AwsLambdaInvokeGrantArgs

interface AwsLambdaInvokeGrantArgs {
identity: string;
qualifier?: Input<string>;
service: AwsLambdaInvokeService;
sourceAccount?: Input<string>;
sourceArn: Input<string>;
}

Input arguments for a Lambda function invocation grant.

Remarks

Invoking-service components provide the exact source ARN while this Lambda-domain capability controls the action, service principal, function reference, logical name, and statement ID.

Example

CODE

const permission = lambda.functionReference?.grantInvoke({
  identity: 'orderEventsRule',
  service: 'eventbridge-rule',
  sourceArn: eventRule.arn,
});

Properties

`identity: string`

Stable synchronous identity for this source-to-function relationship.

`qualifier: Input<string>`

Optional function alias or version qualifier.

`service: AwsLambdaInvokeService`

Invoking AWS service.

`sourceAccount: Input<string>`

Source AWS account ID, required for S3 and CloudWatch alarm grants.

`sourceArn: Input<string>`

Exact ARN of the invoking resource.