Wasted a day chasing down this issue, turns out to be a simple cause. Writing it up here to hopefully save others a few hours… So you want to retrieve an IAM user’s tags inside a Lambda function. Perhaps in a Lambda triggered from a CodeCommit push, that posts a notification to Slack or Microsoft Teams - and the Tag has the user’s full name and email address you want to use in the notification.