No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

You can specify the role(s) you want to use with the callbackfunction resource, but if you don’t, we set the following by default:

```AWSLambda_FullAccess
CloudWatchFullAccess
CloudWatchEventsFullAccess
AmazonS3FullAccess
AmazonDynamoDBFullAccess
AmazonSQSFullAccess
AmazonKinesisFullAccess
AWSCloudFormationReadOnlyAccess
AmazonCognitoPowerUser
AWSXrayWriteOnlyAccess```

(see comment here: <https://github.com/pulumi/pulumi-aws/blob/1fc37e531140fd0dfb6b39cbfca9a99dadd19be2/sdk/nodejs/lambda/lambdaMixins.ts#L266-L283>)

If you use the `aws.lambda.Function` then we don’t set anything by default and you have to specify a role to even create the function