Well turns out lambda function access needed to be turned on.
probs should put that in the docs somewhere…