Minimum permissions to deploy a Lambda function

Question

Which minimum permission does IAM user need to deploy a Lambda function using the AWS CLI? When selecting "attach policy directly" I get a long list of permissions but what permission do I need?

Answer

Hello.

If you create the following policy and attach it to the IAM user, the operations described in the following document will be possible.  
IAM-related operations allow creating IAM roles, attaching policies, and attaching IAM roles.  
Operations related to Lambda allow Lambda creation, configuration update, list display, details display, and deletion.  
https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-awscli.html  
```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Statement1",
            "Effect": "Allow",
            "Action": [
                "iam:CreateRole",
                "iam:AttachRolePolicy",
                "iam:PassRole",
                "lambda:CreateFunction",
                "lambda:update*",
                "lambda:ListFunctions",
                "lambda:GetFunction",
                "lambda:DeleteFunction"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}
```

Minimum permissions to deploy a Lambda function

Relevant content