Lambda Cloudwatch Logs Terraform, You also have to attach the IAM policy to the lambda role.