anchor.diff:  The native executable requires some additional steps to enable client ssl that S3 and other aws libraries need.
   
   1. A custom `bootstrap` script
  -2. `libsunec.o` must be added to `function.zip`
  +2. `libsunec.so` must be added to `function.zip`
   3. `cacerts` must be added to `function.zip`
   
  -To do this, first create a directory `src/main/zip.native/ssl` with your build.  Next create a shell script file called `bootstrap`
  -within `src/main/zip.native/`
  +To do this, first create a directory `src/main/zip.native/` with your build.  Next create a shell script file called `bootstrap`
  +within `src/main/zip.native/`, like below. An example is create automatically in your build folder (target or build), called `bootstrap-example.sh`
   
   [source, shell]
   ----
   #!/usr/bin/env bash
   
  -./runner \
  -    -Djava.library.path=${LAMBDA_TASK_ROOT}/ssl \
  -    -Djavax.net.ssl.trustStore=${LAMBDA_TASK_ROOT}/ssl/cacerts \
  -    -Djavax.net.ssl.trustAnchors=${LAMBDA_TASK_ROOT}/ssl/cacerts
  +./runner -Djava.library.path=./ -Djavax.net.ssl.trustStore=./cacerts
   ----
   
   Additional set `-Djavax.net.ssl.trustStorePassword=changeit` if your `cacerts` file is password protected.
   
  -Next you must copy some files from your Graal distribution into `src/main/zip.native/ssl`.
  +Next you must copy some files from your GraalVM distribution into `src/main/zip.native/`.
  +
  +NOTE: GraalVM versions can have different paths for these files, and whether you using the Java 8 or 11 version. Adjust accordingly.
   
   [source, shell]
   ----
  -cp $GRAALVM_HOME/lib/libsunec.o $PROJECT_DIR/src/main/zip.native/ssl
  -cp $GRAALVM_HOME/lib/security/cacerts $PROJECT_DIR/src/main/zip.native/ssl
  +cp $GRAALVM_HOME/lib/libsunec.so $PROJECT_DIR/src/main/zip.native/
  +cp $GRAALVM_HOME/lib/security/cacerts $PROJECT_DIR/src/main/zip.native/
   ----
   
   Now when you run the native build all these files will be included within `function.zip`
  
positive.code: 
      bootstrap
      runner
      ssl/
      ssl/cacerts
      ssl/libsunec.so
  ----
  
negative.code: 
  [source]
  ----
  docker cp {container-id-from-above}:/opt/graalvm/jre/lib/amd64/libsunec.so src/main/zip.native/
  ----
  
  Second, cacerts, the certificate store.  You may need to periodically obtain an updated copy, also.
  [source]
  ----
  docker cp {container-id-from-above}:/opt/graalvm/jre/lib/security/cacerts src/main/zip.native/
  ----
  
  Your final archive will look like this:
  