IAM / compute / lambda

AWS Lambda (IAM)

JSON →
AWSlambdacompute

AWS Lambda lets you run code without provisioning or managing servers, scaling automatically.

iamaws
docs ↗
Permissions
Actions in this service
lambda:CreateFunction
lambda:DeleteFunction
lambda:InvokeFunction
lambda:GetFunction
lambda:ListFunctions
lambda:UpdateFunctionCode
lambda:TagResource
lambda:UntagResource
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "lambda:CreateFunction", "lambda:DeleteFunction", "lambda:InvokeFunction", "lambda:GetFunction", "lambda:ListFunctions", "lambda:UpdateFunctionCode", "lambda:TagResource", "lambda:UntagResource" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid lambda:* — grants full control including deletion and modification of functions.
Avoid lambda:InvokeFunction without resource constraints — can lead to unintended invocations.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/lambda/lambda.json ↗