Morning (UTC+1)! Here's a Crosswalk question for you. Given that it's supposed to be maximally easy to use for "day one" tasks why doesn't the following joyfully simple code:

import * as aws from '@pulumi/aws';

aws.cloudwatch.onSchedule('log-something', 'rate(5 minutes)', (e) => {
  console.log(`Hello from Scheduler.`);
});

attach the

AWSLambdaBasicExecutionRole

policy by default. Without that basic logging doesn't even function.

That's interesting. We do give attach the

arn:aws:iam::aws:policy/AWSLambda_FullAccess

policy. I'm guessing that someone thought that might have been enough but it's obviously not. I'll raise a ticket to add the basic policy as well

Thanks for the response @brave-planet-10645. Appreciated.

This has actually changed recently, this used to work - I believe AWS changed that managed policy