title: AWS AccessDeniedException for lambda ListFunctions on a IAM user
body: <p>PRE-NOTE: I perform all of my AWS provisioning via a IAM-user console account that essentially has all of the privileges of the AWS/Amazon account owner. I'll call this IAM-user the <strong>root</strong> account.</p>
  
  <p>Issue description:</p>
  
  <ul>
  <li>From the <strong>root</strong> account I created the following IAM-user, with
  programmatic only access: <strong>lambda-test</strong></li>
  <li>I added it's IAM access keys (as a profile entry) in my <strong>~/.aws/*</strong> files.</li>
  <li>Now to that <strong>lambda-test</strong> account, I next created an Inline/Embedded policy that allows the following AWS-Lamdba operations: <strong>ListFunctions, GetFunction, UpdateFunctionCode, UpdateFunctionConfiguration</strong></li>
  </ul>
  
  <p>The policy statement -- which validated correctly -- looks like this:</p>
  
  <pre><code>{
      "Version": "2012-10-17",
      "Statement": [
          {
              "Sid": "Stmt1111111111111",  # &lt;--- Altered for this post.
              "Effect": "Allow",
              "Action": [
                  "lambda:GetFunction",
                  "lambda:ListFunctions",
                  "lambda:UpdateFunctionCode",
                  "lambda:UpdateFunctionConfiguration"
              ],
              "Resource": [
                  "arn:aws:lambda:*"
              ]
          }
      ]
  }
  </code></pre>
  
  <p>Back at the laptop CLI, I issue the following command, which generates an AccessDeniedException:</p>
  
  <pre><code>user@linux$ aws lambda list-functions --profile lambda-test
  </code></pre>
  
  <p>Here is the exception:</p>
  
  <pre><code>An error occurred (AccessDeniedException) when calling the ListFunctions operation: User: arn:aws:iam::&lt;AWS-Account-ID&gt;:user/lambda-test is not authorized to perform: lambda:ListFunctions
  </code></pre>
  
  <p>Did I miss something? (Of course I did. =:))
  Thanks in advance!</p>