Limit Lambda Permissions to created event source

[flomotlik]

This is a Feature Proposal

Description

When we create a LambdaPermission for sources to call a function (e.g. for S3 or SNS) we are not specific about which resource can call the function, but configure any resource of a specific service to be able to call the function (e.g. every S3 bucket or every SNS topic can call a LambdaFunction). This has to be limited so we only let specific resources call the lambda function by default.

This will not change behaviour in any way for the user, just tighten security.

Similar or dependent issues:

• Empower Users to Employ a Rights Management Strategy that Works for Them #1895

Additional Data

• _Serverless Framework Version you're using_: latest master
• _Operating System_:
• _Stack Trace_:
• _Provider Error messages_: