Lambda Access Rights
Understand how to assign specific access rights to AWS Lambda functions by modifying IAM policies. Learn to separate functions based on their security needs to reduce risks and manage permissions effectively when connecting to external storage resources.
We'll cover the following...
Security requirements
AWS does not trust a Lambda function to access a database or an S3 bucket just because they belong to the same account. You need to explicitly allow the use of each external resource from a Lambda function. To do that, you’ll need to modify the IAM policy associated with a function.
Your function currently has two actions:
- Displaying a form
- Processing the form
The form processing action will need access to an S3 bucket, but the form display action does not need any specific security access. When two different actions need different security levels, it’s usually a good time to start thinking about breaking them into different Lambda functions. ...