{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents" ], "Resource": "arn:aws:logs:*:*:*" }, { "Effect": "Allow", "Action": [ "lambda:invokeFunction" ], "Resource": [ "*" ] }, { "Effect": "Allow", "Action": [ "ec2:*" ], "Resource": [ "*" ] } ] }