Using existing IAM role when creating AWS Lambda Function

Question

I'm using CloudFormation to create a lambda function. Most of the documentation assumes the role will be created in the template. Is there a way to specify a role that has already been created via say the console? This question tackles a similar question but for EC2 instance creation: Associate existing IAM role with EC2 instance in CloudFormation

I'm looking for something like:

 "LambdaFunction": {
            "Type": "AWS::Lambda::Function",
            "Properties": {
                "FunctionName": "My Function"
                "Runtime": "netcoreapp2.0",
                "Handler": "handler.location",
                "Role": "Existing_Role"

Kannaiyan · Accepted Answer · 2018-08-21 16:13:00Z

8

If you refer to the cloud formation documentation,

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html

you can locate the Role attribute to replace your role.

It needs in arn format, not simply the rolename.

arn:aws:iam::554668579590:role/ProdAdmin

"FunctionName": {
  "Type": "AWS::Lambda::Function",
  "Properties": {
    "Handler": "index.handler",
    "Role": "arn:aws:iam::AccountID:role/RoleName",
    "Code": {
      "S3Bucket": "lambda-functions",
      "S3Key": "amilookup.zip"
    },
    "Runtime": "nodejs4.3",
    "Timeout": 25,
    "TracingConfig": {
      "Mode": "Active"
   }
  }
}

answered Aug 21, 2018 at 16:13

Kannaiyan

13.1k4 gold badges52 silver badges91 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

kupsand · Accepted Answer · 2020-07-19 14:14:27Z

1

To run on multiple accounts with CloudFormation StackSets use Fn::Sub to substitutes variables - in this case, using Account ID:

"FunctionName": {
  "Type": "AWS::Lambda::Function",
  "Properties": {
    "Handler": "index.handler",
    "Role": { "Fn::Sub": "arn:aws:iam::${AWS::AccountId}:role/RoleName" },
    "Code": {
      "S3Bucket": "lambda-functions",
      "S3Key": "amilookup.zip"
    },
    "Runtime": "nodejs4.3",
    "Timeout": 25,
    "TracingConfig": {
      "Mode": "Active"
   }
  }
}

answered Jul 19, 2020 at 14:14

kupsand

1472 silver badges12 bronze badges

Comments

Vaibhav Nitturkar · Accepted Answer · 2021-06-08 04:13:22Z

0

This works "Role": { "Fn::Sub": "arn:aws:iam::${AWS::AccountId}:role/RoleName" },

answered Jun 8, 2021 at 4:13

Vaibhav Nitturkar

1

Collectives™ on Stack Overflow

Using existing IAM role when creating AWS Lambda Function

3 Answers 3

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related