Currently, some of the examples have very open permissions. Example: https://github.com/serverless/examples/blob/master/aws-node-fetch-file-and-store-in-s3/serverless.yml#L13-L17 For the sake of those less-than-knowledgeable with AWS permissioning, we should probably lock these instances down a bit more.