https://pulumi.com logo
Title
a

average-student-28073

03/24/2023, 10:55 AM
Hello there, Does Pulumi automatically create logging policies for Lambda functions created by it (specifically aws.lambda.CallbackFunction), Is there documentation available regarding to that?
b

brave-planet-10645

03/24/2023, 12:07 PM
You can specify the role(s) you want to use with the callbackfunction resource, but if you don’t, we set the following by default:
AWSLambda_FullAccess
CloudWatchFullAccess
CloudWatchEventsFullAccess
AmazonS3FullAccess
AmazonDynamoDBFullAccess
AmazonSQSFullAccess
AmazonKinesisFullAccess
AWSCloudFormationReadOnlyAccess
AmazonCognitoPowerUser
AWSXrayWriteOnlyAccess
If you use the
aws.lambda.Function
then we don’t set anything by default and you have to specify a role to even create the function
a

average-student-28073

03/24/2023, 12:12 PM
Great, thanks 🙂