Deploy and Configure IAM Role

In this guide, we demonstrate how to deploy and configure an IAM role that enables AWS Lambda to securely execute a function. This specific function randomly selects a name from a predefined list. By following this tutorial, you'll learn how to create an IAM role with the necessary trust relationships and permissions.

Creating the IAM Role

To create an instance of an IAM role, provide a unique name and specify an assume role policy that grants AWS Lambda the required permissions to assume the role. The sample code below illustrates the creation of the IAM role:

const lambdaRole = new iamRole.IamRole(this, 'lambda-execution-role', {
  name: 'name-picker-execution-role',
  assumeRolePolicy: JSON.stringify({
    Version: '2012-10-17',
    Statement: [{
      Effect: 'Allow',
      Principal: { Service: 'lambda.amazonaws.com' },
      Action: 'sts:AssumeRole'
    }],
  })
});

In this snippet:

• The name property specifies the IAM role's name.
• The assumeRolePolicy property sets up a policy that allows the AWS Lambda service (designated in the Principal field) to assume this role using the sts:AssumeRole action.

Verifying the IAM Role in AWS Console

After deploying the role, you can verify its configuration in the AWS Management Console. The image below displays the IAM role details, including creation date and permissions:

Within the "Trust Relationships" tab of the role, you will find the trust policy that was defined in the code above.

Deployment Flow Overview

Every AWS Lambda function is bound to a specific IAM role, ensuring it has the necessary permissions to perform its tasks. The following flowchart provides a high-level overview of the deployment process, from configuring the IAM role to extending functionality with additional infrastructure components:

What's Next?

In the next section, we will walk through creating a construct for the Lambda function itself. Stay tuned to learn how to integrate the IAM role with your Lambda deployment for secure and scalable applications.

For more detailed information on AWS IAM roles and Lambda functions, be sure to check out the AWS Documentation.

Happy deploying!