Step2: Create IAM Role to Access S3 and DynamoDB. ### Roles You can use roles to delegate access to users, applications, or services that don't normally have access to your AWS resources.
-
1.
open AWS Management Console
-
2.
To create IAM Role which grant access to S3 and DynamoDB full access, click "Services"
-
3.
Click "Security, Identity, & Compliance"
-
4.
Click "IAM"
-
5.
Click "Roles"
-
6.
Click "Create role"
-
7.
Select "AWS services" and click Next to continue. ### Note Allow AWS services like EC2, Lambda, or others to perform actions in this account.
-
8.
Select "Lambda" and click Next to continue. It allows Lambda functions to call AWS services on your behalf.
-
9.
Click "Next"
-
10.
Click and Search for AmazonS3FullAccess policy. Select the check box against AmazonS3FullAccess and click Next to continue.
-
11.
Remove **AmazonS3FullAccess ** from filter
-
12.
Click and Search for AmazonDynamoDBFullAccess policy. Select the check box against AmazonDynamoDBFullAccess and click Next to continue.
-
13.
Click "Next"
-
14.
Type the Role Name and click Next to continue. Ex. Lambda-S3toDynamoDB
-
15.
Click "Create role"
-
16.
Now the IAM Role to access S3 and DynamoDB is created successfully.