AWS Lambda (lambda)

2026-10-02

15 new actions, 3 new resources, 2 new conditions | 5 updated actions

Additions

    Actions
  • CreateWebFunction
    • Description:  Grants permission to create a Lambda web function
    • Access:  Write
    • Resources: 

      Name: webFunction

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

      lambda:Request/WebFunctionAuthType
  • CreateWebFunctionEndpoint
    • Description:  Grants permission to create an endpoint for a Lambda web function
    • Access:  Write
    • Resources: 

      Name: webFunction

      Required: Yes

    • Conditions: 

      lambda:Request/WebFunctionAuthType
  • CreateWebFunctionRevision
    • Description:  Grants permission to create a revision for a Lambda web function
    • Access:  Write
    • Resources: 

      Name: webFunction

      Required: Yes

  • DeleteWebFunction
    • Description:  Grants permission to delete a Lambda web function
    • Access:  Write
    • Resources: 

      Name: webFunction

      Required: Yes

  • DeleteWebFunctionEndpoint
    • Description:  Grants permission to delete an endpoint for a Lambda web function
    • Access:  Write
    • Resources: 

      Name: webFunctionEndpoint

      Required: Yes

    • Conditions: 

      lambda:Resource/WebFunctionAuthType
  • DeleteWebFunctionRevision
    • Description:  Grants permission to delete a revision for a Lambda web function
    • Access:  Write
    • Resources: 

      Name: webFunctionRevision

      Required: Yes

  • GetWebAccountSettings
    • Description:  Grants permission to view the account settings
    • Access:  Read
  • GetWebFunction
    • Description:  Grants permission to view details about a Lambda web function
    • Access:  Read
    • Resources: 

      Name: webFunction

      Required: Yes

  • GetWebFunctionEndpoint
    • Description:  Grants permission to view details about an endpoint for a Lambda web function
    • Access:  Read
    • Resources: 

      Name: webFunctionEndpoint

      Required: Yes

    • Conditions: 

      lambda:Resource/WebFunctionAuthType
  • GetWebFunctionRevision
    • Description:  Grants permission to view details about a revision for a Lambda web function
    • Access:  Read
    • Resources: 

      Name: webFunctionRevision

      Required: Yes

  • InvokeWebFunctionEndpoint
    • Description:  Grants permission to invoke a Lambda web function endpoint via HTTP
    • Access:  Write
    • Resources: 

      Name: webFunctionEndpoint

      Required: Yes

    • Conditions: 

      lambda:Resource/WebFunctionAuthType
  • ListWebFunctionEndpoints
    • Description:  Grants permission to retrieve a list of endpoints for a Lambda web function
    • Access:  List
    • Resources: 

      Name: webFunction

      Required: Yes

  • ListWebFunctionRevisions
    • Description:  Grants permission to retrieve a list of revisions for a Lambda web function
    • Access:  List
    • Resources: 

      Name: webFunction

      Required: Yes

  • ListWebFunctions
    • Description:  Grants permission to retrieve a list of Lambda web functions
    • Access:  List
  • UpdateWebFunctionEndpoint
    • Description:  Grants permission to update an endpoint for a Lambda web function
    • Access:  Write
    • Resources: 

      Name: webFunctionEndpoint

      Required: Yes

    • Conditions: 

      lambda:Request/WebFunctionAuthType

      lambda:Resource/WebFunctionAuthType
    Resources
  • webFunction
    • Arn:  arn:${Partition}:lambda:${Region}:${Account}:web-function/${FunctionName}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • webFunctionEndpoint
    • Arn:  arn:${Partition}:lambda:${Region}:${Account}:web-function/${FunctionName}/endpoint/${EndpointName}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • webFunctionRevision
    • Arn:  arn:${Partition}:lambda:${Region}:${Account}:web-function/${FunctionName}/revision/${RevisionId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
    Conditions
  • lambda:Request/WebFunctionAuthType
    • Description:  Filters access by the auth type specified in the request. Available during CreateWebFunction, CreateWebFunctionEndpoint, and UpdateWebFunctionEndpoint operations
    • Type:  String
  • lambda:Resource/WebFunctionAuthType
    • Description:  Filters access by the auth type configured on the web function endpoint resource. Available during InvokeWebFunctionEndpoint, UpdateWebFunctionEndpoint, DeleteWebFunctionEndpoint, and GetWebFunctionEndpoint operations
    • Type:  String

Updates