lambda.yml

Actions:
  - Name: lambda:AddLayerVersionPermission
  - Name: lambda:AddPermission
  - Name: lambda:CreateAlias
  - Name: lambda:CreateCodeSigningConfig
  - Name: lambda:CreateEventSourceMapping
  - Name: lambda:CreateFunction
  - Name: lambda:CreateFunctionUrlConfig
  - Name: lambda:DeleteAlias
  - Name: lambda:DeleteCodeSigningConfig
  - Name: lambda:DeleteEventSourceMapping
  - Name: lambda:DeleteFunction
  - Name: lambda:DeleteFunctionCodeSigningConfig
  - Name: lambda:DeleteFunctionConcurrency
  - Name: lambda:DeleteFunctionEventInvokeConfig
  - Name: lambda:DeleteFunctionUrlConfig
  - Name: lambda:DeleteLayerVersion
  - Name: lambda:DeleteProvisionedConcurrencyConfig
  - Name: lambda:GetAccountSettings
  - Name: lambda:GetAlias
  - Name: lambda:GetCodeSigningConfig
  - Name: lambda:GetEventSourceMapping
  - Name: lambda:GetFunction
  - Name: lambda:GetFunctionCodeSigningConfig
  - Name: lambda:GetFunctionConcurrency
  - Name: lambda:GetFunctionConfiguration
  - Name: lambda:GetFunctionEventInvokeConfig
  - Name: lambda:GetFunctionUrlConfig
  - Name: lambda:GetLayerVersion
  - Name: lambda:GetLayerVersionPolicy
  - Name: lambda:GetPolicy
  - Name: lambda:GetProvisionedConcurrencyConfig
  - Name: lambda:GetRuntimeManagementConfig
  - Name: lambda:InvokeAsync
  - Name: lambda:ListAliases
  - Name: lambda:ListCodeSigningConfigs
  - Name: lambda:ListEventSourceMappings
  - Name: lambda:ListFunctionEventInvokeConfigs
  - Name: lambda:ListFunctionUrlConfigs
  - Name: lambda:ListFunctions
  - Name: lambda:ListFunctionsByCodeSigningConfig
  - Name: lambda:ListLayerVersions
  - Name: lambda:ListLayers
  - Name: lambda:ListProvisionedConcurrencyConfigs
  - Name: lambda:ListTags
  - Name: lambda:ListVersionsByFunction
  - Name: lambda:PublishLayerVersion
  - Name: lambda:PublishVersion
  - Name: lambda:PutFunctionCodeSigningConfig
  - Name: lambda:PutFunctionConcurrency
  - Name: lambda:PutFunctionEventInvokeConfig
  - Name: lambda:PutProvisionedConcurrencyConfig
  - Name: lambda:PutRuntimeManagementConfig
  - Name: lambda:RemoveLayerVersionPermission
  - Name: lambda:RemovePermission
  - Name: lambda:TagResource
  - Name: lambda:UntagResource
  - Name: lambda:UpdateAlias
  - Name: lambda:UpdateCodeSigningConfig
  - Name: lambda:UpdateEventSourceMapping
  - Name: lambda:UpdateFunctionCode
  - Name: lambda:UpdateFunctionConfiguration
  - Name: lambda:UpdateFunctionEventInvokeConfig
  - Name: lambda:UpdateFunctionUrlConfig

  # actions with no corresponding API
  - Name: lambda:DisableReplication
  - Name: lambda:EnableReplication
  - Name: lambda:GetFunctionRecursionConfig
  - Name: lambda:InvokeFunction
  - Name: lambda:InvokeFunctionUrl
  - Name: lambda:PutFunctionRecursionConfig
  - Name: lambda:UpdateFunctionCodeSigningConfig

  # APIs without an IAM action
  - Name: lambda:GetLayerVersionByArn
  - Name: lambda:Invoke
  - Name: lambda:InvokeWithResponseStream