Control: AWS > Lambda > Function > Layer Trusted Access

Manage trusted access for AWS Lambda function layers.

AWS allows Lambda function layers to be shared with specific AWS accounts. This control allows you to configure whether such sharing is allowed, and to which accounts.

If set to Enforce, access to non-trusted accounts will be removed.

Resource Types

This control targets the following resource types:

AWS > Lambda > Function

Policies

The following policies can be used to configure this control:

AWS > Lambda > Function > Layer Trusted Access

This control type relies on these other policies when running actions:

AWS > Lambda > Function > Layer Trusted Access > Accounts

Permissions

Cloud permissions used by this control and its actions:

lambda:UpdateFunctionConfiguration

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-lambda#/control/types/functionLayerTrustedAccess

Category URI

tmod:@turbot/turbot#/control/categories/securityTrustedAccess

GraphQL

query controlType(id: "tmod:@turbot/aws-lambda#/control/types/functionLayerTrustedAccess") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-lambda#/control/types/functionLayerTrustedAccess'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-lambda#/control/types/functionLayerTrustedAccess"