lambda:CreateFunction
Literal appearances in AWS managed IAM policies. Statements that use wildcards (for example s3:*) are not counted here. This is not an IAM authorization simulation.
Policies (any)
30
Allow (Action)
27
Deny (Action)
3
NotAction
0
Index generated 7/6/2026, 8:16:12 PM. 564 policies include at least one wildcard action string (any service).
Action reference
SAR-style (unofficial)Service: AWS Lambda
Access level
WriteDescription
Grants permission to create an AWS Lambda function
Resource types
- function*
Dependent actions
- iam:PassRole
- lambda:PassCapacityProvider
Allow (Action)
- AWSApplicationMigrationNetworkMigrationMultiAccount
- AWSB9InternalServicePolicy
- AWSDeepLensServiceRolePolicy
- AWSDeepRacerCloudFormationAccessPolicy
- AWSDeepRacerServiceRolePolicy
- AWSIoTDeviceTesterForGreengrassFullAccess
- AWSLambdaReplicator
- AWSLambdaReplicatorInternal
- AWSQuickSetupPatchPolicyDeploymentRolePolicy
- AWSQuickSetupSSMDeploymentRolePolicy
- AWSRoboMakerServicePolicy
- AWSRoboMakerServiceRolePolicy
- AWSThinkboxDeadlineResourceTrackerAdminPolicy
- AdministratorAccess-Amplify
- AmazonDynamoDBFullAccess
- AmazonLaunchWizardFullAccessV2
- AmazonLaunchWizardFullaccess
- AmazonLaunchWizard_Fullaccess
- AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy
- AmazonSageMakerModelCustomizationCoreAccess
- AmazonSageMakerPartnerServiceCatalogProductsCloudFormationServiceRolePolicy
- AmazonSageMakerPipelinesIntegrations
- AmazonSecurityLakeAdministrator
- CloudWatchSyntheticsFullAccess
- DatabaseAdministrator
- SageMakerStudioProjectProvisioningRolePolicy
- SecretsManagerReadWrite
NotAction
None
Thanks to Ian McKay for iam-dataset (MIT), structured data derived from the AWS Service Authorization Reference. Not maintained by AWS and not guaranteed current. IAMTrail's managed policy archive is separate.
Definitions bundle generated 7/6/2026, 8:16:12 PM