template.json

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Resources": {
    "DocumentBucket": {
      "Type": "AWS::S3::Bucket",
      "DeletionPolicy": "Delete"
    },
    "DataScraperRole": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Effect": "Allow",
              "Principal": {
                "Service": ["lambda.amazonaws.com"]
              },
              "Action": ["sts:AssumeRole"]
            }
          ]
        },
        "Policies": [
          {
            "PolicyName": "DataScraperRolePolicy",
            "PolicyDocument": {
              "Statement": [
                {
                  "Effect": "Allow",
                  "Action": "s3:*",
                  "Resource": {
                    "Fn::Join": ["", ["arn:aws:s3:::", { "Ref": "DocumentBucket" }, "/*"]]
                  }
                },
                {
                  "Effect": "Allow",
                  "Action": ["logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents"],
                  "Resource": "*"
                }
              ]
            }
          }
        ]
      }
    },
    "DataScraper": {
      "Type": "AWS::Lambda::Function",
      "Properties": {
        "Handler": "index.handler",
        "Code": {
          "ZipFile": { "Fn::Join": ["\n", ["def handler(event, context):", "pass"]] }
        },
        "Environment": {
          "Variables": { "BUCKET_NAME": { "Ref": "DocumentBucket" } }
        },
        "Runtime": "python3.7",
        "Timeout": 5,
        "MemorySize": 512,
        "Role": {
          "Fn::GetAtt": ["DataScraperRole", "Arn"]
        }
      }
    }
  }
}