2)

View new tests

• test_cache_spans_decorator
  • File: tests.integrations.django.test_cache_module
  • Status: ❌ Failing
• test_openfeature_integration
  • File: tests.integrations.openfeature.test_openfeature
  • Status: ❌ Failing

❌ Failed Tests

test_cache_spans_decorator

File: tests.integrations.django.test_cache_module
Suite: py3.10-django-v5.2.18
Error: tests/integrations/django/test_cache_module.py:307: in test_cache_spans_decorator assert not spans[0]["attributes"]["cache.hit"] E assert not True

Stack Trace

tests/integrations/django/test_cache_module.py:307: in test_cache_spans_decorator
    assert not spans[0]["attributes"]["cache.hit"]
E   assert not True

test_openfeature_integration

File: tests.integrations.openfeature.test_openfeature
Suite: py3.14t-openfeature-v0.10.0
Error: AssertionError: assert {'values': [{'flag': 'hello', 'result': False}, {'flag': 'world', 'result': False}, {'flag': 'other', 'result': True}]} == {'values': [{'flag': 'hello', 'result': True}, {'flag': 'world', 'result': False}, {'flag': 'other', 'result': True}]} Differing items: {'values': [{'flag': 'hello', 'result': False}, {'flag': 'world', 'result': False}, {'flag': 'other', 'result': True}]} != {'values': [{'flag': 'hello', 'result': True}, {'flag': 'world', 'result': False}, {'flag': 'other', 'result': True}]} Full diff: { 'values': [ { 'flag': 'hello', - 'result': True, ? ^^^ + 'result': False, ? ^^^^ }, { 'flag': 'world', 'result': False, }, { 'flag': 'other', 'result': True, }, ], }

Stack Trace

tests/integrations/openfeature/test_openfeature.py:31: in test_openfeature_integration
    assert events[0]["contexts"]["flags"] == {
E   AssertionError: assert {'values': [{'flag': 'hello', 'result': False}, {'flag': 'world', 'result': False}, {'flag': 'other', 'result': True}]} == {'values': [{'flag': 'hello', 'result': True}, {'flag': 'world', 'result': False}, {'flag': 'other', 'result': True}]}
E     
E     Differing items:
E     {'values': [{'flag': 'hello', 'result': False}, {'flag': 'world', 'result': False}, {'flag': 'other', 'result': True}]} != {'values': [{'flag': 'hello', 'result': True}, {'flag': 'world', 'result': False}, {'flag': 'other', 'result': True}]}
E     
E     Full diff:
E       {
E           'values': [
E               {
E                   'flag': 'hello',
E     -             'result': True,
E     ?                       ^^^
E     +             'result': False,
E     ?                       ^^^^
E               },
E               {
E                   'flag': 'world',
E                   'result': False,
E               },
E               {
E                   'flag': 'other',
E                   'result': True,
E               },
E           ],
E       }

❌ Patch coverage is 5.66% (3 of 53 changed executable lines covered; target 80%).
Project statement coverage is 89.73% (down 0.50 percentage points from base (9a5f1ab) to head (c191469)).

Changed files with executable lines (5)

File	Patch coverage	Changed executable lines
sentry_sdk/integrations/aws_lambda/_handler.py	0.00%	0/27 covered; missed: 3, 8, 12, 40, 41, 116, 117, 118, 119, 120, 121, 127, 140, 156, 168, 169, 170, 171, 172, 173, 174, 176, 190, 191, 192, 193, 194
sentry_sdk/integrations/aws_lambda/_metadata.py	0.00%	0/19 covered; missed: 1, 2, 3, 4, 6, 8, 15, 20, 23, 24, 26, 27, 30, 35, 36, 38, 43, 44, 45
sentry_sdk/integrations/aws_lambda/_runtime.py	0.00%	0/3 covered; missed: 8, 25, 57
sentry_sdk/integrations/aws_lambda/_request.py	66.67%	2/3 covered; missed: 120
sentry_sdk/integrations/aws_lambda/consts.py	100.00%	1/1 covered

Coverage diff

@@            Coverage Diff             @@
##        master     #7941       +/-##
==========================================
- Coverage    90.23%    89.73%    -0.50%
==========================================
  Files          202       198        -4
  Tracked lines     26660     21014     -5646
  Branches      9926      7216     -2710
==========================================
- Hits         24055     18856     -5199
+ Misses        2605      2158      -447
+ Partials      1510      1234      -276

---

Generated by Coverage Action

[sentry-warden]

No test covers cloud.resource_id alias-to-version normalization

Please add coverage where function_version is not $LATEST (ideally with an aliased invoked ARN) so the cloud.resource_id rewrite path is actually verified.

Evidence

• Lines 191-194 build resource_id from arn_parts[:7], then append function_version only when it is not $LATEST.
• This is the PR's stated alias→version normalization for cloud.resource_id.
• Existing span-streaming tests only assert $LATEST ARNs (e.g. test_span_streaming_no_error); no test sets a published version or aliased invoked ARN.

Also found at 1 additional location

• sentry_sdk/integrations/aws_lambda/_handler.py:22-22

_{Identified by Warden · code-review · 94Y-QB9}