serverless/lib/plugins/aws/package/lib/iam-role-lambda-execution-template.json

{
  "Type": "AWS::IAM::Role",
  "Properties": {
    "AssumeRolePolicyDocument": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Principal": {
            "Service": ["lambda.amazonaws.com"]
          },
          "Action": ["sts:AssumeRole"]
        }
      ]
    },
    "Policies": [
      {
        "PolicyName": "[TO BE REPLACED]",
        "PolicyDocument": {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Effect": "Allow",
              "Action": [
                "logs:CreateLogStream",
                "logs:CreateLogGroup",
                "logs:TagResource"
              ],
              "Resource": []
            },
            {
              "Effect": "Allow",
              "Action": ["logs:PutLogEvents"],
              "Resource": []
            }
          ]
        }
      }
    ]
  }
}