Ravi Sir's Cards › AWS
Lambda roles right
This revision card explains Lambda roles right. It starts from the need that execution role = what Lambda may call; invoke = who may call it. It describes resource ARNs + condition keys beat Action *. The how-to section notes separate roles per function; review attachments quarterly. An example on the card is priya's authorizer checks issuer and audience every token.
Read card text
What this card says
Why do we need it?
Execution role = what Lambda may call; invoke = who may call it.
What is it?
Resource ARNs + condition keys beat Action *.
condition
How to do it
Separate roles per function; review attachments quarterly.
Example
Priya's authorizer checks issuer and audience every token.