Serverless Plugin for easily defining IAM roles per function via the use of iamRoleStatements at the function level.

Use AWS X-Ray to reach Least Privilege

AWS Lambda function to push cloudwatch logs to Splunk HTTP event collector (HEC).

Configure AWS X-Ray (Node) with additional parameter whitelists

Configure AWS X-Ray (Java) with an alternate parameter whitelist