iam-role-lambda-execution-template.json

{
  "Type": "AWS::IAM::Role",
  "Properties": {
    "AssumeRolePolicyDocument": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Principal": {
            "Service": ["lambda.amazonaws.com"]
          },
          "Action": ["sts:AssumeRole"]
        }
      ]
    },
    "Policies": [
      {
        "PolicyName": "[TO BE REPLACED]",
        "PolicyDocument": {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Effect": "Allow",
              "Action": ["logs:CreateLogStream", "logs:CreateLogGroup"],
              "Resource": []
            },
            {
              "Effect": "Allow",
              "Action": ["logs:PutLogEvents"],
              "Resource": []
            }
          ]
        }
      }
    ]
  }
}