A vendor-service resource lets grant access to an entire service instead of on specific resource. For example, when using AWS, and you wish to grant a Lambda Function access to the S3 service, so it can manage buckets. This is in contrast to granting the Lambda Function permissions to access a bucket and the objects in it.
Add a Vendor service to your Blueprint
We'll use the S3 service as an example.
- Add the S3 service to your Blueprint.
- Create a connection from the function to the S3 service you've just added.
- Set the desired access-level to the service.
When you deploy the project, an access policy is created that grants the function the permissions required.