@lemon-spoon-91807 helped me solve this yesterday and I've run into one final issue - I don't quite know what to put in for the role in an

aws.serverless.Function

you mean when used with type parameters?