Compute on AWS

Lambda functions that start with no permissions beyond writing their own logs. Every other permission is granted explicitly, one resource at a time, in one line.

Components

• Lambda — A Lambda function whose role can only write logs until you grant more. Graviton, one-year log retention and IAM-only function URLs by default.