title: AWS IAM Lambda "is not authorized to perform: lambda:GetFunction"
body: <p>When I have my IAM Policy for my lambda execution role set to:</p>
  
  <pre><code>{
      "Version": "2012-10-17",
      "Statement": [
          {
              "Action": [
                  "lambda:GetFunction"
              ],
              "Resource": [
                  "*"
              ],
              "Effect": "Allow"
          }
      ]
  }
  </code></pre>
  
  <p>I get this error:</p>
  
  <pre><code>[AccessDeniedException: User:
  arn:aws:sts::xxx:assumed-role/supercoolsoftware-dev-us-west-2-lambdaRole/supercoolsoftware-dev-addEmail
  is not authorized to perform: 
  lambda:GetFunction on resource:
  arn:aws:lambda:us-west-2:xxx:function:supercoolsoftware-dev-dailyEmail]
  </code></pre>
  
  <p>However, when I set the policy to:</p>
  
  <pre><code>{
      "Version": "2012-10-17",
      "Statement": [
          {
              "Action": [
                  "lambda:*"
              ],
              "Resource": [
                  "*"
              ],
              "Effect": "Allow"
          }
      ]
  }
  </code></pre>
  
  <p>The error is gone...  What else do I need to add?</p>