# \#iam **URL:** https://forum.serverless.com/tag/iam/23.md [Latest](https://forum.serverless.com/latest.md) · [Categories](https://forum.serverless.com/categories.md) · [Tags](https://forum.serverless.com/tags.md) --- ## [Build which were working with serverless@v1.83.0 has started failing in serverless@v2.25.1](https://forum.serverless.com/t/build-which-were-working-with-serverless-v1-83-0-has-started-failing-in-serverless-v2-25-1/21256)
**Author:** [@smaurya](https://forum.serverless.com/u/smaurya)\ **Replies:** 0\ **Last updated:** [June 16, 2025, 3:44pm UTC](https://forum.serverless.com/t/build-which-were-working-with-serverless-v1-83-0-has-started-failing-in-serverless-v2-25-1/21256 "2025-06-16T15:44:19Z")
Build which were working with serverless@v1.83.0 has started failing in version serverless@v2.25.1 Serverless Error --------------------------------------- LambdaTriggerRole - Value of property ServiceToken must be of … --- ## [How to use SERVERLESS\_ACCESS\_KEY in shell script](https://forum.serverless.com/t/how-to-use-serverless-access-key-in-shell-script/20564)
**Author:** [@Potterpurpp](https://forum.serverless.com/u/Potterpurpp)\ **Replies:** 9\ **Last updated:** [September 30, 2024, 7:53am UTC](https://forum.serverless.com/t/how-to-use-serverless-access-key-in-shell-script/20564 "2024-09-30T07:53:13Z")
Here is sample shell script sudo yum install -y nodejs sudo npm install -g serverless export SERVERLESS\_ACCESS\_KEY="my\_access\_key" After run script on amazon linux 2023 and setup IAM role for instance. I can see serve… --- ## [Reducing admin role for serverless deployment](https://forum.serverless.com/t/reducing-admin-role-for-serverless-deployment/6579)
**Author:** [@NikitaLiashenko](https://forum.serverless.com/u/NikitaLiashenko)\ **Replies:** 3\ **Last updated:** [September 4, 2024, 3:09pm UTC](https://forum.serverless.com/t/reducing-admin-role-for-serverless-deployment/6579 "2024-09-04T15:09:35Z")
Hi, I’ve checked a lot of resources regarding Role an permissions user need to deploy Lambda with Serverless Framework including issues on Github(F.e. this) and topics on this forum. What I’ve found now are just some a… --- ## [Minimal IAM role for Serverless Framework](https://forum.serverless.com/t/minimal-iam-role-for-serverless-framework/20293)
**Author:** [@zferentz](https://forum.serverless.com/u/zferentz)\ **Replies:** 2\ **Last updated:** [June 26, 2024, 7:23pm UTC](https://forum.serverless.com/t/minimal-iam-role-for-serverless-framework/20293 "2024-06-26T19:23:53Z")
Hi everyone, Few years ago my team considered using Serverless Framework but eventually we were forced to choose CDK/Terraform since our security-department didn’t want to grant power-user/admin IAM role permission to… --- ## [Is it possible to replace inline policy with customer managed?](https://forum.serverless.com/t/is-it-possible-to-replace-inline-policy-with-customer-managed/18810)
**Author:** [@phas13](https://forum.serverless.com/u/phas13)\ **Replies:** 6\ **Last updated:** [June 18, 2024, 5:51pm UTC](https://forum.serverless.com/t/is-it-possible-to-replace-inline-policy-with-customer-managed/18810 "2024-06-18T17:51:45Z")
Our company is trying to pass security compliance, and one of requirements is not to have inline policies attached to roles. Is it possible to replace created by default inline policy attached to role with customer manag… --- ## [IAM Role not created, Role Used has resourceTag Limitation](https://forum.serverless.com/t/iam-role-not-created-role-used-has-resourcetag-limitation/20256)
**Author:** [@gw-bcharboneau](https://forum.serverless.com/u/gw-bcharboneau)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 7:41pm UTC](https://forum.serverless.com/t/iam-role-not-created-role-used-has-resourcetag-limitation/20256 "2024-06-06T19:41:39Z")
We are trying to create an IAM Role with Serverless Framework but the Role used by our CICD Process uses a Role With AdministratorAccess Policy and a Permissions boiundary that restricts iam:\*. however it allows a few ia… --- ## [Lambda upload s3 works for the first time, after that got access denied](https://forum.serverless.com/t/lambda-upload-s3-works-for-the-first-time-after-that-got-access-denied/19750)
**Author:** [@kimitri](https://forum.serverless.com/u/kimitri)\ **Replies:** 2\ **Last updated:** [December 18, 2023, 3:37pm UTC](https://forum.serverless.com/t/lambda-upload-s3-works-for-the-first-time-after-that-got-access-denied/19750 "2023-12-18T15:37:31Z")
Hello, I was looking for some post with my problem but I not founded nothing yet. So, I made a simple resize lambda function trigged by my S3 bucket, when image is uploaded on bucket, it got resized and copy to another… --- ## [How to modify update trust relationship of lambda execution role?](https://forum.serverless.com/t/how-to-modify-update-trust-relationship-of-lambda-execution-role/19676)
**Author:** [@ashishjullia19](https://forum.serverless.com/u/ashishjullia19)\ **Replies:** 0\ **Last updated:** [November 10, 2023, 5:41am UTC](https://forum.serverless.com/t/how-to-modify-update-trust-relationship-of-lambda-execution-role/19676 "2023-11-10T05:41:21Z")
I am trying to achieve, basically the title^ but cannot find any relevant information which will help me to directly achieve it via iam: block --- ## [(Help) Use existing role instead of creating new roles](https://forum.serverless.com/t/help-use-existing-role-instead-of-creating-new-roles/12633)
**Author:** [@sudo-shubham](https://forum.serverless.com/u/sudo-shubham)\ **Replies:** 1\ **Last updated:** [November 1, 2023, 12:58am UTC](https://forum.serverless.com/t/help-use-existing-role-instead-of-creating-new-roles/12633 "2023-11-01T00:58:47Z")
I am using a restricted AWS account. Which has two roles: IAM (Allows all IAM permissions) Devops (Allows all permission except IAM Role creation) Currently sls deploy is trying to create two roles: IamRoleCustomRes… --- ## [UPDATE\_FAILED: IamRoleLambdaExecution (Error Code: MalformedPolicyDocument)](https://forum.serverless.com/t/update-failed-iamrolelambdaexecution-error-code-malformedpolicydocument/17979)
**Author:** [@avanavana](https://forum.serverless.com/u/avanavana)\ **Replies:** 3\ **Last updated:** [September 29, 2023, 9:23pm UTC](https://forum.serverless.com/t/update-failed-iamrolelambdaexecution-error-code-malformedpolicydocument/17979 "2023-09-29T21:23:33Z")
Hello! I have been receiving the error in the title of this post repeatedly, despite having scoured my serverless.yml file for hours, spending all night tweaking things, researching, tweaking again, consulting documenta… --- ## [s3:PutBucketPolicy Access Denied](https://forum.serverless.com/t/s3-putbucketpolicy-access-denied/18870)
**Author:** [@nirgluzman](https://forum.serverless.com/u/nirgluzman)\ **Replies:** 4\ **Last updated:** [September 14, 2023, 5:03pm UTC](https://forum.serverless.com/t/s3-putbucketpolicy-access-denied/18870 "2023-09-14T17:03:37Z")
Hi, I am following the guidelines to create S3 bucket which is served via CloudFront. S3 bucket does not need a public access, as the content is served from CloudFront. It seems that CloudFormation does not have the … --- ## [Serverless » The provided access key is not authorized for this operation. - Please contact support and provide this identifier to reference this issue - DXLNV333D9CC](https://forum.serverless.com/t/serverless-the-provided-access-key-is-not-authorized-for-this-operation-please-contact-support-and-provide-this-identifier-to-reference-this-issue-dxlnv333d9cc/16082)
**Author:** [@teatime](https://forum.serverless.com/u/teatime)\ **Replies:** 4\ **Last updated:** [August 16, 2023, 10:28am UTC](https://forum.serverless.com/t/serverless-the-provided-access-key-is-not-authorized-for-this-operation-please-contact-support-and-provide-this-identifier-to-reference-this-issue-dxlnv333d9cc/16082 "2023-08-16T10:28:27Z")
Hello, I’m trying to create an application using Serverless, AWS Lambda and MongoDB so I was referencing this blog post: I’ve created an AWS account and set up an IAM user which I’ve placed under a group with Admin… --- ## [CloudFormation - CREATE\_FAILED while using existing s3 bucket without \`iam:CreateRole\`](https://forum.serverless.com/t/cloudformation-create-failed-while-using-existing-s3-bucket-without-iam-createrole/9552)
**Author:** [@gkeswani92](https://forum.serverless.com/u/gkeswani92)\ **Replies:** 3\ **Last updated:** [August 3, 2023, 11:27am UTC](https://forum.serverless.com/t/cloudformation-create-failed-while-using-existing-s3-bucket-without-iam-createrole/9552 "2023-08-03T11:27:19Z")
Hi, I am trying to deploy a lambda function that gets triggered when an AVRO file is written to an existing s3 bucket. My serverless.yml configuration is as follows: service: braze-lambdas provider: name: aws runt… --- ## [S3 upload works on sls offline but don't work after sls deploy on real aws api url](https://forum.serverless.com/t/s3-upload-works-on-sls-offline-but-dont-work-after-sls-deploy-on-real-aws-api-url/19275)
**Author:** [@malvee](https://forum.serverless.com/u/malvee)\ **Replies:** 0\ **Last updated:** [August 10, 2023, 5:35pm UTC](https://forum.serverless.com/t/s3-upload-works-on-sls-offline-but-dont-work-after-sls-deploy-on-real-aws-api-url/19275 "2023-08-10T17:35:51Z")
s3 upload works on sls offline but don’t work after sls deploy on real aws api url after sls deploy and I get the endpoint url and try to upload image but it give access denied error on my catch block thing of s3.putOb… --- ## [How do I attach BatchWriteItem Permission to my IAM role policy?](https://forum.serverless.com/t/how-do-i-attach-batchwriteitem-permission-to-my-iam-role-policy/7501)
**Author:** [@benraabe](https://forum.serverless.com/u/benraabe)\ **Replies:** 1\ **Last updated:** [June 3, 2023, 7:03am UTC](https://forum.serverless.com/t/how-do-i-attach-batchwriteitem-permission-to-my-iam-role-policy/7501 "2023-06-03T07:03:16Z")
Hey I just started with Serverless so I am trying to be as precise as possible with my problem. I am using AWS AppSyncDynamoDB resolvers to use GraphQL to store and retrieve data in my Amazon DynamoDB table. Everything … --- ## [Getting error: "The CloudFormation template is invalid: Template error: every Fn::GetAtt object requires two non-empty parameters, the resource name and the resource attribute"](https://forum.serverless.com/t/getting-error-the-cloudformation-template-is-invalid-template-error-every-fn-getatt-object-requires-two-non-empty-parameters-the-resource-name-and-the-resource-attribute/18367)
**Author:** [@testuser](https://forum.serverless.com/u/testuser)\ **Replies:** 0\ **Last updated:** [February 26, 2023, 2:39pm UTC](https://forum.serverless.com/t/getting-error-the-cloudformation-template-is-invalid-template-error-every-fn-getatt-object-requires-two-non-empty-parameters-the-resource-name-and-the-resource-attribute/18367 "2023-02-26T14:39:56Z")
When trying to deploy an app i keep getting the error in the console: The CloudFormation template is invalid: Template error: every Fn::GetAtt object requires two non-empty parameters, the resource name and the resource… --- ## [Command failed: npx sls s3deploy](https://forum.serverless.com/t/command-failed-npx-sls-s3deploy/17292)
**Author:** [@jmorales](https://forum.serverless.com/u/jmorales)\ **Replies:** 4\ **Last updated:** [November 8, 2022, 4:14pm UTC](https://forum.serverless.com/t/command-failed-npx-sls-s3deploy/17292 "2022-11-08T16:14:06Z")
When running serverless deploy I am getting AccessDenied when it is trying to Removing old service artifacts from S3 I am confused on which IAM permissions I should be given my policy. I have already given it full acces… --- ## [Serverless deployment in circleci failing](https://forum.serverless.com/t/serverless-deployment-in-circleci-failing/17808)
**Author:** [@Nazehs](https://forum.serverless.com/u/Nazehs)\ **Replies:** 0\ **Last updated:** [November 4, 2022, 8:38am UTC](https://forum.serverless.com/t/serverless-deployment-in-circleci-failing/17808 "2022-11-04T08:38:27Z")
I have been struggling with deploying this serverless lambda as it keeps failing in circleci with the below error: × Uncaught exception Environment: linux, node 14.20.0, framework 3.24.0 (local), plugin 6.2.2, SDK 4.3.2… --- ## [Created a table-key-alias referring to dynamodb-tables-kms-key via Serverless1. How to use this table-key-alias in the IAM customRole and policy in Serverless2?](https://forum.serverless.com/t/created-a-table-key-alias-referring-to-dynamodb-tables-kms-key-via-serverless1-how-to-use-this-table-key-alias-in-the-iam-customrole-and-policy-in-serverless2/17800)
**Author:** [@hmashruf](https://forum.serverless.com/u/hmashruf)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 5:53pm UTC](https://forum.serverless.com/t/created-a-table-key-alias-referring-to-dynamodb-tables-kms-key-via-serverless1-how-to-use-this-table-key-alias-in-the-iam-customrole-and-policy-in-serverless2/17800 "2022-11-02T17:53:55Z")
Created a table-key-alias referring to dynamodb-tables-kms-key via Serverless1. How to use this table-key-alias in the IAM customRole and policy in Servless2? --- ## [The provided execution role does not have permissions to call ReceiveMessage on SQS](https://forum.serverless.com/t/the-provided-execution-role-does-not-have-permissions-to-call-receivemessage-on-sqs/5685)
**Author:** [@danielsalles](https://forum.serverless.com/u/danielsalles)\ **Replies:** 3\ **Last updated:** [October 24, 2022, 7:39am UTC](https://forum.serverless.com/t/the-provided-execution-role-does-not-have-permissions-to-call-receivemessage-on-sqs/5685 "2022-10-24T07:39:11Z")
I changed my credentials AWS, and resolved to upload the project to deploy. But he accused this error. An error occurred: ReceiveEventSourceMappingSQSChatdev - The provided execution role does not have permissions to ca… --- ## [S3 bucket in different AWS account for serverless deployment than Lambda](https://forum.serverless.com/t/s3-bucket-in-different-aws-account-for-serverless-deployment-than-lambda/17631)
**Author:** [@hmanzer](https://forum.serverless.com/u/hmanzer)\ **Replies:** 0\ **Last updated:** [September 20, 2022, 9:31am UTC](https://forum.serverless.com/t/s3-bucket-in-different-aws-account-for-serverless-deployment-than-lambda/17631 "2022-09-20T09:31:13Z")
We can’t leave the deployment.zip file on s3 bucket in the same account where we are deploying lambda via serverless framework due to a security concern. We tried with maxdeploymentArtifact=0 to delete all zip files bu… --- ## ["Lambda Security Notification" from AWS involving IAM policies – need help determining action for serverless framework](https://forum.serverless.com/t/lambda-security-notification-from-aws-involving-iam-policies-need-help-determining-action-for-serverless-framework/16660)
**Author:** [@pallpointben](https://forum.serverless.com/u/pallpointben)\ **Replies:** 3\ **Last updated:** [September 8, 2022, 9:48am UTC](https://forum.serverless.com/t/lambda-security-notification-from-aws-involving-iam-policies-need-help-determining-action-for-serverless-framework/16660 "2022-09-08T09:48:08Z")
We use the serverless framework and a week or two ago we received the message below from AWS. I haven’t seen any discussion about this anywhere, which is puzzling because it seems like it’s a policy change that would aff… --- ## [Deploy using Serverless Framework without AWS Credentials](https://forum.serverless.com/t/deploy-using-serverless-framework-without-aws-credentials/17434)
**Author:** [@gunjan](https://forum.serverless.com/u/gunjan)\ **Replies:** 0\ **Last updated:** [July 25, 2022, 6:22am UTC](https://forum.serverless.com/t/deploy-using-serverless-framework-without-aws-credentials/17434 "2022-07-25T06:22:05Z")
Hi, The scenario is to deploy AWS Lambda. API Gateway on AWS using serverless framework without using AWS Credentials. Basically, the user’s credentials, API access key etc. cannot be shared. So, can we do this by kee… --- ## [Permissions for custom resource directing eventbridge events to targets](https://forum.serverless.com/t/permissions-for-custom-resource-directing-eventbridge-events-to-targets/17241)
**Author:** [@ezmiller](https://forum.serverless.com/u/ezmiller)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 4:59pm UTC](https://forum.serverless.com/t/permissions-for-custom-resource-directing-eventbridge-events-to-targets/17241 "2022-05-26T16:59:28Z")
I am trying to add custom resources to establish a rule on an existing EventBridge event bus that sends events to a Cloudwatch log group, and in another variation I am creating a rule to send event bus events to an SNS t… --- ## [An error occurred (AccessDeniedException) when calling the UpdateFunctionCode operation](https://forum.serverless.com/t/an-error-occurred-accessdeniedexception-when-calling-the-updatefunctioncode-operation/17187)
**Author:** [@bindu29](https://forum.serverless.com/u/bindu29)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 11:33am UTC](https://forum.serverless.com/t/an-error-occurred-accessdeniedexception-when-calling-the-updatefunctioncode-operation/17187 "2022-05-17T11:33:17Z")
Hi everyone! I am getting below error while deploying a jar file to the lambda function through s3 bucket using jenkins pipeline An error occurred (AccessDeniedException) when calling the UpdateFunctionCode operation: … --- ## [How do I solve the deploy serverless error : The provided access key is not authorized for this operation?](https://forum.serverless.com/t/how-do-i-solve-the-deploy-serverless-error-the-provided-access-key-is-not-authorized-for-this-operation/17174)
**Author:** [@steinko](https://forum.serverless.com/u/steinko)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 6:59am UTC](https://forum.serverless.com/t/how-do-i-solve-the-deploy-serverless-error-the-provided-access-key-is-not-authorized-for-this-operation/17174 "2022-05-17T06:59:22Z")
--- ## [Why I can't get a list of files in bucket folder?](https://forum.serverless.com/t/why-i-cant-get-a-list-of-files-in-bucket-folder/16866)
**Author:** [@alanwilter](https://forum.serverless.com/u/alanwilter)\ **Replies:** 1\ **Last updated:** [March 18, 2022, 7:25am UTC](https://forum.serverless.com/t/why-i-cant-get-a-list-of-files-in-bucket-folder/16866 "2022-03-18T07:25:48Z")
My lambda can download or upload files/folders to a bucket, no problems here. Then I just wanted to add another step, to check if files are there already and avoid uploading again. def list\_s3\_files(folder: str) -\> Lis… --- ## [How to create IAM user and use it's Access Key and Secret key in Lambda environment variables?](https://forum.serverless.com/t/how-to-create-iam-user-and-use-its-access-key-and-secret-key-in-lambda-environment-variables/16509)
**Author:** [@ribtoks](https://forum.serverless.com/u/ribtoks)\ **Replies:** 0\ **Last updated:** [January 8, 2022, 5:44pm UTC](https://forum.serverless.com/t/how-to-create-iam-user-and-use-its-access-key-and-secret-key-in-lambda-environment-variables/16509 "2022-01-08T17:44:16Z")
Hi I’d like to create a new IAM user (for programmatic access) with certain policies attached to it and get this user’s access key and secret key in some usable format (e.g. exported to be used within other serverless t… --- ## [Cross Account S3 notification](https://forum.serverless.com/t/cross-account-s3-notification/16260)
**Author:** [@karthikb](https://forum.serverless.com/u/karthikb)\ **Replies:** 0\ **Last updated:** [November 16, 2021, 4:08am UTC](https://forum.serverless.com/t/cross-account-s3-notification/16260 "2021-11-16T04:08:05Z")
Hello, Does anyone have a template for a serverless yaml file for a lambda which will get triggered when a file is created in a cross account bucket. I have a working example when the bucket is in the same account but I… --- ## [How to make a get object request on an s3 bucket](https://forum.serverless.com/t/how-to-make-a-get-object-request-on-an-s3-bucket/16070)
**Author:** [@kaykhan](https://forum.serverless.com/u/kaykhan)\ **Replies:** 1\ **Last updated:** [November 7, 2021, 8:51pm UTC](https://forum.serverless.com/t/how-to-make-a-get-object-request-on-an-s3-bucket/16070 "2021-11-07T20:51:31Z")
I have a lambda function that makes a GetObject request to an s3 bucket. However im getting the following error: AccessDenied: Access Denied\\n at deserializeAws\_restXmlGetObjectCommandError (/node\_modules/@aws-sdk/c… [Next page](https://forum.serverless.com/tag/iam/23.md?match_all_tags=true&page=1&tags%5B%5D=iam)