Lambda Access Rights
Understand how to manage AWS Lambda access rights by configuring IAM policies for secure connections to external storage. Learn best practices to separate Lambda functions based on their security requirements to minimize risks and improve the security of your serverless applications.
We'll cover the following...
Security requirements #
AWS does not trust a Lambda function to access a database or an S3 bucket just because they belong to the same account. You need to explicitly allow the use of each external resource from a Lambda function. To do that, you’ll need to modify the IAM policy associated with a function.
Your function currently has two actions:
- displaying a form
- processing the form
The form processing action will need access to an S3 bucket, but the form display action does not need any specific security access. When two different actions need different security levels, it’s usually a ...