The Complete Production SOP: How to Deploy and Run AWS Lambda Container Image Packaging & Provisioned Concurrency in Autonomous AI Agents

---
name: "aws-lambda-container-image"
description: "Package large Lambda functions (up to 10GB) as Docker containers with provisioned concurrency."
metadata:
  author: "AWS"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "build lambda container image"
  - "eliminate lambda cold start"
  - "configure provisioned concurrency"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

FROM public.ecr.aws/lambda/python:3.12 AS builder

COPY requirements.txt ${LAMBDA_TASK_ROOT}/
RUN pip install --no-cache-dir -r ${LAMBDA_TASK_ROOT}/requirements.txt --target "${LAMBDA_TASK_ROOT}"

FROM public.ecr.aws/lambda/python:3.12

COPY --from=builder ${LAMBDA_TASK_ROOT} ${LAMBDA_TASK_ROOT}
COPY app.py ${LAMBDA_TASK_ROOT}/

# AWS Lambda base image requires CMD pointing to file.handler_function
CMD [ "app.handler" ]

resource "aws_lambda_function" "container_app" {
  function_name = "ml-inference-service"
  package_type  = "Image"
  image_uri     = "123456789012.dkr.ecr.us-east-1.amazonaws.com/ml-service:v1.0.0"
  memory_size   = 4096
  timeout       = 30
  publish       = true
}

resource "aws_lambda_alias" "live" {
  name             = "live"
  description      = "Production alias with provisioned capacity"
  function_name    = aws_lambda_function.container_app.function_name
  function_version = aws_lambda_function.container_app.version
}

resource "aws_lambda_provisioned_concurrency_config" "concurrency" {
  function_name                     = aws_lambda_alias.live.function_name
  qualifier                         = aws_lambda_alias.live.name
  provisioned_concurrent_executions = 5
}

#!/usr/bin/env bash
set -euo pipefail

CONTAINER_ID=$(docker run -d -p 9000:8080 my-lambda-service:v1)
trap 'docker rm -f $CONTAINER_ID >/dev/null' EXIT

sleep 2
RESPONSE=$(curl -sf -XPOST "http://localhost:9000/2015-03-31/functions/function/invocations" -d '{"records": []}')

if [[ "$RESPONSE" == *"statusCode"* ]]; then
  echo "Local Lambda verification passed."
  exit 0
else
  echo "Unexpected response: $RESPONSE"
  exit 1
fi