What are some examples of IAM policies for AWS Lambda functions?

What are some examples of IAM policies for AWS Lambda functions?

IAM policies for AWS Lambda functions define permissions for the functions. For example, a policy can allow a Lambda function to read from an S3 bucket.

Can you give me a specific example of a policy that allows access to S3?

Sure! Here's a simple policy that allows a Lambda function to read from a specific S3 bucket:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::your-bucket-name/*"
    }
  ]
}

What if I want to allow both read and write access?

You can modify the policy to include both s3:GetObject and s3:PutObject actions like this:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject", "s3:PutObject"],
      "Resource": "arn:aws:s3:::your-bucket-name/*"
    }
  ]
}