AWS Lambda
Connect AWS Lambda to Iru Compliance Automation to collect function inventory, runtime, IAM role binding, and layer configuration metadata.
Serverless least privilege comes down to two questions: what can a function do, and who can invoke it. Iru connects to AWS Lambda and reads execution roles, resource policies, and encryption settings directly to answer both.
Key Capabilities
- Verify functions run with least-privilege execution roles
- Catch any function that's publicly or cross-account invokable without intent
- Confirm sensitive configuration is encrypted
Evidence Collected
- Function settings and execution roles
- Resource policies and invoke permissions
- Public and cross account exposure
- Encryption configuration for environment variables
- CloudTrail administrative changes