This issue is about IAM policies which just became easy to validate and construct with the updates from IAM Access Analyzer and SAM Connectors. Serverless is not only AWS Lambda focused rather we do have AWS Step Functions for easier integration with AWS Services and Amazon API Gateway or AWS AppSync with direct service integrations making you go the Lambda-less architecture.