# AWS Security Lessons: Auditing Lambda Execution Roles at Scale

Page: https://stenobird.com/podcast/the-business-compass-llc-podcasts-7078188/aws-security-lessons-auditing-lambda-execution-roles-at-scale
Text version: https://stenobird.com/podcast/the-business-compass-llc-podcasts-7078188/aws-security-lessons-auditing-lambda-execution-roles-at-scale.md
Podcast: [The Business Compass LLC Podcasts](https://stenobird.com/podcast/the-business-compass-llc-podcasts-7078188)
Published: 2026-06-17T05:05:59+00:00
Episode link: https://podcast.businesscompassllc.com/e/aws-security-lessons-auditing-lambda-execution-roles-at-scale/
Audio file: https://mcdn.podbean.com/mf/web/66wygs59838q9uif/6e32eea0-1667-4d18-8623-9bc81be15826.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/the-business-compass-llc-podcasts-7078188/episodes/aws-security-lessons-auditing-lambda-execution-roles-at-scale
Duration seconds: 1337

## Resource

If your AWS environment runs dozens or hundreds of Lambda functions, there’s a good chance some of those functions have way more permissions than they actually need. That’s a real problem. Overpermissioned Lambda roles are one of the most common and quietly dangerous security gaps in cloud environments — and most teams don’t catch them until something goes wrong.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/the-business-compass-llc-podcasts-7078188/episodes/aws-security-lessons-auditing-lambda-execution-roles-at-scale/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/the-business-compass-llc-podcasts-7078188/aws-security-lessons-auditing-lambda-execution-roles-at-scale.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.