Suddenly something dawned on me - when an AWS Lambda function executes, it uses the temporary security credentials received by assuming the IAM role the developer granted to that function.

Write extensive unit tests This AWS Lambda Runner allows you to launch your lambda function and setup scenarios that would otherwise be uncommon on real AWS.