When production AWS Lambda functions are published, they become immutable. If for some reason a published production version is throwing errors or contains invalid configurations, the stream_alert_cli provides a command to rollback to the previous version.


Rollback is only possible for the main StreamAlert AWS Lambda function, aliased as ‘alert’. The current version must also not be ‘$LATEST’ and must be greater than 1.

To initiate a rollback for a specific Lambda function:

$ ./ lambda rollback --processor rule $ ./ lambda rollback --processor alert

To initiate a rollback for all functions:

$ ./ lambda rollback --processor all