Suppose you already have Lambda on AWS with Function URL enabled. You get a URL like:
https://mq5xgstfm3[............]tibik.lambda-url.us-west-2.on.aws/
If your Lambda is not authenticated by any IAM role/user, you can simply trigger it curl:
curl -X POST 'https://mq5xgstfm3[............]tibik.lambda-url.us-west-2.on.aws/' -H 'content-type: application/json' -d 'hello'
But if this lambda's invoke action is protected by IAM user, we can trigger it by
curl -X POST 'https://mq5xgstfm3[............]tibik.lambda-url.us-west-2.on.aws/' -H 'content-type: application/json' -d 'hello' --user '{ACCESS KEY}:{ACCESS SECRET}' --aws-sigv4 'aws:amz:us-west-2:lambda'
In this way, "hello" will be placed into the body
of the request.