Use GetPolicy
with a CLI
The following code examples show how to use GetPolicy
.
- CLI
-
- Amazon CLI
-
To retrieve the resource-based IAM policy for a function, version, or alias
The following
get-policy
example displays policy information about themy-function
Lambda function.aws lambda get-policy \ --function-name
my-function
Output:
{ "Policy": { "Version":"2012-10-17", "Id":"default", "Statement": [ { "Sid":"iot-events", "Effect":"Allow", "Principal": {"Service":"iotevents.amazonaws.com"}, "Action":"lambda:InvokeFunction", "Resource":"arn:aws:lambda:us-west-2:123456789012:function:my-function" } ] }, "RevisionId": "93017fc9-59cb-41dc-901b-4845ce4bf668" }
For more information, see Using Resource-based Policies for Amazon Lambda
in the Amazon Lambda Developer Guide. -
For API details, see GetPolicy
in Amazon CLI Command Reference.
-
- PowerShell
-
- Tools for PowerShell V4
-
Example 1: This sample displays the Function policy of the Lambda function
Get-LMPolicy -FunctionName test -Select Policy
Output:
{"Version":"2012-10-17","Id":"default","Statement":[{"Sid":"xxxx","Effect":"Allow","Principal":{"Service":"sns.amazonaws.com"},"Action":"lambda:InvokeFunction","Resource":"arn:aws:lambda:us-east-1:123456789102:function:test"}]}
-
For API details, see GetPolicy
in Amazon Tools for PowerShell Cmdlet Reference (V4).
-
- Tools for PowerShell V5
-
Example 1: This sample displays the Function policy of the Lambda function
Get-LMPolicy -FunctionName test -Select Policy
Output:
{"Version":"2012-10-17","Id":"default","Statement":[{"Sid":"xxxx","Effect":"Allow","Principal":{"Service":"sns.amazonaws.com"},"Action":"lambda:InvokeFunction","Resource":"arn:aws:lambda:us-east-1:123456789102:function:test"}]}
-
For API details, see GetPolicy
in Amazon Tools for PowerShell Cmdlet Reference (V5).
-
For a complete list of Amazon SDK developer guides and code examples, see Using Lambda with an Amazon SDK. This topic also includes information about getting started and details about previous SDK versions.