amazon web services - Restrict AWS Lambda invocation to a single Alexa skill -
i trying learn alexa skill programming part of have set skill interface in amazon developer portal , corresponding aws lambda function. skill functioning fine have question on security aspect of lambda function. have selected alexa skill kit trigger lambda function , comparing application id in request application id of skill verify request intended function. (https://developer.amazon.com/public/solutions/alexa/alexa-skills-kit/docs/handling-requests-sent-by-alexa).
but how restrict lambda function invoked skill gets know lambda arn? can not misused waste compute resources etc?
arn private , it's upto decide trigger or not. if still want restrict can create custom role in iam , assign role lambda. trigger has specific role able execute lambda.
Comments
Post a Comment