This message was deleted.

AWS automatically creates log groups for Lambdas unless you create it yourself. To control the settings, create the log group yourself after the Lambda is deployed. Naming is something like

/aws/lambda/{lambdaName}

.

Wouldn't you be in a race condition with AWS or you would have to poll until AWS have created it? I am more in favor of creating it myself but then I would have to override pulumi's auto naming feature

You don’t have to override their autonaming, just have to create the log group right after the Lambda and use the name from the newly created resource.

I see what you are saying. I was basically afraid of a situation where I am competing with the lambda itself creating that log group but I guess I can only prevent that from happening by denying it permissions

Yeah the log group isn’t created by AWS until the function is actually invoked