AWS CloudFormation template for an IAM role

gistfile1.txt

  Resources:
    roleResourceName:
      Type: AWS::IAM::Role
      Properties:
        RoleName: role-name
        AssumeRolePolicyDocument:
          Version: '2012-10-17'
          Statement:
            - Effect: Allow
              Principal:
                Service:
                  - lambda.amazonaws.com
              Action: sts:AssumeRole
        Path: /
        Policies:
          - PolicyName: iam-role-policy-name
            PolicyDocument:
              Version: '2012-10-17'
              Statement:
                - Effect: Allow
                  Action:
                    - logs:CreateLogGroup
                    - logs:CreateLogStream
                    - logs:PutLogEvents
                    - logs:DescribeLogStreams
                  Resource:
                    - arn:aws:logs:region:account:log-group:/aws/lambda/*