Action |
String
|
Required: Yes. The Lambda actions that you want to allow in this statement. For example, you
can specify lambda:CreateFunction to specify a certain action, or use
a wildcard (lambda:*) to grant permission to all Lambda actions. For a
list of actions, see Actions
in the AWS Lambda Developer Guide.Update requires: Replacement |
FunctionName |
String
|
Required: Yes. The name (physical ID) or Amazon Resource Name (ARN) of the Lambda function that
you want to associate with this statement. Lambda adds this statement to the
function's access policy.Update requires: Replacement |
Principal |
String
|
Required: Yes. The entity for which you are granting permission to invoke the Lambda function.
This entity can be any valid AWS service principal, such as
s3.amazonaws.com or sns.amazonaws.com, or, if you are
granting cross-account permission, an AWS account ID. For example, you might want
to allow a custom application in another AWS account to push events to Lambda by
invoking your function.Update requires: Replacement |
SourceAccount |
String
|
Required: No. The AWS account ID (without hyphens) of the source owner. For example, if you
specify an S3 bucket in the SourceArn property, this value is the
bucket owner's account ID. You can use this property to ensure that all source
principals are owned by a specific account.ImportantThis property is not supported by all event sources. For more information, see the SourceAccount parameter for the AddPermission action in the AWS Lambda Developer Guide.Update requires: Replacement |
SourceArn |
String
|
Required: No. The ARN of a resource that is invoking your function. When granting Amazon Simple Storage Service
(Amazon S3) permission to invoke your function, specify this property with the bucket
ARN as its value. This ensures that events generated only from the specified
bucket, not just any bucket from any AWS account that creates a mapping to your
function, can invoke the function.ImportantThis property is not supported by all event sources. For more information, see the SourceArn parameter for the AddPermission action in the AWS Lambda Developer Guide.Update requires: Replacement |