What’s the correct way to define a custom role for a serialized function tied to an EventRule for example? So far, I see that the

aws.cloudwatch.onSchedule

handler argument which is an

EventRuleEventHandler

has the below doc on it referencing a

createCallbackFunction

but I can’t find any docs referencing that anywhere(Other than in the

pulumi-cloud

repo). As it stands now it seems like the inline function definitions always default to

iam.AWSLambda_FullAccess

. I’m hoping to be able to define my own role for the function https://github.com/pulumi/pulumi-aws/blob/914003a7a1d16b8389529420a2a91200bc250d7e/sdk/nodejs/lambda/lambdaMixins.ts#L141-L148 Pulumi Doc I based my code on: https://www.pulumi.com/blog/scheduling-serverless/