Interface AdditionalResourcePermission

Lambda resource permission for fine-grained access control.

Defines specific permissions for AWS principals to access Lambda functions with optional source restrictions for enhanced security.

Use cases: S3 service permissions; EventBridge rule access; Cross-account data processing

AWS: Lambda resource policy permissions for controlled function access

Validation: principal and action are required; sourceAccount and sourceArn provide additional security

interface AdditionalResourcePermission {
    action: string;
    principal: string;
    sourceAccount?: string;
    sourceArn?: string;
}

Properties

action: string

Lambda action (e.g., lambda:InvokeFunction).

principal: string

AWS principal ARN for Lambda function access.

sourceAccount?: string

Optional source account restriction for cross-account security.

sourceArn?: string

Optional source resource ARN restriction for fine-grained access control.