Viewing and updating permissions in the execution role
This topic covers how you can view and update your function's execution role.
Viewing a function's execution role
To view a function's execution role, use the Lambda console.
To view a function's execution role (console)
Open the Functions page
of the Lambda console. -
Choose the name of a function.
-
Choose Configuration, and then choose Permissions.
-
Under Execution role, you can view the role that's currently being used as the function's execution role. For convenience, you can view all the resources and actions that the function can access under the Resource summary section. You can also choose a service from the dropdown list to see all permissions related to that service.
Updating a function's execution role
You can add or remove permissions from a function's execution role at any time, or configure your function to use a different role. If your function needs access to any other services or resources, you must add the necessary permissions to the execution role.
When you add permissions to your function, perform a trivial update to its code or configuration as well. This forces running instances of your function, which have outdated credentials, to stop and be replaced.
To update a function's execution role, you can use the Lambda console.
To update a function's execution role (console)
Open the Functions page
of the Lambda console. -
Choose the name of a function.
-
Choose Configuration, and then choose Permissions.
-
Under Execution role, choose Edit.
-
If you want to update your function to use a different role as the execution role, choose the new role in the dropdown menu under Existing role.
Note
If you want to update the permissions within an existing execution role, you can only do so in the AWS Identity and Access Management (IAM) console.
If you want to create a new role to use as the execution role, choose Create a new role from AWS policy templates under Execution role. Then, enter a name for your new role under Role name, and specify any policies you want to attach to the new role under Policy templates.
-
Choose Save.
