AWS Lambda opens full IAM policy documents

AWS Lambda now accepts full 20KB JSON resource-based policies, letting teams put multiple principals, explicit denies, and the full range of IAM condition keys into one document, according to AWS’s launch note and the Lambda policy guide. The change is available across commercial Regions at no extra charge, but put-resource-policy replaces the existing policy, so teams extending the archive’s case for explicit approval boundaries on agent write actions should fetch the revision before automating updates.