IAM

Task 8

The Goal of the Task

The goal of this task is to grant the correct permissions to a Lambda function so that it can access the necessary resources and other resources can access it as well.

Architecture

Task Resources Region-specific resources are created in the eu-west-1 region. For more details about regional services, see AWS Services by Region.

In this task, you will work with the following resources:

• Lambda function cmtr-58ir3aht-iam-lp-lambda: Returns a list of Lambda functions in the AWS account. This function has an execution role cmtr-58ir3aht-iam-lp-iam_role and a resource-based policy and serves as the HTTP API back end.
• Lambda execution role cmtr-58ir3aht-iam-lp-iam_role.
• API Gateway cmtr-58ir3aht-iam-lp-apigwv2_api: An HTTP API integrated with the cmtr-58ir3aht-iam-lp-lambda function.

Task Flow You must achieve the following objectives in two moves:

1. Grant the correct permissions to the Lambda function so it can access the resources it needs based on the function code. Use the AWS managed policy that grants access to Lambda API actions, and follow the principle of least privilege. Please use the existing AWS policy; do not create your own. Documentation - Adding and removing IAM identity permissions
2. Grant the correct permissions to the Lambda function so that the HTTP API can invoke it. add-permission