Glossary: AWS for Developers
The role a Lambda function runs as. It holds the permissions the function needs, at least writing its logs.
RoleTrust policyLeast privilege