Access and security

This page describes Lambda Cloud's access management and security features.

Access management

Lambda provides lightweight access management mechanisms to ensure secure access while minimizing friction.

API keys

The Lambda Cloud API uses API keys to authenticate incoming requests. You can generate a new API key pair or view your existing API keys by visiting the API keys page in the Lambda Cloud console. API keys have full access to all Lambda API operations.

SSH keys

Before you launch an instance, you must add an SSH key to your Lambda Cloud account. When you go through the process of launching an instance, you'll be prompted to supply this SSH key so you can securely connect to the instance after launching. You can import an existing key if you have one, or you can generate a new one in the Lambda Cloud console.

For guidance on setting up an SSH key, see Connecting to an instance > Setting up SSH access.

Account-level roles

When you invite new members to your Lambda Cloud account, you assign them one of two roles: Admin or Member. Both roles have full access to your Lambda resources. For example, each role can:

• Create API keys
• Launch and terminate billable resources such as instances or filesystems
• Retrieve audit logs

Admins can also:

• Invite new users to the account or remove users from the account
• Modify billing information
• Update account details, such as the account name
• Manage workspaces and their memberships

For details on managing roles within an account, see Managing your account.

Workspaces

An account admin must add a user to a workspace for the user to be able to view, use, or manage the resources in that workspace. Resources deployed inside one workspace cannot see or directly access resources in another workspace.

For more information about workspaces, see Resource hierarchy > Workspaces.

Firewall rulesets

You can use global or per-instance firewall rulesets to allow only connections from trusted source IPs. For more details about firewall rulesets, see Firewalls.

Compliance

Audit logs

Lambda provides audit event logs through the Audit Events endpoint in the Lambda Cloud API. These logs provide a detailed record of the user- and API-level events that occur in your Lambda Cloud account. Lambda logs audit events automatically and retains them for six months. For more details, see the Audit Events section in the Cloud API browser.

The following table outlines the current catalog of audit events.