feat: grant cognito lambda execution for each trigger

[jeffreymlewis]

Grant cognito lambda execution permission for each defined trigger. This works around a known bug in the AWS provider.

hashicorp/terraform-provider-aws#8373

[lgallard]

@jeffreymlewis are you sure those lambda permission can't be granted outside the module? I'd rather use information from the module outputs to grant those permission to the lambda functions. What do you think?

[jeffreymlewis]

@jeffreymlewis are you sure those lambda permission can't be granted outside the module? I'd rather use information from the module outputs to grant those permission to the lambda functions. What do you think?

Hi @lgallard thanks for the reply.

It's definitely possible to write a wrapper and add an aws_lambda_permission resource based on module output. However, given that literally everyone using Cognito lambda triggers will need to do this, I thought it would be good to add it here.

[lgallard]

@jeffreymlewis I'm closing this because I'd rather maintain resources and logic related to the module's functionality If there a need to include lambda resources we can revisit your changes. Thanks for your PR!