Serverless: Admin policies
Function-based compute and serverless application packaging.
1 AWS managed policy. 1 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (1)
- AWSLambda_FullAccessAdmin
Grants full access to AWS Lambda service, AWS Lambda console features, and other related AWS services.
Also relevant to Serverless (4)
- AmazonDynamoDBFullAccesswithDataPipelineHigh privilegeAdmin
This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DynamoDBPipeline.html. Provides full access to Amazon DynamoDB including Export/Import using AWS Data Pip…
- AWSLambdaFullAccessHigh privilegeAdmin
This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/lambda/latest/dg/access-control-identity-based.html. Provides full access to Lambda, S3, DynamoDB, CloudWatch Metrics and Logs.
- CloudWatchSyntheticsFullAccessAdmin
Provides full access to CloudWatch Synthetics.
- SecretsManagerReadWriteAdmin
Provides read/write access to AWS Secrets Manager via the AWS Management Console. Note: this exludes IAM actions, so combine with IAMFullAccess if rotation configuration is required.