How to add/remove lambda layer version permissions on AWS console

Question

The lambda API reference has the [AddLayerVersionPermission](https://docs.aws.amazon.com/lambda/latest/api/API_AddLayerVersionPermission.html) & [RemoveLayerVersionPermission](https://docs.aws.amazon.com/lambda/latest/api/API_RemoveLayerVersionPermission.html) actions but I am unable to find a similar way to add/remove permissions to/from lambda layers on the console.

This is all I can see when I am creating lambda layers:

![Enter image description here](/media/postImages/original/IMDams2Rb0SZutYFMapRQ7Eg)

Is this expected?

re:Post Agent · Answer

Based on the information available, it appears that adding or removing Lambda layer version permissions is primarily done through the AWS CLI or API rather than directly through the AWS Console.

To add permissions to a Lambda layer version using the AWS CLI, you would use the `add-layer-version-permission` command. For example:

```
aws lambda add-layer-version-permission \
--layer-name my-layer \
--version-number 1 \
--statement-id xaccount \
--action lambda:GetLayerVersion \
--principal 123456789012 \
--output text
```

This grants the specified AWS account (123456789012) permission to use version 1 of your layer.

To revoke these permissions, you would use the `remove-layer-version-permission` command with the statement ID that you specified when you added the permission.

The AWS Console interface you've shown in your screenshot is for creating and configuring the layer itself, but doesn't include the cross-account permission management features. This is expected behavior, as these more advanced permission controls are currently available through the CLI and API interfaces rather than the console.

Remember that permissions apply only to a single layer version, so you'll need to repeat the process each time you create a new layer version.  
**Sources**  
[Granting Lambda layer access to other accounts - AWS Lambda](https://docs.aws.amazon.com/lambda/latest/dg/permissions-layer-cross-account.html)  
[Lambda examples using AWS CLI - AWS SDK Code Examples](https://docs.aws.amazon.com/code-library/latest/ug/cli_2_lambda_code_examples.html)  
[AddLayerVersionPermission - AWS Lambda](https://docs.aws.amazon.com/lambda/latest/api/API_AddLayerVersionPermission.html)

How to add/remove lambda layer version permissions on AWS console

Add your answer

Relevant content