How to Run AWS Lambda Container Images as a Non-Root User and Satisfy Security Scanners

Introduction One of the supported runtimes for AWS Lambda is containers. AWS offers a set of base images with a Lambda Interface Client built-in, which is required to run your code in the context of AWS Lambda. The actual usage varies depending on your language of choice. The Runtime Interface Client (RIC) is available as a library that you either call directly in your application’s entrypoint (in case of Go), or you use the provided entrypoint and pass a name to your handler, which is the case for Python or NodeJS. ...

May 26, 2025 · 6 min · 1164 words · Simon

AWS Lambda & ECR: A Permissions Guide for Same-Account, Cross-Account and AWS Organizations Setups

Introduction Since its introduction, AWS Lambda’s supported runtimes have continually expanded. Around 2020, support for containerized Lambdas was added. In this post, I’ll walk you through the permissions needed for running Lambdas with images stored in ECR. We’ll look at these scenarios: Lambda and ECR repository in the same account Lambda and ECR in different accounts Multi-account setup with AWS Organizations I’ll be strictly focusing on the permissions. In my opinion, the official AWS Documentation covers the process of building container images for Lambdas really well, but it is somewhat scarce on the necessary permissions. Regardless, here’s a link to the official documentation on the permissions aspect. ...

May 10, 2025 · 11 min · 2149 words · Simon