Lambda Execution Role
The IAM role Lambda assumes to run your code: it defines everything the function may touch (its log group, the tables and buckets it reads or writes) and nothing more. One narrowly scoped role per function is the unit of least privilege; sharing a broad role across functions turns any code injection into account-wide access.
This Concept is waiting for its first lesson!
The IAM role Lambda assumes to run your code: it defines everything the function may touch (its log group, the tables and buckets it reads or writes) and nothing more. One narrowly scoped role per function is the unit of least privilege; sharing a broad role across functions turns any code injection into account-wide access.
Are you a teacher? Sign in to start contributing.
Sign In