AWS Lambda | Security and access control Flashcards
What resources can I configure as a dead letter queue for a Lambda function?
Security and access control
AWS Lambda | Compute
You can configure an Amazon SQS queue or an Amazon SNS topic as your dead letter queue.
How do I allow my AWS Lambda function access to other AWS resources?
Security and access control
AWS Lambda | Compute
You grant permissions to your Lambda function to access other resources using an IAM role. AWS Lambda assumes the role while executing your Lambda function, so you always retain full, secure control of exactly which AWS resources it can use. Visit Setting up AWS Lambda to learn more about roles.
How do I control which Amazon S3 buckets can call which AWS Lambda functions?
Security and access control
AWS Lambda | Compute
When you configure an Amazon S3 bucket to send messages to an AWS Lambda function a resource policy rule will a be created that grants access. Visit the Lambda Developer’s Guide to learn more about resource policies and access controls for Lambda functions.
How do I control which Amazon DynamoDB table or Amazon Kinesis stream an AWS Lambda function can poll?
Security and access control
AWS Lambda | Compute
Access controls are managed through the Lambda function’s role. The role you assign to your Lambda function also determines which resource(s) AWS Lambda can poll on its behalf. Visit the Lambda Developer’s Guide to learn more.
Can I access resources behind Amazon VPC with my AWS Lambda function?
Security and access control
AWS Lambda | Compute
Yes. You can access resources behind Amazon VPC.
How do I enable and disable the VPC support for my Lambda function?
Security and access control
AWS Lambda | Compute
To enable VPC support, you need to specify one or more subnets in a single VPC and a security group as part of your function configuration. To disable VPC support, you need to update the function configuration and specify an empty list for the subnet and security group. You can change these settings using the AWS APIs, CLI, or AWS Lambda Management Console.
Can a single Lambda function have access to multiple VPCs?
Security and access control
AWS Lambda | Compute
No. Lambda functions provide access only to a single VPC. If multiple subnets are specified, they must all be in the same VPC. You can connect to other VPCs by peering your VPCs.
