title: Hide environment variables from AWS Lambda Console
body: <p>I have some lambda functions which uses some environment variables. I understand that we can use AWS KMS to encrypt them and then from AWS console they will not be visible.</p>
  
  <p>In my case using KMS is not possible so I was wondering if there is some other way, probably by restricting at IAM level so that a user should not see env variables.</p>
  
  <p>I have already tried removing <code>GetFunction</code> and <code>GetFunctionConfiguration</code> from policy. It works but the problem is, user is not able to see other things because now <code>GetFunctionConfiguration</code> is not allowed.</p>
  
  <p>Is there any fine grain permission setting which can only hide env variables from the AWS Lambda console?</p>
  
  <p>Thanks in advance.</p>