https://serverless-stack.com/ logo
#sst
Title
# sst
d

Dennis Dang

04/06/2021, 5:29 PM
I see that there's a new role created for every lambda + stack. So we've almost reached our initial cap of 1000 roles available. Is that happening to others as well?
f

Frank

04/06/2021, 6:05 PM
I’m leaning towards having the limit lifted. But I’m open for ideas if ppl have thoughts on having all/some Lambdas share the same role.
d

Dennis Dang

04/08/2021, 5:34 AM
the easiest route seems to be to ask for an increase as necessary. playing devil's advocate here: why not have a shared role for basic lambda-api-gateway execution? the basics so far are • AWSLambdaBasicExecutionRoleCloudWatchLambdaInsightsExecutionRolePolicy • and a policy related to x-ray. what security are we losing if they were to share a basic role configured just for that api-gateway and stack? @Frank
f

Frank

04/08/2021, 9:41 AM
Yeah if it’s the same set of permissions granted to all Lambda, it makes sense to just share the same role.
Maybe we can add an option at the Stack level to turn this on/off
3 Views