serverless/lib/plugins/aws/deploy/compile/functions/iam-policy-lambda-template.json

{
  "IamPolicyLambda": {
    "Type": "AWS::IAM::Policy",
    "Properties": {
      "PolicyName": "",
      "PolicyDocument": {
        "Version": "2012-10-17",
        "Statement": [
          {
            "Effect": "Allow",
            "Action": [
              "logs:CreateLogGroup",
              "logs:CreateLogStream",
              "logs:PutLogEvents"
            ],
            "Resource": ""
          }
        ]
      },
      "Roles": [
        {
          "Ref": "IamRoleLambda"
        }
      ]
    }
  }
}