Skip to content

Commit a68cfd0

Browse files
Update configuration-vpc.md
adding additional VPC permssions to align it with IAM policy
1 parent 174fd25 commit a68cfd0

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

doc_source/configuration-vpc.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,8 @@ Lambda uses your function's permissions to create and manage network interfaces\
3838
+ **ec2:CreateNetworkInterface**
3939
+ **ec2:DescribeNetworkInterfaces**
4040
+ **ec2:DeleteNetworkInterface**
41+
+ **ec2:AssignPrivateIpAddresses**
42+
+ **ec2:UnassignPrivateIpAddresses**
4143

4244
These permissions are included in the AWS managed policy **AWSLambdaVPCAccessExecutionRole**\.
4345

@@ -310,4 +312,4 @@ You can use the following sample AWS CloudFormation templates to create VPC conf
310312
+ [vpc\-private\.yaml](https://github.com/awsdocs/aws-lambda-developer-guide/blob/main/templates/vpc-private.yaml) – A VPC with two private subnets and VPC endpoints for Amazon Simple Storage Service \(Amazon S3\) and Amazon DynamoDB\. Use this template to create a VPC for functions that don't need internet access\. This configuration supports use of Amazon S3 and DynamoDB with the AWS SDKs, and access to database resources in the same VPC over a local network connection\.
311313
+ [vpc\-privatepublic\.yaml](https://github.com/awsdocs/aws-lambda-developer-guide/blob/main/templates/vpc-privatepublic.yaml) – A VPC with two private subnets, VPC endpoints, a public subnet with a NAT gateway, and an internet gateway\. Internet\-bound traffic from functions in the private subnets is routed to the NAT gateway using a route table\.
312314

313-
To create a VPC using a template, on the AWS CloudFormation console [Stacks page](https://console.aws.amazon.com/cloudformation/home#/stacks), choose **Create stack**, and then follow the instructions in the **Create stack** wizard\.
315+
To create a VPC using a template, on the AWS CloudFormation console [Stacks page](https://console.aws.amazon.com/cloudformation/home#/stacks), choose **Create stack**, and then follow the instructions in the **Create stack** wizard\.

0 commit comments

Comments
 (0)