Step-by-Step Guide to Creating an IAM Role for AWS Lambda

Stanislav Lazarenko

·

Follow

2 min read

·

Oct 30, 2023

--

Listen

Share

Step 1: Open the AWS Management Console and Navigate to IAM

1. Log in to your AWS account and open the AWS Management Console.
2. Navigate to the IAM (Identity and Access Management) service.

Step 2: Create a New Role

1. In the IAM dashboard, click on “Roles” in the left-hand navigation pane.
2. Click on the “Create role” button.

Step 3: Select the Service

1. In the “Select type of trusted entity” section, choose “AWS service.”
2. In the “Choose a use case” section, select “Lambda.”
3. Click on the “Next: Permissions” button.

Step 4: Attach Permissions

1. You’ll now be prompted to attach permissions policies to your role. Search for and select the AWSLambdaBasicExecutionRole policy. This policy allows your Lambda function to write logs to CloudWatch, which is essential for debugging.
2. Optionally, you can also add other policies if your Lambda function needs to access other AWS services.
3. Click on “Next: Tags.”

Step 5: Add Tags (Optional)

1. You can optionally add tags to your role, which can be useful for organization and cost tracking.
2. Click on “Next: Review.”

Step 6: Review and Create the Role

1. Give your role a descriptive name, such as LambdaExecutionRole.
2. Review the permissions and tags to make sure everything is in order.
3. Click on the “Create role” button.

Step 7: Get the Role ARN

1. After the role is created, you’ll be directed back to the list of roles.
2. Click on the role name you just created.
3. At the top of the summary page, you’ll see the ARN (Amazon Resource Name) for the role. Copy this ARN as you’ll need it when you’re creating your Lambda function programmatically.