securing-aws-lambda-execution-roles

What problem does it solve?

Lambda execution roles often accumulate over-privileged permissions, increasing the risk of credential leakage and unauthorized AWS API access. This Skill audits and refines those roles to enforce least-privilege configurations.

Core Features & Use Cases

• Audit Lambda execution roles for overly permissive policies and wildcard actions.
• Generate scoped, least-privilege policies using CloudTrail data, Access Analyzer, and policy generation workflows.
• Apply permission boundaries and trust policy safeguards, then validate via Access Analyzer and SCPs.
• Use across environments to strengthen security posture for serverless architectures.

Quick Start

Audit all Lambda execution roles in your account and generate scoped, least-privilege policies using the included workflow.