Also, the permissions really should be restricted to checklist/get so which the shared solutions account can hardly ever modify any source in the application account. Also, these permissions really should be limited to the Lambda functionality ARN from your shared services account in order that no other source can start out querying the application