With Lambda functions, there are only one required permission to invoke the function

Explanation

With Lambda functions, there are two sides that define the necessary scope of permissions – permission to invoke the function, and permission of the Lambda function itself to act upon other services.