AWS lambda documentation change

Service: lambda · 2025-08-28 · Documentation low

File: lambda/latest/dg/permissions-user-function.md

Summary

Removed an example IAM permissions policy for Lambda function development

Security assessment

Policy removal could impact permission guidance but lacks explicit evidence of addressing a security vulnerability. May indicate deprecated practices but no direct security context provided.

Diff

diff --git a/lambda/latest/dg/permissions-user-function.md b/lambda/latest/dg/permissions-user-function.md
index ce16db834..f0469227e 100644
--- a//lambda/latest/dg/permissions-user-function.md
+++ b//lambda/latest/dg/permissions-user-function.md
@@ -17,76 +16,0 @@ The following shows an example of a permissions policy with limited scope. It al
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "ReadOnlyPermissions",
-                "Effect": "Allow",
-                "Action": [
-                    "lambda:GetAccountSettings",
-                    "lambda:GetEventSourceMapping",
-                    "lambda:GetFunction",
-                    "lambda:GetFunctionConfiguration",           
-                    "lambda:GetFunctionCodeSigningConfig",
-                    "lambda:GetFunctionConcurrency",                
-                    "lambda:ListEventSourceMappings",
-                    "lambda:ListFunctions",      
-                    "lambda:ListTags",
-                    "iam:ListRoles"
-                ],
-                "Resource": "*"
-            },
-            {
-                "Sid": "DevelopFunctions",
-                "Effect": "Allow",
-                "NotAction": [
-                    "lambda:AddPermission",
-                    "lambda:PutFunctionConcurrency"
-                ],
-                "Resource": "arn:aws:lambda:*:*:function:intern-*"
-            },
-            {
-                "Sid": "DevelopEventSourceMappings",
-                "Effect": "Allow",
-                "Action": [
-                    "lambda:DeleteEventSourceMapping",
-                    "lambda:UpdateEventSourceMapping",
-                    "lambda:CreateEventSourceMapping"
-                ],
-                "Resource": "*",
-                "Condition": {
-                    "StringLike": {
-                        "lambda:FunctionArn": "arn:aws:lambda:*:*:function:intern-*"
-                    }
-                }
-            },
-            {
-                "Sid": "PassExecutionRole",
-                "Effect": "Allow",
-                "Action": [
-                    "iam:ListRolePolicies",
-                    "iam:ListAttachedRolePolicies",
-                    "iam:GetRole",
-                    "iam:GetRolePolicy",
-                    "iam:PassRole",
-                    "iam:SimulatePrincipalPolicy"
-                ],
-                "Resource": "arn:aws:iam::*:role/intern-lambda-execution-role"
-            },
-            {
-                "Sid": "ViewLogs",
-                "Effect": "Allow",
-                "Action": [
-                    "logs:*"
-                ],
-                "Resource": "arn:aws:logs:*:*:log-group:/aws/lambda/intern-*"
-            }
-        ]
-    }
-    
-