lambda:CreateFunction is a Write access-level action in the lambda service. Grants permission to create an AWS Lambda function
ARNs that lambda:CreateFunction can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants lambda:CreateFunction.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the ARN of an AWS Lambda code signing config
Filters access by the ARN of a version of an AWS Lambda layer
Filters access by the ID of security groups configured for the AWS Lambda function
Filters access by the ID of subnets configured for the AWS Lambda function
Filters access by the ID of the VPC configured for the AWS Lambda function
Filters access by the tags associated with the resource
A minimal policy that allows lambda:CreateFunction. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowLambdaCreateFunction",
"Effect": "Allow",
"Action": "lambda:CreateFunction",
"Resource": "*"
}
]
}