AWS Lambda functions now support full IAM resource-based policies
AWS Lambda functions now support full Identity and Access Management (IAM) resource-based policies, allowing platform admins and security teams to define granular access permissions. This enhancement enables defining permissions for multiple principals and actions in a single policy document, utilizing the full range of IAM condition keys. The update streamlines policy management for multi-account architectures by allowing, for example, multiple services to invoke a function with a single policy. This capability is generally available in all AWS commercial Regions at no additional charge.
Features (1) ›
- Full IAM resource-based policies for Lambda functions
AWS Lambda functions now support full IAM resource-based policies, providing granular access permissions. This allows users to define permissions for multiple principals and actions in a single policy and leverage all IAM condition keys. The update enhances flexibility and simplifies policy management for teams operating multi-account architectures or managing multiple resources, such as restricting access based on source IP or principal tag.
https://aws.amazon.com/about-aws/whats-new/2026/08/aws-lambda-full-iam-resource-based-policies/
Related releases
- CloudFront OAC now natively supports S3 Multi-Region Access Points as origins AWS What's New ·
- AWS Lambda MicroVMs Expands Availability to Five New Regions AWS What's New ·
- AWS details custom authentication for Bedrock AgentCore using Lambda interceptors AWS Security Blog ·
- AWS CloudShell now includes a built-in visual file editor AWS What's New ·
- AWS IAM Role Manager Automates Service Role Setup AWS What's New ·
- AWS Lambda Adds Response Streaming for .NET Functions AWS Developer Tools Blog ·