LambdaRoleSecurityGroup

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": [
				"ec2:DescribeSecurityGroups",
				"ec2:AuthorizeSecurityGroupEgress",
				"ec2:AuthorizeSecurityGroupIngress",
				"ec2:RevokeSecurityGroupEgress",
				"ec2:RevokeSecurityGroupIngress"
			],
			"Resource": [
				"*"
			]
		},
		{
			"Effect": "Allow",
			"Action": [
				"logs:CreateLogGroup",
				"logs:CreateLogStream",
				"logs:PutLogEvents"
			],
			"Resource": [
				"*"
			]
		},
		{
			"Effect": "Allow",
			"Action": [
				"dynamodb:DescribeStream",
				"dynamodb:GetRecords",
				"dynamodb:GetShardIterator",
				"dynamodb:ListStreams"
			],
			"Resource": "arn:aws:dynamodb:*:*:table/securityGroupRequests/stream/*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"dynamodb:PutItem",
				"dynamodb:GetItem",
				"dynamodb:UpdateItem",
				"dynamodb:Scan"
			],
			"Resource": "arn:aws:dynamodb:*:*:table/securityGroupRequests"
		},
		{
			"Effect": "Allow",
			"Action": [
				"sns:*"
			],
			"Resource": [
				"arn:aws:sns:*:*:applySecurityGroupChange",
				"arn:aws:sns:*:*:securityGroupChange",
				"arn:aws:sns:*:*:denySecurityGroupChange",
				"arn:aws:sns:*:*:errorHandlerSecurityGroupChange"
			]
		}
	]
}