Company
Date Published
Author
DeveloperSteve
Word count
1257
Language
English
Hacker News points
None

Summary

AWS Lambda's new Attribute-Based Access Control (ABAC) functionality allows for more fine-grained control over access to resources, enabling organizations to manage access based on project or team tags. This feature is now in general availability and can be used to allocate resource access dynamically while maintaining user-level control. With ABAC, IAM users can only access Lambda functions with matching tags, allowing for a dynamic way to create and access resources. The new controls being made available to Lambda functions include `aws:RequestTag/key`, `aws:tagKeys`, `aws:PrincipalTag/key`, and `aws:ResourceTag/key`, which provide more dimensions to how IAM permissions, roles, and users can be defined. By utilizing these controls, organizations can create policies dynamically to allow permissions to Lambda API actions only if the resource tag matches the IAM role tag. Additionally, Lumigo's Tag Filtering feature allows for filtering specific resource tags, enabling end-to-end observability of Lambda functions.