AWS has expanded Lambda with full IAM resource-based policy support, giving platform and security teams more granular control over function access. Previously, customers had to add permissions individually for each principal.
Teams can now define multiple principals and actions within one policy and use the full range of IAM condition keys.
This enables controls based on factors such as source IP addresses and principal tags while simplifying permissions across multi-account environments. Policies can be updated through the Lambda console, AWS CLI, SDKs, CloudFormation, and AWS SAM. The capability is available across all AWS commercial Regions at no additional cost.
