{"repo":"functionalone/serverless-iam-roles-per-function","free":true,"listed":false,"github":"https://github.com/functionalone/serverless-iam-roles-per-function","clone":"git clone https://github.com/functionalone/serverless-iam-roles-per-function.git","description":"Serverless Plugin for easily defining IAM roles per function via the use of iamRoleStatements at the function level.","language":"TypeScript","stars":416,"topics":["serverless","serverless-framework","aws","iam-policy","iam-role","lambda"],"license":"MIT","category":"deployment-docker-iac","readme_excerpt":"Serverless IAM Roles Per Function Plugin [![serverless][sls-image]][sls-url] [![npm package][npm-image]][npm-url] [![Build Status][travis-image]][travis-url] [![Coverage Status][coveralls-image]][coveralls-url] [![Dependencies Status][david-image]][david-url] [![Downloads][downloads-image]][npm-url] A Serverless plugin to easily define IAM roles per function via the use of iamRoleStatements at the function definition block. Installation Or if you want to try out the next upcoming version: Add the plugin to serverless.yml: Note : Node 6.10 or higher runtime required. Usage Define iamRoleStatements definitions at the function level: The plugin will create a dedicated role for each function that has an iamRoleStatements definition. It will include the permissions for create and write to CloudWatch logs, stream events and if VPC is defined: AWSLambdaVPCAccessExecutionRole will be included (as is done when using iamRoleStatements at the provider level). if iamRoleStatements are not defined at the function level default behavior is maintained and the function will receive the global IAM role. It is possible to define an empty iamRoleStatements for a function and then the function will receive a dedicated role with only the permissions needed for CloudWatch and (if needed) stream events and VPC. Example of defining a function with empty iamRoleStatements and configured VPC. The function will receive a custom role with CloudWatch logs permissions and the policy AWSLambdaVPCAccessExec","default_branch":null,"files":null,"tree":[],"storefront":"/r/functionalone","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/functionalone/serverless-iam-roles-per-function/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}