AWS_Lambda_6
Determine the specific permissions needed by your Lambda Functions, and then craft IAM policies for these permissions only, instead of full administrative privileges.There should not be any policies that grant blanket permissions (‘*’) to resources. It is recommended and considered a standard security best practice to grant least privileges that is, granting only the permissions required to perform a task.
For each Lambda Function that failed this rule, navigate to Policies on the IAM console. Search for the policy that failed the rule. Rework the permissions in the policy to grant positive permissions to specific AWS services or actions instead of blanket permissions using ‘*’.
Want to Know More?
Learn how our partners are managing their cloud security and compliance with Cloudlytics.
I hereby accept the GDPR and Privacy Policy, by subscribing to the newsletters.
