{ "IamPolicyLambdaExecution": { "Type": "AWS::IAM::Policy", "Properties": { "PolicyName": { "Fn:Join": [ "-", [ "${opt:stage}", "${self:service}", "lambda" ] ] }, "PolicyDocument": { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "logs:CreateLogStream", "logs:PutLogEvents" ], "Resource": [] } ] }, "Roles": [ { "Ref": "IamRoleLambdaExecution" } ] } } }