Security IAM Role

For AWS Lambda to run, we need to define an IAM role. This specifies which AWS subsystems can call the lambda, and what AWS operations this lambda invokes.

Our role specifies that the lambda subsystem lambda.amazonaws.com can call our lambda, and that our lambda can write any logs. While this is slightly unsafe, it enables us to apply this role to all of our lambdas.