Giving an AWS Lambda Function Access to a DynamoDB Table via an Execution Role

The student will create a Lambda function with a default execution role.

1. Log in to the AWS Management console.
2. Navigate to AWS Lambda.
3. Click Create function.
4. Ensure that Author from scratch is selected.
5. In the Basic information section, set the following values:
   • Function name: "CreateDynamoDBTable"
   • Runtime: Python 3.7
6. In Permissions, create a new role with basic Lambda permissions.
7. Create the Lambda function.
8. Copy and paste the Lambda function code from GitHub.
9. Deploy the Lambda function.

The student will excecute the Lambda code and make note of the error.

1. Log in to the AWS Management console.
2. Navigate to AWS Lambda.
3. Open the CreateDynamoDBTable Lambda function.
4. Click Test.
5. Create an empty test event.
6. Name the test event.
7. Click Create.
8. Click Deploy.
9. Click Test.
10. Observe the "not authorized" error message.

The student will update the Lambda's execution to allow access to DynamoDB.

1. Log in to the AWS Management console.
2. Navigate to AWS Lambda.
3. Open the CreateDynamoDBTable Lambda function.
4. Click the Configuration tab.
5. Click the Permissions tab.
6. Click the execution role name.
7. Attach the DynamoDB full access policy.
8. Navigate back to AWS Lambda and test the function again.
9. Observe that the table was created.