Hands-On Serverless Computing

Access control

Even though you have valid credentials to access AWS services, unless you have the necessary permissions to create or access AWS resources, you won't be able to perform operations. To be able to perform all the operations covered earlier, you need to have access to create a Lambda function, create an IAM role, and publish a version of your Lambda function.

When granting permissions, you will decide who is getting the permissions, what AWS resources they get permissions for, and what specific actions you are going to allow on those AWS resources.

There are two ways of managing resources for AWS Lambda using permissions policy, which controls who has access to the resources.