Skip to content

Conversation

@undermad
Copy link
Contributor

…ermission.

Proposed changes

What changed

  • Added "lambda:GetFunctionConfiguration" permission for manual f2f reset assumed role

Why did it change

  • Since Friday, the invocation of Lambda functions by the TSD, utilising the Switch run-book role, has failed. Our analysis indicates that the AWS role now mandates the lambda:GetFunctionConfiguration permission for running test events on Lambda functions via the AWS Console. This appears to be a recent, unannounced change implemented by AWS, or one for which we may have missed the notification

Issue tracking

  • BAU

Checklists

  • READMEs and documentation up-to-date
  • API/ unit/ contract tests have been written/ updated
  • No risk of exposure: PII, credentials, etc through logs/ code
  • Production changes appropriately staged out

@undermad undermad requested review from a team as code owners November 17, 2025 11:10
@sonarqubecloud
Copy link

@undermad undermad merged commit 497295b into main Nov 17, 2025
9 checks passed
@undermad undermad deleted the bau-lambda-invocation branch November 17, 2025 11:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants