Fix #267 Mention the necessity of lambda:InvokeFunction permission in…

… lazy listener document
slackapi · Apr 9, 2021 · 12ce26a · 12ce26a
1 parent efab010
commit 12ce26a
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 2 deletions.
diff --git a/docs/_advanced/lazy_listener.md b/docs/_advanced/lazy_listener.md
@@ -54,7 +54,8 @@ pip install slack_bolt
 # https://pypi.org/project/python-lambda/
 pip install python-lambda
 
-# Configure config.yml properly (AWSLambdaFullAccess required)
+# Configure config.yml properly
+# lambda:InvokeFunction & lambda:GetFunction are required for running lazy listeners
 export SLACK_SIGNING_SECRET=***
 export SLACK_BOT_TOKEN=xoxb-***
 echo 'slack_bolt' > requirements.txt
@@ -90,4 +91,23 @@ def handler(event, context):
     slack_handler = SlackRequestHandler(app=app)
     return slack_handler.handle(event, context)
 ```
+
+Please note that the followig IAM permissions would be required for running this example app.
+
+```json
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "VisualEditor0",
+            "Effect": "Allow",
+            "Action": [
+                "lambda:InvokeFunction",
+                "lambda:GetFunction"
+            ],
+            "Resource": "*"
+        }
+    ]
+}
+```
 </details>
diff --git a/examples/aws_lambda/lazy_aws_lambda_config.yaml b/examples/aws_lambda/lazy_aws_lambda_config.yaml
@@ -5,7 +5,8 @@ handler: lazy_aws_lambda.handler
 description: My first lambda function
 runtime: python3.8
 # role: lambda_basic_execution
-role: bolt_python_lambda_invocation #  AWSLambdaFullAccess
+# Have lambda:InvokeFunction & lambda:GetFunction in the allowed actions
+role: bolt_python_lambda_invocation 
 
 # S3 upload requires appropriate role with s3:PutObject permission
 # (ex. basic_s3_upload), a destination bucket, and the key prefix