Skip to content

Service: lambda

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess AmazonDynamoDBFullAccess
arn:aws:iam::aws:policy/AmazonDynamoDBReadOnlyAccess AmazonDynamoDBReadOnlyAccess
arn:aws:iam::aws:policy/AmazonDynamoDBFullAccesswithDataPipeline AmazonDynamoDBFullAccesswithDataPipeline
arn:aws:iam::aws:policy/AmazonWorkMailFullAccess AmazonWorkMailFullAccess
arn:aws:iam::aws:policy/AmazonWorkMailReadOnlyAccess AmazonWorkMailReadOnlyAccess
arn:aws:iam::aws:policy/AWSLambdaInvocation-DynamoDB AWSLambdaInvocation-DynamoDB
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/service-role/AWSLambdaRole AWSLambdaRole
arn:aws:iam::aws:policy/AmazonCognitoPowerUser AmazonCognitoPowerUser
arn:aws:iam::aws:policy/AWSCodeCommitFullAccess AWSCodeCommitFullAccess
arn:aws:iam::aws:policy/AWSCodeCommitReadOnly AWSCodeCommitReadOnly
arn:aws:iam::aws:policy/AWSCodeCommitPowerUser AWSCodeCommitPowerUser
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser SupportUser
arn:aws:iam::aws:policy/job-function/SystemAdministrator SystemAdministrator
arn:aws:iam::aws:policy/job-function/DatabaseAdministrator DatabaseAdministrator
arn:aws:iam::aws:policy/job-function/DataScientist DataScientist
arn:aws:iam::aws:policy/service-role/AmazonSSMMaintenanceWindowRole AmazonSSMMaintenanceWindowRole
arn:aws:iam::aws:policy/service-role/AmazonSSMAutomationRole AmazonSSMAutomationRole
arn:aws:iam::aws:policy/AWSStepFunctionsConsoleFullAccess AWSStepFunctionsConsoleFullAccess
arn:aws:iam::aws:policy/service-role/AWSGreengrassResourceAccessRolePolicy AWSGreengrassResourceAccessRolePolicy
arn:aws:iam::aws:policy/AmazonLexFullAccess AmazonLexFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSElasticBeanstalkServiceRolePolicy AWSElasticBeanstalkServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSLambdaReplicator AWSLambdaReplicator
arn:aws:iam::aws:policy/AmazonECS_FullAccess AmazonECS_FullAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonSSMServiceRolePolicy AmazonSSMServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSCodeDeployRoleForLambda AWSCodeDeployRoleForLambda
arn:aws:iam::aws:policy/aws-service-role/AmazonGuardDutyServiceRolePolicy AmazonGuardDutyServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerFullAccess AmazonSageMakerFullAccess
arn:aws:iam::aws:policy/service-role/AWSDeepLensServiceRolePolicy AWSDeepLensServiceRolePolicy
arn:aws:iam::aws:policy/SecretsManagerReadWrite SecretsManagerReadWrite
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/AWSRoboMakerServiceRolePolicy AWSRoboMakerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSRoboMakerServicePolicy AWSRoboMakerServicePolicy
arn:aws:iam::aws:policy/AWSCodeDeployRoleForECS AWSCodeDeployRoleForECS
arn:aws:iam::aws:policy/AWSCodeDeployRoleForECSLimited AWSCodeDeployRoleForECSLimited
arn:aws:iam::aws:policy/aws-service-role/CloudwatchApplicationInsightsServiceLinkedRolePolicy CloudwatchApplicationInsightsServiceLinkedRolePolicy
arn:aws:iam::aws:policy/aws-service-role/ClientVPNServiceRolePolicy ClientVPNServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSDeepRacerServiceRolePolicy AWSDeepRacerServiceRolePolicy
arn:aws:iam::aws:policy/AWSDeepRacerCloudFormationAccessPolicy AWSDeepRacerCloudFormationAccessPolicy
arn:aws:iam::aws:policy/CloudWatchAutomaticDashboardsAccess CloudWatchAutomaticDashboardsAccess
arn:aws:iam::aws:policy/aws-service-role/AWSApplicationAutoscalingLambdaConcurrencyPolicy AWSApplicationAutoscalingLambdaConcurrencyPolicy
arn:aws:iam::aws:policy/CloudWatchSyntheticsFullAccess CloudWatchSyntheticsFullAccess
arn:aws:iam::aws:policy/aws-service-role/AccessAnalyzerServiceRolePolicy AccessAnalyzerServiceRolePolicy
arn:aws:iam::aws:policy/AWSIoTDeviceTesterForGreengrassFullAccess AWSIoTDeviceTesterForGreengrassFullAccess
arn:aws:iam::aws:policy/ComputeOptimizerReadOnlyAccess ComputeOptimizerReadOnlyAccess
arn:aws:iam::aws:policy/service-role/AWSCodeDeployRoleForCloudFormation AWSCodeDeployRoleForCloudFormation
arn:aws:iam::aws:policy/AWSThinkboxDeadlineResourceTrackerAccessPolicy AWSThinkboxDeadlineResourceTrackerAccessPolicy
arn:aws:iam::aws:policy/AWSThinkboxDeadlineResourceTrackerAdminPolicy AWSThinkboxDeadlineResourceTrackerAdminPolicy
arn:aws:iam::aws:policy/AmazonAppFlowFullAccess AmazonAppFlowFullAccess
arn:aws:iam::aws:policy/AmazonSageMakerGroundTruthExecution AmazonSageMakerGroundTruthExecution
arn:aws:iam::aws:policy/AWSCodePipeline_FullAccess AWSCodePipeline_FullAccess
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantine AWSCompromisedKeyQuarantine
arn:aws:iam::aws:policy/aws-service-role/ClientVPNServiceConnectionsRolePolicy ClientVPNServiceConnectionsRolePolicy
arn:aws:iam::aws:policy/service-role/AWSCodeDeployRoleForLambdaLimited AWSCodeDeployRoleForLambdaLimited
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/AWSCloudTrail_FullAccess AWSCloudTrail_FullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/AWSLambda_ReadOnlyAccess AWSLambda_ReadOnlyAccess
arn:aws:iam::aws:policy/AWSLambda_FullAccess AWSLambda_FullAccess
arn:aws:iam::aws:policy/AmazonConnect_FullAccess AmazonConnect_FullAccess
arn:aws:iam::aws:policy/CloudWatchApplicationInsightsFullAccess CloudWatchApplicationInsightsFullAccess
arn:aws:iam::aws:policy/AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonDevOpsGuruServiceRolePolicy AmazonDevOpsGuruServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSPanoramaServiceRolePolicy AWSPanoramaServiceRolePolicy
arn:aws:iam::aws:policy/AdministratorAccess-Amplify AdministratorAccess-Amplify
arn:aws:iam::aws:policy/aws-service-role/AWSAuditManagerServiceRolePolicy AWSAuditManagerServiceRolePolicy
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV2 AWSCompromisedKeyQuarantineV2
arn:aws:iam::aws:policy/aws-service-role/Route53RecoveryReadinessServiceRolePolicy Route53RecoveryReadinessServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerPipelinesIntegrations AmazonSageMakerPipelinesIntegrations
arn:aws:iam::aws:policy/AmazonRedshiftAllCommandsFullAccess AmazonRedshiftAllCommandsFullAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonInspector2ServiceRolePolicy AmazonInspector2ServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy AWSResourceExplorerServiceRolePolicy
arn:aws:iam::aws:policy/VPCLatticeReadOnlyAccess VPCLatticeReadOnlyAccess
arn:aws:iam::aws:policy/VPCLatticeFullAccess VPCLatticeFullAccess
arn:aws:iam::aws:policy/AmazonSecurityLakeAdministrator AmazonSecurityLakeAdministrator
arn:aws:iam::aws:policy/AWSResilienceHubAsssessmentExecutionPolicy AWSResilienceHubAsssessmentExecutionPolicy
arn:aws:iam::aws:policy/service-role/AmazonSageMakerPartnerServiceCatalogProductsApiGatewayServiceRolePolicy AmazonSageMakerPartnerServiceCatalogProductsApiGatewayServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AmazonSageMakerPartnerServiceCatalogProductsCloudFormationServiceRolePolicy AmazonSageMakerPartnerServiceCatalogProductsCloudFormationServiceRolePolicy
arn:aws:iam::aws:policy/AmazonLaunchWizardFullAccessV2 AmazonLaunchWizardFullAccessV2
arn:aws:iam::aws:policy/service-role/AmplifyBackendDeployFullAccess AmplifyBackendDeployFullAccess
arn:aws:iam::aws:policy/AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyPermissionsBoundary AWSQuickSetupPatchPolicyPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyDeploymentRolePolicy AWSQuickSetupPatchPolicyDeploymentRolePolicy
arn:aws:iam::aws:policy/AmazonBedrockStudioPermissionsBoundary AmazonBedrockStudioPermissionsBoundary
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV3 AWSCompromisedKeyQuarantineV3
arn:aws:iam::aws:policy/ResourceGroupsTaggingAPITagUntagSupportedResources ResourceGroupsTaggingAPITagUntagSupportedResources
arn:aws:iam::aws:policy/aws-service-role/SecurityLakeResourceManagementServiceRolePolicy SecurityLakeResourceManagementServiceRolePolicy
arn:aws:iam::aws:policy/AWSQuickSetupSSMDeploymentRolePolicy AWSQuickSetupSSMDeploymentRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePermissionsBoundary SageMakerStudioProjectUserRolePermissionsBoundary
arn:aws:iam::aws:policy/service-role/SageMakerStudioProjectProvisioningRolePolicy SageMakerStudioProjectProvisioningRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePolicy SageMakerStudioProjectUserRolePolicy
arn:aws:iam::aws:policy/AWSPartnerLedSupportReadOnlyAccess AWSPartnerLedSupportReadOnlyAccess
arn:aws:iam::aws:policy/AIOpsAssistantPolicy AIOpsAssistantPolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioQueryExecutionRolePolicy SageMakerStudioQueryExecutionRolePolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockAgentServiceRolePolicy SageMakerStudioBedrockAgentServiceRolePolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockFlowServiceRolePolicy SageMakerStudioBedrockFlowServiceRolePolicy

Allowed Actions

Action Service
lambda:* lambda
lambda:AddLayerVersionPermission lambda
lambda:AddPermission lambda
lambda:Create* lambda
lambda:CreateAlias lambda
lambda:CreateEventSourceMapping lambda
lambda:CreateFunction lambda
lambda:Delete* lambda
lambda:DeleteAlias lambda
lambda:DeleteEventSourceMapping lambda
lambda:DeleteFunction lambda
lambda:DeleteFunctionConcurrency lambda
lambda:DeleteLayerVersion lambda
lambda:DeleteProvisionedConcurrencyConfig lambda
lambda:DisableReplication lambda
lambda:EnableReplication lambda
lambda:Get* lambda
lambda:GetAccountSettings lambda
lambda:GetAlias lambda
lambda:GetCodeSigningConfig lambda
lambda:GetEventSourceMapping lambda
lambda:GetFunction lambda
lambda:GetFunctionCodeSigningConfig lambda
lambda:GetFunctionConcurrency lambda
lambda:GetFunctionConfiguration lambda
lambda:GetFunctionEventInvokeConfig lambda
lambda:GetFunctionRecursionConfig lambda
lambda:GetFunctionUrlConfig lambda
lambda:GetLayerVersion lambda
lambda:GetLayerVersionPolicy lambda
lambda:GetPolicy lambda
lambda:GetProvisionedConcurrencyConfig lambda
lambda:GetRuntimeManagementConfig lambda
lambda:InvokeAsync lambda
lambda:InvokeFunction lambda
lambda:List* lambda
lambda:ListAliases lambda
lambda:ListCodeSigningConfigs lambda
lambda:ListEventSourceMappings lambda
lambda:ListFunctionEventInvokeConfigs lambda
lambda:ListFunctions lambda
lambda:ListLayerVersions lambda
lambda:ListLayers lambda
lambda:ListProvisionedConcurrencyConfigs lambda
lambda:ListTags lambda
lambda:ListVersionsByFunction lambda
lambda:PublishLayerVersion lambda
lambda:PublishVersion lambda
lambda:PutFunctionConcurrency lambda
lambda:PutProvisionedConcurrencyConfig lambda
lambda:RemoveLayerVersionPermission lambda
lambda:RemovePermission lambda
lambda:TagResource lambda
lambda:UntagResource lambda
lambda:Update* lambda
lambda:UpdateAlias lambda
lambda:UpdateEventSourceMapping lambda
lambda:UpdateFunction* lambda
lambda:UpdateFunctionCode lambda
lambda:UpdateFunctionConfiguration lambda
lambda:getAccountSettings lambda
lambda:getAlias lambda
lambda:getCodeSigningConfig lambda
lambda:getEventSourceMapping lambda
lambda:getFunction lambda
lambda:getFunctionCodeSigningConfig lambda
lambda:getFunctionConcurrency lambda
lambda:getFunctionConfiguration lambda
lambda:getFunctionEventInvokeConfig lambda
lambda:getFunctionRecursionConfig lambda
lambda:getFunctionUrlConfig lambda
lambda:getLayerVersion lambda
lambda:getLayerVersionPolicy lambda
lambda:getPolicy lambda
lambda:getProvisionedConcurrencyConfig lambda
lambda:getRuntimeManagementConfig lambda
lambda:listAliases lambda
lambda:listCodeSigningConfigs lambda
lambda:listEventSourceMappings lambda
lambda:listFunctionEventInvokeConfigs lambda
lambda:listFunctionUrlConfigs lambda
lambda:listFunctions lambda
lambda:listFunctionsByCodeSigningConfig lambda
lambda:listLayerVersions lambda
lambda:listLayers lambda
lambda:listProvisionedConcurrencyConfigs lambda
lambda:listTags lambda
lambda:listVersionsByFunction lambda