This message was deleted.

You can use

aws.lambda.CallbackFunction

to create a lambda from a callback while also specifying your own roles/policies as well as other customization.