So from the docs preq section • The container image must be able to run on a read-only file system. Your function code can access a writable

/tmp

directory with between 512 MB and 10,240 MB, in 1-MB increments, of storage. • The default Lambda user must be able to read all the files required to run your function code. Lambda follows security best practices by defining a default Linux user with least-privileged permissions. Verify that your application code does not rely on files that other Linux users are restricted from running. I don’t know how to fetch this default Lambda user. https://docs.aws.amazon.com/lambda/latest/dg/images-create.html