Grant access to vendor services

A vendor-service resource lets grant access to an entire service instead of on specific resource. For example, when using AWS, and you wish to grant a Lambda Function access to the S3 service, so it can manage buckets. This is in contrast to granting the Lambda Function permissions to access a bucket and the objects in it.

Add a Vendor service to your Blueprint

We'll use the S3 service as an example.

1. Add the S3 service to your Blueprint.
   
2. Create a connection from the function to the S3 service you've just added.
3. Set the desired access-level to the service.
   

When you deploy the project, an access policy is created that grants the function the permissions required.