I added the following inline policy to IAM user. The Role should only see lambdas tagged with environment:development. but this gives error.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"lambda:GetAccountSettings",
"lambda:ListFunctions"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"aws:ResourceTag/environment": "development"
}
}
}
]
}
[![error][1]][1]
if i remove the entire condition field the user can list all lambdas fine. with some warning at the top. what is the problem with the Condition?
[![error2][1]][1]