Lambda Resource Based Policies

• Similar to Lambda Execution Role (IAM Role) but this is for
  • Other AWS account to invoke your lambda
  • Other AWS services to invoke your lambda
• An IAM pricnipal can access to lambda if eiher or both:
  • there is an IAM policy that attached to the principal that authorised it (user access)
  • there is a resource-based policy which authorises this IAM principal (service access)
• Normally for Lambda Asynchronous Invocation