Hands-On Serverless Computing

Identity-based policies (IAM policies)

You can attach IAM policies to IAM roles; you can do the following within IAM:

• Attach an IAM permissions policy to an user or a group in your AWS account

• Attach an IAM permissions policy to an IAM role (grant cross-account permissions)

The following is an example IAM policy that grants permission to the ListFunctions action on AWS Lambda resources:

{ "Statement": [ { "Sid": "ListFunctions", "Effect": "Allow", "Action": [ "lambda:ListFunctions" ], "Resource": "*" } ]} 

For additional information on how to use IAM policies on AWS Lambda, you can refer to the documentation at https://docs.aws.amazon.com/lambda/latest/dg/access-control-identity-based.html.