It has been a while since i set this up. I will have to revisit this to confirm.
However, I think I was under the impression that Lambda requires write access to S3.

Does it still work without that permission?