Skip to contentSkip to navigationSkip to topbar
Rate this page:
On this page

Environment Variables


Environment Variables are key/value pairs that you can add to a specific Environment. Use these for storing configuration like API keys rather than hardcoding them into your Functions. Environment Variables are encrypted, so they are the preferred way to store API keys, passwords, and any other secrets that your Function needs to use.

They also prove useful because when an Environment Variable is updated, the new value will instantly reflect in subsequent Function executions without the need for deploying new code. This allows you to adjust configurations on the fly without potentially interrupting your service due to deployments.


Setting Environment Variables

setting-environment-variables page anchor

To view and modify the Environment Variables for a given Service, open the Service using the Twilio Console. Once the Functions Editor is open for your Service, in the Settings menu, click on Environment Variables.

Environment Variables UI.

The resulting UI allows you to add, remove, and update Environment Variables.

Additionally, the Add my Twilio Credentials (ACCOUNT_SID) and (AUTH_TOKEN) to ENV checkbox allows you to choose if you would like for your ACCOUNT SID and AUTH TOKEN to be automatically added to your Function's context. This means both of these values will be accessible as Environment Variables from context, and also that calling context.getTwilioClient() will return an initialized Twilio REST client for making calls to Twilio's API.

(information)

Info

If you're using the Serverless Toolkit, you will instead set your Environment Variables using .env files.

Editing Environment Variables across Environments

editing-environment-variables-across-environments page anchor

If you're using multiple Environments in your application, such as dev, stage, and production, it's common to have the same Environment Variables present in each Environment, but with different values so that each version of your application is connecting to the appropriate resources. These could be various API keys with different levels of access or rate limits for the same service, credentials for different versions of your database, and more.

Using the Console UI, you can switch between which Environment Variables you are adjusting by clicking on your application URL, directly above the Deploy All button. This will render a menu showing your various Environments, and selecting one will put you in the context of that Environment.

Environment Selector.

Any modifications to Environment Variables that follow will only apply to the selected Environment and not affect any others.

(information)

Info

If you're developing using the Serverless Toolkit, check out the specific documentation on how to scope environment variables.


Consuming Environment Variables

consuming-environment-variables page anchor

Any Environment Variables that have been set will be accessible in your Function as properties of the context object by name. For example, if you set an Environment Variable named API_KEY, it can be retrieved as context.API_KEY in your Function's code.

Suppose an IVR tree you're designing requires some logic to determine if a branch of your business is open that day based on local temperatures. Using the OpenWeather Weather API and an API Key that you've set to an Environment Variable, you could securely retrieve that key from context.API_KEY and make validated requests for weather data to complete your business logic. You can also store a common support phone number as an Environment Variable to share between your Functions.


_33
const axios = require('axios');
_33
const querystring = require('querystring');
_33
_33
exports.handler = async (context, event, callback) => {
_33
// Environment Variables can be accessed from the context object
_33
const apiKey = context.API_KEY;
_33
const supportNumber = context.SUPPORT_PHONE_NUMBER;
_33
_33
// Query parameters and the request body can be accessed
_33
// from the event object
_33
const city = event.city || 'Seattle';
_33
_33
// The Weather API accepts the city and apiKey as query parameters
_33
const query = querystring.stringify({ q: city, appid: apiKey });
_33
// Make our OpenWeather API request, and be sure to await it!
_33
const { data } = await axios.get(
_33
`https://api.openweathermap.org/data/2.5/weather?${query}`
_33
);
_33
// Do some math to convert the returned temperature from Kelvin to F
_33
const tempInFahrenheit = (data.main.temp - 273.15) * 1.8 + 32;
_33
// If its too hot, relay this information and the support number
_33
if (tempInFahrenheit >= 100) {
_33
return callback(null, {
_33
isOpen: false,
_33
message:
_33
'Due to extreme temperatures and to protect the health ' +
_33
"of our employees, we're closed today. If you'd like to " +
_33
`speak to our support team, please call ${supportNumber}`,
_33
});
_33
}
_33
// Otherwise, business as usual
_33
return callback(null, { isOpen: true, message: "We're open!" });
_33
};


Default Environment Variables

default-environment-variables page anchor

The context object provides you with several Environment Variables by default:

PropertyTypeDescription
ACCOUNT_SIDstring|nullIf you have chosen to include your account credentials in your Function, this will return the SID identifying the Account that owns this Function. If you have not chosen to include account credentials in your Function, this value will be null.
AUTH_TOKENstring|nullIf you have chosen to include your account credentials in your Function, this will return the Auth Token associated with the owning Account. If you have not chosen to include account credentials in your Function, this value will be null.
DOMAIN_NAMEstringThe Domain that is currently serving your Twilio Function.
PATHstringThe path of Twilio Function that is currently being executed.
SERVICE_SIDstringThe SID of the Service which the current Function is contained in.
ENVIRONMENT_SIDstringThe SID of the Environment which the current Function is hosted in.
(warning)

Warning

Please note that for a small number of customers, SERVICE_SID and ENVIRONMENT_SID are not enabled due to the combined size of environment variables in use being too high and approaching the allowed limit of 3kb. In this case, these variables will return undefined.

If you believe you are affected by this issue and wish to enable these variables, please reach out to our support team for assistance.


There are limitations on the size of individual Environment Variables depending on your method of deployment. A variable can be no longer than:

  • 255 characters if set using the current V2 Console
  • 150 characters if set using the legacy, Functions(Classic) Console
  • 450 bytes if set using the Serverless Toolkit or the Serverless API

Additionally, there is a maximum limit of approximately 3kb on the combined size of your Environment Variables after they have been JSON encoded.

(error)

Danger

If any Environment Variable exceeds the individual limit or all Variables combined exceed the maximum limit, then your deployments will fail until your Variables have been resized.

Storing large credentials

storing-large-credentials page anchor

If you must store an extremely long API key or other credential, such as an RSA key, which will cause you to exceed these limits, we suggest that you instead store the value in a private Asset and ingest it in your code using the Runtime.getAssets helper.

Given these constraints and a large RSA key that you need to store securely, you could store the text of the key in an Asset named credentials.json, and set the Asset's Privacy to private.


_10
{
_10
"myRsaKey": "xxxxxx..."
_10
}

You could then access the RSA key (or any other stored credentials) in your Function using this code pattern.


_12
exports.handler = (context, event, callback) => {
_12
// The open method returns the file's contents assuming utf8 encoding.
_12
// Use JSON.parse to parse the file back into a JavaScript object
_12
const credentials = JSON.parse(
_12
Runtime.getAssets()['/credentials.json'].open()
_12
);
_12
_12
// Reference the key from the credentials object
_12
const { myRsaKey } = credentials;
_12
_12
// Perform any API calls that require this key!...
_12
};


Rate this page: