Attach an existing role to AWS Lambda with AWS CDK

user_8514837 0
Viewed 4885

I want to attach and existing role to a lambda created using CDK I am doing the below

  const role1 = iam.Role.fromRoleArn(this, 'Role', 'ARN', {
         mutable: true,
    });
 const lambda1 = new lambda.Function(this, 'lambda1', {
        runtime: lambda.Runtime.PYTHON_3_7,
        code: lambda.Code.asset('lambda/lambda1_function'),
        handler: 'lambda_function.lambda_handler',
        role:role1,
             reservedConcurrentExecutions: 1
    });

getting the below exception when I run cdk deploy

The role defined for the function cannot be assumed by Lambda. (Service: AWSLambdaInternal; Status Code: 400; Error Code: InvalidParameterValueException; Request ID:

If someone could help to fix this PS: I am using typescript CDK@1.27.0

aws-cdk aws-lambda typescript amazon-web-services
2 Answers

Based on the comments, the issue was incorrect trust policy in the role.

The issue was solved by adding lambda.amazonaws.com to the trust policy.

user_2488230

As per the role parameter documentation:

Lambda execution role.

This is the role that will be assumed by the function upon execution. It controls the permissions that the function will have. The Role must be assumable by the 'lambda.amazonaws.com' service principal.

this can be achieved by granting permission to lambda service:

role1.grant(new iam.ServicePrincipal("lambda.amazonaws.com"))
user_21168730
Related