Use GetPolicy with a CLI
The following code examples show how to use GetPolicy.
- CLI
-
- Amazon CLI
-
To retrieve the resource-based IAM policy for a function, version, or alias
The following
get-policyexample displays policy information about themy-functionLambda function.aws lambda get-policy \ --function-namemy-functionOutput:
{ "Policy": { "Version":"2012-10-17", "Id":"default", "Statement": [ { "Sid":"iot-events", "Effect":"Allow", "Principal": {"Service":"iotevents.amazonaws.com"}, "Action":"lambda:InvokeFunction", "Resource":"arn:aws:lambda:us-west-2:123456789012:function:my-function" } ] }, "RevisionId": "93017fc9-59cb-41dc-901b-4845ce4bf668" }For more information, see Using Resource-based Policies for Amazon Lambda
in the Amazon Lambda Developer Guide. -
For API details, see GetPolicy
in Amazon CLI Command Reference.
-
- PowerShell
-
- Tools for PowerShell V4
-
Example 1: This sample displays the Function policy of the Lambda function
Get-LMPolicy -FunctionName test -Select PolicyOutput:
{"Version":"2012-10-17", "Id":"default","Statement":[{"Sid":"xxxx","Effect":"Allow","Principal":{"Service":"sns.amazonaws.com"},"Action":"lambda:InvokeFunction","Resource":"arn:aws:lambda:us-east-1:123456789102:function:test"}]}-
For API details, see GetPolicy
in Amazon Tools for PowerShell Cmdlet Reference (V4).
-
- Tools for PowerShell V5
-
Example 1: This sample displays the Function policy of the Lambda function
Get-LMPolicy -FunctionName test -Select PolicyOutput:
{"Version":"2012-10-17", "Id":"default","Statement":[{"Sid":"xxxx","Effect":"Allow","Principal":{"Service":"sns.amazonaws.com"},"Action":"lambda:InvokeFunction","Resource":"arn:aws:lambda:us-east-1:123456789102:function:test"}]}-
For API details, see GetPolicy
in Amazon Tools for PowerShell Cmdlet Reference (V5).
-
For a complete list of Amazon SDK developer guides and code examples, see Using Lambda with an Amazon SDK. This topic also includes information about getting started and details about previous SDK versions.