Getting forbidden error for AWS Lambda Function URL

Question

I have created a basic lambda with lambda function url.

auth_type = aws_iam

allowed permissions for ec2 role in lambda resource based policy.

created a role to ec2 instance with full lambda permissions in the policy and attached it to the ec2 instance.

While invoking it from ec2 as below its getting forbidden error.

curl "https://<url-id>.lambda-url.<region>.on.aws"

I have tried with auth_type as none. Its working, but not working when i try with auth_type as aws_iam.

Marcin · Accepted Answer · 2022-10-27 08:12:01Z

5

As explained in the docs, to invoke a lambda url with AWS_IAM, you have to sign your url request by constracting special URL which has your signature. Please check docs on how to construct a valid signature for URL requests.

answered Oct 27, 2022 at 8:12

Marcin

241k16 gold badges315 silver badges368 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

ChildishGirl · Accepted Answer · 2023-04-25 11:27:24Z

4

Just to add more details to the previous answer, you can invoke Lambda URL using the following command:

curl --aws-sigv4 "aws:amz:<REGION>:lambda" \
      --user "<ACCESS-KEY-ID>:<SECRET-KEY-ID>" \
      'https://<URL-ID>.lambda-url.<REGION>.on.aws/?message=HelloWorld' \
      -H 'content-type: application/json' \
      -d '{ "key": "value" }'

I added frequently used parameters to the request in case you need to pass them as well.

answered Apr 25, 2023 at 11:27

ChildishGirl

1497 bronze badges

Collectives™ on Stack Overflow

Getting forbidden error for AWS Lambda Function URL

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related