To set up an AWS Lambda function using AWS CloudFormation, with an IAM role, you can use the <code>AWS::IAM::Role</code> and <code>AWS::Lambda::Function</code> resources. Here is an example of how you might use these resources in a CloudFormation template:
 Resources:
 MyIAMRole:
 Type: AWS::IAM::Role
 Properties:
 AssumeRolePolicyDocument:
 Version: 2012-10-17
 Statement:
<ul>
<li>Effect: Allow
Principal:
 Service:<ul>
<li><a href="http://lambda.amazonaws.com" class="autolinkedURL autolinkedURL-url" target="_blank">lambda.amazonaws.com</a>
Action:<ul>
<li>sts:AssumeRole
Policies:</li>
<li>PolicyName: MyPolicy
PolicyDocument:
Version: 2012-10-17
Statement:</li>
<li>Effect: Allow
Action:</li>
<li>s3:ListBucket
Resource: arn:aws:s3:::my-bucket
MyFunction:
Type: AWS::Lambda::Function
Properties:
Code:
ZipFile: |
def handler(event, context):
return "Hello, World!"
Handler: index.handler
Role: !GetAtt MyIAMRole.Arn
Runtime: python3.8
Timeout: 30</li>
</ul>
</li>
</ul>
</li>
</ul>
This will create an IAM role (<code>MyIAMRole</code>) with a policy that allows the Lambda function to list the objects in the <code>my-bucket</code> S3 bucket. It will also create a Lambda function (<code>MyFunction</code>) that runs a Python 3.8 runtime and has a 30-second timeout. The function code is specified using a `Zip
The post <a target="_blank" href="https://abhayksingh.com/setting-up-an-aws-lambda-function-with-an-iam-role-using-aws-cloudformation/">Setting up an AWS Lambda function with an IAM role using AWS CloudFormation</a> appeared first on <a target="_blank" href="https://abhayksingh.com">Abhay Singh</a>.

To set up an AWS Lambda function using AWS CloudFormation, with an IAM role, you can use the `AWS::IAM::Role` and `AWS::Lambda::Function` resources. Here is an example of how you might use these resources in a CloudFormation template:

    Resources:
      MyIAMRole:
        Type: AWS::IAM::Role
        Properties:
          AssumeRolePolicyDocument:
            Version: 2012-10-17
            Statement:
              - Effect: Allow
                Principal:
                  Service:
                    - lambda.amazonaws.com
                Action:
                  - sts:AssumeRole
          Policies:
            - PolicyName: MyPolicy
              PolicyDocument:
                Version: 2012-10-17
                Statement:
                  - Effect: Allow
                    Action:
                      - s3:ListBucket
                    Resource: arn:aws:s3:::my-bucket
      MyFunction:
        Type: AWS::Lambda::Function
        Properties:
          Code:
            ZipFile: |
              def handler(event, context):
                return "Hello, World!"
          Handler: index.handler
          Role: !GetAtt MyIAMRole.Arn
          Runtime: python3.8
          Timeout: 30

This will create an IAM role (`MyIAMRole`) with a policy that allows the Lambda function to list the objects in the **`my-bucket` S3 bucket**. It will also create a Lambda function **(`MyFunction`)** that runs a Python 3.8 runtime and has a 30-second timeout. The function code is specified using a \`Zip

The post [Setting up an AWS Lambda function with an IAM role using AWS CloudFormation](https://abhayksingh.com/setting-up-an-aws-lambda-function-with-an-iam-role-using-aws-cloudformation/) appeared first on [Abhay Singh](https://abhayksingh.com).

Setting up an AWS Lambda function with an IAM role using AWS CloudFormation

I am a professional with 9 years of experience in AWS Cloud, specializing in Solution Architecture. I hold an AWS Solution Architect certification.
